一种云平台可信性分析模型建立方法

发布时间：2018-05-14 08:26

本文选题：云平台 + 可信性分析　；参考：《软件学报》2016年06期

【摘要】：如何使得用户信任云服务提供商及其云平台,是云计算普及的关键因素之一.针对目前云平台可信性所包含的内容与分析评价依据尚不完善的现状,且缺乏从理论层次对于云平台的部分可信属性进行分析与评估方法的问题,首先对云平台的可信性进行定义,并结合国内外相关云安全标准与可信性规范以及作者的理解,明确了云平台可信性的子属性与具体分析内容,从而明确了所提出模型的适用范围、分析目的以及依据.在此基础上,提出模型建立方法.该方法以标记变迁系统作为操作语义描述工具,从云平台内部组件交互过程出发,将平台对外提供服务过程刻画为用户与云的交互以及云平台内部实体间的交互,并利用模型分析检测工具Kronos从可用、可靠、安全等多个角度对平台内部状态变化过程进行分析.分析结果不但能够发现已知的可信性问题,还发现了一些未知的隐患,说明了模型建立方法的有效性,并为如何评价云平台的可信性,进而构建可信云提供了理论支撑.
[Abstract]:How to make users trust cloud service providers and their cloud platforms is one of the key factors in the popularity of cloud computing. In view of the current situation that the content and evaluation basis of cloud platform credibility are not perfect, and the lack of theoretical analysis and evaluation of the cloud platform part of the trusted attributes of the problem, Firstly, the credibility of cloud platform is defined, and the subattributes and concrete analysis contents of the credibility of cloud platform are clarified by combining with the relevant cloud security standards and credibility standards and the author's understanding at home and abroad. The application scope, purpose and basis of the proposed model are clarified. On this basis, a method of modeling is proposed. In this method, the label transition system is used as a tool for describing the operation semantics. Based on the interaction process of components within the cloud platform, the external service process of the platform is described as the interaction between the user and the cloud and the interaction between the entities inside the cloud platform. The model analysis tool Kronos is used to analyze the internal state change process of the platform from several aspects, such as availability, reliability, security and so on. The analysis results can not only find the known credibility problems, but also find some unknown hidden dangers, which shows the validity of the model building method, and provides theoretical support for how to evaluate the credibility of the cloud platform and then to construct the trusted cloud.
【作者单位】：武汉大学计算机学院;空天信息安全与可信计算教育部重点实验室(武汉大学);中国信息安全测评中心;
【基金】：国家重点基础研究发展计划(973)(2014CB340600) 国家高技术研究发展计划(863)(2015AA016002) 国家自然科学基金(91118003,61173138,61272452,61332019)~~
【分类号】：TP393.09

【相似文献】