| 摘要: |
| 伴随云计算技术的飞速发展,其所面临的安全问题日益凸显,在工业界和学术界引起了广泛的关注.传统的云基础架构中存在较高安全风险,攻击者对虚拟机的非法入侵破坏了云服务或资源的可用性,不可信的云存储环境增大了用户共享、检索私有数据的难度,各类外包计算和云应用需求带来了隐私泄露的风险.从云计算环境下安全与隐私保护技术的角度出发,通过介绍云虚拟化安全、云数据安全以及云应用安全的相关研究进展,分析并对比典型方案的特点、适用范围及其在安全防御和隐私保护方面的不同效用,讨论已有工作的局限性,进而指出未来发展趋势和后续研究方向. |
| 关键词: 云计算 云安全 虚拟化安全 数据安全 应用安全 |
| DOI：10.13328/j.cnki.jos.005004 |
| 分类号: |
| 基金项目:国家自然科学基金(61272481,61402352,61572460) |
|
| Survey on Cloud Computing Security |
|
ZHANG Yu-Qing1, WANG Xiao-Fei1, LIU Xue-Feng2, LIU Ling2
|
|
1.National Computer Network Intrusion Protection Center, University of Chinese Academy of Sciences, Beijing 101408, China;2.National Key Laboratory of Integrated Services Networks (Xidian University), Xi'an 710071, China
|
| Abstract: |
| With the rapid development of cloud computing technology, its security issues have become more and more obvious and received much attention in both industry and academia. High security risk is widespread in traditional cloud architecture. Hacking into a virtual machine destroys the availability of cloud services or resources. Un-Trusted cloud storage makes it more difficult to share or search users' private data. The risk of privacy leakage is caused by various outsourcing computation and application requirements. From the perspective of security and privacy preserving technologies in cloud computing, this paper first introduces related research progress of cloud virtualization security, cloud data security and cloud application security. In addition, it analyzes the characteristics and application scopes of typical schemes, and compares their different effectiveness on the security defense and privacy preserving. Finally, the paper discusses current limitations and possible directions for future research. |
| Key words: cloud computing cloud security virtualization security data security application security |
