云计算数据安全问题与对策研究

The Study of the Data Security Problem and Strategy in Cloud Computing

在云计算环境里,云计算的安全问题涉及信息资产的存储、处理及传输的保密性、完整性以及可用性。对于云计算服务提供商和用户,数据安全包括技术层面、管理层面、流程和法规层面等。云计算服务向众多的客户开放,安全威胁不仅来自外部互联网,也来自内部的安全隐患,这种互通性向云计算系统提出了新的挑战。论文从技术手段和非技术手段两个方面讨论如何保证数据的访问受到合理控制,保证数据不被人为或者意外的损坏、泄露或更改。

In the circumstance of cloud computing, the safety of cloud computing involves the storage and disposal of information assets, and the confidentiality, iategrality and usability of tremsmission. In terms of service suppliers and users of cloud computing, the safety of data includes the technical, managerial, process, statute aspects. The cloud computing service is accessible to numerous clients, the threat of safety not only comes from the outside cyberspace, but also from the inner hidden safety trouble. This kind of intercommunity presents new challenges to the system of cloud computing. This paper discusses how to assure the access of data can be controlled properly from technological and non-technological aspects, assuring the date not to be destroyed, revealed, altered on purpose or accidentally.