클라우드 컴퓨팅 보안 위협에 기반 한서버 가상화 시스템 보안 요구 사항 제안
The security requirements suggestion based on cloud computing security threats for server virtualization system
1
조회
0
다운로드
6
인용
0
참고문헌
키워드
초록
본 논문은 서버 가상화 시스템의 보안 함수를 개발하기 위해 선행해야 할, 보안 요구 사항을 제안하는 것에 그 목적을 두고 있다. 도출된 보안 요구 사항은 서버 가상화 시스템에 대한 보안 위협을 기반으로 하며, 제안 된 요구 사항이보안 위협 사항을 방어할 수 있는 것을 보임으로써 보안 요구 사항의 타당성을 검증한다. 또한, 클라우드 컴퓨팅 보안위협에서 서버 가상화 시스템에 가해지는 보안 위협을 도출하기 위해서, 보안 위협과 서버 가상화 시스템의 보안 이슈사항의 관계를 분석 및 제시한다.
Abstract
In this paper, we propose the security requirements for developing the security functions of server virtualization system. Thesecurity requirements are based on the security threats of server virtualization system, and we verified the validity by defendingthe security threats of server virtualization system. For inducting the security threats damaging server virtualization system fromcloud computing security threats, we analyze and suggest the relations between security threats and security issue of servervirtualization system.
참고문헌 (22)
- Jeong-Ho Lee, "VM ware journey towards cloud computing" (2011), Goodus Inc
- Inhyuk Kim, "The trend of virtualization technology for system security", Korea Institute of Information Security &Cryptology, 19(2), pp.26~34 (2009)
- William Hau, "Virtua-lization and risk, key security considerations for your enterprise architecture" (2007), McAfee Inc
- Resource provisioning for virtualized server applications, "Evangelia Kalyvianaki", Computer Laboratory, University of cambridge, ~, pp.UCAM-CL-TR-762 (2009)
- "Security framework for cloud computing", Recommendation ITU-T X.1601, ~ (2014)
- Rafal Los and Alex Ginsburg, "The notorious nine cloud computing top threats in 2013" (2013), Cloud Security Alliance
- Louis Marinos, "Threat landscape 2013" (2013), ENISA
- Kyung Oh, "Cloud services and virtualization technology", Journal, (125) (2009)
- Byung-Joo Moon, "Server virtualizati-on technology trends", Weekly Techni-cal Trends 1302, NIPA, ~ (2007)
- Security requiremen-ts for server virtualization system, "Jong-sub Moon", ~, pp.TTAK.KO-10.0708 (2013)
- Houlin Zhao, "Security in telecommun-ications and information technology", ITU-T, ~ (2003)
- "Information technology open systems management: log control function", ITU-T X.735, ~ (1992)
- "Information technology open systems management: security audit trail function", ITU-T X.740, ~ (1992)
- "Information technology open systems management: objects and attributes for access control", ITU-T X.741, ~ (1995)
- "Information technology open systems interconnection systems management:software management function", ITU-T X.744, ~ (1996)
- "Security architecture for open systems interconnection for CCITT applications", ITU-T X.800, ~ (1991)
- "Information technology open systems management: confident-iality framework", ITU-T X.814, ~ (1995)
- Guide to security for full virtualization technologies, "Karen Scarfone", NIST, ~, pp.Special Publication 800-125 (2011)
- The NIST definition of cloud computing, "Peter Mell", NIST, ~, pp.Special Publication 800-145 (2011)
- Guide for Con-ducting Risk Assessments, "Patrick D. Gallagher", NIST, ~, pp.Special P-ublication 800-30 (2012)
- NIST Cloud Computing Security Ref-erence Architecture, , NIST, ~, pp.Special Publicat-ion 500-299 (2011)
- "Agnostic Virtualization Comparison"[URL]