关键多主机计算环境中的高级人员审查技术
Advanced Personnel Vetting Techniques in Critical Multi-Tennant Hosted Computing Environments
摘要：
云计算的出现为关键基础设施提供了一个战略方向，并有望对其系统和网络产生深远影响，以更低的成本为各国提供更好的成果。然而，在考虑云计算时，政府实体必须解决服务成本和灵活性之外的许多安全问题（例如恶意内部人员）。本文的范围和目标是分析、评估和调查敏感基础设施中云安全的内部威胁，并提出两种用于保护商业和政府云基础设施的主动社会技术解决方案。首先，它提出了可操作的框架，技术和实践，以确保人为威胁造成的此类中断不频繁，持续时间最短，可管理，并造成尽可能小的损害。其次，它旨在采取极端的安全措施，分析和评估与人类威胁有关的评估方法，使用认知分析技术，特别是功能性磁共振成像（fMRI），在某些高风险情况下进行员工筛查。这项研究的意义还在于通过提出一套道德和专业准则来应对人权和道德困境。这项工作的主要目标是分析相关风险，确定对策并提出建议，以发展安全意识文化，使云提供商能够有效地利用这种先进技术的好处，而不牺牲系统安全。
英文摘要：
The emergence of cloud computing presents a strategic direction for critical infrastructures and promises to have far-reaching effects on their systems and networks to deliver better outcomes to the nations at a lower cost. However, when considering cloud computing, government entities must address a host of security issues (such as malicious insiders) beyond those of service cost and flexibility. The scope and objective of this paper is to analyze, evaluate and investigate the insider threat in cloud security in sensitive infrastructures as well as to propose two proactive socio-technical solutions for securing commercial and governmental cloud infrastructures. Firstly, it proposes actionable framework, techniques and practices in order to ensure that such disruptions through human threats are infrequent, of minimal duration, manageable, and cause the least damage possible. Secondly, it aims for extreme security measures to analyze and evaluate human threats related assessment methods for employee screening in certain high-risk situations using cognitive analysis technology, in particular functional magnetic Resonance Imaging (fMRI). The significance of this research is also to counter human rights and ethical dilemmas by presenting a set of ethical and professional guidelines. The main objective of this work is to analyze related risks, identify countermeasures and present recommendations to develop a security awareness culture that will allow cloud providers to utilize effectively the benefits of this advanced techniques without sacrificing system security.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
