Information and Communications Technology and Policy

Information and Communications Technology and Policy

Information and Communications Technology and Policy ›› 2022, Vol. 48 ›› Issue (8): 31-35.doi: 10.12267/j.issn.2096-5931.2022.08.005

Previous Articles     Next Articles

Thoughts on security assurance for critical information infrastructure in the cloud computing service environment

ZHANG Feng1, JIANG Weiqiang1, WANG Guangtao1, LIU Chang1, ZHANG Mingtian2   

  1. 1. China Mobile Information Security Center, Beijing 100053, China
    2. China Electronic Standardization Institute, Beijing 100007, China
  • Received:2022-05-10 Online:2022-08-15 Published:2022-08-26

Abstract:

This paper focuses on the goal of creating a high-security cloud in the communication industry, and analyzes the background and challenges faced by cloud security; It provides an overall security framework for establishing a high security cloud brand and makes cloud security being “manageable, controllable and reliable” from five aspects:advancing the planning, playing to advantages, implementation of safety measures, consolidating the qualifications and building products.Taking advantages of the industry, it provides a method of implementation called “point-line-flat-body”. Furthermore, it proposes a general idea that we can build“Two System”,strengthen “One Platform”obediencing the Regulations, and provide strong support for the healthy and sustainable development of cloud services.

Key words: cloud computing, infrastructure, high security

CLC Number: