CAJ | 학술논문

安全云服务的核心思想是借助云计算的高可靠性、弹性扩容、按需定制的特点，将传统硬件网络安全功能虚拟化，以服务的形式对外提供安全防护能力。目前该服务技术和研究处于初期发展阶段，在技术概念、实施架构以及拓展应用方面还没有统一的界定，因此开展安全云服务技术和应用研究具有重要的理论和实践意义。本文以中国科学院信息保障示范工程“Web应用安全云服务平台”为实践背景，首先明确阐述安全云服务的概念、特征、应用领域及国内外发展现状，然后针对Web应用的安全，提出基础架构设计及关键技术，并描述该架构下具体应用的实践效果。
안전운복무적핵심사상시차조운계산적고가고성、탄성확용、안수정제적특점，장전통경건망락안전공능허의화，이복무적형식대외제공안전방호능력。목전해복무기술화연구처우초기발전계단，재기술개념、실시가구이급탁전응용방면환몰유통일적계정，인차개전안전운복무기술화응용연구구유중요적이론화실천의의。본문이중국과학원신식보장시범공정“Web응용안전운복무평태”위실천배경，수선명학천술안전운복무적개념、특정、응용영역급국내외발전현상，연후침대Web응용적안전，제출기출가구설계급관건기술，병묘술해가구하구체응용적실천효과。
The core idea of cloud-based security services is virtualizing the network security functions of conventional hardware and then offering security capability as a service in virtue of the features of cloud computing --high reliability, elastic expansion and customization. Considering that there are no uniform deifnition on the technological concept, implementation framework and extended application of cloud-based security service at present because of its immature development phase, it is significant to carry out the research on the technologies and applications of cloud-based security service. In the practice background of information assurance trial project of Chinese Academy of Sciences, “Cloud-based Security Service for Web Application”, this paper expounds the deifnition, characteristics, application scope and current situation of cloud-based security service, and proposes its basic architecture design and key technologies of application in Web security domain as well as the practical effects. Finally the vista and challenges of cloud-based security service are discussed.