基于Xen虚拟化技术的弹性云架构

云计算通过虚拟化技术为用户提供基础架构即服务(IaaS),IaaS平台上应用和服务的负载是动态变化的,这就导致其对虚拟资源的需求也是动态变化的.因此收集和分析云平台内部虚拟资源的占用量,根据需求对其进行弹性调度就成为提高整个云计算平台服务性能和资源利用率的关键.从负载均衡和降低云平台使用者成本的角度出发,根据云平台内部...     

云计算环境下基于用户行为特征的资源分配策略

资源分配策略是云计算研究领域中的一项重要研究点,研究人员提出了多种资源共享与分配策略,然而很少有工作关注不同云计算用户群体的行为习惯对资源分配策略的影响.提出的基于用户行为特征的资源分配策略就是通过统计用户工作习惯与任务完成时间期望值的变化规律,建立用户行为特征信息表,从而预测出不同时间片内用户的任务提交规律以及用户期望完成时间,动态调整云计算系统的资源分配策略,使得系统在满足用户预期任务完成时间的前提下实现任务并发最大化,提升单位资源的用户满意度.HUTAF(Huawei unitfied test automation framework)云测试平台是华为公司自行研发的云测试平台,并基于该平台开展各种策略下的资源利用率与用户满意度实验.实验结果表明,该策略提升了整个系统在满足用户期望完成时间的前提下的总任务并发数,有效降低了IaaS供应商的运营成本.     

Enhancing Federated Cloud Management with an Integrated Service Monitoring Approach

Cloud Computing enables the construction and the provisioning of virtualized service-based applications in a simple and cost effective outsourcing to dynamic service environments. Cloud Federations envisage a distributed, heterogeneous environment consisting of various cloud infrastructures by aggregating different IaaS provider capabilities coming from both the commercial and the academic area. In this paper, we introduce a federated cloud management solution that operates the federation through utilizing cloud-brokers for various IaaS providers. In order to enable an enhanced provider selection and inter-cloud service executions, an integrated monitoring approach is proposed which is capable of measuring the availability and reliability of the provisioned services in different providers. To this end, a minimal metric monitoring service has been designed and used together with a service monitoring solution to measure cloud performance. The transparent and cost effective operation on commercial clouds and the capability to simultaneously monitor both private and public clouds were the major design goals of this integrated cloud monitoring approach. Finally, the evaluation of our proposed solution is presented on different private IaaS systems participating in federations.     

State-of-the-art research study for green cloud computing

Although cloud computing has rapidly emerged as a widely accepted computing paradigm, the research on cloud computing is still at an early stage. Cloud computing suffers from different challenging issues related to security, software frameworks, quality of service, standardization, and power consumption. Efficient energy management is one of the most challenging research issues. The core services in cloud computing system are the SaaS (Software as a Service), PaaS (Platform as a Service), and IaaS (Infrastructure as a Service). In this paper, we study state-of-the-art techniques and research related to power saving in the IaaS of a cloud computing system, which consumes a huge part of total energy in a cloud computing system. At the end, some feasible solutions for building green cloud computing are proposed. Our aim is to provide a better understanding of the design challenges of energy management in the IaaS of a cloud computing system.     

云计算研究

云计算模式是在基础设施即服务（IaaS）、平台即服务（PaaS）、软件即服务（SaaS）、分布式计算、并行计算和网格计算等概念演进并产生的结果。云计算模式是一种全新的计算应用模式,将会成为人们获取服务的主导方式。本文首先介绍云计算在业界中的概念,接着分析云计算和相关计算,最后关于云计算发展的前景进行展望。     

云计算环境下并行分布式数据挖掘平台研究

网络技术在带给人们大量信息的同时,也极大地增加了人们从海量数据中发现有用知识的难度,而解决这一问题的努力促进了数据挖掘技术的出现和快速发展。云计算是能够提供动态资源池、虚拟化和高可用性的计算平台,云计算开发平台可被用来开发高性能应用程序。研究云计算环境下并行分布式数据挖掘平台的3个层次,依下而上为分布式计算层,知识发现平台层以及用户应用层。     

云计算下西部地区中小企业信息服务系统的分析

首先,介绍了西部地区中小企业信息化现状分析、企业云计算的发展的需求与动因、云计算特征与分类、云服务模式,其次,阐述了西部地区中小企业云信息服务平台的分析,涉及云信息服务系统体系架构、云平台软硬件资源分析、云基础设施管理平台数据关联访问及促进西部地区中小企业云电子商务应用等.     

