Abstract: Security issues in cloud computing and situation of too many cloud service providers in market require a effective and all-sided approach for vendor choosing which is based on authoritative frameworks. This paper proposes a meta-synthesis cloud-oriented selection method called DCGVE, builds an extended indexes system founded on consensus assessment initiative, grants combination weight for each index through G1 objective technique and coefficient of variation subjective technique, defines comprehensive optimal approach degree for cloud through Euclidean distance. Calculation and analysis of normalized reports from CSA STAR shows that the suggested method has comprehensive selection criteria as well as clear process with high discrimination.

Key words: cloud computing, cloud security alliance, consensus assessment initiative, security assessment, meta-synthesis, G1 method

摘要： 云计算的安全问题及市场中云供应商众多的现状，要求有基于权威框架的、有效而较全面的供应商选择方案。提出面向云计算的综合集成DCGVE选择方法：使用德尔菲法构建云计算共识评估的扩展指标体系，利用G1法与变异系数法对各指标进行主、客观综合集成赋权，引入欧氏距离来定义云平台综合最适贴近度。对CSA STAR中的报告规范化后的计算与分析表明提出的方法使用的选择准则全面，过程清晰，结果区分度较高。

关键词: 云计算, 云安全联盟, 共识评估计划, 安全评估, 综合集成, G1法