摘要
Abstract
With the continuous expansion of the private cloud market,tenant security under the IaaS model is facing severe challenges such as data breaches,unauthorized access,and supply chain risks.Based on systematic threat modeling and empirical analysis,this article proposes a"zero trust+active defense"integrated security framework,which constructs a multi-level protection system covering"cloud management end"through key technologies such as dynamic identity authentication,micro isolation,full lifecycle encryption,and intelligent security operation and maintenance.Experiments have shown that this framework can improve threat detection accuracy to 94%,reduce data leakage incidents by 82%,and provide IaaS tenants with a full process security solution from shared responsibility to policy implementation,significantly enhancing tenant side security protection capabilities in private cloud environments.关键词
私有云安全/IaaS租户/零信任架构/主动防御/智能安全运营Key words
Private Cloud Security/IaaS Tenant/ZTA/Active Defense/Intelligent Security Operations分类
信息技术与安全科学