云计算安全问题研究综述

Overview of Research on Cloud Computing Security Issues

最近,由于经济性和高质量服务,云计算成为业界关注的焦点。过去10年,云计算通过产品和服务与企业和个人的日常生活紧密相连。云计算按需付费的特点激励着企业主动上云,从2019年开始,全球企业开始大规模上云,目前这种趋势依然强劲。虽然云计算为企业和个人带来了很多好处,但直到今天,云安全仍是各个云服务提供商亟需解决的挑战。云计算技术中虚拟化、多租户、按需付费等特点也为恶意攻击者提供了入口和漏洞。基于过去云计算安全问题的研究成果,探讨云计算3层体系结构,即基础设施即服务、平台即服务和软件即服务的安全问题和应对策略,并提出未来发展建议。

Recently,cloud computing has become the focus of the industry due to its economical and high-quality services.Over the past decade,cloud services have been closely connected to the daily lives of businesses and individuals through products and services.The pay-as-you-go feature of cloud computing motivates enterprises to actively migrate to the cloud.Since 2019,global enterprises have begun to migrate to the cloud on a large scale,and this trend is still strong at present.While cloud computing brings many benefits to businesses and individuals,cloud security remains a challenge for various cloud service providers to address to this day.The characteristics of virtualization,multi-tenancy,and pay-as-you-go in cloud computing technology also provide entry and loopholes for malicious attackers.Based on the research results of cloud computing security issues in the past,the security issues and countermeasures of the three-tier architecture of cloud computing,namely IaaS,PaaS,SaaS,are discussed,and the suggestions for future development are proposed.