面向第三方的云平台可信性在线评测及分析技术

doi:10.11959/j.issn.2096-109x.2019054

Abstract

Abstract:

The service model of cloud computing creates a serious threat to user data security,the trustworthiness of cloud computing through third parties,must be evaluated then the healthy development of the cloud computing industry can be guaranteed.The research of the National High Technology Research and Development Program of China,“trusted platform for third-party cloud computing online evaluation and analysis technology” were summarized.The trusted evaluation model and architecture were described from the cloud platform,the dynamic evaluation technology,the credible evidence collection and the trusted test mechanism,the credibility of the quantitative evaluation method,and the prototype system integrated by tools ,to evaluate the credibility of cloud platform.

Key words: cloud platform, trusted computing, evaluation model, third party

CLC Number:

TP393

Bo ZHAO, Xiang LI, Fei YAN, Liqiang ZHANG, Huanguo ZHANG. Trusted platform for third-party cloud computing online evaluation and analysis technology[J]. Chinese Journal of Network and Information Security, 2019, 5(5): 90-104.

Figures/Tables 16

References 21

[1]	中国电子技术标准化研究所.云计算标准研究报告[R]. 2010.
	China Electronics Standardization Institute. Cloud computing standards research report[R]. 2010.
[2]	王惠莅, 杨晨, 杨建军 . 云计算安全和标准研究[J]. 信息技术与标准化, 2012(5): 16-19.
	WANG H L , YANG C , YANG J J . Information security and standard of cloud computing[J]. Information Technology ＆ Standardization, 2012(5): 16-19.
[3]	王惠莅, 罗锋盈, 杨建军 ,等. 云计算服务安全关键标准研究[J]. 信息技术与标准化, 2013.
	WANG H L , LUO F Y , YANG J J . Research on key standards for the security of cloud computing services[J]. Information Technology ＆ Standardization. 2013.
[4]	CHEN C , MANIATIS P , PERRIG A . Towards verifiable resource accounting for outsourced computation[J]. ACM Sigplan Notices, 2013,48(7):167.
[5]	邵政斌 . 流量伪装技术及其成本分析[D]. 长沙:湖南大学, 2007.
	SHAO Z B . Traffic camouflaging technology and its cost analysis[D]. Changsha:Hunan University, 2007.
[6]	LIU D X , CHI C H , LI M . Normalizing traffic pattern with anonymity for mission critical applications[C]// 37th Annual Simulation Symposium. 2004: 293-299.
[7]	胡文心 . 网络流量规范化的流量伪装模型的研究[D]. 上海:华东师范大学, 2006.
	HU W X . The model and implementation of normalizing network traffic pattern with anonymity for mission critical applications[D]. Shanghai:East China Normal University, 2006.
[8]	FU X W , GRAHAM B , BETTATI R ,et al. On effectiveness of link padding for statistical traffic analysis attacks[C]// 23rd International Conference on Distributed Computing Systems. 2003: 45-52.
[9]	胡文心, 蔡建华, 俞琨 . 网络流量规范化的流量伪装方法,CN101383831A[P].2009. 2009:
	HU W X , CAI J H , YU K . Network traffic normalized traffic masquerading method,CN101383831A[P]. 2009:
[10]	CAO N , WANG C , LI M ,et al. Privacy-preserving multi-keyword ranked search over encrypted cloud data[C]// IEEE Infocom 2011. 2011: 10-15.
[11]	LI J , WANG Q , WANG C ,et al. Fuzzy keyword search over encrypted data in cloud computing[C]// Infocom,Mini-Conference. 2010.
[12]	XIN S , ZHAO Y , LI Y . Property-based remote attestation oriented to cloud computing[C]// 2011 Seventh International Conference on Computational Intelligence and Security. 2011: 1028-1032.
[13]	KUWAITI M , KYRIAKOPOULOS N , HUSSEIN S . A comparative analysis of network dependability,fault-tolerance,reliability,security,and survivability[J]. Commun Surveys Tuts, 2009,(4): 106-124.
[14]	ZHAO B , NI M T , FAN P R . Powermitter:data exfiltration from air-gapped computer through switching power supply[J]. China Communications, 2018,15(2): 170-189.
[15]	樊佩茹, 赵波, 倪明涛 ,等. APM:适用于IaaS平台的agent保护机制[J]. 通信学报,39(4): 176-188.
	FAN P R , ZHAO B , NI M T ,et al. APM:agent protection mechanism applied for IaaS platform[J]. Journal on Communications, 2018,39(4): 176-188.
[16]	石源, 张焕国, 吴福生 . 一种可信虚拟机迁移模型构建方法[J]. 计算机研究与发展, 2017,54(10): 2284-2295.
	SHI Y , ZHANG H G , WU F S . A method of constructing the model of trusted virtual machine migration[J]. Journal of Computer Research and Development, 2017,54(10): 2284-2295.
[17]	严飞, 彭慧容, 何凡 ,等. HBROP:基于硬件性能计数器的函数级ROP检测[J]. 武汉大学学报(理学版), 2017,63(2): 109-116.
	YAN F , PENG H R , HE F ,et al. HBROP:HPC-based function-level approach to detect ROP attack[J]. Journal of Wuhan University, 2017.
[18]	ZHAN J , FAN X D , CAI L ,et al. TPTVer:A trusted third party based trusted verifier for multi-layered outsourced big data system in cloud environment[J]. China Communications, 2018,15(2): 122-137.
[19]	詹静, 杨静 . 基于远程证明的可信Modbus/TCP协议研究[J]. 工程科学与技术, 2017,49(1).
	ZHAN J , YANG J . Research on remote attestation-based trusted modbus/TCP protocol[J]. Advanced Engineering Sciences, 2017,49(1).
[20]	詹静, 杨静, 马俊明 ,等. 一种基于共享内存摆渡的 Modbus/TCP安全通信方法[J]. 中国科技论文, 2017,12(2): 135-140.
	ZHAN J , YANG J , MA J M ,et al. Modbus/TCP secure communication method based on shared memory ferry[J]. China Sciencepaper, 2017,12(2): 135-140.
[21]	ZHANG L Q , YAN F , ZHAO B ,et al. Dependence-induced risk：security metrics and their measurement framework[J]. China Communications, 2016,13(11): 119-128.

