摘要
安全问题是制约云计算发展的重要因素,需要一种基准来判断云服务安全性是否可以达到安全要求。文中总结国内外云计算要素,结合云计算特征与安全需求,在国内信息系统等级保护体系下提出基于服务的云服务框架,研究框架面临的威胁和云运营特点,对现有等保框架进行扩展,提出不同等保级别下云计算的基本要求,为中国等级保护工作推广到云环境做出探索。
Security issue is the biggest restraint to cloud computing development. A standard for judging whether the security of cloud service satisfies its own requirement is needed. By summarizing cloud computing elements both at home and abroad, and in consideration of its features and security demand, the service-based cloud computing framework under the classified protection of information system in China is proposed, the current classified protection framework expanded and enhanced by analysing its threat and operation feature, the fundamental requirement for cloud computing information system under different classes raised, and the popularization of classified protection application in the cloud computing environment in future explored.
出处
《信息安全与通信保密》
2013年第9期98-105,共8页
Information Security and Communications Privacy
关键词
云计算
等级保护
信息安全
安全评估
安全框架
cloud computing
classified protection
information security
security assessment
security framework
