Cloud computing + Security

1. ‫‪‬‬
‫‪‬‬
‫اراﺋﻪ دﻫﻨﺪه: ﺣﻤﯿﺪرﺿﺎ ﻧﺼﺮاﺻﻔﻬﺎﻧﯽ‬
‫ﭘﺎﯾﯿﺰ 2931‬

2. ‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫2‬
‫ﻣﻘﺪﻣﻪ‬
‫ﺗﻌﺮﯾﻒ راﯾﺎﻧﺶ اﺑﺮي‬
‫وﯾﮋﮔﯿﻬﺎ و ﻣﺰاﯾﺎي راﯾﺎﻧﺶ اﺑﺮي‬
‫ﭼﺎﻟﺶ ﻫﺎي راﯾﺎﻧﺶ اﺑﺮي‬
‫اﻣﻨﯿﺖ راﯾﺎﻧﺶ اﺑﺮي‬
‫ﻧﺘﯿﺠﻪ ﮔﯿﺮي و اراﺋﻪ ﭘﯿﺸﻨﻬﺎدات‬
‫ﻣﺮاﺟﻊ‬

3. ‫ﺿﺮورت اﯾﺠﺎد اﺑﺰارﻫﺎ و راه ﺣﻞ ﻫﺎي ﻧﻮﯾﻦ ﺑﺮاي ﭘﺮدازش؟‬
‫‪‬‬
‫رﺷﺪ، ﮔﺴﺘﺮش و اﻓﺰاﯾﺶ ﺳﺮﻋﺖ و ﻫﻤﻪ ﮔﯿﺮي ﺷﺒﮑﻪ ﻫﺎي ﻣﻘﯿﺎس وﺳﯿﻊ‬
‫ﻣﺎﻧﻨﺪ اﯾﻨﺘﺮﻧﺖ و ﺗﺸﺪﯾﺪ روز اﻓﺰون رﻗﺎﺑﺖ و ﺗﻐﯿﯿﺮات و ﻇﻬﻮر ﻧﯿﺎزﻫﺎي‬
‫ﺟﺪﯾﺪ ﻣﺎﻧﻨﺪ:‬
‫•‬
‫•‬
‫•‬
‫•‬
‫‪‬‬
‫3‬
‫ﻧﯿﺎز ﺑﻪ ارﺗﺒﺎﻃﺎت روز اﻓﺰون‬
‫ﺑﻪ روز رﺳﺎﻧﯽ ﻣﺪاوم ﻣﺤﺘﻮاي داده و اﻃﻼﻋﺎت‬
‫اﻧﻌﻄﺎف ﭘﺬﯾﺮي‬
‫...‬
‫ﻇﻬﻮر ﻣﺪل ﻫﺎي ﺟﺪﯾﺪ ﻋﺮﺿﻪ ﺧﺪﻣﺎت ﻓﻨﺎوري اﻃﻼﻋﺎت و ﮔﺮاﯾﺶ ﺟﻬﺎﻧﯽ ﺑﻪ‬
‫ﻓﻨﺎوري ﻫﺎي ﺟﺪﯾﺪ)راﯾﺎﻧﺶ اﺑﺮي(‬

4. ‫راﯾﺎﻧﺶ ﻓﺮاﮔﯿﺮ‬
‫راﯾﺎﻧﺶ اﺑﺮي - 7002‬
‫8891‬
‫راﯾﺎﻧﺶ ﻓﺮاﮔﯿﺮ‬
‫0891-0591‬
‫ﺷﺒﮑﻪ و اﯾﻨﺘﺮﻧﺖ‬
‫0891-0491‬
‫راﯾﺎﻧﻪ‬
‫4‬
‫0002- 0991‬
‫ﺗﻮري و ﮐﻼﺳﺘﺮ‬
‫4002‬
‫راﯾﺎﻧﺶ ﺑﻪ ﻋﻨﻮان‬
‫ﺻﻨﻌﺖ ﻫﻤﮕﺎﻧﯽ‬

