Risk Management on the Security Problem in Cloud Computing
Risk Management on the Security Problem in Cloud Computing
复制标题
DOI：
10.1109/cnsi.2011.82
复制
发表时间：
2011-05
期刊：
影响因子：
--
通讯作者：
S. Tanimoto;Manami Hiramoto;M. Iwashita;Hiroyuki Sato;Atsushi Kanai
中科院分区：
文献类型：
--
作者：
S. Tanimoto;Manami Hiramoto;M. Iwashita;Hiroyuki Sato;Atsushi Kanai
ICT系统已经被研究用于灵活的系统配置、系统操作成本降低、环境影响减少等。云计算作为解决这些问题的技术而受到关注。在美国，Amazon EC2/S3、Google Apps、Force.com和Windows Azure等商业云服务正在获得越来越多的用户。此外，云计算的研究，如政府的i-Japan战略和总务省智能云研究小组的启动，在日本正在迅速发展。然而，目前对云计算的研究主要集中在服务端，而安全端还没有得到充分的关注。特别是，对用户的模糊不安的社会观点的安全感知没有进行充分的研究。本文探讨了企业使用云计算时的各种风险。也就是说，从用户的角度来看，在云计算的安全性进行了调查。具体地，从用户的角度在这样的云计算的风险因素是全面提取的风险分解结构（RBS）的方法。并对提取的风险因素进行了分析和评价。在此基础上提出了具体的对策和建议。这些反过来将用于促进公共云的使用，通过降低成本加强竞争力，并提高企业管理效率。
ICT systems have been investigated for flexible systems configuration, systems operation cost reduction, environmental impact reduction, etc. Cloud computing has attracted attention as technology that solves these. In the U.S., business Cloud services, such as Amazon EC2/S3, Google Apps, Force.com, and Windows Azure, are gaining more and more users. Additionally, study of Cloud computing, such as a governmental i-Japan strategy and a start of the smart Cloud study group of the Ministry of Internal Affairs and Communications, is progressing rapidly in Japan. However, the investigation on the present Cloud computing is mainly focused on the service side, while the security side has not been sufficiently looked at. The security perception by the social viewpoints of a user's vague uneasiness has especially been insufficiently investigated. This paper looks into the various risks when a company uses Cloud computing. That is, the security from a user's viewpoint in Cloud computing is investigated. Concretely, the risk factor from a user's viewpoint in such Cloud computing is comprehensively extracted with the risk breakdown structure (RBS) method. Furthermore, the risk factors that were extracted are analyzed and evaluated. A detailed countermeasure and proposal are produced on the basis of these results. These in turn will be used to promote public Cloud use, strengthen competitiveness by cost reduction, and increase the efficiency of corporate management.