基于算网融合背景下的云安全管理及防护测评研究  

The study of cloud security management and protection evaluation based on com⁃puting network fusion

作　　者：张怡晨 ZHANG Yichen(China Mobile Group Shandong Co.Ltd Zibo Branch,ZiBo 255000,China)

机构地区：[1]中国移动通信集团山东有限公司淄博分公司,山东淄博255000

出　　处：《通信与信息技术》2025年第2期80-84,共5页Communication & Information Technology

摘　　要：算网融合背景下业务大量上云后,传统南北向防护方式很难监测容器逃逸、不安全镜像、横向攻击等云原生风险,算网安全、算力隔离、数据隔离等挑战加大,云平台亟待提高安全措施。基于算网融合的背景下,针对云安全的重要性问题,从防护方案、测评及防护实践方面提出了云安全管理及防护测评研究方案。云安全管理的工作思路上,提出了以安全技术和安全管理能力为基础的云安全防护体系,从平台基础安全要求、安全产品能力等五个方面建立云安全管理基线测评要求及防护方案。根据实践总结研究了云安全测评流程和方法,为后续云平台系统构建安全测评模板,形成模板化、高标准的云安全管理规范。In the context of network integration,after a large number of businesses are deployed to the cloud,traditional north-south protection methods find it difficult to monitor cloud native risks such as container escape,insecure mirroring,and horizontal attacks.The challenges of network security,computing power isolation,and data isolation increase,and cloud platforms urgently need to improve their security measures.A research plan for cloud security management and protection evaluation is proposed from the aspects of protection schemes,evaluation,and protection practices,targeting the importance of cloud security.In terms of the work concept of cloud security management,a cloud security protection system based on security technology and security management capabilities has been proposed.Baseline evaluation requirements and protection plans for cloud security management have been established from five aspects:platform basic security requirements and security product capabilities.Based on practical experience,the process and methods of cloud security evaluation were summarized and studied,in order to construct a security evaluation template for subsequent cloud platform systems and form a template based,high standard cloud security management specification.

关 键 词：云安全 安全管理 基线测评 安全防护 算网融合 

分 类 号：TN915.08[电子电信—通信与信息系统]