云计算模式内部威胁综述

发布时间：2018-05-10 17:53

本文选题：云计算 + 内部威胁　；参考：《计算机学报》2017年02期

【摘要】：云计算模式的本质特征是数据所有权和管理权的分离,即用户将数据迁移到云上,失去了对数据的直接控制权,需要借助云计算平台实现对数据的管理.而云计算模式的引入带来了很多新的安全问题和挑战,如恶意的云管理员、可利用的安全漏洞和不当的访问接口等.尤其是当云管理员客观上具备偷窥和泄露用户数据和计算资源的能力时,如何保障用户数据的权益,成为一个极具挑战的问题.因此,内部威胁的研究和应对在云计算模式下变得尤为重要,也是近年来学术界和工业界共同关注的热点.为进一步深入研究云计算模式内部威胁问题及其应对,从具体方式方法上作系统的归纳和梳理,并促进国内在该方向上的研究,该文系统分析和总结了云计算模式下内部威胁的类型、特点,并针对真实的云平台构建和实施切实可行的内部威胁攻击实例,展示了云平台客观存在的可利用内部风险以及典型攻击方法.在此基础上,通过梳理相关研究工作,该文总结了三类应对云计算模式内部威胁的主要技术路线,即人员评价与行为分析、云管理权限划分和执行时验证和用户可控的数据加密.针对每一类技术路线,该文深入分析了其主要原理、关键技术、最新进展和产业实用性.最后给出了云计算模式下内部威胁的重要研究点和未来发展方向.
[Abstract]:The essential feature of cloud computing model is the separation of data ownership and management power, that is, users migrate data to the cloud and lose the direct control over the data, so they need to use cloud computing platform to manage data. The introduction of cloud computing has brought many new security problems and challenges, such as malicious cloud administrators, exploitable security vulnerabilities and improper access interfaces. Especially when the cloud administrator has the ability of peeping and divulging user data and computing resources objectively, how to protect the rights and interests of user data becomes a very challenging problem. Therefore, the research and response of internal threats is becoming more and more important in cloud computing mode, and it is also the focus of attention of academia and industry in recent years. In order to further study the internal threat problem of cloud computing model and how to deal with it, this paper systematically summarizes and combs the specific ways and methods, and promotes the domestic research in this direction. This paper systematically analyzes and summarizes the types and characteristics of internal threats in cloud computing mode, and builds and implements feasible internal threat attack examples for real cloud platforms. The objective internal risks and typical attack methods of cloud platform are demonstrated. On this basis, through combing the related research work, this paper summarizes three main technical routes to deal with the internal threat of cloud computing model, namely, personnel evaluation and behavior analysis. Cloud management permissions partition and execution-time validation and user-controlled data encryption. In this paper, the main principle, key technology, latest development and industrial practicability of each technical route are analyzed in depth. Finally, the important research points and future development directions of internal threats in cloud computing mode are given.
【作者单位】：北京邮电大学计算机学院;哈尔滨工业大学(深圳);东莞电子科技大学电子信息工程研究院;
【基金】：国家“八六三”高技术研究发展计划项目基金(2015AA016001) 广东省产学研合作项目(2016B090921001) 山东省自主创新及成果转化专项(2014ZZCX03411) 国家自然科学基金(61370068)资助~~
【分类号】：TP309

【相似文献】