基于Nginx的云計算訪問控制網關的設計與實現.pdf

1、北京交通大學碩士學位論文基于Nginx的云計算訪問控制網關的設計與實現姓名：聶鵬申請學位級別：碩士專業(yè)：信息安全指導教師：韓臻201106ABSTRACTCloudC0mpu衄is印、耐I培rapidly，globalsalesof也etopfivesomⅣ玳comp鋤ytsmainpr0￡IuctsareiIlcludedcloudcoInputingtechnologyNow山nazontsEC2andGoo哲e‘sGoo舀eApp

2、En百neisat)rpicalcloudcomputiI培services，t11eyuSetheIntemett0coIlnectt0eXteInalIlsers，nh嬲gonetllrou曲Distributedprocessing—ParallelComputing一僦dComputing—CloudComputingiIl廿1edevelopmentprocess，Altllou曲maIlycompaIlies∞C09mzet

3、headvantagesofcloudC0mputiIlg，t11eystilldonotwanttoo、Ⅳnsensitiveda：taorcriticalbusiIless缸。缸lecloud，衄isbecauset11erearem觚ysecurit)，problemsincloudcomputiIlgItistllesesecudt)rproblemshaveco碰岫edthedevelopmentofcloudcomputin

4、gA1t110Ilgllt11erearemaIlybenefitsofcloudcoII】lpu血培，butmereisstiUabarriert0ple1呦t班汜rS丘Iomllsingcloudservices，cloud也atistllesccllrj晦鋤dpriVacyis吼屺sUsersarco‰notin也eircoIltroliIl鋤env曲nmentofsk印ticis馳soit諏Unote嬲ilyputⅡleirse

5、nSitivedataincloudservicesThecloudservicepr0Viderforaccesscomrolattllem撕orkla)rermaildycontaillStlleiIllplemen枷onof伍ec鶴ein“vo、硯Iys：1)B嬲edonfirev涮l，廿1isappIroachtomeIP趾dportaccesspemissioIls硒t11ebenCbm烈lkfort11e砌i捌on，butt

6、llisa腫achh硒obviouSlinlitatioIls齜ldsecuri夠risks2)BaSedongatew姒this印proachisno姍a11ypr0VidedbyCSP(CloudSeⅣiceProvider)t0deVelopacCesscon臼olpolicy，Ⅱleten趾tisresponsiblefordeveloph培S臼ategies，andtllensub面ttedtoaleCSP(CloudServ

7、iCePr0Vider)aIldwaitforappr0ValThem咖workofthepaperis：1)Achieveal(iIldofgatewayb嬲edaccessc0Iltrolmode，Illi鏟atethe缸甜itionalaccesscon缸olmodelbasedontllefire、valltomeaccessconnIolgatewayt0proVidemorefl兩blefilte血g，such嬲u訂，use