Research on continuous monitoring of cloud computing service

Xing-shu CHEN; Long GE; Yong-gang LUO; Xiang LI

doi:10.11959/j.issn.2096-109x.2016.00105

您当前的位置：

首页 >

文章列表页 >

Research on continuous monitoring of cloud computing service

Perspective | 更新时间：2024-06-03

- Research on continuous monitoring of cloud computing service
- Chinese Journal of Network and Information Security Vol. 2, Issue 10, Pages: 1-7(2016)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00105
  CLC： TP393
- Online First：2016-10，
  
  Published：15 October 2016
- 稿件说明：
移动端阅览
Xing-shu CHEN, Long GE, Yong-gang LUO, et al. Research on continuous monitoring of cloud computing service[J]. Chinese Journal of Network and Information Security, 2016, 2(10): 1-7.
DOI：

Xing-shu CHEN, Long GE, Yong-gang LUO, et al. Research on continuous monitoring of cloud computing service[J]. Chinese Journal of Network and Information Security, 2016, 2(10): 1-7. DOI： 10.11959/j.issn.2096-109x.2016.00105.

摘要

云计算环境的复杂性和动态性，难以及时掌握云计算服务安全运行状态、评估云计算服务风险。为确保云计算服务的安全能力持续符合国家相关标准要求，对云计算服务持续监管相关内容进行了研究，定义了云服务商、客户和持续监管方角色，明确各角色的监管责任、评估指标体系以及接口规范，确保政府部门、重点行业客户稳定且安全地使用云计算服务。

Abstract

The complexity and dynamism of cloud computing environment hardly lead to timely awareness of cloud computing service’s operating state and assessment of cloud computing service risk.In order to ensure that the security of cloud service abidingly conforms to relevant national standard

continuous monitoring of cloud computing service was researched

and the role of cloud service provider was defined

customer

and continuous monitoring

described their supervising responsibility

and assessed index system and interface specification

thus guaranteeing stable and secure employment of cloud computing service by government department and key industries.

关键词

Keywords

references

中国国家标准化管理委员会 . 信息安全技术云计算服务安全指南:GB/T 31161-2014 [S ] . 北京 : 中国标准出版社 , 2014 .

Standardization Administration of China . Information security technology of cloud computing services security guidelines:GB/T 31161-2014 [S ] . Beijing : China Standards Press , 2014 .

中国国家标准化管理委员会 . 信息安全技术云计算服务安全能力要求:GB/T 31168-2014> [S ] . 北京 : 中国标准出版社 , 2014 .

Standardization Administration of China . Cloud computing service security capacity requirements of information security technology:GB/T 31168-2014 [S ] . Beijing : China Standards Press , 2014 .

FedRAMP Office Continuous monitoring strategy & guide.Version2.0 [S ] . 2014 .

NIST Special Publication 800-137.Information security continuous monitoring (ISCM) for federal information systems and organizations [S ] . 2011 .

NIST Special Publication 800-37.Guide for applying the risk management framework to federal information systems [S ] . 2010 .

CSA(Cloud Security Alliance) . Auditing the cloud controls matrix [S ] .2014. 2014 .

CSA . Defined categories of security as a service [S ] .2014. 2014 .

NIST Special Publication 800-145.The NIST definition of cloud computing [S ] .2011. 2011 .

CSA . CTP data model and API [S ] . 2014 .

Views

137

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Survey of zero trust security technology for cloud network integration

Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing

Strategy of container migration and honeypot deployment based on signal game in cloud environment

Trust evaluation optimization mechanism for cloud user behavior based on FANP

Survey on the privacy-preserving content based image retrieval

Related Author

Wu Jiangxing

Chen Hongchang

Tian Le

Hu Yuxiang

Pan Fan

Cui Pengshuai

Wang Zihao

Yinzhang GUO

Related Institution

National Key Laboratory of Cyberspace Security, Ministry of Education

National Key Laboratory of Advanced Communication Networks

Institute of Information Technology, Information Engineering University

School of Computer, Qinghai Normal University

School of Computer, North China Institute of Science and Technology

⁰