Developing the Model of a Secure Information System That Uses Cloud Services
DOI:
https://doi.org/10.24160/1993-6982-2018-3-126-131Keywords:
information technologies, security and risks, cloud computations, threats in the cloud environmentAbstract
The aim of the study is to offer to the developers of corporate information systems that use the cloud infrastructure the possibility to reduce the time taken to ensure information security in constructing such a system. The main types of clouds, the risks to information security arising from their use, and the models of providing cloud services are analyzed. A cloud is considered from an architectural point of view. A generalized model of a secure information system using cloud services is proposed that takes into account the currently existing information risks. The idea of incorporating patterns containing the classification and characteristics of risks into the model is formulated. An undirected graph with the cloud structure is presented. The use of the developed model opens the possibility to obtain a qualitative assessment of information risks typical for corporate information systems with cloud services.
References
2. Tadviser. Ключевые игроки рынка облачных сервисов в России [Электрон. ресурс] http://www.tadviser.ru/ (дата обращения 31.05.2017).
3. SAPNews. SAP и Forrester: в России к 2020 году объем «облаков» составит 48 млрд руб [Электрон. ресурс] https://news.sap.com/cis/2017/02/21/ (дата обращения 21.02.2017).
4. Сот Д. Oracle CEO Mark Hurd Lays Out the Future of the Cloud [Электрон. ресурс] https://www.oracle.com/corporate/features/openworld-mark-hurd-keynote-2015. html (дата обращения 26.10.2015).
5. АОБ. Security Guidance for Critical Areas of Focus In Cloud Computing [Электрон. ресурс] https:// cloudsecurityalliance.org/ (дата обращения 26.10.2015).
6. Нгуен Т.М., Хорев П.Б. Анализ информационных рисков при использовании облачных вычислений // Информационные системы и технологии. 2017. № 5 (103) С. 117—124.
7. НОУ Интуит. Архитектура, принципы и возможности облачных вычислений на платформе Microsoft Azure и ее связь с VisualStudio [Электрон. ресурс] http://www.intuit.ru/ (дата обращения 21.02.2017).
---
Для цитирования: Нгуен М.Т., Хорев П.Б. Разработка модели безопасной информационной системы, использующей облачные сервисы // Вестник МЭИ. 2018. № 3. С. 126—131. DOI: 10.24160/1993-6982-2018-3-126-131.
#
1. Tsydulko D. Rynok Oblachnykh Tekhnologiy: Prognozy na 2017 God [Elektron. Resurs] https://www. crn.ru/ (Data Obrashcheniya 31.01.2017). (in Russian).
2. Tadviser. Klyuchevye Igroki Rynka Oblachnykh Servisov v Rossii [Elektron. Resurs] http://www.tadviser. ru/ (Data Obrashcheniya 31.05.2017). (in Russian).
3. SAPNews. SAP i Forrester: v Rossii k 2020 godu Ob"em «Oblakov» Sostavit 48 mlrd rub [Elektron. Resurs] https://news.sap.com/cis/2017/02/21/ (Data Obrashcheniya 21.02.2017). (in Russian).
4. Sot D. Oracle CEO Mark Hurd Lays Out the Future of the Cloud [Elektron. Resurs] https://www.oracle.com/ corporate/features/openworld-mark-hurd-keynote-2015. html (Data Obrashcheniya 26.10.2015).
5. AOB. Security Guidance for Critical Areas of Focus In Cloud Computing [Elektron. Resurs] https:// cloudsecurityalliance.org/ (Data Obrashcheniya 26.10.2015).
6. Nguen T.M., Khorev P.B. Analiz Informatsionnykh Riskov pri Ispol'zovanii Oblachnykh Vychisleniy. Informatsionnye Sistemy i Tekhnologii. 2017;5 (103):117—124. (in Russian).
7. NOU Intuit. Arkhitektura, Printsipy i Vozmozhnosti Oblachnykh Vychisleniy na Platforme Microsoft Azure i ee Svyaz' s VisualStudio [Elektron. Resurs] http://www. intuit.ru/ (Data Obrashcheniya 21.02.2017). (in Russian).
---
For citation: Nguyen M.T., Khorev P.B. Developing the Model of a Secure Information System That Uses Cloud Services. MPEI Vestnik.2018;3:126—131. (in Russian). DOI: 10.24160/1993-6982-2018-3-126-131.
