随着云计算服务的广泛使用,租户对云计算的安全性提出了越来越高的要求,云计算环境的动态性、随机性、复杂性和开放性使得原有安全方案难以适用,这也阻碍了云计算的进一步发展与应用.文中在分析云计算服务模式特点以及安全挑战的基础上,针对云计算安全架构、机制以及模型评价三个方面展开研究与综述.文中指出云计算的安全架构不仅需要可信根、可信链路以及上层可信服务的安全保证,还需要实现可管、可控的动态安全管理与可度量的安全评价优化过程.文中对已有云计算安全机制和模型评价方法进行了比较分析,最后提出了基于多队列多服务器的云计算安全建模与分析思路.
With the wide use of cloud computing services, tenants require higher and higher security assurance. The characteristics of cloud computing are dynamics, randomness, complexity and openness, which make the original security solutions difficult to be applied to the cloud environment, so this is a big obstacle to the development of cloud computing. We analyze the features and security challenges of cloud computing, and do a survey on security architecture, mechanism and model. We propose a security architecture which needs trusted root, trusted link and trusted high level services to be the security assurance, and it also needs controllable, monitorable security management and measurable process of security optimization. We analyze and compare the present research results of security model and mechanism in the cloud. At last, we propose a security modeling method based on the multiqueue multiserver model.