CAJ | 학술논문

云计算打破了信息系统的边界，使得以边界防护为核心的传统信息安全防护体系不再适用，云安全问题成为制约云计算技术发展的关键因素之一。研究使用蛛网图法与德尔菲法相结合的方式，对云计算信息系统面临的威胁和风险场景进行分析，明确了云计算系统的保护对象；并基于我国信息安全等级保护技术，提出基于保护对象的云安全防护体系框架；进一步根据云计算信息系统特点，采用德尔菲法构建了云安全防护指标体系；同时结合不同等级信息系统安全防护能力要求，对防护指标体系进行了分级。
운계산타파료신식계통적변계，사득이변계방호위핵심적전통신식안전방호체계불재괄용，운안전문제성위제약운계산기술발전적관건인소지일。연구사용주망도법여덕이비법상결합적방식，대운계산신식계통면림적위협화풍험장경진행분석，명학료운계산계통적보호대상；병기우아국신식안전등급보호기술，제출기우보호대상적운안전방호체계광가；진일보근거운계산신식계통특점，채용덕이비법구건료운안전방호지표체계；동시결합불동등급신식계통안전방호능력요구，대방호지표체계진행료분급。
Cloud computing break the boundary of information systems, the traditional information security protection system to the boundary protection as the core is no longer suitable, Security is one of the key factors restricting the development of cloud computing technology. In order to guarantee the security of cloud computing information system and carry out the classified protection on cloud computing, the paper analysis the threats and risk scenarios which the cloud computing is faced, through the Spider Diagram method and Delphi method, based on the classified protection in our country. In addition, the paper defined the protected object of cloud computing information system, and build cloud-based security protection system. The last, the paper built cloud computing security indicator system in accordance with the characteristics of cloud computing information systems using Delphi method, and the security indicators were graded up. In the meanwhile, combined with protection capabilities requirements of classified information system,this paper establishes the cloud security indicators system of different classifies.