【作者】 王磊；

【导师】 张永泽；

【作者基本信息】 北京邮电大学 ， 工程管理（专业学位）， 2021， 硕士

【摘要】 近年来,随着云技术的广泛发展和应用,新型互联网公司不必再单独维护自己的物理机房,只需要在云厂商提供的云服务上像使用水电煤气一样购买自己需要的机器、计算、存储、网络资源。已经成立多年的公司也在逐步把自己的应用迁移到云上。云服务应用广泛发展的同时,云安全事故也愈发突出,近年来,每年都会出现因为云故障导致的部分公司服务不可用、数据丢失或财产损失等事件,应用云服务的同时怎样做好风险防范措施更为重要。尤其是企业在从传统方式迁移到云上的过程中,会面临线下物理资源和云上虚拟资源两者之间使用方式不一致的问题,出现风险事件的概率也会变大。本文从风险管理的角度出发,首先介绍了风险管理的一般概念,包括风险管理的目标、风险识别、风险防范等。然后介绍了云计算的基本概念,云计算的风险因素和风险预防措施。通过系统的专业文献阅读和典型的应用案例分析,整理归纳企业应用上云迁移过程中的风险构成因素和来源,对每一个风险来源,制定切实可行的风险防范措施。然后结合A公司具体案例,介绍A公司业务形态,分拆A公司业务上云的具体步骤和具体风险,做出WBS-RBS风险矩阵,通过RAC风险评估法评估A公司业务上云面临的风险并制定相应的风险防控措施。更多还原

【Abstract】 In recent years,cloud computing technology has developed rapidly.Benefit from this,new start-ups no longer need to maintain their own physical computer rooms.Instead,they can purchase virtual machine,computing,storage,and network resources they need on the cloud services provided by cloud vendors,just like we purchase water,electricity and gas.Many existing companies are also gradually migrating their applications to the cloud.At the same time,cloud security incidents have become more and more prominent.Every year some companies will suffer property loss due to unavailability of cloud services or cloud data loss.So doing risk prevention is important when using cloud services.Especially during the process of migrating from traditional IDC to cloud environment,in which situation enterprises will face the inconsistency between offline physical resources and cloud virtual resources.First of all,this article introduces the general concept of risk management,including the goal of risk management,risk identification and risk prevention from the perspective of risk management.Then introduces the basic concepts of cloud computing,including cloud computing risk factors and the corresponding prevention measures.Secondly,by reading a lot of professional literature,this paper organizes and summarizes the risk factors during the process of cloud migration,and give practical risk prevention measures for each factor.Finally,take company A as an example,introduce its business model and system architecture.Before migrating to cloud,split the project to specific work steps and risk steps,make a WBS-RBS matrix.Then use RAC risk assessment method to evaluate the risks,and formulate corresponding risk prevention measures.更多还原