理解云计算漏洞论文

《理解云计算漏洞论文》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、理解云计算漏洞毕业论文Discussionsaboutcloudcomputingsecurityoftenfailtodistinguishgeneralissuesfromcloud-specificissues.Toclarifythediscussionsregardingvulnerabilities,theauthorsdefineindicatorsbasedonsounddefinitionsofriskfactorsandcloudcomputing.Eachday,afreshnewsitem,blogentry,orotherpublication

2、warnsusaboutcloudcomputing’ssecurityrisksandthreats;inmostcases,securityiscitedasthemostsubstantialroadblockforcloudcomputinguptake.Butthisdiscourseaboutcloudcomputingsecurityissuesmakesitdifficulttoformulateawell-foundedassessmentoftheactualsecurityimpactfortwokeyreasons.First,inmanyoft

3、hesediscussionsaboutrisk,basicvocabularyterms—includingrisk,threat,andvulnerability—areoftenusedinterchangeably,withoutregardtotheirrespectivedefinitions.Second,noteveryissueraisedisspecifictocloudcomputing.Toachieveawell-foundedunderstandingofthe“delta”thatcloudcomputingaddswithrespectt

4、osecurityissues,wemustanalyzehowcloudcomputinginfluencesestablishedsecurityissues.Akeyfactorhereissecurityvulnerabilities:cloudcomputingmakescertainwell-understoodvulnerabilitiesmoresignificantaswellasaddsnewonestothemix.Beforewetakeacloserlookatcloud-specificvulnerabilities,however,wemu

5、stfirstestablishwhata“vulnerability”reallyis.Vulnerability:AnOverviewVulnerabilityisaprominentfactorofrisk.ISO27005definesriskas“thepotentialthatagiventhreatwillexploitvulnerabilitiesofanassetorgroupofassetsandtherebycauseharmtotheorganization,”measuringitintermsofboththelikelihoodofanev

6、entanditsconsequence.1TheOpenGroup’srisktaxonomy(www.opengroup.org/onlinepubs/9699919899/toc.pdf)offersausefuloverviewofriskfactors(seeFigure1).TheOpenGroup’staxonomyusesthesametwotop-levelriskfactorsasISO27005:thelikelihoodofaharmfulevent(here,losseventfrequency)anditsconsequence(here

7、,probablelossmagnitude).1Theprobablelossmagnitude’ssubfactors(ontherightinFigure1)influenceaharmfulevent’sultimatecost.Thelosseventfrequencysubfactors(ontheleft)areabitmorecomplicated.Alosseventoccurswhenathreatagent(suchasahacker)successfullyexploitsavulnerability.Thef