托管PaaS平台安全容器的设计与实现

Design and Implementation of A Novel Secure Servlet Container in Paas

作为一种新型的分布式计算模型,云计算近年来发展讯速并成为学术界和产业界的焦点,但是其推广应用却没有像人们想象中那样被广泛接受,最主要原因就在于其大规模共享资源的同时带来的一系列安全问题。PaaS作为云计算的一种服务方式,是一种较低成本的方案,同时也是SaaS模式的一种应用,降低了SaaS开发应用的门槛,是一场互联网应用软件开发的革命。本文研究了托管PaaS平台及其面临的安全问题,分析目前已有的云平台安全解决方案,并提出多租户托管PaaS平台的应用安全解决方案,从应用安全、容器安全和网络安全三个方面来实现托管PaaS平台安全容器。

Cloud Computing develops rapidly in recent years, but it is not widely accepted by uses due to its security challenges. As a form of Cloud Computing, Platform-as-a-Service （PaaS） is believed to be a revolution of the Intemet application software, development. This paper analysed the typical security issues in PaaS and existing security solutions in this paper, and then proposed a novel security container in PaaS. PaaS security container will provide a security deploying and running environment for applications from three aspects： security of applications in PaaS, security of container and networking security of the container.