本文選題：云計算 + 基于角色的訪問控制模型��； 參考：《華東理工大學(xué)》2014年碩士論文

【摘要】：隨著時代的不斷進步以及計算機科學(xué)技術(shù)的飛速發(fā)展,信息全球化的進程不斷加快,云計算在人們的日常生活中得到了越來越多的應(yīng)用。用戶既不用了解“云”的具體細節(jié),也不需要擁有相應(yīng)的專業(yè)知識,便可以享有云計算提供的服務(wù)和便利。然而,云計算技術(shù)在現(xiàn)階段存在著許多的風(fēng)險問題,比如說特權(quán)用戶的接入問題,是否可審查性,數(shù)據(jù)的地理和邏輯位置,數(shù)據(jù)的隔離和恢復(fù),是否支持調(diào)查以及數(shù)據(jù)的長期生存性等。隨著云計算的不斷推廣和應(yīng)用,它的安全問題不斷暴露出來,現(xiàn)如今,云計算的安全問題已成為制約其發(fā)展的首要原因,數(shù)據(jù)安全和隱私保護是云計算技術(shù)發(fā)展不能逃避的核心問題。 有關(guān)云計算安全性問題的研究主要集中在身份認證,訪問控制模型,虛擬安全技術(shù),數(shù)據(jù)加密和隱私保護等方面。本文的主要工作和研究成果包括： (1)對當前幾種傳統(tǒng)的訪問控制模型進行比較,總結(jié)和分析國內(nèi)外對于云環(huán)境下數(shù)據(jù)保護和訪問控制模型的研究成果,得出基于角色的訪問控制(RBAC)模型比較適合云環(huán)境的虛擬化和可伸縮性的特點。 (2)在云環(huán)境下,對RBAC進行改進,引入網(wǎng)絡(luò)環(huán)境和時態(tài)等約束條件對訪問控制策略進行進一步限制,提出一種新的云環(huán)境下的訪問控制(NT-RBAC)模型,在存儲數(shù)據(jù)的時候,針對用戶的敏感數(shù)據(jù)將利用加密算法進行加密之后存儲,以便能適應(yīng)云計算的特點,改進的NT-RBAC模型比之于普通的RBAC模型使權(quán)限的控制更加細粒度,進一步增強了云環(huán)境下數(shù)據(jù)和資源的安全性。 (3)利用Google提供的GAE云平臺,將NT-RBAC模型應(yīng)用于具體實例之中,通過對資源實行訪問控制來保證資源的安全性。
[Abstract]:With the continuous progress of the times and the rapid development of computer science and technology, the process of information globalization continues to accelerate, cloud computing in people's daily life has been more and more applications. Users can enjoy the services and facilities provided by cloud computing without knowing the details of the cloud or having the corresponding expertise. However, cloud computing technology has many risks at this stage, such as access of privileged users, censability, geographical and logical location of data, isolation and recovery of data. Whether to support the survey and the long-term viability of the data. With the continuous promotion and application of cloud computing, its security problems have been exposed constantly. Nowadays, the security problems of cloud computing have become the primary reason restricting its development. Data security and privacy protection are the core problems of cloud computing technology development. The research on cloud computing security mainly focuses on identity authentication, access control model, virtual security technology, data encryption and privacy protection. The main work and research results of this paper include: 1) comparing several traditional access control models, summarizing and analyzing the research results of data protection and access control models in cloud environment at home and abroad. The role-based access control (RBAC) model is suitable for cloud virtualization and scalability. 2) in the cloud environment, the RBAC is improved, and the network environment and temporal constraints are introduced to further restrict the access control policy. A new access control NT-RBAC model is proposed to store data in the cloud environment. Sensitive data for users will be encrypted and stored in order to adapt to the characteristics of cloud computing. The improved NT-RBAC model makes the control of permissions finer granularity than that of the ordinary RBAC model. Further enhance the security of data and resources in the cloud environment. Using the GAE cloud platform provided by Google, the NT-RBAC model is applied to the concrete example, and the security of the resource is ensured by the access control of the resource.
【學(xué)位授予單位】：華東理工大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.08

【參考文獻】

相關(guān)期刊論文 前10條

1 喬穎,須德,戴國忠;一種基于角色訪問控制(RBAC)的新模型及其實現(xiàn)機制[J];計算機研究與發(fā)展;2000年01期

2 夏魯寧;荊繼武;;一種基于層次命名空間的RBAC管理模型[J];計算機研究與發(fā)展;2007年12期

3 張大朋;蔡克;張敏;徐震;;云計算數(shù)據(jù)安全支撐平臺架構(gòu)研究[J];計算機研究與發(fā)展;2011年S3期

4 陳全;鄧倩妮;;云計算及其關(guān)鍵技術(shù)[J];計算機應(yīng)用;2009年09期

5 沈海波,洪帆;訪問控制模型研究綜述[J];計算機應(yīng)用研究;2005年06期

6 張建勛;古志民;鄭超;;云計算研究進展綜述[J];計算機應(yīng)用研究;2010年02期

7 趙明斌;姚志強;;基于RBAC的云計算訪問控制模型[J];計算機應(yīng)用;2012年S2期

8 馮登國;張敏;張妍;徐震;;云計算安全研究[J];軟件學(xué)報;2011年01期

9 陳龍;肖敏;;云計算安全:挑戰(zhàn)與策略[J];數(shù)字通信;2010年03期

10 陳丹偉;黃秀麗;任勛益;;云計算及安全分析[J];計算機技術(shù)與發(fā)展;2010年02期

，

本文編號：1885886