摘要
简述了智慧政务云的重要性,云计算面临的安全问题与挑战,智慧政务云信息安全的重要性与必要性。依据国家电子政务信息安全与信息系统安全等级保护相关规范,确定了智慧政务云信息安全防护等级,设计了信息安全防护体系,阐述了安全域划分的原则与方法,并进行了划分。根据云计算的服务模式,分别从IaaS层、PaaS层、Saa层分析了存在的安全风险,提出了安全防护方法、实现技术、注意事项。构筑智慧政务云全方位的信息安全防护体系,需要从技术、管理、服务三者相结合才能实现。
This paper briefly describes the infosec importance of smart government cloud, the security prob- lems and challenges of cloud computing, the infosec importance and necessity of smart government cloud. In accordance with the related specifications of e-government security and classified protection of informa- tion system, the infosec protection classification of smart government cloud is established, the infosec pro- tection architecture designed, and the division principle and method of security domain expounded. Based on cloud computing service mode, the existing security risks are analyzed respectively from IaaS, PaaS and SaaS , and the methods implementation technology and the concerned matters of security protection also presented. Only in combination of technology, management and service, can a comprehensive infosec pro- tection architecture of smart government cloud be realized.
出处
《通信技术》
2016年第4期462-468,共7页
Communications Technology
关键词
云计算
智慧政务
信息安全等级防护
安全域
cloud computing
smart government
InfoSec classified protection
security domain
