一种面向云计算服务安全的评估方法研究

Research on an Evaluation Method for Cloud Computing Service Security

云计算服务安全评估方法一直面临着安全指标覆盖范围小、适用场景有限和指标不易量化的问题,使得云计算服务安全评估工作难以高效开展与实施。本文基于国家标准的要求提出一种云计算服务安全评估模型,并制定安全评估指标体系和交付件列表。此外,本文还设计一种基于模糊综合评价法的云计算服务安全评估方法,并设计实现安全评估系统原型,验证所提方法的高效性与可行性。

Security assessment methods of cloud computing services are always faced with the problems of small coverage of security indicators,limit⁃ed applicable scenarios,and difficult quantification of indicators,which make it difficult to carry out and implement security assessment of cloud computing services efficiently.Based on the requirements of national standards,this paper proposes a cloud computing service securi⁃ty assessment model and formulates a security assessment index system and delivery list.In addition,this paper also designs a cloud com⁃puting service security assessment method based on a fuzzy comprehensive assessment method,and designs and realizes the prototype of a security assessment system,which verifies the efficiency and feasibility of the proposed method.