云计算数据服务主动安全防御系统探讨

随着云计算数据服务的快速发展和应用,大大地改变了人们的工作、学习和生活模式。云计算数据服务带来极大便利的同时,也给人们带来了潜在的威胁,因此需要构建网络安全主动防御系统,提高网络安全性能。文章详细地分析了云计算数据服务面临的安全威胁,阐述了云计算服务平台主动安全防御系统及采用的技术,提高了云计算数据服务平台的安全性能。     

Rafhyc: an Architecture for Constructing Resilient Services on Federated Hybrid Clouds

Federated hybrid clouds is a model of service access and delivery to community cloud infrastructures. This model opens an opportunity window to allow the integration of the enhanced science (eScience) with the Cloud paradigm. The eScience is computationally intensive science that is carried out in highly distributed computing infrastructures. Nowadays, the eScience big issue on Cloud Computing is how to leverage on-demand computing in scientific research. This requires innovation at multiple levels, from architectural design to software platforms. This paper characterizes the requirements of a federated hybrid cloud model of Infrastructure as a Service (IaaS) to provide eScience. Additionally, an architecture is defined for constructing Platform as a Service (PaaS) and Software as a Service (SaaS) in a resilient manner over federated resources. This architecture is named Rafhyc (for Resilient Architecture of Federated HYbrid Clouds). This paper also describes a prototype implementation of the Rafhyc architecture, which integrates an interoperable community middleware, named DIRAC, with federated hybrid clouds. In this way DIRAC is providing SaaS for scientific computing purposes, demonstrating that Rafhyc architecture can bring together eScience and federated hybrid clouds.     

云计算中的数据安全及规避策略

云计算是当今信息技术领域的热门话题,被喻为当前信息领域正在发生的工业化革命。随着云计算的逐步普及,其面临的数据安全问题成为用户首要关注的问题。分析了当前云计算面临的数据安全问题,提出了规避策略,为用户选择云计算平台、厂商提供技术选型参考。     

国内云计算研究现状与未来

云计算一直是学术界和企业界研究的热点,文章基于三大中文数据库提供的数据,从云计算研究现状以及基础设施即服务(IaaS)、平台即服务(PaaS)、软件即服务(SaaS)三方面研究现状对国内云计算的具体研究状况作出了统计、比较与分析,并对未来的发展做了具体的展望。希望通过一系列的研究与总结,对国内云计算的发展研究起到积极的推动作用。     

基于NGPD的PaaS平台研究与实现*

云计算是一种将计算和存储任务分配到由大量计算机构成的云中的计算模式。云计算提供三种类型的服务：基础设施即服务（IaaS）、平台即服务(PaaS)和软件即服务(SaaS)。虽然PaaS在云系统中起到了关键的作用,但是目前的PaaS平台存在着服务协同性低、资源匮乏、用户界面不友好等问题。本文设计并实现了基于准则调控和策略驱动的自治式服务协同模型（NGPD）的PaaS平台,其利用自治计算元素实现了自治式服务协同,这是尝试解决现有PaaS平台支持提供云平台型服务不足的探索性研究,为云用户提供了更加高效和经济的平台开发环境。     

云视频会议平台研究

为解决云计算环境下视频会议的开发与应用,提出了包括基础设施即服务IaaS、平台即服务PaaS和软件即服务SaaS的云视频会议平台框架,分析了云视频会议的服务功能和会议流程,并建立了云视频会议平台系统。平台的应用能够促进信息的实时沟通,在降低企业开发、维护成本的同时,提升企业的决策能力。     

Private cloud for collaboration and e-Learning services: from IaaS to SaaS

The idea behind cloud computing is to deliver Infrastructure-, Platform- and Software-as-a-Service (IaaS, PaaS and SaaS) over the Internet on an easy pay-per-use business model. The Hochschule Furtwangen University (HFU) is running their own private cloud infrastructure, called Cloud Infrastructure and Application CloudIA. The targeted users of the CloudIA project are HFU staff and students running e-Learning applications, and external people for collaboration purposes. Therefore, in this paper, we introduce our work in building a private cloud. More specifically, this paper shows how our cloud offerings in each of the cloud service models, i.e. IaaS, PaaS and SaaS, address the requirements and needs of e-Learning and collaboration in an university environment.     

