军事云信息安全保障体系架构

doi:10.11959/j.issn.1000-0801.2015299

摘要/Abstract

摘要：

云计算架构以其强大的信息处理能力、按需弹性的服务模式、增强的安全性等优势，已成为军事信息系统的发展方向。首先探讨了军事云计算安全的概念及特点，对军事云安全领域研究及应用的现状进行了分析。在此基础上，提出了军事云信息安全保障体系构建的目标，构建了军事云信息安全保障体系架构，并对其包含的主要模块进行了深入分析，最后给出了需要解决的关键技术问题。

关键词: 云计算, 军事云, 信息安全保障, 安全体系架构

Abstract:

Due to the powerful capacity of information processing, on-demand and elastic service model, and enhanced security, cloud computing has become the future of military information system. At first, the conception and feature of cloud computing security was discussed. The current situation of research and application in military cloud security was analyzed. The objective of information assurance with military cloud was proposed on this foundation, then the architecture of information assurance with military cloud was structured, and the main modules of this architecture were analyzed in-depth. Lastly some key research opportunities were listed.

Key words: cloud computing, military cloud, information assurance, security framework

郭保平,程建,刘维平. 军事云信息安全保障体系架构[J]. 电信科学, 2015, 31(12): 70-75.

Baoping Guo,Jian1 Cheng,Weiping2 Liu. Information Assurance Framework of Military Cloud[J]. Telecommunications Science, 2015, 31(12): 70-75.

图/表 1

参考文献 19

1	王古宣，左琳琳 . 美军信息保障浅析. 现代军事， 2008（6）:64～66 Wang G X , Zuo L L . Information assurance analysis of US army. Modern Military, 2008（6）:64～66
2	张慧，邢培振 . 云计算环境下信息安全分析. 计算机技术与发展， 2011,21（12）:164～166 Zhang H , Xing P Z . Information security analysis in cloud computing environment. Computer Technology and Development, 2011,21（12）:164～166
3	Dallas A P . The military applications of cloud computing technologies（master dissertation）. Kansas: United States Army Command and General Staff College, 2013
4	郑全弟，张文，李成海等. 云计算在美军事领域的应用与展望. 飞航导弹， 2013（1）:53～56 Zheng Q D , Zhang W , Li C H , et al. Cloud computing applications and prospect in US army. Aerodynamic Missile Journal, 2013（1）:53～56
5	韩星晔，李新明 . 云计算军事应用研究. 备指挥技术学院学报， 2011,22（2）:103～107 Han X Y , Li X M . Research on military application of cloud computing. Journal of the Academy of Equipment Command＆Technology, 2011,22（2）:103～107
6	HQMC C4 Strategy and Vision Division. Marine corps private cloud computing environment strategy. . pdf, 2012
7	Department of Defense Chief Information Officer. Cloud computing strategy, . pdf, 2014
8	李成，李明桂，向敏 . 联合信息环境JIE 及其安全研究. 通信技术， 2015,48（1）:46～50 Li C , Li M G , Xiang M . Joint information environment and its security. Communications Technology, 2015,48（1）:46～50
9	The Defense Science Board Cyber Security and Reliability in a Digital Cloud. Washington DC: Office of the Under Secretary of Defense for Acquisition, Technology, and Logistics, 2013:29～40
10	任福乐，朱志祥，王雄 . 基于全同态加密的云计算数据安全方案. 西安邮电大学学报， 2013,18（3）:92～95 Ren F L , Zhu Z X , Wang X . A cloud computing security solution based on fully homomorphic encryption. Journal of Xi'an University of Posts and Telecommunications, 2013,18（3）:92～95
11	Noemi A . Optimizing security of cloud computing within the DOD（master dissertation）. Monterey: Naval Postgraduate School, 2010
12	Kris E B , Jeffrey W H , Robert F M . A case for DoD application of public cloud computing services. Proceedings of the 2011 Military Communications Conference, Maryland, USA, 2011:1888～1893
13	Timothy K B . A strategic approach to network defense: framing the cloud. Parameters, 2011,（3）:43～58
14	Kretzschmar M , Knuepfer M . Reference security management architecture-guiding governmental and military inter-cloud initiatives. Proceedings of 2011 Military Communications and Information Systems Conference, Canberra,Australia, 2011:391～397
15	冯登国，张敏，张妍等. 云计算安全研究. 软件学报， 2011,22（1）:71～83 Feng D G , Zhang M , Zhang Y , et al. Study on cloud computing security. Journal of Software, 2011,22（1）:71～83
16	李美云，李剑，黄超 . 基于同态加密的可信云存储平台. 信息网络安全， 2012,12（9）:35～40 Li M Y , Li J , Huang C . A credible cloud storage platform based on homomorphic encryption. Netinfo Security, 2012,12（9）:35～40
17	孙晶晶，蔡勉，赵阳 . 基于可信计算的云用户安全模型. 计算机安全， 2012,12（4）:19～24 Sun J J , Cai M , Zhao Y . Based on trusted computing user security model for cloud computing. Computer Security, 2012,12（4）:19～24
18	房晶，吴昊，白松林 . 云计算的虚拟化安全问题. 电信科学， 2012,28（4）:135～140 Fang J , Wu H , Bai S L . Virtualization security issues in cloud computing. Telecommunications Science, 2012,28（4）:135～140
19	李明桂，肖毅陈剑锋等. 基于大数据的安全事件挖掘框架. 通信技术， 2015,48（3）:346～350 Li M G , Xiao Y , Chen J F , et al. Big data-based framework for security event mining. Communications Technology, 2015,48（3）:346～350

