【摘要】：云存儲隨時(shí)隨地訪問、一鍵分享與協(xié)作、多平臺隨時(shí)同步、無限空間、永久免費(fèi)等優(yōu)點(diǎn)使得新注冊用戶數(shù)一直都保持兩位數(shù)的增長態(tài)勢，云存儲市場前景非常廣闊。但是由于云存儲服務(wù)還不太成熟、安全架構(gòu)尚不健全，與傳統(tǒng)的將敏感數(shù)據(jù)保存在本地相比，，用戶存在云端的敏感數(shù)據(jù)將面臨很多無法控制的風(fēng)險(xiǎn)。最近幾年云存儲“泄密事件”非常頻繁，安全隱患已阻礙云存儲的大規(guī)模普及，如何保護(hù)用戶敏感數(shù)據(jù)的機(jī)密性已成為云存儲亟需解決的問題。 訪問控制技術(shù)是保證云存儲用戶敏感數(shù)據(jù)安全的重要技術(shù)，基于屬性的訪問控制是在分布式應(yīng)用的發(fā)展中被提出的一種新型訪問控制模型，用于解決分布式應(yīng)用下的訪問控制問題，因而先天對云存儲有更好的適應(yīng)性。但隨著系統(tǒng)在線用戶和資源數(shù)量的不斷增加，訪問控制策略的結(jié)構(gòu)越來越復(fù)雜，策略評估效率已成為制約系統(tǒng)可用性的關(guān)鍵瓶頸，亟需一種高效的評估引擎對海量用戶的請求及時(shí)做出正確授權(quán)。 為提高分布式環(huán)境下策略評估引擎的效率，本文提出了新的策略評估引擎HPEngine。該引擎利用基于統(tǒng)計(jì)分析的策略優(yōu)化機(jī)制動態(tài)精化策略，并將精化的策略由文本形式轉(zhuǎn)化為數(shù)值形式；同時(shí)采用基于統(tǒng)計(jì)分析的多級緩存機(jī)制存儲頻繁調(diào)用的請求結(jié)果對、屬性和策略信息。實(shí)驗(yàn)結(jié)果表明，HPEngine所采用的優(yōu)化機(jī)制縮減了策略規(guī)模，降低了評估引擎和其他模塊的通信開銷，減少了匹配運(yùn)算量，提高了匹配速度，整體評估效率優(yōu)于其他同類系統(tǒng)。
[Abstract]:Cloud storage anytime, anywhere access, one-click sharing and cooperation, multi-platform synchronization at any time, unlimited space, permanent free and other advantages make the number of new registered users has maintained a double-digit growth trend, cloud storage market prospects are very broad. However, because cloud storage service is not mature and security architecture is not perfect, compared with the traditional storage of sensitive data in the local, users will face a lot of risks in cloud sensitive data. In recent years, cloud storage "leakage events" are very frequent, the security hidden danger has hindered the large-scale popularization of cloud storage, how to protect the confidentiality of user sensitive data has become a problem that needs to be solved urgently. Access control technology is an important technology to ensure the security of cloud storage user sensitive data. Attribute-based access control is a new access control model proposed in the development of distributed applications. It is used to solve the problem of access control in distributed applications, so it has better adaptability to cloud storage. However, with the increasing number of online users and resources, the structure of access control policy is becoming more and more complex, and the efficiency of policy evaluation has become the key bottleneck restricting the availability of the system. There is an urgent need for an efficient evaluation engine to grant timely and correct authorization to the requests of a large number of users. In order to improve the efficiency of policy evaluation engine in distributed environment, a new policy evaluation engine, HPEngine., is proposed in this paper. The engine uses the strategy optimization mechanism based on statistical analysis to dynamically refine the strategy, and converts the refined strategy from text to numerical form, and uses a multi-level cache mechanism based on statistical analysis to store the frequently invoked request results. Properties and policy information. The experimental results show that the optimization mechanism adopted by the HPA engine reduces the scale of the strategy, reduces the communication overhead between the evaluation engine and other modules, reduces the matching operation, improves the matching speed, and the overall evaluation efficiency is better than that of other similar systems.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP333;TP393.08

【參考文獻(xiàn)】

相關(guān)期刊論文 前3條

1 王雅哲;馮登國;;一種XACML規(guī)則沖突及冗余分析方法[J];計(jì)算機(jī)學(xué)報(bào);2009年03期

2 王雅哲;馮登國;張立武;張敏;;基于多層次優(yōu)化技術(shù)的XACML策略評估引擎[J];軟件學(xué)報(bào);2011年02期

3 洪澄;張敏;馮登國;;面向云存儲的高效動態(tài)密文訪問控制方法[J];通信學(xué)報(bào);2011年07期

本文編號：2214996