论云平台安全等级保护的基本技术要求

Basic Technical Requirements for Security Level Protection of Cloud Platform

剖析了云计算平台面临的风险与挑战,提出了云平台安全建设的通用技术要求,重点论述了云平台为什么要通过三级等保认证以及三级等保认证的技术要求;明确了等保认证中的两大主体即云服务提供商和租户的责任划分,以政务云为例,具体描述了责任划分的细则.还引入了对云平台进行安全监管的建设思路.

The risks and challenges faced by cloud computing platform are analyzed,and the general technical requirements for cloud platform security construction are put forward.The technical requirements for cloud platform to pass third-class certification are discussed in detail.The responsibilities of cloud service providers and tenants are defined.In this paper,taking the government affairs cloud as an example, the detailed rules of responsibility division are described in detail.It also introduces the construction idea of security supervision for cloud platform.