云安全联盟安全信任和保证注册项目研究

Research on CSA Cloud Security, Trust, Assurance Registry Project

为了解决公有云服务的可信缺乏问题,云安全联盟启动了安全信任和保证注册项目。研究了该项目的产生背景和以增强透明度为目标的开放认证架构,以及包括自评估和第三方评估的典型认证过程,介绍了项目当前注册和认证方面的进展,以及持续监控认证等后续研究计划。最后给出了我国开展云计算安全的测评和认证标准的研究和制定等工作建议。

In order to resolve thelack of trust of public cloud service, Cloud Security Alliance （CSA） launched Security, Trust Assurance and Registry STAR project. This paper introduced the background of STAR project, the associated Open Certification Framework （OCF）, the classical STAR Certification process. It also briefed the progress of the STAR project, and gave a schedule of the next work. At last, the author gave the suggestions on how our country developed the certification standards for cloud computing, and so on