5. NIST

Cloud computing is a pay-per-use model for enabling available,
convenient, on-demand network access to a shared pool of
configurable computing resources (e.g., networks, servers, storage,
applications, services) that can be rapidly provisioned and released
with minimal management effort or service provider interaction.
‫راﯾﺎﻧﺶ اﺑﺮي ﯾﮏ ﻣﺪل ﭘﺮداﺧﺖ در ﻗﺒﺎل اﺳﺘﻔﺎده اﺳﺖ ﮐﻪ اﻣﮑﺎن دﺳﺘﺮﺳـﯽ ﺷـﺒﮑﻪ اي‬
،‫ﻣﺒﺘﻨﯽ ﺑﺮ ﺗﻘﺎﺿﺎ و ﻣﻨﺎﺳﺐ را ﺑﻪ اﻧﺒﻮﻫﯽ از ﻣﻨﺎﺑﻊ ﻣﺤﺎﺳﺒﺎﺗﯽ ﻣﺸﺘﺮك )ﻣﺜﻞ ﺷﺒﮑﻪﻫﺎ، ﺳﺮورﻫﺎ‬
‫ذﺧﯿﺮه ﺳﺎزي، ﺑﺮﻧﺎﻣﻪ ﻫﺎي ﮐﺎرﺑﺮدي و ﺳﺮوﯾﺲ ﻫﺎ( ﻣﻮﺟﺐ ﻣﯽﺷﻮد. اﯾﻦ ﻣﻨﺎﺑﻊ ﻣﯽﺗﻮاﻧﻨﺪ ﺑـﺎ‬
‫ﺳﺮﻋﺖ ﻓﺮاﻫﻢ ﺷﻮﻧﺪ و در ﮐﻤﺘﺮﯾﻦ ﺗﻼش ﻣﺪﯾﺮﯾﺘﯽ و ﺗﻌﺎﻣﻞ ﺑﺎ ﻓﺮاﻫﻢ ﮐﻨﻨﺪه ﺳﺮوﯾﺲ، ارﺳﺎل‬
.‫ﺷﻮﻧﺪ‬

5

6. ‫ﮐﺎﻫﺶ ﻫﺰﯾﻨﻪ‬
‫ﺣﻤﺎﯾﺖ از ﭼﺎﺑﮑﯽ‬
‫ﮐﺴﺐ و ﮐﺎر‬
‫ﻣﻨﺎﺑﻊ ﻣﺴﺘﻘﻞ‬
‫از ﻣﮑﺎن‬
‫ﺻﺮﻓﻪ ﺟﻮﯾﯽ در‬
‫زﻣﺎن‬
‫ﭘﺮداﺧﺖ در‬
‫ﻗﺒﺎل اﺳﺘﻔﺎده‬
‫دﺳﺘﺮﺳﯽ ﺑﻪ‬
‫ﺷﺒﮑﻪ در ﻫﻤﻪ‬
‫ﺟﺎ‬
‫ﻓﻨﺎوري ﺳﺒﺰ‬
‫دﺳﺘﺮﺳﯽ ﺑﻪ ﺧﺪﻣﺎت‬
‫ﻗﺎﺑﻠﯿﺖ ﺗﻮﺳﻌﻪ‬
‫6‬

7. ‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫‪‬‬
‫7‬
‫اﻣﻨﯿﺖ‬
‫ﺣﻔﻆ ﺣﺮﯾﻢ ﺧﺼﻮﺻﯽ‬
‫ﮐﯿﻔﯿﺖ ﺧﺪﻣﺎت‬
‫ﻣﯿﺰان در دﺳﺘﺮس ﺑﻮدن و ﮐﺎراﯾﯽ‬
‫ﺑﻘﺎء اراﺋﻪ دﻫﻨﺪه اﺑﺮ‬
‫ﺟﻨﺒﻪ ﻫﺎي ﻗﺎﻧﻮﻧﯽ‬
‫ﺧﻄﺮات و آﺳﯿﺐ ﭘﺬﯾﺮﻫﺎي ﺟﺪﯾﺪ‬

8. ‫اﺳﺘﺎﻧﺪاردﻫﺎي اﻣﻨﯿﺘﯽ ﺑﺮاي ﯾﮏ اﺑﺮ‬
‫اﺳﺘﺎﻧﺪارد‬
‫رﻣﺰ ﻋﺒﻮر‬
‫8‬
‫ﮐﻨﺘﺮل‬
‫دﺳﺘﺮﺳﯽ‬
‫ﺳﯿﺴﺘﻢ‬
‫ﭘﺸﺘﯿﺒﺎن‬
‫رﻣﺰﻧﮕﺎري‬
‫ارزﯾﺎﺑﯽ ﻧﻈﺎرت‬
‫داده ﻫﺎ و‬
‫ارﺗﺒﺎﻃﺎت‬
‫اﻣﻨﯿﺘﯽﻣﺴﺘﻤﺮ‬

9. (Defense in depth) ‫دﻓﺎع در ﻋﻤﻖ‬
(Honeypot) ‫ﻫﺎﻧﯽ ﭘﺎت‬
(Sandbox) ‫ﺳﻨﺪﺑﺎﮐﺲ‬
(Network Patterns) ‫اﻟﮕﻮﻫﺎي ﺷﺒﮑﻪ اي‬




9

10. ‫‪‬‬
‫‪‬‬
‫‪‬‬
‫01‬
‫ﺷﻨﺎﺳﺎﯾﯽ و اﺣﺮاز اﺻﺎﻟﺖ‬
‫ﺗﺮﮐﯿﺒﯽ از ﺗﮑﻨﯿﮏ ﻫﺎي ﮐﻨﺘﺮل دﺳﺘﺮﺳﯽ‬
‫ﮐﻨﺘﺮل ﻫﺎي ﻣﺪﯾﺮﯾﺘﯽ اﻣﻨﯿﺖ‬

11. ‫ﻧﺘﯿﺠﻪ ﮔﯿﺮي و ﭘﯿﺸﻨﻬﺎدات‬
‫‪‬‬
‫ارﻣﻐﺎن راﯾﺎﻧﺶ اﺑﺮي در آﯾﻨﺪه ﻧﻪ ﭼﻨﺪان دور‬
‫• ﮐﺎﻫﺶ ﻣﻮاﻧﻊ ورود ﺑﻪ ﺗﺠﺎرت ﻧﺮم اﻓﺰاري‬
‫• آﺷﮑﺎرﺳﺎزي روﺷﻬﺎي ﺟﺪﯾﺪ ﮐﺴﺐ درآﻣﺪ‬
‫11‬

12. 







Sosinsky, Barrie A., Cloud Computing Bible, John Wiley, New York, 2011.
Sarena, David E.Y., Implementing and Developing Cloud Computing
Applications, CRC Press, New York, 2011.
Buyya, Rajkumar, Cloud Computing Principles and Paradigms, John Wiley,
New Jersey, 2011.
NIST Cloud Computing Security Working Group, NIST Cloud Computing
Security Reference Architecture Draft, NIST, 2012.
Xiaonian, Wu, "A trust evaluation model for cloud computing", Information
Technology and Quantitative Management, 2013.
Tao, Jie, "An Intuitive Framework for Accessing Computing Clouds",
International Conference on Computational Science, 2011.
Grobauer, Bernd, Walloschek, Tobias, "Understanding Cloud Computing
Vulnerabilities ", IEEE Security & Privacy, 2011.
"Security and Privacy in Cloud Computing: A Survey", IEEE Computer
Society, 2010 Sixth International Conference on Semantics, Knowledge and
Grids, 2010.
12

13. 13