Research On The Access Control Evaluation Technology Of The Cloud Computing Platform

Although cloud computing technology is an emerging technology, but onceproposed it has got rapid development. With its advantages, cloud computing havebeen concerned by more and more countries, companies and research institute.Many researchers participate into the cloud computing technology research.Withresearch on cloud computing in full swing, cloud computing security problems havebegun to be concerned. For the commercial, military and academic fields who arebenefit from the cloud computing technology, security is especially important. Ifthere are any security problems, they will bring huge losses. Security evaluation ofthe cloud computing platform is an important mean to protect the security of cloudcomputing. To reduce the risk of a security incident, only cloud computing platformwhich has been evaluated in advance can be put into application. Access control isan important mean to protect the security of cloud computing platform and theconfidentiality of its user data. Therefore, this subject will study the access controlevaluation technology on cloud computing platform.In this paper, the existing information security evaluation criteria were studied.From the information security standard Common Criteria,we extract the functionalrequirements of access control, and on this basis, combining the characteristics ofcloud computing platform, summed up access control evaluation criteria for cloudcomputing platform. In addition, this paper established the abstract model of accesscontrol test after studied the related knowledge of access control technology. Weexpounded the basic idea of the access control tests and on this basis established ageneral procedure for access control test: firstly, to test the security of the system’sinitial state; secondly, to test the security of the system’s state transition.In order to achieve the automation ot access control security evaluation, wedesigned and implemented a system for the security evaluation of the systems’access control. The system can do evaluation work on a remote system byembedding a test interface on the system which will be evaluated. In this paper,based on the design and implementation of the system, the evaluation system wasused in cloud computing platform, to evaluate the security of the access control onthe cloud computing platform. We modified the Hadoop cloud computing platform,added access control test interface to the platform.Them we do the experiment toevaluate the access control security of the Hadoop platform, which can achieveautomated access control evaluation on a cloud computing platform.