IaaS云安全研究综述

目前,在新一代大规模互联网迅猛发展的背景下,产生的数据量也随之持续增长,这就导致用户的本地设备难以满足海量数据的存储和计算需求。与此同时,云计算作为一种经济高效且灵活的模式,具有易于使用、随用随付、不受时间和空间限制的优势,彻底改变了传统IT基础设施的提供和支付方式,可以有效解决无限增长的海量信息存储和计算问题。因此,在没有昂贵的存储成本和计算资源消耗的情况下,资源有限的用户可以采用云服务提供商（CloudServiceProvider,CSP）为用户提供所期望的服务。其中,基础设施即服务（Infrastructure as a Service, IaaS）作为云计算的三种服务类型之一,将虚拟化、分布式计算和网络存储等技术结合,可以在互联网上提供和租用计算基础设施资源服务（如计算、存储和网络）。故云计算依靠Iaa S层提供的计算基础设施资源,使用户不再需要购买额外设备,从而大大降低使用成本,同时也为上层服务奠定基础。然而,随着云计算服务的不断发展,基于IaaS的安全问题引起人们的关注。为了系统了解Iaa S的安全研究进展和现状,本文对IaaS的安全问题以及学术界和工业界的解决方案进行了...     

基于OpenStack的云计算laaS管理平台研究

分析当前主流的开源云计算IaaS管理平台,对各个平台的优缺点进行比较,研究基于OpenStack的云计算管理平台架构,结合运营商在云计算IaaS管理领域的相关经验,指出运营商采用OpenStack作为laaS管理平台的原则和方向。     

MASHED: Security and privacy-aware mutual authentication scheme for heterogeneous and distributed mobile cloud computing services

ABSTRACT

Rapid development in mobile devices and cloud computing technologies has increased the number of mobile services from different vendors on the cloud platform. However, users of these services are facing different security and access control challenges due to the nonexistence of security solutions capable of providing secure access to these services, which are from different vendors, using a single key. An effective security solution for heterogeneous Mobile Cloud Computing (MCC) services should be able to guarantee confidentiality and integrity through single key-based authentication scheme. Meanwhile, a few of the existing authentication schemes for MCC services require different keys to access different services from different vendors on a cloud platform, thus increases complexity and overhead incurred through generation and storage of different keys for different services.

In this paper, an efficient mutual authentication scheme for accessing heterogeneous MCC services is proposed. The proposed scheme combines the user’s voice signature with cryptography operations to evolve efficient mutual authentication scheme devoid of key escrow problem and allows authorized users to use single key to access the heterogeneous MCC services at a reduced cost.     

云基础设施下的体系结构、挑战与机遇

在工业界和学术界的大力推动下,云计算作为一种新的服务模式,大致可分为将软件作为服务(Software as a service),将平台作为服务(Platform as a service),和将基础设施作为服务(Infrastructure as a Service).现有的绝大部分关于云计算的研究和讨论都集中在前两种服务.本文试图探讨云基础设施的体系结构及其面临的挑战和机遇.从冯.诺伊曼体系结构开始,计算机系统结构的研究基本上就可简单归类于三个问题:计算、存储与传输,三者相互影响.我们认为云基础设施也不例外.本文探讨了云计算的特点和优势,并从云体系结构的角度,探讨了云基础设施下的云计算、云存储和云传输所面临的挑战及其带来的可能的各种技术革命.     

Technologies for Web and cloud service interaction: a survey

The evolution of Web and service technologies has led to a wide landscape of standards and protocols for interaction between loosely coupled software components. Examples range from Web applications, mashups, apps, and mobile devices to enterprise-grade services. Cloud computing is the industrialization of service provision and delivery, where Web and enterprise services are converging on a technological level. The article discusses this technological landscape and, in particular, current trends with respect to cloud computing. The survey focuses on the communication aspect of interaction by reviewing languages, protocols, and architectures that drive today’s standards and software implementations applicable in clouds. Technological advances will affect both client side and service side. There is a trend toward multiplexing, multihoming, and encryption in upcoming transport mechanisms, especially for architectures, where a client simultaneously sends a large number of requests to some service. Furthermore, there are emerging client-to-client communication capabilities in Web clients that could establish a foundation for upcoming Web-based messaging architectures.     

基于云计算的网站群架构及安全性设计与实践

该文以政府机构网站群建设为对象,搭建了网站群云计算构建的实验与应用平台,阐述了应用云计算支撑政府机构网站群架构及其安全性设计和应用方法i,该文主要从两方面满足网站群应用需求,一方面,以IaaS（Infrastructure as a Service）的模式搭建支撑网站群应用的云计算基础平台,以SaaS（Software as a Service）的模式搭建网站群内容管理云计算平台,另一方面,通过构建公共云和私有云环境,保障网站群系统安全和信息安全。以云计算为平台,向用户提供一站式的网站群建设、运行、监控服务,将成为政府网站群建设的新的方向．