RESEARCH ON SECURITY EVALUATION OF CLOUD COMPUTING BASED ON ATTACK GRAPH

摘要：

　　Cloud computing is becoming more and more popular and its security is arising as well.In order to solve security issues and take security evaluation in cloud computing,its corresponding hierarchical security design model is introduced and an approach of security evaluation based on attack graph is proposed in cloud computing environment.Firstly,network threat model and automatic methods are presented to get information for generating attack graph automatically.By using symbolic model checking algorithm,attack graph is generated and visualized.Then,by combining the characteristics of Markov Chain with attack graph,two security evaluation metrics are proposed in cloud computing.They can be used for security evaluation,security hardness and give security suggestions in cloud computing.

关键词： cloud security attack graph security evaluation Markov Chain cloud computing

作者: Yexia Cheng Yuejin Du Junfeng Xu Chunyang Yuan Zhi Xue

作者单位: School of Information Security Engineering,Shanghai Jiaotong University,Shanghai 200240,China National Computer Network Emergency Response Technical Team/Coordination Center of China,Beijing 100

会议类型: 国际会议

会议名称: 2012 2nd IEEE International Conference on Cloud Computing and Intelligence Systems (2012年第2届IEEE云计算与智能系统国际会议(IEEE CCIS2012))

会议地点: 杭州

会议语种:英文

页码: 591-597

在线出版日期: 2012-10-30（万方平台首次上网日期，不代表论文的发表时间）