云电子商务的安全审计问题研究

Security Audit Problem of Cloud Electronic Commerce

"云环境"与传统商务相结合,将引起电子商务重大变革。阿里云计算、京东云服务、当当云书架的相继推出,提升了服务质量,降低了运行成本,提高了商务的可拓展性。然而,通过对近年来网络安全事件统计分析发现,云电子商务的安全形势极为严峻,且我国还缺乏成熟的安全管理规范。由此,强化对云电子商务安全问题的审计与管理势在必行。云电子商务安全审计是系统工程,有必要梳理安全审计风险构成,并以此为基础,设计合理的安全审计模式,建立科学的安全审计过程挖掘平台,拓展审计策略,力求基于本质抑制相关安全事故的发生。

E -commerce will cause major changes because ＂the cloud＂ combined with the traditional commerce. It improves the service quality, reduces the operation cost, improves the business expand ability for a- li cloud computing, cloud services and dang- dang cloud bookshelf. However, we found that cloud of e -commerce security situation is very grim through the network security event statistical analysis, and our country is lack of mature security management specification. As a result, strengthen the audit and management of e - commerce security issues of cloud is imperative. Cloud e - commerce security audit is a systems engineering. It is necessary to comb the security audit risk, and on this basis, design reasonable safety audit mode, set up scientific safety audit process mining platform, expand the audit strategy. Our ultimate aim is to inhibit related safety accidents based on the nature factors.