Trusted cloud service selection method based on risk assessment, cloud system, and cloud server

Abstract

The invention belongs to the technical field of cloud service security, and discloses a trusted cloud service selection method based on risk assessment, a cloud system, and a cloud server. Starting from the perspective of risk assessment, the confidentiality, integrity, availability and controllability indexes of a cloud service are input as risk factors to calculate the risk assessment value of the cloud service. The risk assessment value is input to a trust model as one of evaluation indexes affecting the credibility of the cloud service to calculate the trust value of the cloud service. Risk assessment is introduced to a cloud service trust model. On one hand, the security of cloud services can be measured, and the credibility of cloud service providers can be assessed more comprehensively. On the other hand, cloud service providers can develop effective strategies according to the risk assessment results in order to reduce the possibility of security threats, improve the security and credibility of cloud services, and increase the trust degree of cloud users to cloud services, and cloud users can select more credible cloud service providers according to the trust values to realize credible and effective cloud service selection.

Description

technical field [0001] The invention belongs to the technical field of cloud service security, and in particular relates to a method for selecting a trusted cloud service based on risk assessment, a cloud system and a cloud server. Background technique [0002] By integrating distributed resources, cloud computing builds a computing environment that responds to multiple service requirements, meets user customization requirements, and can access its corresponding service resources through the network. The characteristics of cloud computing for resource sharing and efficient utilization have attracted the attention of more and more enterprises, freeing them from the heavy pressure of IT infrastructure management and maintenance, and focusing more on their core business development. However, due to the breadth, dynamics, distribution, virtualization, and storage transparency of cloud computing, it is difficult for cloud users to know which nodes their own data and applications ...

AI Technical Summary

Problems solved by technology

[0004] To sum up, the problem existing in the existing technology is: in actual cloud computing applications, although cloud system resources are abundant and there are various types of cloud services, because cloud services require users to hand over data to cloud services for processing or storage, this means It is difficult for users to control the confidentiality, security, privacy, and controllability of data stored in the cloud, so it is difficult for users to truly trust cloud services. In addition, as the number of cloud service providers continues to increase in recent years, Faced with many cloud service providers, it is difficult for users to judge whether the cloud services provided by them are safe and suitable for them. Users become hesitant to choose cloud services, or even unwilling to use cloud services, which seriously hinders the application and promotion of cloud services.

Images