Research On Trust Evaluation Model And Risk Assessment Method Of Cloud Security

With the rapid development and widely use of cloud computing. The security issue of cloud computing become obviously which is the key element of restriction of cloud computing developing. Google’s cloud computing and Amazon’s simple storage service have appeared security issues. These accidents illustrate that it is essential to analyze cloud security issue when enjoying its high performance of computing (hardware and software) resource. Hence, it is imperative to explore reasonable trust evaluation model and risk assessment methods based on research and expanding cloud security related theory.Comparing to traditional information system, cloud computing Involve more information security problems due to highly scalable & open distributed architecture of cloud computing environment,So the influence of trust is more important. Meanwhile, Cloud security issue also puts forward higher requirements on trust mechanism. Many scholars build some related trust and risk assessment model and method aim at different cloud security issue which has obtained certain research results. But there are still many problems:lack of reliable trust measurement mechanism, method operability, etc. there are a lot of research space. Risk assessment, hot topic scholars concerns, is an indispensable part of cloud security research. A lot of studies focus on qualitative evaluation from single prospective of risk attributes, or continuous improvement some algorithm, there are very few researches that set off a properties combined with the characteristics of cloud computing structure which conduct a comprehensive analysis of the cloud security evaluation. Therefore, this paper focuses on a pervasive and precise cloud security trust evaluation model and risk assessment method which are based on user’s trust and risk assessment of cloud security as the research object.In this paper, the main work and innovation points are as follows:(1) Study the trust of the cloud services security evaluation problem; analyzes the trust relationship and trust requirements based on cloud computing environment. Resolve the key issues of trust evaluation indicator system/trust evaluation index system, trust evidence acquisition and conversion through trust evaluation process. Establlshed the generality of cloud security trust evaluation model, provide reliable quantitative trust mechanism.(2) Cloud services security risk assessment method is proposed which aims to the cloud computing environment safety risk issue. Cloud security risk assessment index system is proposed by analyzing and researching cloud computing structure and services. And quantifying risk through the entropy weight and fuzzy theory.Examples are illustrated the method can identify risk value precisely through three essential attributes which are assets, threat, vulnerability. These risk assessment method are applicable for all kinds of cloud services.