云环境下学术信息资源全程化安全保障机制

Security Guarantee Mechanism for the Whole Process of Academic Information Resources in the Cloud Computing Environment

[目的/意义]构建云环境下学术信息资源全程化安全保障机制,为安全保障的组织提供参考。[方法/过程]围绕云服务应用决策、部署与运行的全过程,学术信息资源组织加工与服务利用的全过程,安全保障措施部署过程3个方面进行安全保障机制构建。[结果 /结论]全程化安全保障机制的组织实现包括基于安全等级保护的云计算部署模式选择、基于学术信息资源组织与开发流程的安全保障链式组织、基于深度防御策略的安全保障措施部署3个方面。

[Purpose/significance] In order to provide references for security organizations,this paper aims to construct the security guarantee mechanism for the whole process of national academic information resources in the cloud computing environment.[Method/process] Focusing on the whole process of cloud service application decision-making,deployment and operation,the process of academic information resources organization,processing and utilization,and the process of security measures deployment,the paper establishes the security guarantee mechanism. [Result/conclusion] The organization and implementation of the whole-process security guarantee mechanism includes the selection of cloud computing deployment model based on the information security protection level,the establishment of security chain based on the organization and development process of national academic information resources,and the deployment of security measures based on the Defense-in-Depth strategy.