基于体系架构的云计算安全研究进展

Survey of Cloud Computing Security Based on Infrastructure

云计算凭借其高效、可靠、廉价等优势,正引导着信息技术的又一次重大变革。考虑到云计算技术独有的特性和架构,安全问题一直是其发展和普及的瓶颈。针对云计算安全问题的研究也一直是该领域的重点和热点问题。将云计算体系划分为物理资源层、资源抽象层和服务提供层,并分层定义了体系中数据安全、虚拟机安全、多租户隔离、应用部署安全、数据处理技术、身份控制技术以及审计技术,介绍了相关标准,阐述了近年来的研究进展,指出了云计算体系架构安全领域的挑战与发展契机。

Cloud computing is leading an information technology revolution with its advantages such as efficient, relia- ble, and low-cost. However, the security issue： is always the obstruction which limits the development and popularization of cloud computing. Therefore, it is undisputed that the security research is a hot issue in the field of cloud computing. In this paper,we divided the cloud computing into resource layer, resource abstraction layer and service layer, and defined data security, virtual machine security, multi-tenant isolation, application deployment, data processing, identity control and audition. The paper reviewed the recent progresses in this area based on architecture division of cloud computing and provided references for further research in cloud computing.