云计算安全问题研究综述  

Overview of Research on Cloud Computing Security Issues

作　　者：姚日煌[1,2] 鹿洵 朱建东 洪智学 YAO Rihuang;LU Xun;ZHU Jiandong;HONG Zhixue(CEPREI,Guangzhou 511370,China;Shenzhen CEPREI Industry Technology Research Institute Co.,Ltd.,Shenzhen 518055,China)

机构地区：[1]工业和信息化部电子第五研究所,广东广州511370 [2]深圳赛宝工业技术研究院有限公司,广东深圳518055

出　　处：《电子产品可靠性与环境试验》2024年第1期113-117,共5页Electronic Product Reliability and Environmental Testing

摘　　要：最近,由于经济性和高质量服务,云计算成为业界关注的焦点。过去10年,云计算通过产品和服务与企业和个人的日常生活紧密相连。云计算按需付费的特点激励着企业主动上云,从2019年开始,全球企业开始大规模上云,目前这种趋势依然强劲。虽然云计算为企业和个人带来了很多好处,但直到今天,云安全仍是各个云服务提供商亟需解决的挑战。云计算技术中虚拟化、多租户、按需付费等特点也为恶意攻击者提供了入口和漏洞。基于过去云计算安全问题的研究成果,探讨云计算3层体系结构,即基础设施即服务、平台即服务和软件即服务的安全问题和应对策略,并提出未来发展建议。Recently,cloud computing has become the focus of the industry due to its economical and high-quality services.Over the past decade,cloud services have been closely connected to the daily lives of businesses and individuals through products and services.The pay-as-you-go feature of cloud computing motivates enterprises to actively migrate to the cloud.Since 2019,global enterprises have begun to migrate to the cloud on a large scale,and this trend is still strong at present.While cloud computing brings many benefits to businesses and individuals,cloud security remains a challenge for various cloud service providers to address to this day.The characteristics of virtualization,multi-tenancy,and pay-as-you-go in cloud computing technology also provide entry and loopholes for malicious attackers.Based on the research results of cloud computing security issues in the past,the security issues and countermeasures of the three-tier architecture of cloud computing,namely IaaS,PaaS,SaaS,are discussed,and the suggestions for future development are proposed.

关 键 词：云计算 云安全 基础设施即服务 平台即服务 软件即服务 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]