Research On Key Information Security Quality Assessment Technologies For Cloud Services

Cloud services are revolutionary technologies in information industry,leading to a substantial leap in human computing power.The production was greatly improved and costs were efficiently reduced with the help of cloud service.There are still a variety of information security issues remaining that should not be neglected yet.Not only information security concerns about cloud services have become a key factor to rein the growth of the cloud,but also convenient methods of information security quality assessment technologies for cloud services are pretty poor.In this thesis,an efficient quality assessment system is proposed to evaluate current information security on cloud service in order to solve current problem.Our work are as follows:(1)Constructed an information security quality assessment framework for cloud services.The framework is constructed on the basis of summarizing the research status and research standards and methods at home and abroad.It shows that the formalization of cloud service information security indicators is key to the assessment.The framework provides theoretical guidance for the assessment of this thesis.(2)Put forward the process of formalizing cloud service information security indicators based on inductive deductive method,and drew the indicator system of cloud service information security quality assessment strictly according to this process.The indicator system is described from two aspects of technology and management,including 8 second-level indicators and 26 third-level indicators.It is fundamental to build safely cloud platform and quantify service levels.What's more,it makes the assessment be reasonable and well-founded.(3)Proposed a concise and effective information security quality assessment method for cloud services.The method calculates the weights of indicators at all levels based on analytic hierarchy process.And it optimizes the indicator weights by using variable weight comprehensive evaluation method,dynamically adjusts the weight of each indicator.In addition,the method adopts the fuzzy comprehensive evaluation method for comprehensive assessment with using cloud model as membership function.It effectively minimized the subjectivity and uncertainty of evaluation.(4)The assessment algorithm is implemented.The algorithm is designed and implemented according to above assessment method based on Python language.After facilitated simulation experiments,it shows that the algorithm can promote assessment obviously.The thesis implements the evaluation experiment for a small cloud service company.And the experimental result is consistent with the experimental expectations.This indicates that the cloud service assessment model this thesis proposed is reasonable and feasible.Not only the assessment method in this thesis can evaluate the quality and safety of cloud service in the actual production environment,but also offers some reference and guidance to the theory research of cloud service information security assessment.