云计算环境下基于信息熵的安全风险管理决策基础理论研究

项目名称： 云计算环境下基于信息熵的安全风险管理决策基础理论研究

项目编号： No.61263022

项目类型： 地区科学基金项目

立项/批准年度： 2013

项目学科： 自动化技术、计算机技术

项目作者： 姜茸

作者单位： 云南财经大学

项目金额： 44万元

中文摘要： 云计算是新一代信息技术变革的核心，支持和发展云计算是国家战略需要！但目前其发展困难重重，云计算安全风险管理决策理论的缺乏已成为云计算发展的桎梏，风险是云计算领域亟待突破的重要研究课题。风险度量与评估是风险管理决策的基础，本项目将用信息熵及相关系统科学与系统工程理论系统深入地研究云计算环境下的安全风险度量与评估问题。具体研究：①充分挖掘云计算的特点，用系统科学与系统工程方法建立云计算安全风险属性模型；②用信息熵理论定量地度量云计算安全风险，建立云计算安全风险度量模型；③用系统科学与系统工程方法构建云计算安全风险评估模型，并用信息熵理论对模型进行优化。实现云计算环境下安全风险管理决策理论的创新与完善，而且将有效克服传统风险度量和评估研究人为因素影响过大的弊端，推进现有风险管理理论研究的深入，进而丰富和完善现有云计算和风险管理理论体系，并可供政府、企业、用户应用或参考，从而推动云计算发展和应用。

中文关键词： 云计算；风险；度量评估；信息熵；

英文摘要： Cloud Computing is the core of new generation information technology innovation, to support and develop the cloud computing are national strategic demand. But, now the development is difficult. The lack of management decision theory of security risk has shackled cloud computing development. The risk is an important problem that urgently need to be overcame in cloud computing domain. Measurement & evaluation of the risk is basic for risk management decision. This project will deeply study security risk measurement and evaluation in cloud computing environment using information entropy related systems science and systems engineering theory. The main content is following: (1)to mine adequately cloud computing's characteristic, and construct an security risk attribute model using systems science and systems engineering method.(2)to develop an information-entropy-based model to quantificationally measurement of the security risk of cloud computing. (3)to create a security risk evaluation model in cloud computing environment with systems science and systems engineering method, and then optimize the model by information entropy theory. This research will obtain many innovation and improvement of management decision theory of security risk in cloud computing environment, and the achievements will overcome effectively th

英文关键词： Cloud Computing；Risk；Measurement & Evaluation；Information Entropy；