信息网络安全 ›› 2022, Vol. 22 ›› Issue (12): 1-6.doi: 10.3969/j.issn.1671-1122.2022.12.001

• 等级保护 • 上一篇    下一篇

云计算环境下网络安全产品检测方法研究

陈妍(), 韦湘, 陆臻   

  1. 公安部第三研究所公安部信息安全产品检测中心,上海 200031
  • 收稿日期:2022-10-21 出版日期:2022-12-10 发布日期:2022-12-30
  • 通讯作者: 陈妍 E-mail:chenyan@mctc.org.cn
  • 作者简介:陈妍(1985—),女,浙江,副研究员,博士,主要研究方向为网络安全、云计算安全、网络安全态势感知、安全测评和认证|韦湘(1986—),男,湖南,助理研究员,硕士,主要研究方向为网络安全、云计算安全、安全测评和认证|陆臻(1976—),男,浙江,研究员,硕士,主要研究方向为网络安全

Research on Testing Approaches for Network Security Products in Cloud Computing Environment

CHEN Yan(), WEI Xiang, LU Zhen   

  1. Information Security Products Testing Center of Ministry of Public Security, The Third Research Institute of Ministry of Public Security, Shanghai 200031, China
  • Received:2022-10-21 Online:2022-12-10 Published:2022-12-30
  • Contact: CHEN Yan E-mail:chenyan@mctc.org.cn

摘要:

云计算在深入发展的同时,也面临着新的网络安全风险。防火墙、入侵防御系统等传统网络安全产品不能完全满足云计算环境下的安全防护需求,同时云计算环境下的网络安全防护理念、网络安全产品形态和类型也发生着巨大的变化,原本在实验室开展网络安全产品检测的模式和方法也随之发生了改变。文章通过分析信息系统在云计算环境下面临的安全风险,研究网络安全产品的发展变化趋势,并在此基础上提出一种云计算环境下网络安全产品的检测方法。该检测方法一方面能够为网络安全产品设计单位提供思路,另一方面也能够为检测机构开展云计算环境下的网络安全产品检测提供指导。

关键词: 云计算, 云安全, 网络安全产品, 检测方法

Abstract:

While cloud computing is in-depth development, it is also facing new network security risks. Traditional network security products such as firewall and intrusion prevention system cannot fully meet the security protection requirements in cloud computing environment. Meanwhile, the form and type of network security products in cloud computing environment are also undergoing great changes in the concept of network security protection. This has led to changes in the mode and method of network security product testing in laboratory. By analyzing the security risks faced in cloud computing environment, this paper found out the development trend of network security products, and on this basis, provided the detection methods of network security products in cloud computing environment. On one hand, it can provide ideas for the design departments of network security products, on the other hand, it can also provide guidance for the detection institutions to carry out the detection of network security products in cloud computing environment.

Key words: cloud computing, cloud security, network security products, testing approaches

中图分类号: