클라우드 서비스 사용자 관점에서의 취약점과 보안관리체계
Vulnerability and Security Management System from the Perspective of the Cloud Service Users
2
조회
0
다운로드
9
인용
0
참고문헌
키워드
초록
정보자원에 대한 투자가 증가하면서 비용절감을 도모할 수 있는 클라우드 컴퓨팅 서비스에 대한 관심이 증가하고 있다. 그러나 클라우드 컴퓨팅은 경제적 이득이라는 장점과 함께 물리적으로 외부에 위치한 정보자원을 활용함에 의해 정보자산 통제와 정보보호의 취약점을 증가시킨다는 단점을 지니고 있다. 이에 본 연구에서는 클라우드 서비스의 고유속성으로 인한 새로운 취약점을 포함하여 클라우드 컴퓨팅의 취약점 도출과 클라우드 컴퓨팅의 취약점 통제항목을 도출한 후, 취약점과 통제항목간의 매핑을 통하여 관리되고 있지 않은 취약점을 파악하여 클라우드 컴퓨팅의 위험요인을 제시하였다.
Abstract
There has been increased interest for cloud computing services that can promote cost savings while increasing investment in information resources. Cloud computing, however, has a disadvantage physically located in the external information resources to take advantage of the economic benefits, the advantages and increase the vulnerability of information protection and control of information assets. In this study, due to the unique properties of the new services, including vulnerability,the vulnerability of cloud computing derive the vulnerability of cloud computing and control items were derived through the mapping between vulnerability and control items, that are not being managed to identify vulnerabilities Cloud computing risk factors are presented.
참고문헌 (19)
- 모바일 클라우드 서비스 보안 침해대응방안 연구, "한국인터넷진흥원", ~ (2010)
- Above the Clouds: A Berkeley View of Cloud Computing, "Armbrust, Michael", University ofCalifornia, ~ (2008)
- Buyya, Rajkumar, "Market-oriented cloud computing: Vision, hype, and reality for delivering it services as computing utilities", International Conference on High Performance Computing and Communications (2008)
- CIO Council, "Privacy Recommendations for the Use of Cloud Computing by Federal Departments and Agencies", ~ (2010)
- Cloud Security Alliance, "Security Guidance for Critical Areas of Focus in Cloud Computing V2.1", ~ (2009)
- Cloud Security Alliance SecaaS, "Defined Categories of Service 2011", ~ (2011)
- Danish Jamil, "Cloud Computing Security", International Journal of Engineering Science and Technology, 3(4), pp.3478~3483 (2011)
- "Cloud computing: benefits, risks and recommendations for information security" (2009)[URL]
- IDC, "IT Cloud Services User Survey, pt.2: Top Benefits & Challenges", ~ (2008)
- J. Brodkin, "Gartner: Seven cloud-computing security risks" (2009), Infoworld
- L Ertual, "Security challenges in cloud computing", WORLDCOMP 2010 (2010)
- US Government Cloud Computing Technology Roadmap, , NIST, ~, pp.NIST Special Publication 500-293 (2011)
- The NIST Definition of Cloud Computing, , NIST, ~, pp.NIST Special Publication 800-145 (2011)
- Guide for Assessing the Security Controls in Federal Information Systems and Organizations, Building Effective Security Assessment Plans, , NIST, ~, pp.NIST Special Publication 800-53A (2010)
- Pearson, S., "Taking account of privacy when designing cloud computing services", In ICSE Workshop on Software Engineering Challenges of Cloud Computing, pp.44~52 (2009)
- R. Chow, "Controlling data in the cloud: outsourcing computationwithout outsourcing control", Proceedings ofthe 2009 ACM Workshop on Cloud ComputingSecurity (CCSW 2009) (2009)
- Vaquero, L., "Locking the sky : a survey on IaaS cloud security", Computing, 91, pp.93~118 (2011)
- Wang, Wang, "Scientific Cloud Computing: Early Definition and Experience", High Performance Computing and Communications (2008)
- Yuefa, D., "Data Security Model for Cloud Computing", Proceedingof the 2009 International Workshop onInformation Security and Application (IWISA 2009) (2009)