Trusted platform for third-party cloud computing online evaluation and analysis technology

Bo ZHAO; Xiang LI; Fei YAN; Liqiang ZHANG; Huanguo ZHANG

doi:10.11959/j.issn.2096-109x.2019054

您当前的位置：

首页 >

文章列表页 >

Trusted platform for third-party cloud computing online evaluation and analysis technology

Papers | 更新时间：2024-06-03

- Trusted platform for third-party cloud computing online evaluation and analysis technology
- Chinese Journal of Network and Information Security Vol. 5, Issue 5, Pages: 90-104(2019)
- 作者机构：
  
  1. 武汉大学国家网络安全学院空天信息安全与可信计算教育部重点实验室，湖北武汉 430072
  2. 湖北省网络空间安全研究中心，湖北武汉 430072
  3. 鹏城实验室网络空间安全研究中心，广东深圳 518000
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2019054
  CLC： TP393
- Online First：2019-10，
  
  Published：15 October 2019
- 稿件说明：
移动端阅览
Bo ZHAO, Xiang LI, Fei YAN, et al. Trusted platform for third-party cloud computing online evaluation and analysis technology[J]. Chinese Journal of Network and Information Security, 2019, 5(5): 90-104.
DOI：

Bo ZHAO, Xiang LI, Fei YAN, et al. Trusted platform for third-party cloud computing online evaluation and analysis technology[J]. Chinese Journal of Network and Information Security, 2019, 5(5): 90-104. DOI： 10.11959/j.issn.2096-109x.2019054.

摘要

云计算的服务模式对用户数据安全产生的严重威胁，必须通过第三方对云计算是否可信进行评测，才能保障云计算产业的健康发展。由此，总结了国家高技术研究发展计划课题“面向第三方的云平台可信性在线评测及分析技术”的研究内容与成果，描述了从云平台可信评测模型与体系结构、可信性动态评测技术、可信证据收集及可信测试机制、可信性的多维量化评估方法、评测原型系统与工具集5个方面的研究工作，并对云平台的可信性进行评测。

Abstract

The service model of cloud computing creates a serious threat to user data security

the trustworthiness of cloud computing through third parties

must be evaluated then the healthy development of the cloud computing industry can be guaranteed.The research of the National High Technology Research and Development Program of China

“trusted platform for third-party cloud computing online evaluation and analysis technology” were summarized.The trusted evaluation model and architecture were described from the cloud platform

the dynamic evaluation technology

the credible evidence collection and the trusted test mechanism

the credibility of the quantitative evaluation method

and the prototype system integrated by tools

to evaluate the credibility of cloud platform.

关键词

Keywords

references

中国电子技术标准化研究所 . 云计算标准研究报告 [R ] . 2010 .

China Electronics Standardization Institute . Cloud computing standards research report [R ] . 2010 .

王惠莅 , 杨晨 , 杨建军 . 云计算安全和标准研究 [J ] . 信息技术与标准化 , 2012 ( 5 ): 16 - 19 .

WANG H L , YANG C , YANG J J . Information security and standard of cloud computing [J ] . Information Technology ＆ Standardization , 2012 ( 5 ): 16 - 19 .

王惠莅 , 罗锋盈 , 杨建军 , 等 . 云计算服务安全关键标准研究 [J ] . 信息技术与标准化 , 2013 .

WANG H L , LUO F Y , YANG J J . Research on key standards for the security of cloud computing services [J ] . Information Technology ＆ Standardization . 2013 .

CHEN C , MANIATIS P , PERRIG A . Towards verifiable resource accounting for outsourced computation [J ] . ACM Sigplan Notices , 2013 , 48 ( 7 ):167.

邵政斌 . 流量伪装技术及其成本分析 [D ] . 长沙:湖南大学 , 2007 .

SHAO Z B . Traffic camouflaging technology and its cost analysis [D ] . Changsha:Hunan University , 2007 .

LIU D X , CHI C H , LI M . Normalizing traffic pattern with anonymity for mission critical applications [C ] // 37th Annual Simulation Symposium . 2004 : 293 - 299 .

胡文心 . 网络流量规范化的流量伪装模型的研究 [D ] . 上海:华东师范大学 , 2006 .

HU W X . The model and implementation of normalizing network traffic pattern with anonymity for mission critical applications [D ] . Shanghai:East China Normal University , 2006 .

FU X W , GRAHAM B , BETTATI R , et al . On effectiveness of link padding for statistical traffic analysis attacks [C ] // 23rd International Conference on Distributed Computing Systems . 2003 : 45 - 52 .

