云安全研究进展及技术解决方案发展趋势

echnologyPanoramaTMSTTJune2011····························———。AbstractSecurityhasbecomeacriticalissueincloudcomputing.Thisarticledescribestheconceptandsignificationofcloudsecurity,andintroducesmajortopicsinresearchandtechnologysolutionsfrommainstreamITcompanieswithregardtocloudsecurity.Keywords:cloudcomputing,cloudingsecurity,solutionWeb2.0。、、。、、。、、、。、“”、、。1。、、50201166ODERNSCIENCE&TECHNOLOGYOFTELECOMMUNICATIONSM····························、、。。、、、、、、、、、、。。2CSACloudSecurityAlliance。CSA20091217———《》、1。CSA“”“”、。“”。20103———·、、·API·····CSACAMCommonAssuranceMetricBeyondtheCloud、、。2。2IaaS、PaaS、SaaS。、、、、。1IaaSIaaS1CSA、51echnologyPanoramaTMSTTJune2011····························2IaaSAPI。IaaS、、、、、、、、。2PaaSPaaSIaaSIaaS、、。PaaSPaaS。PaaS、、、、、。3SaaSSaaSIaaSPaaS、、。SaaS、、、、。4。CSA、、。。1WindowsAzure。Azure、Sydney、、、。·WindowsAzure、SMAPI、、SSL、、Win-dowsAzureStorage。·。RootOSGuestVMs、FabricControllers、、VLAN、。·。SSL。WindowsAzureSDK.NETWindowsAzure.NETCSPs·WindowsAzure。API。。。52201166ODERNSCIENCE&TECHNOLOGYOFTELECOMMUNICATIONSM·····························。FabricVM。VMVHDsDGuestOSEFCCpaging。/C:。WindowsAzure。。Fabric。·WindowsAzure。Win-dowsAzureFabric。WindowsAzure。·WindowsAzure。MAFCRootOSWindowsAzure。MDS。22010、。。。·。。·。。。。·。Google。。、、、、。IDC、、、、、、、、、、、。3。ElasticComputeCloudEC2。、、APIEC2EC2。EC2。·。。、、。53echnologyPanoramaTMSTTJune2011····························MSTT。·、。AWS。AWS。。LinuxSSHv2“sudo”。AWS。·EC2。deny-allEC2。、。。·Xen。AWS。。RAM。。AWS。AWS。4。ASPIT。IT、VPN、、。·、。·。·、。·。5“”。、、IT、。。[1]Microsoft.SecuringMicrosoft’sCloudInfrastructure,2009,5.[2]Google.SecurityWhitepaper:GoogleAppsMessagingandCollaborationProducts.2010.[3]AmazonWebServices:OverviewofSecurityProcesses.[4]CSA,SecurityGuidanceforCriticalAreasofFocusinCloudComputingV2.1.[5]CSA,TopThreatstoCloudComputingV1.0.[6]BiggestCloudChallenge:Secuity.