云平台IaaS层内生安全技术研究  

Research on Endogenous Security Technology of IaaS Cloud Platform

作　　者：尚旭 刘晓毅[1] 冯中华[1] 崔阳 金鑫 SHANG Xu;LIU Xiaoyi;FENG Zhonghua;CUI Yang;JIN Xin(No.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《信息安全与通信保密》2021年第7期85-94,共10页Information Security and Communications Privacy

摘　　要：随着云计算的不断普及,云平台安全问题日益凸显。云平台资源共享、边界消失、动态变化等特点,使得传统基于边界的旁路式、外挂式防御手段无法有效应对云内安全威胁。因此,通过将安全机制与云平台融合设计,实现了对云平台内部威胁和攻击的可视、可控、可防,确保安全机制的不可绕过和性能开销最小。With the continuous popularization of cloud computing technology,cloud security issues become increasingly important.The characteristics of cloud platform resource sharing,boundary disappearance,and dynamic changes make traditional boundary-based bypass and external defense methods unable to effectively cope with the security threats in the cloud.Therefore,by integrating the security mechanism with the cloud platform,the visibility,control,and prevention of internal threats and attacks on the cloud platform is realized,ensuring that the security mechanism cannot be bypassed and the performance overhead is minimized.

关 键 词：云平台安全 基础设施云平台安全风险 内生安全防御体系 云安全 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]