CAJ | 학술논문

随着现代信息技术的发展，医疗机构采用云计算技术进行信息化建设成为可能。但按照等级保护的基本要求，对云计算信息系统难以有效开展信息安全等级保护测评。以云安全服务模型参考，并以云安全管理中心为例，对云计算信息系统进行云安全等级保护建模和云安全建模，并将二者进行嵌套。针对嵌套的云计算信息系统模型进行等级保护控制项细粒度分析和风险分析，从而完成云计算信息系统的信息安全等级保护测评工作，为医疗机构采用云计算进行信息化建设并同时做好信息安全等级保护提供参考。
수착현대신식기술적발전，의료궤구채용운계산기술진행신식화건설성위가능。단안조등급보호적기본요구，대운계산신식계통난이유효개전신식안전등급보호측평。이운안전복무모형삼고，병이운안전관리중심위례，대운계산신식계통진행운안전등급보호건모화운안전건모，병장이자진행감투。침대감투적운계산신식계통모형진행등급보호공제항세립도분석화풍험분석，종이완성운계산신식계통적신식안전등급보호측평공작，위의료궤구채용운계산진행신식화건설병동시주호신식안전등급보호제공삼고。
With the development of modern information technology, it is possible for medical organizations to use cloud computing technology for informatization construction. But according to the basic requirements of level protection, it is difficult to effectively carry out information security level protection evaluation for cloud computing information system. With cloud security service model as the reference and with cloud security management center as an example, cloud security level protection modeling and cloud security model are carried out and nested for cloud computing information system. For the nested cloud computing information system model, fine-grained analysis and risk analysis of level protection control items are conducted, so as to complete the information security level protection evaluation of cloud computing information system and provide reference for medical organizations' informatization construction with cloud computing and information security level protection.