云服务安全认证现状研究

The research on the current status of Cloud Service Security Certification

深入研究了国内外云计算服务相关安全标准现状,梳理了国际标准组织和美国、欧盟等国外标准组织在云服务安全方面的研究现状和成果,分析了国内主要标准组织如TC260和CCSA在云服务安全方面的标准化工作现状。在云服务安全认证方面,综合比较国际国内已有的云服务认证体系,分析了美国、欧盟以及我国在云服务安全评估方面的现状和存在的不足。为适应云计算产业快速发展产生的安全需求,本文最后提出有必要在现有制度基础上进一步研究完善云服务安全认证机制。

This paper reviews the current status of security standards related to cloud computing services at home and abroad,teases out the research status and achievements of international and foreign standards organizations in the United States and European Union on cloud computing services security, and analyzes the major domestic standards organizations, such as TC260 and CCSA, in the cloud service security aspects of standardization work status. In cloud computing service security authentication, the paper compares the existing international and domestic cloud computing service authentication system, and analyzes the current situation and existing problems of cloud service security evaluation in the United States, European Union and China. In order To meet the security requirements arising from the rapid development of the cloud computing industry, this paper concludes that it is necessary to research and further improve the cloud service security authentication mechanism based on the existing system.