通信与信息技术Issue(z2)：58-62,65,6.
基于威胁风险建模的云安全架构设计
Cloud security architecture design based on threat risk modeling
佘小明1
作者信息
- 1. 四川银行股份有限公司,四川成都 610213
- 折叠
摘要
Abstract
With the continuous deepening of the digital transformation of enterprises,many enterprises have chosen to migrate their business into the cloud to benefit from the dividends of cloud computing such as cost reduction and efficiency increase.However,the most critical issue encountered by the business after migrating to the cloud is information security.Aiming at the cloud scenarios of different enterprises and different businesses,a method of systematic threat and risk modeling is proposed,and the innovative STRIDE-LMG modeling method is introduced to accurately identify the security requirements of different scenarios and create a corresponding,cost-effective cloud security architecture.Use a real case of a grade-A hospital's business on the cloud to run through every step of the entire methodology and demonstrate the systematic design of a cloud security architecture through precise modeling.关键词
云计算/安全架构/威胁分析Key words
Cloud computing/Threat-modeling/Security architecture分类
信息技术与安全科学引用本文复制引用
佘小明..基于威胁风险建模的云安全架构设计[J].通信与信息技术,2023,(z2):58-62,65,6.
