Model of Cloud Computing Security and Compliance Capability for Classified Protection of Cybersecurity 2.0

doi:10.3969/j.issn.1671-1122.2019.11.001

Abstract

Abstract:

Based on the baseline for classified protection of cybersecurity, this paper identified the classified protection object, safety measures and security capabilities of cloud computing platform/system, building the model of cloud computing security and compliance capability for classified protection of cybersecurity 2.0. The security technology capability of cloud computing platform/system can be obtained by comparing with each evaluation item of classified protection of cybersecurity, and the vulnerability of cloud platform/system can be found, which is convenient for cloud service providers and cloud service customers to make corresponding security reinforcement to enhance the security protection ability of cloud computing platform/system resist risk.

Key words: classified protection of cybersecurity, cloud computing security, classified protection object, security capability, compliance model

CLC Number:

TP309

Zhenfeng ZHANG, Zhiwen ZHANG, Ruichao WANG. Model of Cloud Computing Security and Compliance Capability for Classified Protection of Cybersecurity 2.0[J]. Netinfo Security, 2019, 19(11): 1-7.

Figures/Tables 8

References 6

[1]	GB/T 22239-2019B/T 22239-2019. Information Security Technology-baseline for Classified Protection of Cybersecurity[S]. Beijing: Standards Press of China, 2019.
	GB/T 22239-2019B/T 22239-2019.信息安全技术—网络安全等级保护基本要求[S].北京:中国标准出版社,2019.
[2]	GB/T 22239-2019B/T 22239-2019. Information Security Technology-evaluation Requirement for Classified Protection of Cybersecurity[S]. Beijing: Standards Press of China, 2019.
	GB/T 28448-2019B/T 28448-2019.信息安全技术—网络安全等级保护测评要求[S].北京:中国标准出版社,2019.
[3]	CHEN Xuexiu, SHEN Xiyong, LI Qiuxiang.The Design of Cloud Comuputing Security System for Classified Protection of Cybersecurity[J]. Police Technology, 2017, 24(5): 7-11.
	陈雪秀,沈锡镛,李秋香.网络安全等级保护云计算安全防护体系设计[J].警察技术,2017,24(5):7-11.
[4]	WANG Wei.Cloud Comuputing Principle and Practice[M]. Beijing: Post & Telecom Press, 2018.
	王伟. 云计算原理与实践[M].北京:人民邮电出版社,2018.
[5]	CHEN Xingshu, GE Long.Cloud Security Principle and Practice[M]. Beijing: China Machine Press, 2017.
	陈兴蜀,葛龙.云安全原理与实践[M].北京:机械工业出版社,2017.
[6]	CHEN Exiang, PEI Junhao, Xiang Hui.The Study of Information Security System on Cloud Computing Environment[J]. Telecom Engineering Technics and Standardization, 2016, 29(12): 72-77.
	陈鄂湘,裴俊豪,项晖.云计算环境下信息安全体系架构研究[J].电信工程技术与标准化,2016,29(12):72-77.

服务模式			安全层面	测评对象
SaaS			安全计算环境	云产品（服务）
			安全计算环境	云产品（服务）数据
	PaaS		安全计算环境	虚拟机、数据库服务、中间件、容器、云应用开发平台、云产品（服务）等
		IaaS	安全计算环境	云操作系统、虚拟机监视器、云业务管理系统、云产品（服务）
				虚拟网络/安全设备、虚拟机镜像
				云产品（服务）服务器（虚拟机）、宿主机、终端、云管平台服务器
				网络设备、安全设备
				配置文件、鉴别信息、系统数据、审计数据、镜像文件、快照数据、个人信息
			安全通信网络	网络架构、物理链路、通信数据
			安全区域边界	物理网络边界、虚拟网络边界
			安全管理中心	云管理平台、云平台监控系统
			安全管理	安全相关人员、机房、介质及管理文档
			安全物理环境	物理机房、云计算基础设施部署的相关机房及基础设施

	保护对象1	保护对象2	……	保护对象m
安全措施1	√	N/A	√	N/A
安全措施2	√	√	N/A	√
……	N/A	√	√	√
安全措施n	√	N/A	√	√

[1]	Li MA. Research on the Quantitative Calculation Method Resulting from the Conclusions in the Assessment of Classified Protection of Cybersecurity [J]. Netinfo Security, 2020, 20(3): 1-8.
[2]	CHEN Guangyong, ZHU Guobang, FAN Chunling. Information Security Technology—Evaluation Requirement for Classified Protection of Cybersecurity(GB/T 28448-2019) Standard Interpretation [J]. Netinfo Security, 2019, 19(7): 1-8.
[3]	ZHAO Pu, CUI Wei, HAO Rong, YU Jia. A Secure Outsourcing Computation Scheme for El-Gamal Signature Generation [J]. 信息网络安全, 2019, 19(3): 81-86.
[4]	MA Li, ZHU Guobang, LU Lei. Baseline for Classified Protection of Cybersecurity (GB/T 22239-2019) Standard Interpretation [J]. 信息网络安全, 2019, 19(2): 77-84.
[5]	LV Congdong, HAN Zhen. A Security Model of Cloud Computing Based on IP Model [J]. 信息网络安全, 2018, 18(11): 27-32.
[6]	ZHANG Ru-hui, GUO Chun-mei, BI Xue-yao. Research on Security Policies of U.S Government Cloud [J]. 信息网络安全, 2015, 15(9): 257-261.
[7]	TAO Zheng, HU Jun,Wu Huan, Yang Jing. Research and Application of Cloud Computing Tenant Virtual Machine Active Trusted Verify Mechanism [J]. 信息网络安全, 2015, 15(11): 21-26.