ISSN 1000-1239 CN 11-1777/TP

计算机研究与发展 ›› 2015, Vol. 52 ›› Issue (6): 1362-1377.doi: 10.7544/issn1000-1239.2015.20140227

• 信息安全 • 上一篇    下一篇

弹性移动云计算的研究进展与安全性分析

李鹏伟1,2,傅建明1,2,3,李拴保1,2,吕少卿4,沙乐天5   

  1. 1(武汉大学计算机学院 武汉 430072);2(空天信息安全与可信计算教育部重点实验室(武汉大学) 武汉 430072);3(软件工程国家重点实验室(武汉大学) 武汉 430072);4(综合业务网理论及关键技术国家重点实验室(西安电子科技大学) 西安 710071);5(南京邮电大学计算机学院 南京 210046) (xu_pang@163.com)
  • 出版日期: 2015-06-01
  • 基金资助: 
    基金项目:国家自然科学基金项目(61373168,61202387);高等学校博士学科点专项科研基金项目(20120141110002)

Elastic Mobile Cloud Computing:State of the Art and Security Analysis

Li Pengwei1,2,Fu Jianming1,2,3,Li Shuanbao1,2, Lü Shaoqing4, Sha Letian5   

  1. 1(Computer School, Wuhan University, Wuhan 430072);2(Key Laboratory of Aerospace Information Security and Trusted Computing(Wuhan University), Ministry of Education, Wuhan 430072);3(State Key Laboratory of Software Engineering(Wuhan University), Wuhan 430072);4(State Key Laboratory of Integrated Services Networks(Xidian University), Xi’an 710071);5(School of Compter Science & Technology , Nanjing University of Posts and Telecommunications, Nanjing 210046)
  • Online: 2015-06-01

摘要: 弹性移动云计算(elastic mobile cloud computing, EMCC)中,移动设备按照实时需求将部分任务迁移到云端执行,无缝透明的利用云资源增强自身功能.将现有EMCC方案分为雇佣云端完成部分计算密集任务的计算迁移型移动云计算(computing migration-mobile cloud computing, CM-MCC)和通过云端的虚拟移动设备来辅助或代替移动设备完成多种任务的云端代理型移动云计算(cloud agent-mobile cloud computing, CA-MCC)两类,分别对CM-MCC,CA-MCC的适用场景、实现流程、关键技术、存在问题及相应解决方法进行研究并指出其发展方向.对EMCC所面临的主要安全威胁,包括用户的错误操作或恶意行为、恶意代码、通信安全以及虚拟系统漏洞、多租户、不安全资源等云安全问题进行分析并研究相应防御方法,指出安全问题将是EMCC研究的重点和难点.

关键词: 移动云计算, 计算迁移, 云端代理, 虚拟移动设备, 安全威胁

Abstract: Elastic mobile cloud computing (EMCC) enables the seamless and transparent use of cloud resource to augment the capability of mobile devices by off-loading parts of mobile devices’ tasks to cloud according to the real-time user requirement. By summarizing the service providing models of EMCC, we divide existing EMCC models into two categories: computing migration-mobile cloud computing(CM-MCC), in which the mobile devices employ the cloud to perform the parts of their computing intensive tasks; and cloud agent-mobile cloud computing(CA-MCC), in which the cloud maintains one or more virtual mobile devices for each mobile device and these virtual mobile devices are synchronized with the mobile device to complete various tasks such as computing, storage, security and communication instead of the mobile device. Then the applicable scenarios, the implementation method, the key issues, and the future research of EMCC models in each category are studied. After that, we analyze the critical security threats of EMCC, including users’ error operations or malicious actions, malicious applications, communications security problems, and cloud computing security issues such as the vulnerabilities of virtual system, multi-tenant problems, malicious cloud service providers. The corresponding defenses of these threats are discussed. At last, we point out that security is a key issue for EMCC.

Key words: mobile cloud computing (MCC), computing migration (CM), cloud agent (CA), virtual mobile device (VMD), security threats

中图分类号: