关键词: 云安全, 可信云, 信任, 行为证据, 模糊层次分析法, 多检测引擎

Abstract: Because of the cloud computings characteristics of being dynamic and open, continuous malicious attacks happen frequently. With the idea of trusted cloud, a defense system model based on trust for cloud computing was constructed to guarantee the cloud security. Through real-time monitoring, users behavior evidences could be obtained and standardized; a new method for users trust evaluation based on fuzzy Analytic Hierarchy Process (AHP) was presented, which gradually determined the weights of behavior evidences, achieved quantitative assessment of behavioral trust; so as to provide great security defense for users. Besides, multiple detection engines were used to conduct a comprehensive inspection of suspicious files and to make integrated decisions. The experimental results show the system model can effectively eliminate the malicious behaviors from undesirable users, reduce users damages caused by virus and achieve a two-way defense for both cloud and client.

Key words: cloud security, trusted cloud, trust, behavioral evidence, Fuzzy Analytic Hierarchy Process (FAHP), multiple detection engine