Metrics

Recommended 0

No Suggested Reading articles found!

Trusted platform for third-party cloud computing online evaluation and analysis technology

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 16

References 21

Related Articles 11

Metrics

Recommended 0

[1]	Bo ZHAO, Anqi YUAN, Yang AN. Application progress of SGX in trusted computing area [J]. Chinese Journal of Network and Information Security, 2021, 7(6): 126-142.
[2]	Guojie LIU, Jianbiao ZHANG, Ping YANG, Zheng LI. Research on the trusted environment of container cloud based on the TPCM [J]. Chinese Journal of Network and Information Security, 2021, 7(4): 164-174.
[3]	Guojie LIU,Jianbiao ZHANG. TPCM-based trusted PXE boot method for servers [J]. Chinese Journal of Network and Information Security, 2020, 6(6): 105-111.
[4]	Jiyang LI,Pengyuan ZHAO,Zhe LIU. Trusted access scheme for intranet mobile terminal based on encrypted SD card [J]. Chinese Journal of Network and Information Security, 2019, 5(4): 108-118.
[5]	Xiao YU,Li TIAN,Zhe LIU,Jie WANG. Research on key management and authentication protocol of PDA in smart grid [J]. Chinese Journal of Network and Information Security, 2018, 4(3): 68-75.
[6]	Jianbiao ZHANG,Yuanxi ZHU,Jun HU,Xiao WANG. Scheme of virtual machine trusted migration in cloud environment [J]. Chinese Journal of Network and Information Security, 2018, 4(1): 6-14.
[7]	Jun XU. Trusted computing mobile terminal application research based on biometric trusted access protocol [J]. Chinese Journal of Network and Information Security, 2017, 3(2): 66-76.
[8]	Zhao-chang SUN,Jian-feng MA,Cong SUN,Di LU. Approach on runtime monitoring based on the embedded trusted platforms [J]. Chinese Journal of Network and Information Security, 2017, 3(10): 44-51.
[9]	Kai WANG,Zhi-hua LI,Fan, HUANG,Fei1 YAN. HyperSpector:VMM dynamic trusted monitor based on UEFI [J]. Chinese Journal of Network and Information Security, 2016, 2(12): 47-55.
[10]	Yu-tao LIU,Hai-bo CHEN. Virtualization security:the good,the bad and the ugly [J]. Chinese Journal of Network and Information Security, 2016, 2(10): 17-28.
[11]	Wei-qi DAI,De-qing ZOU,Hai JIN,Yan XIA. Research on consistency protection mechanism for secure states of virtual domain in cloud environment [J]. Chinese Journal of Network and Information Security, 2016, 2(10): 48-57.