一种基于云的 Web 应用安全服务

安全云服务的核心思想是借助云计算的高可靠性、弹性扩容、按需定制的特点,将传统硬件网络安全功能虚拟化,以服务的形式对外提供安全防护能力。目前该服务技术和研究处于初期发展阶段,在技术概念、实施架构以及拓展应用方面还没有统一的界定,因此开展安全云服务技术和应用研究具有重要的理论和实践意义。本文以中国科学院信息保障示范工程“Web应用安全云服务平台”为实践背景,首先明确阐述安全云服务的概念、特征、应用领域及国内外发展现状,然后针对Web应用的安全,提出基础架构设计及关键技术,并描述该架构下具体应用的实践效果。

A Cloud-Based Security Service for Web Applications

The core idea of cloud-based security services is virtualizing the network security functions of conventional hardware and then offering security capability as a service in virtue of the features of cloud computing -- high reliability, elastic expansion and customization. Considering that there are no uniform definition on the technological concept, implementation framework and extended application of cloud-based security service at present because of its immature development phase, it is significant to carry out the research on the technologies and applications of cloud-based security service. In the practice background of information assurance trial project of Chinese Academy of Sciences, “Cloud-based Security Service for Web Application”, this paper expounds the definition, characteristics, application scope and current situation of cloud-based security service, and proposes its basic architecture design and key technologies of application in Web security domain as well as the practical effects. Finally the vista and challenges of cloud-based security service are discussed.