面向云服务信息安全评估的度量模型研究

陆月明; 张志辉

doi:10.11959/j.issn.2096-109x.2016.00075

您当前的位置：

首页 >

文章列表页 >

面向云服务信息安全评估的度量模型研究

学术论文 | 更新时间：2024-06-03

- 面向云服务信息安全评估的度量模型研究
- Research on metrics models for cloud services information security evaluation
- 网络与信息安全学报 2016年2卷第7期页码：18-25
- 作者机构：
- 作者简介：
  
  [ "陆月明（1969-），男，江苏苏州人，北京邮电大学教授、博士生导师，主要研究方向为分布式计算、信息安全。" ]
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00075
  中图分类号： TP393
- 网络首发：2016-07，
  
  纸质出版：2016-07-15
- 稿件说明：
移动端阅览
陆月明, 张志辉. 面向云服务信息安全评估的度量模型研究[J]. 网络与信息安全学报, 2016,2(7):18-25.

Yue-ming LU, Zhi-hui ZHANG. Research on metrics models for cloud services information security evaluation[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 18-25.
陆月明, 张志辉. 面向云服务信息安全评估的度量模型研究[J]. 网络与信息安全学报, 2016,2(7):18-25. DOI： 10.11959/j.issn.2096-109x.2016.00075.

Yue-ming LU, Zhi-hui ZHANG. Research on metrics models for cloud services information security evaluation[J]. Chinese Journal of Network and Information Security, 2016, 2(7): 18-25. DOI： 10.11959/j.issn.2096-109x.2016.00075.

摘要

针对云服务信息安全缺乏度量准则和度量不准的问题，介绍了国内外相关度量标准的研究现状。针对可信云的信息安全度量需求，总结了基于可信根的度量模型的优缺点，指出未来的方向是一个兼顾可拓展性、实时性、隐私保护好、易移植且开销更小的云服务信息安全度量模型。

Abstract

Due to the lack of metric standards and the metric imprecise problems of cloud service information secu-rity

the research status of the relevant standards at home and abroad were introduced.As for the demand for infor-mation security measurement requirements of the trusted cloud

the advantages and disadvantages of metric models based on the trusted root were analyzed.At last

the future research direction which was to study a scalable com-bined

real-time

privacy protected

easy to transplant and less cost metrics model was pointed out.

关键词

Keywords

references

陈康，郑纬民 . 云计算：系统实例与研究现状 [J ] . 软件学报， 2009 , 20 ( 5 ): 1337 - 1348 .

CHEN K , ZHENG WM . Cloud computing:system instances and current research [J ] . Journal of Software , 2009 , 20 ( 5 ): 1337 - 1348 .

Common criteria for information technology security evaluation part 2:security functional requirement,version 2.2 [S ] . 2004 .

Common criteria for information technology security evaluation part 3:security assurance requirements; version 2.2 [S ] . 2004 .

NIELSEN F . Approaches to security metrics[C]//CSSPAB Work-shop on Approaches to Measuring Security . IEEE Security ＆ Privacy , c2000 .

Cloud Security Alliance(CSA) . Security guidance for critical areas of focus in cloud computing V3.0 [EB/OL ] . https://cloudsecurityalliance.org/guidance/csaguide.v3.0.pdf https://cloudsecurityalliance.org/guidance/csaguide.v3.0.pdf .

AVIŽIENIS A , LAPRIE J C , RANDELL B , et al . Basic concepts and taxonomy of dependable and secure computing [J ] . IEEE Transactions on Dependable ＆ Secure Computing , 2004 , 1 ( 1 ): 11 - 33 .

TCG Group . TCG specification architecture overview [J ] . TCG Specification Revision , 2007 , 1 : 1 - 24 .

SAILER R , ZHANG X , JAEGER T , et al . Design and implementa-tion of a TCG-based integrity measurement architecture[C]//Usenix Security Symposium . IEEE Security ＆ Privacy , c2004 : 16 - 16 .

JAEGER T , SAILER R , SHANKAR U . PRIMA:policy-reduced integrity measurement architecture[C]//The 11th ACM Symposium on Access Control Models and Technologies . c2006 : 19 - 28 .

LOSCOCCO P A , WILSON P W , PENDERGRASS J A , et al . Linux kernel integrity measurement using contextual inspection[C]//ACM Workshop on Scalable Trusted Computing . c2007 : 21 - 29 .

AZAB A M , NING P , SEZER E C , et al . HIMA:a hypervisor-based integrity measurement agent[C]// IEEE Computer Security Appli-cations Conference . c2009 : 461 - 470 .

AZAB A M , NING P , WANG Z , et al . HyperSentry:enabling stealthy in-context measurement of hypervisor integrity[C]//ACM Conference on Computer and Communications Security(CCS) . c2010 : 38 - 49 .

刘孜文，冯登国 . 基于可信计算的动态完整性度量架构 [J ] . 电子与信息学报， 2010 , 32 ( 4 ): 875 - 879 .

LIU Z W , FENG D G . TPM-based dynamic integrity measurement architecture [J ] . Journal of Electronics and Information Technology , 2010 , 32 ( 4 ): 875 - 879 .

冯登国，秦宇，汪丹，等 . 可信计算技术研究 [J ] . 计算机研究与发展， 2011 , 48 ( 8 ): 1332 - 1349 .

FENG D G , QIN Y , WANG D , et al . Research on trusted computing technology [J ] . Journal of Computer Research and Development , 2011 , 48 ( 8 ): 1332 - 1349 .

林闯，苏文博，孟坤，等 . 云计算安全：架构、机制与模型评价 [J ] . 计算机学报， 2013 , 36 ( 9 ): 1765 - 1784 .

LIN C , SU W B , MENG K , et al . Cloud computing security:archi-tecture,mechanism and modeling [J ] . Chinese Journal of Computers , 2013 , 36 ( 9 ): 1765 - 1784 .

周振吉，吴礼发，洪征，等 . 云计算环境下的虚拟机可信度量模型 [J ] . 南大学学报(自然科学版) ， 2014 ( 1 ): 45 - 50 .

ZHOU Z J , WU L F , HONG Z , et al . Trustworthiness measurement model of virtual machine for cloud computing [J ] . Journal of Southeast University(Natural Science Edition) , 2014 ( 1 ): 45 - 50 .

浏览量

200

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

暂无数据