云安全技术参考体系结构(译文)  

Cloud Security Technical Reference Architecture

作　　者：无 程支豪(译) 无;CHENG Zhihao(Cybersecurity and Infrastructure Security Agency;CEC Jin Jiang Info Industrial Co.,Ltd.,Chengdu Sichuan 610051,China)

机构地区：[1]网络安全和基础设施安全局 [2]中电锦江信息产业有限公司,成都610051

出　　处：《信息安全与通信保密》2022年第10期58-65,共8页Information Security and Communications Privacy

摘　　要：《云安全技术参考体系结构》旨在让各机构了解采用基于云服务的优势和内在风险,提出了机构用于数据收集和报告的云迁移以及数据保护的方法。该技术参考架构为采用云服务的机构提供指导,从共享服务、云迁移、云安全态势管理3个方面为云服务机构提供云部署、适应性解决方案、安全体系架构、DevSecOps(开发、安全和运营)、零信任指导。Cloud Security Technical Reference Architecture is intended to inform agencies of the advantages and inherent risks of adopting cloud-based services,it also illustrates recommended approaches to cloud migration and data protection for agency data collection and reporting. The technical reference architecture provides guidance for agencies adopting cloud services in the following aspects,providing cloud service agencies with cloud deployment,adaptable solutions,security architecture,DevSecOps(development,Security and Operations),Zero Trust Guidance.

关 键 词：云迁移 云安全 云安全态势管理 零信任 云服务模型 

分 类 号：TP393.0[自动化与计算机技术—计算机应用技术]