一种可量化的云计算平台安全评估模型

提出一种基于一致的API访问不同云的可量化安全评估模型。评估系统包括安全扫描引擎模块、安全恢复引擎模块、安全量化评估模块、可视化显示模块等。介绍了安全评估过程及修复过程,并基于G-Cloud平台进行了仿真验证。结果显示,所提模型可以通过可视化图形显示一个或多个云的动态安全扫描评分,能够引导用电用户修改配置、改进操作、修复漏洞,提高云用电资源的安全性。

A quantifiable cloud computing platform security evaluation model

A quantifiable security assessment model for accessing different clouds based on a consistent API was proposed.The evaluation system includes a security scan engine module,a security recovery engine module,a security quantitative evaluation module,and a visual display module.The progress of safety assessment and remediation was proposed,and simulation verification was carried out based on the G-Cloud platform.The results show that the proposed model can display the dynamic security scan scores of one or more clouds through visual graphics,which can guide electricity users to modify configurations,improve operations,repair vulnerabilities,and improve the security of cloud electricity resources.