针对内部威胁的可控云计算关键技术研究与实现

Key Technology Research and Implement on Insider Threat for Controlled Cloud Computing

云计算在学术界和工业界获得了广泛关注,但是云计算中的数据安全和隐私保护问题阻碍了云计算的发展。文章从开源云计算框架OpenStack出发,分析其运维方式,提出使用API代理及访问控制的方法实现对云平台的内部管控,防止用户数据受到来自云平台内部的威胁。实验结果表明,文章提出的方法在满足云平台正常运维需求的基础上,实现了对云管理员的权限划分,并且能够拦截恶意和非法的访问请求。

Cloud computing has generated significant interest in both academia and industry,but the data security and privacy problem is hindering the development of cloud computing.Originated from the OpenStack open source cloud computing framework,this paper analyzes its operation and maintenance mode,and proposes using API proxy and access control to achieve internal controls of cloud platform and protect user data from insider threat in cloud platform.Experiment results show that the method in this article,which can achieve the basic need of cloud platform operation maintenance,implements the division of authority to the cloud administrator and can block malicious and illegal access requests.