摘要
针对目前广泛应用的Amazon公有云和Ubuntu私有云,文中总结其共同采用的云基础管理软件Eucalyptus的安全特性,分析了针对Eucalyptus的控制接口攻击方法,如签名包裹和高级跨站攻击等,通过对这些攻击的研究加深了对目前主流云基础设施安全问题的理解,同时提出了一些可以采用的应对方法。
For the widely applied Amazon public cloud and Ubuntu private cloud security features of their commonly- used basic cloud management software Eucalyptus are summarized, and the control-interface attacks against Eucalyptus, such as signature wrapping attack and high-level eross-website attack, are analyzed. Through the study on these attacks and the deep understanding of the security of principal cloud infrastructure, some countermeasures in dealing with these security problems are proposed in this paper.
出处
《信息安全与通信保密》
2012年第5期84-86,共3页
Information Security and Communications Privacy
