云计算服务持续监管研究

doi:10.11959/j.issn.2096-109x.2016.00105

Abstract

Abstract:

The complexity and dynamism of cloud computing environment hardly lead to timely awareness of cloud computing service’s operating state and assessment of cloud computing service risk.In order to ensure that the security of cloud service abidingly conforms to relevant national standard,continuous monitoring of cloud computing service was researched,and the role of cloud service provider was defined,customer,and continuous monitoring,described their supervising responsibility,and assessed index system and interface specification,thus guaranteeing stable and secure employment of cloud computing service by government department and key industries.

Key words: cloud computing, continuous monitoring, cloud computing security

CLC Number:

TP393

Xing-shu CHEN,Long GE,Yong-gang LUO,Xiang LI. Research on continuous monitoring of cloud computing service[J]. Chinese Journal of Network and Information Security, 2016, 2(10): 1-7.

Figures/Tables 11

安全能力	类型	监管指标类型
策略与规程	文档类接口类	系统与通信保护策略：包含但不限于以下子项内容包含但不限于以下子项接口
		1) 客户业务系统隔离策略
		2) 边界通信监控机制
		3) 内外部网络安全隔离机制
	文档类	4) 外部电信服务的安全管理措施
边界保护		5) 外部通信接口授权策略
		6) 远程维护管理策略
		7) 边界保护策略失效响应机制
	接口类	1) 边界保护设备的配置信息2) 外部电信服务接口传输的信息流采样
传输保密性和完整性	文档类	1) 通信加密和签名验签算法及设施策略2) 通信加密和签名验签设施的证书、测评报告
传输保密性和完整性	接口类	无
网络中断	文档类接口类	不活动时间定义及应对措施无
可信路径	文档类接口类	平台用户与系统安全功能之间建立可信通信路径的相关措施无
密码使用和管理	文档类	1) 密钥的生成、使用和管理策略及记录2) 密码设施的管理和使用记录
密码使用和管理	接口类	无
协同计算设备	文档类接口类	协同计算设备禁用策略无
移动代码	文档类接口类	移动代码使用及限制策略无
会话认证	文档类接口类	会话认证策略无
移动设备的物理连接	文档类接口类	移动设备的管理和使用策略无
		1) 恶意代码防护设备及防护机制
	文档类	2) 恶意代码防护设备的维护更新记录3) 恶意代码的检测和处理机制
恶意代码防护		4) 恶意代码误报率的分析机制和误报分析影响记录
恶意代码防护		1) 恶意代码防护设备的配置信息
	接口类	2) 恶意代码的实时告警
		3) 恶意代码防护设备的特征库及策略库版本信息
内存防护	文档类接口类	内存申请、使用、释放等防护机制内存信息
		1) 虚拟机实时监控机制
系统虚拟化安全性	文档类	2) 虚拟机镜像安全机制3) 虚拟机安全隔离机制4) 虚拟化平台资源隔离机制
系统虚拟化安全性	接口类	1) 资源隔离失败告警2) 虚拟镜像模板的配置信息
网络虚拟化安全性	文档类	1) 虚拟网络逻辑隔离策略2) 虚拟网络访问控制机制
网络虚拟化安全性	接口类	虚拟网络资源配置信息
		1) 存储数据的安全控制机制
		2) 物理存储实体访问机制
		3) 虚拟存储资源之间逻辑隔离机制
	文档类	4) 用户的存储数据清除机制5) 虚拟存储数据访问控制策略
存储虚拟化安全性		6) 虚拟存储数据的审计机制
		7) 虚拟存储冗余备份支持机制
		8) 第三方加密及密钥管理策略
		1) 用户数据清除记录信息
	接口类	2) 虚拟存储备份信息
		3) 数据加密方案信息

References 9

[1]	中国国家标准化管理委员会. 信息安全技术云计算服务安全指南:GB/T 31161-2014[S]. 北京: 中国标准出版社, 2014.
	Standardization Administration of China. Information security technology of cloud computing services security guidelines:GB/T 31161-2014[S]. Beijing: China Standards Press, 2014.
[2]	中国国家标准化管理委员会.信息安全技术云计算服务安全能力要求:GB/T 31168-2014>[S]. 北京: 中国标准出版社, 2014.
	Standardization Administration of China. Cloud computing service security capacity requirements of information security technology:GB/T 31168-2014[S]. Beijing: China Standards Press, 2014.
[3]	FedRAMP Office Continuous monitoring strategy & guide.Version2.0[S]. 2014.
[4]	NIST Special Publication 800-137.Information security continuous monitoring (ISCM) for federal information systems and organizations[S]. 2011.
[5]	NIST Special Publication 800-37.Guide for applying the risk management framework to federal information systems[S]. 2010.
[6]	CSA(Cloud Security Alliance). Auditing the cloud controls matrix[S].2014. 2014.
[7]	CSA. Defined categories of security as a service[S].2014. 2014.
[8]	NIST Special Publication 800-145.The NIST definition of cloud computing[S].2011. 2011.
[9]	CSA. CTP data model and API[S]. 2014.

