云计算环境中支持语义的安全策略匹配研究

Research on Semantic Security Policy Matching in Cloud Computing

云计算环境中,一致的安全策略是用户和服务能够成功交互的基础.如何有效地实现安全策略的匹配已经成为保证云计算环境安全的重要关注点之一.因此,提出一种云计算环境中支持语义的服务安全策略匹配方法,将策略匹配的问题转换成语义概念的包含推理问题.该方法首先构建了表示云计算环境下安全知识的云安全本体;其次,利用描述逻辑推理本体元素相互间的语义关系,在此基础上,给出了安全策略匹配结果的判定方法;最后通过实例分析,说明了方法的可行性和实用性.该方法克服了句法级匹配存在的不足,为云计算环境中服务双方安全策略的表示和匹配提供了一种有效的解决方案.

In the cloud computing environment,consistent security policy between sevice provider and user is the base of successful service interaction. To ensure the security,policy matching has become an important point in the development of Cloud Computing.Thus,this paper proposes a semantic security policy matching method,which converts the policy matching problem into the subsumption reasoning problem. Firstly,the method builds a Cloud Security Ontology（ CSO） to formalize security knowledge. Secondly,we use Description Logic（ DL） to produce semantic relations of Ontology concepts and properties. At last,a case study confirms the feasibility and practical of our research. The method overcomes the deficiency of syntactic methods and provides a more effective solution for the expression and matching of security in Cloud Computing.