本文選題：云計算 + 信任模型　； 參考：《中國礦業(yè)大學(xué)》2014年碩士論文

【摘要】：云計算作為一種新型的計算模式，能夠為用戶提供強大的虛擬化、可擴展性的網(wǎng)絡(luò)服務(wù)資源，但同時也面臨著嚴(yán)峻的安全挑戰(zhàn)。訪問控制技術(shù)是保障云計算安全的重要措施，然而直接將傳統(tǒng)的訪問控制模型應(yīng)用到云計算環(huán)境并不能有效地解決云計算開放環(huán)境所面臨的不確定性及脆弱性問題。在云計算環(huán)境中，只有同時確保云計算環(huán)境內(nèi)部與外部的可信性，才能夠有效保證云用戶與云服務(wù)端交互過程中雙方的安全性。因此，本文重點研究云用戶與云服務(wù)端之間的相互信任關(guān)系，并在此基礎(chǔ)上實施云計算環(huán)境中基于行為互信任的動態(tài)角色訪問控制。詳細(xì)的研究內(nèi)容總結(jié)如下： （1）提出了一個基于信任證據(jù)-信任屬性-信任值三級結(jié)構(gòu)的用戶行為信任層次模型。在該模型中，首先搜集用戶的歷史行為信息作為原始信任證據(jù)，，然后對原始信任證據(jù)進(jìn)行劃分，按照其屬性特征劃分到不同的行為信任屬性集中，最后根據(jù)用戶的各個行為信任屬性及其權(quán)重計算得出用戶行為信任評估值。 （2）設(shè)計了一個基于蟻群優(yōu)化算法的云服務(wù)端信任評估模型。云計算中服務(wù)節(jié)點的信任評估應(yīng)充分考慮用戶對云服務(wù)端的信任關(guān)系隨著交互次數(shù)以及時間的變化關(guān)系，該模型利用蟻群優(yōu)化算法引入信任信息素作為判斷服務(wù)節(jié)點的信任依據(jù)，在云計算環(huán)境中建立了一種動態(tài)且隨時間和交互事件變化的節(jié)點行為信任模型，從而計算云服務(wù)節(jié)點的信任度，為用戶推薦更加可信的云服務(wù)節(jié)點。 （3）提出了一種云計算環(huán)境下基于行為互信任的動態(tài)角色訪問控制方法（簡稱MTBAC）。本文分別從模型的定義、框架結(jié)構(gòu)、算法流程以及多域授權(quán)決策機制等方面對MTBAC進(jìn)行了詳盡的定義與介紹。MTBAC充分結(jié)合RBAC模型的優(yōu)勢，并綜合考慮云計算環(huán)境動態(tài)性、多域性的特點，在用戶與云服務(wù)端相互信任的基礎(chǔ)上，實施云計算本地域和跨域的動態(tài)角色訪問控制策略。 （4）設(shè)計兩組仿真實驗對MTBAC的性能進(jìn)行比較和分析。通過與其他訪問控制方法對比，來驗證基于信任的訪問控制方法在云計算環(huán)境中的有效性和適用性；通過云計算用戶與云服務(wù)端雙向信任與單向信任的對比實驗，分析基于雙向信任的訪問控制的相對優(yōu)勢。
[Abstract]:Cloud computing as a new computing model can provide users with strong virtualization and scalability of network services resources, but also face severe security challenges. Access control technology is an important measure to ensure cloud computing security. However, the application of traditional access control model to cloud computing environment can not effectively solve the uncertainty and vulnerability of cloud computing open environment. In the cloud computing environment, only by ensuring the internal and external credibility of the cloud computing environment, can the security of both the cloud users and the cloud server can be effectively guaranteed. Therefore, this paper focuses on the relationship of mutual trust between cloud users and cloud service, and implements the dynamic role access control based on behavioral mutual trust in cloud computing environment. The detailed study is summarized as follows: 1) A trust hierarchy model of user behavior based on the three-level structure of trust evidence-trust attribute and trust value is proposed. In this model, the historical behavior information of the user is collected as the original trust evidence, and then the original trust evidence is divided into different behavioral trust attribute sets according to its attribute characteristics. Finally, the evaluation value of user behavior trust is obtained according to each behavior trust attribute and its weight. A cloud server-side trust evaluation model based on ant colony optimization algorithm is designed. The trust evaluation of service nodes in cloud computing should take into account the relationship between users' trust in the cloud service side and the number of interactions and time. In this model, the trust pheromone is introduced into the ant colony optimization algorithm as the basis for judging the trust of the service node, and a dynamic and time-dependent trust model of the node behavior is established in the cloud computing environment. The trust degree of the cloud service node is calculated, and the more trusted cloud service node is recommended to the user. In this paper, we propose a dynamic role access control method based on behavioral mutual trust (MTBACU) in cloud computing environment. This paper gives a detailed definition of MTBAC from the definition of model, framework structure, algorithm flow and multi-domain authorization decision mechanism, etc., which combines the advantages of RBAC model, and considers the dynamic of cloud computing environment. On the basis of mutual trust between user and cloud server, multi-domain dynamic role access control strategy of cloud computing is implemented. Design two groups of simulation experiments to compare and analyze the performance of MTBAC. Through comparing with other access control methods to verify the validity and applicability of the trust-based access control method in cloud computing environment, through the cloud computing users and cloud server two-way trust and one-way trust comparison experiment, The comparative advantages of bidirectional trust based access control are analyzed.
【學(xué)位授予單位】：中國礦業(yè)大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 ;Trusted dynamic level scheduling based on Bayes trust model[J];Science in China(Series F:Information Sciences);2007年03期

2 林闖;田立勤;王元卓;;可信網(wǎng)絡(luò)中用戶行為可信的研究[J];計算機研究與發(fā)展;2008年12期

3 田立勤;冀鐵果;林闖;楊揚;;一種基于用戶行為信任的動態(tài)角色訪問控制[J];計算機工程與應(yīng)用;2008年19期

4 郭樹凱;田立勤;沈?qū)W利;;FAHP在用戶行為信任評價中的研究[J];計算機工程與應(yīng)用;2011年12期

5 文珠穆;李瑞軒;盧正鼎;馮本明;唐卓;;多域環(huán)境中基于蟻群算法的抗攻擊時態(tài)信任模型[J];計算機科學(xué);2009年07期

6 吳慧;于炯;于斐然;;云計算環(huán)境下基于信任模型的動態(tài)級訪問控制[J];計算機工程與應(yīng)用;2012年23期

7 田立勤;林闖;;行為證據(jù)不全對無線傳感器網(wǎng)絡(luò)信任評估的影響與性質(zhì)分析[J];計算機科學(xué);2010年10期

8 呂艷霞;田立勤;孫珊珊;;云計算環(huán)境下基于FANP的用戶行為的可信評估與控制分析[J];計算機科學(xué);2013年01期

9 李小勇;桂小林;;大規(guī)模分布式環(huán)境下動態(tài)信任模型研究[J];軟件學(xué)報;2007年06期

10 胡建理;周斌;吳泉源;;P2P網(wǎng)絡(luò)中具有激勵機制的信任管理研究[J];通信學(xué)報;2011年05期

相關(guān)博士學(xué)位論文 前1條

1 文珠穆;多域互操作環(huán)境中的動態(tài)信任與訪問控制研究[D];華中科技大學(xué);2008年

本文編號：1802562