Metrics

Recommended 0

No Suggested Reading articles found!

类别	安全要求项数
系统开发与供应链安全	17
系统与通信保护	15
访问控制	26
配置管理	7
维护	9
应急响应与灾备	13
审计	11
风险评估与持续监控	6
安全组织与人员	12
物理与环境保护	15

[1]	Lingshu LI, Jiangxing WU, Wei ZENG, Wenyan LIU. Strategy of container migration and honeypot deployment based on signal game in cloud environment [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 87-96.
[2]	Shang LIU, Yinzhang GUO. Multi-authority based CP-ABE proxy re-encryption scheme for cloud computing [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 176-188.
[3]	Yi ZHANG, Liqin TIAN, Zenan WU, Wenxing WU. Trust evaluation optimization mechanism for cloud user behavior based on FANP [J]. Chinese Journal of Network and Information Security, 2022, 8(2): 175-182.
[4]	Ying WU,Xuan LI,Biao JIN,Rongrong JIN. Survey on the privacy-preserving content based image retrieval [J]. Chinese Journal of Network and Information Security, 2019, 5(4): 14-28.
[5]	Ying LI, Chunguang MA. Overview of searchable encryption research [J]. Chinese Journal of Network and Information Security, 2018, 4(7): 13-21.
[6]	Mengyang YU,Hui LIN,Youliang TIAN. New cross-layer reputation mechanism for mobile cloud computing [J]. Chinese Journal of Network and Information Security, 2018, 4(3): 51-58.
[7]	Yuanhao WANG,Hongbo LI,Yuzhao CUI,Qingwen GUO,Qiong HUANG. Survey on public key encryption with equality test [J]. Chinese Journal of Network and Information Security, 2018, 4(11): 13-22.
[8]	Jianbiao ZHANG,Yuanxi ZHU,Jun HU,Xiao WANG. Scheme of virtual machine trusted migration in cloud environment [J]. Chinese Journal of Network and Information Security, 2018, 4(1): 6-14.
[9]	Weifeng LI,Weizhong QIANG,Weiming LI,Deqing ZOU. Research on forensics of privacy violations in cloud environment [J]. Chinese Journal of Network and Information Security, 2018, 4(1): 26-35.
[10]	Yuan-zhao GAO,Xue-juan LI,Bing-long LI,Xi-xi WU. Cloud computing forensic model [J]. Chinese Journal of Network and Information Security, 2017, 3(9): 13-23.
[11]	Xing-lan ZHANG,Xiang LIU. Secure efficient and verifiable large linear equations solve outsourcing computing scheme [J]. Chinese Journal of Network and Information Security, 2017, 3(6): 1-7.
[12]	De-yu YUAN,Xiao-juan WANG,Jian-chao WAN. Influence of Internet plus on cyberspace security and the technology development trend in Internet plus era [J]. Chinese Journal of Network and Information Security, 2017, 3(5): 1-9.
[13]	Jiang-yong SHI,Yue-xiang YANG,Wen-hua LI,Sen WANG. Research on SDN-based cloud security application [J]. Chinese Journal of Network and Information Security, 2017, 3(5): 10-25.
[14]	Fei CHEN,Xiao-hong BI,Jing-jing WANG,Yuan LIU. Survey of DDoS defense:challenges and directions [J]. Chinese Journal of Network and Information Security, 2017, 3(10): 16-24.
[15]	Guang SUN,Xiao-ping FAN,Wang-dong JIANG,Hang-jun ZHOU,Sheng-zong LIU,Chun-hong GONG,Jing ZHU. Software watermarking scheme with cloud computing constraints [J]. Chinese Journal of Network and Information Security, 2016, 2(9): 12-21.

Research on continuous monitoring of cloud computing service

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 11

References 9

Related Articles 15

Metrics

Recommended 0