政府資訊系統導入雲端服務之安全性及隱私性研究

壽大衛 ； 林旻璋

《TANET2016 臺灣網際網路研討會》 2016 (2016/11) Pp. 975-980-174

https://doi.org/10.6679/TANET.2016.174

摘要

由於雲端運算概念的興起，政府資訊系統由傳統主從式架構逐漸移轉至雲端架構，以達到更快速的部署。政府統一建構雲端機房提供雲端服務給多個機關用戶使用，對政府及機關用戶二者具有相當多的利益，同時，也增強了各機關建置資訊系統時採用雲端服務的意願。雖然雲端運算帶來許多好處，但對機關用戶也產生了一系列的安全問題，機關或民眾之重要資料儲存在未知的雲端主機，這可能導致機關的內部機密及民眾的隱私喪失。本研究將透過文獻整理，討論當政府資訊系統考慮導入雲端服務時，可能的安全性及隱私性威脅，並提出政府資訊系統導入雲端服務時，確保資訊安全及隱私的解決方案。最後，針對提出的解決方案進行態勢分析，探討相關優勢、劣勢、機會和威脅。

關鍵字

雲端安全 ； 資訊安全 ； 資訊隱私 ； 雲端運算 ； 雲端服務

並列摘要

With the cloud computing, information systems provided by the government have gradually been changed from the client/server infrastructure. In order to provide a faster and stable service, the cloud deployment could be the feasible solution. Government has to construct a unified data center to provide the cloud services for customers. All users and the government provider could get the benefits from the cloud computing. Although cloud computing brings many benefits, it causes the security concerns. Because the data are stored in the remote storage, people could not be confident to use the system. Also, the government users could worry for the privacy of those data. In this work, it majorly concentrates to the issues of security and privacy threats for adopting cloud services within government. Finally, it proposes a feasible solution to protect the information security and privacy. Further, use SWOT analysis to find strengths and weaknesses, and the opportunities and threats of the solution.

並列關鍵字

Cloud computing security ； Information security ； Information Privacy ； Cloud computing ； Cloud service