[1]	韩雪. 基于电力大数据的电力骨干通信网络毁伤韧性评估方法[J]. 电信科学, 2023, 39(5): 136-143.
[2]	邬江兴. 论网络技术体制发展范式的变革——网络之网络[J]. 电信科学, 2022, 38(6): 3-12.
[3]	邢文娟, 雷波, 赵倩颖. 算力基础设施发展现状与趋势展望[J]. 电信科学, 2022, 38(6): 51-61.
[4]	邓平科, 张同须, 施南翔, 张童, 邵天竺, 郑韶雯. 星算网络——空天地一体化算力融合网络新发展[J]. 电信科学, 2022, 38(6): 71-81.
[5]	马焜, 徐玲玉, 沈晓萍, 龚志城, 蓝建平, 陈双喜, 钱钧. 云计算中基于Shapley值改进遗传算法的虚拟机调度模型[J]. 电信科学, 2022, 38(12): 1-10.
[6]	刘志勇, 何忠江, 阮宜龙, 单俊峰, 张超. 大数据安全特征与运营实践[J]. 电信科学, 2021, 37(5): 160-169.
[7]	许剑,靳莉. 一种可量化的云计算平台安全评估模型[J]. 电信科学, 2020, 36(7): 163-167.
[8]	罗斯宁,王化龙,李弘宇,彭蔚. 基于改进蚁群算法的云计算用户任务调度算法[J]. 电信科学, 2020, 36(2): 95-100.
[9]	雷波, 刘增义, 王旭亮, 杨明川, 陈运清. 基于云、网、边融合的边缘计算新方案：算力网络[J]. 电信科学, 2019, 35(9): 44-51.
[10]	高永梅,程冠杰. 基于边缘计算的数据密集型服务部署[J]. 电信科学, 2019, 35(7): 87-99.
[11]	鲁泽霖,李强治. 电子商务平台的演化逻辑和运营机理[J]. 电信科学, 2019, 35(7): 152-158.
[12]	黄志兰,樊勇兵,樊宁,陈楠,吴林泽,林宝洪. 云资源池集成虚拟防火墙方案及关键技术[J]. 电信科学, 2019, 35(5): 140-148.
[13]	朱友康,乐光学,杨晓慧,刘建生. 边缘计算迁移研究综述[J]. 电信科学, 2019, 35(4): 74-94.
[14]	吴国威,樊宁,汪来富,王帅,沈军,金华敏. 云环境下基于属性加密体制算法加速方案[J]. 电信科学, 2019, 35(11): 101-107.
[15]	张云勇. 5G将全面使能工业互联网[J]. 电信科学, 2019, 35(1): 1-8.