云安全4项标准在我国云安全评估中的应用  

Application of Four National Standards of Cloud Security to Cloud Security Assessment of China

作　　者：陈兴蜀 罗永刚[1,2] 许振武 杨敏[1,2] 

机构地区：[1]四川大学网络空间安全学院 [2]四川大学网络空间研究院

出　　处：《信息技术与标准化》2022年第5期173-178,共6页Information Technology & Standardization

摘　　要：针对安全评估标准缺乏导致我国云计算服务发展现状远远落后于发展需求的问题,围绕国家大力发展云计算服务产业所需云服务安全评估、云服务安全使用、云服务安全持续监管等方面的需求,分别编制能力要求、安全管理与运行监管系列标准,有力支撑了我国云服务安全评估工作的开展。系列标准自发布以来,通过安全评估的云服务平台超过80家,在政务云、金融云等重点行业云得到广泛应用。In view of the lack of cloud security assessment standards,the current situation of cloud computing service development in China lags far behind demands,focusing on cloud security assessment,cloud service security use,cloud service security continuous supervision required by the country’s vigorous development of cloud computing service industry,we have compiled a series of standards for capability requirements,security management and operation supervision,which strongly supported the development of cloud service security assessment in my country.Since the release of the series of standards,more than 80 cloud service platforms have passed the security assessment,and have been widely used in key industries such as government cloud and financial cloud.

关 键 词：云计算 云计算服务 云服务安全评估 国家标准 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]