云密码服务应用安全性评估分析与探讨

Analysis and Discussion of Cloud Cryptography Service Application Security Evaluation

由于云平台自身特殊性,在云平台密码应用测评过程中,会面临密码服务需求不清晰、测评点难以确定、涉及虚拟机迁移安全测评等疑难问题。针对上述问题,该文通过对云平台密码保障建设系统的架构和保护对象进行梳理,对云密码服务资源池、统一密码服务、密钥隔离安全服务等各层面需求进行分析,明确云密码服务各层面常见测评点,并重点对云平台应用和数据层面测评对象确定、云平台密评责任和范围划分、虚拟机迁移安全测评等相关问题进行研究和探讨,为云平台密码应用测评实践提供参考借鉴和理论指导,以协助密评人员解决云平台密码应用测评过程中相关疑难问题。

Due to the particularity of cloud platform itself,in the evaluation process of cloud platform cryptography application,it will face some difficult problems,such as unclear cryptography service demand,difficult to determine the evaluation point,and related to the security evaluation of virtual machine migration.In view of the above problems,this paper sorted out the architecture and protection objects of the cloud platform cryptography security construction system,analyzed the requirements of cloud cryptography service cryptography resource pool,unified cryptography service,key isolation security service and other aspects,and identified the common evaluation points of cloud cryptography service at all aspects.In addition,it focuses on the research and discussion on the determination of assessment objects at the cloud platform application and data level,the division of responsibility and scope of cloud platform cryptography evaluation,and the security assessment of virtual machine migration,so as to provide reference and theoretical guidance for the cloud platform cryptography application assessment practice,so as to assist the secret assessment personnel to solve the relevant difficulties encountered in the process of cloud platform cryptography application assessment.