胡文心 , 蔡建华 , 俞琨 . 网络流量规范化的流量伪装方法,CN101383831A [P ] .2009. 2009 :

HU W X , CAI J H , YU K . Network traffic normalized traffic masquerading method,CN101383831A [P ] . 2009 :

CAO N , WANG C , LI M , et al . Privacy-preserving multi-keyword ranked search over encrypted cloud data [C ] // IEEE Infocom 2011 . 2011 : 10 - 15 .

LI J , WANG Q , WANG C , et al . Fuzzy keyword search over encrypted data in cloud computing [C ] // Infocom,Mini-Conference . 2010 .

XIN S , ZHAO Y , LI Y . Property-based remote attestation oriented to cloud computing [C ] // 2011 Seventh International Conference on Computational Intelligence and Security . 2011 : 1028 - 1032 .

KUWAITI M , KYRIAKOPOULOS N , HUSSEIN S . A comparative analysis of network dependability,fault-tolerance,reliability,security,and survivability [J ] . Commun Surveys Tuts , 2009 ,( 4 ): 106 - 124 .

ZHAO B , NI M T , FAN P R . Powermitter:data exfiltration from air-gapped computer through switching power supply [J ] . China Communications , 2018 , 15 ( 2 ): 170 - 189 .

樊佩茹 , 赵波 , 倪明涛 , 等 . APM:适用于IaaS平台的agent保护机制 [J ] . 通信学报 , 39 ( 4 ): 176 - 188 .

FAN P R , ZHAO B , NI M T , et al . APM:agent protection mechanism applied for IaaS platform [J ] . Journal on Communications , 2018 , 39 ( 4 ): 176 - 188 .

石源 , 张焕国 , 吴福生 . 一种可信虚拟机迁移模型构建方法 [J ] . 计算机研究与发展 , 2017 , 54 ( 10 ): 2284 - 2295 .

SHI Y , ZHANG H G , WU F S . A method of constructing the model of trusted virtual machine migration [J ] . Journal of Computer Research and Development , 2017 , 54 ( 10 ): 2284 - 2295 .

严飞 , 彭慧容 , 何凡 , 等 . HBROP:基于硬件性能计数器的函数级ROP检测 [J ] . 武汉大学学报(理学版) , 2017 , 63 ( 2 ): 109 - 116 .

YAN F , PENG H R , HE F , et al . HBROP:HPC-based function-level approach to detect ROP attack [J ] . Journal of Wuhan University , 2017 .

ZHAN J , FAN X D , CAI L , et al . TPTVer:A trusted third party based trusted verifier for multi-layered outsourced big data system in cloud environment [J ] . China Communications , 2018 , 15 ( 2 ): 122 - 137 .

詹静 , 杨静 . 基于远程证明的可信Modbus/TCP协议研究 [J ] . 工程科学与技术 , 2017 , 49 ( 1 ).

ZHAN J , YANG J . Research on remote attestation-based trusted modbus/TCP protocol [J ] . Advanced Engineering Sciences , 2017 , 49 ( 1 ).

詹静 , 杨静 , 马俊明 , 等 . 一种基于共享内存摆渡的 Modbus/TCP安全通信方法 [J ] . 中国科技论文 , 2017 , 12 ( 2 ): 135 - 140 .

ZHAN J , YANG J , MA J M , et al . Modbus/TCP secure communication method based on shared memory ferry [J ] . China Sciencepaper , 2017 , 12 ( 2 ): 135 - 140 .

ZHANG L Q , YAN F , ZHAO B , et al . Dependence-induced risk：security metrics and their measurement framework [J ] . China Communications , 2016 , 13 ( 11 ): 119 - 128 .

Views

462

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Application progress of SGX in trusted computing area

Research on the trusted environment of container cloud based on the TPCM

TPCM-based trusted PXE boot method for servers

Trusted access scheme for intranet mobile terminal based on encrypted SD card

Research on key management and authentication protocol of PDA in smart grid

Related Author

Yang AN

Anqi YUAN

Bo ZHAO

Zheng LI

Ping YANG

Jianbiao ZHANG

Guojie LIU

Jianbiao ZHANG

Related Institution

School of Computer Science, Wuhan University

School of Cyber Science and Engineering, Wuhan University

Beijing Information Science and Technology University

Beijing Key Laboratory of Trusted Computing

Faculty of Information Technology, Beijing University of Technology

⁰