云计算环境下的拟态IAM系统设计实现方法  

Design and implementation method of mimic IAM system in cloud computing environment

作　　者：宋玉[1] 孙贺[2] 王家兴 潘云飞 张建辉[3] SONG Yu;SUN He;WANG Jia-xing;PAN Yun-fei;ZHANG Jian-hui(School of Computer and Artificial Intelligence,Zhengzhou University,Zhengzhou 450001,China;School of Cyber Science and Engineering,Zhengzhou University,Zhengzhou 450002,China;National Digital Switching System Engineering Technology Research Center,Information Engineering University,Zhengzhou 450000,China)

机构地区：[1]郑州大学计算机与人工智能学院,河南郑州450001 [2]郑州大学网络空间安全学院,河南郑州450002 [3]信息工程大学国家数字交换系统工程技术研究中心,河南郑州450000

出　　处：《计算机工程与设计》2024年第5期1297-1304,共8页Computer Engineering and Design

基　　金：河南省科技攻关基金项目(222102210231)。

摘　　要：随着云计算的快速发展及其普及,企业的传统数据安全边界被打破,出现云资产管理混乱、越权、误操作等现象,对用户的信息安全产生巨大威胁。基于此,对目前云计算环境下身份认证和访问管理(identity and access management,IAM)的安全问题进行研究,提出结合内生安全思想,采取拟态防御手段构建出一种具有内生安全效应的拟态身份认证和访问管理(mimicry identity and access management,MIAM)体系架构方案,并对其进行详细描述。将该方案分别进行稳定性测试、系统性能测试以及系统安全性评估,实验数据表明,该方案具有可行性和安全性。With the rapid development and popularization of cloud computing,the traditional data security boundary of enterprises has been broken,and there are phenomena such as chaos,overreach,and misoperation of cloud asset management,which poses a huge threat to the information security of users.Based on this,the security problems of identity and access management(IAM)in the current cloud computing environment were studied,and a mimicry identity and access management(MIAM)architecture scheme with endogenous security effect was proposed to be constructed by means of mimicry defense combined with endogenous security ideas.And it was described in detail.The stability test,system performance test and system security evalua-tion of the scheme were carried out separately.Experimental data show that the scheme is feasible and secure.

关 键 词：云计算 拟态防御 内生安全 身份认证 访问管理 信息安全 网络安全 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]