Cloud Based Computing NYSTA

Transcription

1 Cloud Based Computing February NYSTA Jon Brown Sr. Technology Leader (605)

2 Agenda A History of Resource Sharing Present Day Cloud Based Computing Service Models, Products Being Delivered Does the Cloud have your privacy best interests in mind? Surprising ways to harvest personal data Social Stalking Protecting your Data and your Customers What does this mean to me as a provider? Summary and Conclusions Page 2

3 History of Resource Sharing

4 Distributed Computing

5 History of the Cloud 1961 United States computer guru John McCarthy (inventor of the term AI) first suggested the idea of computer timesharing In the early 1990s, the Cloud was used to represent the computing space between the provider and the end user In 1997 Professor Ramnath Chellapa of Emory University defined Cloud Computing as computing paradigm where the boundaries of computing will be determined by economic rationale rather than technical limits alone.

6 First Cloud Based Service Offerings In the early 2000s Salesforce.com and Amazon.com introduced web-based retail services. At the time it s estimated Amazon was only using less than 10 percent of its capacity at any given time Google enters the market with Cloud based Google Docs

7 Cloud Based Services Mature 2006 Amazon Launches Simple storage Service October 2011, Apple launches icloud 2011, Chinese ecommerce announced plans for cloud based operating systems for smart phones Cloud Based Services are now considered Mainstream and used for both residential as well as business services.

8 Present Day Cloud Based Computing

9 Service Models Infrastructure as a Service (IaaS) Platform as a Service (PaaS) Software as a Service (SaaS) Network as a Service (NaaS) Storage as a Service (STaaS) Security as a Service (SECaaS) Desktop as a Service (DaaS) All offered either in Private or Public Clouds

10 Why Cloud? Pooling of resources helps increase efficiencies If planned correctly, can reduce cost Step and tear-down of software solutions can be done much more rapidly High Availability (HA) enhancements Distributed designs supported for Geographical redundancy

11 Industries Deploying Cloud Based Solutions Today Medical Smart-Grid Financial Billing Systems and Software Providers Hardware Vendors Both Cloud based support as well as management services. CyNOC, Calix Compass etc. Education and Academics Research Labs

12 Cloud Based Entertainment Many anticipate cloud based gaming to eventually eliminate software (piracy) Rhapsody, Pandora, Grooveshark, Slacker Radio, Iheart Radio.. All Cloud Based entertainment.

13 VPS Client Cloud Service Offerings Network Backup Services Server Virtualization Server Redundancy Hosted PBX and Firewall Services Rebranding of Google Docs Dell AppAssure Backup Solution offers backup private as well as sync to the public Cloud

14 NAS Services Network Attached Storage Promotes home networking Promotes broadband, cloud services, web development, etc. Could make more sticky customers Page 14

15 Business IT Services IT Networking Support Networking, Microsoft Exchange, Web Hosting, Firewall, Intrusion Detection, etc. Off-site Backup ISP Server Virtualization HA and Disk Efficiencies Server Virtualization Cloud Computing Page 15

16 AT&T, IBM Share Network to Lure More Customers to Cloud AT&T Inc. (T) and International Business Machines Corp. (IBM) are combining their resources in a joint offering to seek a bigger slice of the $14 billion market for cloud services. IBM, the world s biggest computer services provider, will provide the datastorage facilities and services, and AT&T, the largest U.S. phone carrier, will offer the global network that clients will use to retrieve the data, the companies said today in a statement. They ll split revenue from the deal. Cloud services refer to storing information and software in off-site data centers. Bloomberg News - By Sarah Frier on October 09, 2012 Page 16

17 Unexpected Cloud Services Electric Sheep Sleeping computers communicate together to make animation called sheep Quake Catcher world s largest, low-cost strong-motion seismic network by utilizing sensors and distributed Computing

18 Does the Cloud have your Privacy Best Interests in Mind?

19 Apps Talk more than you know Many Cloud based solutions are designed to cross platforms. Handheld to PC to Phone Most times this is considered a good thing but not always Google+ Dropbox and Picasa are good examples

20 Leader in your personal information in the cloud? Guess who? 1 million End of million End of million End of million April million October million August million January million February million April million July million September million End of million February million July million End of million July million September million End of million March million June billion October 2012.

21 You are already in the Cloud Netflix / Vudu Gmail / Google Docs Hotmail Skype Facebook Twitter Instagram Dropbox, Carbonite

22 Stalking in Today s Uber- Social World.. Controversial iphone app harvests Facebook and Foursquare data to find local women near you. App has been shutdown (maybe)

23 Facebook Stalking 63 Percent of FB profiles are visible to anyone 83% of College Students in a study regularly check their ex s FB 74% regularly check the new girlfriends FB In 2009, 20% of U.K. divorce papers referenced FB activities

24 Breakup Notifier

25 Now that s Creepy App harvests Geo-location data embedded in photos and tweets to map out a users activity

26 Instagram Stalking App known as Beat determines location photo was taken when uploaded to Instagram

27 Minority Report.. A Carnegie Mellon research team from the school's cybersecurity institute will present to Black Hat, a security conference in Las Vegas, the results of a rather frightening look into facial-recognition software. Using store-bought software, cloud computing, and publicly available information from social networking sites, the team, led by associate professor Alessandro Acquisti, was able to gather data about people, sometimes even their Social Security numbers, just by pointing a camera at them. An app was then created to do it all

28 SceneTap.. Facial Recognition app that is being used in Bars to tell potential patrons of the general age and sex of people currently in the bar before they go in. Is being used in some locations for other applications.

29 Recent Cloud Based Attacks Experts suspect use of Amazon Elastic Web Services Cloud computing as Launchpad for attack on PlayStation Network (Distributed) Dropbox had significant attack with software upgrade that resulted in ability to log into accounts with no password. Proves need to constantly maintain and test your network security after software upgrades Amazon cloud outage that took down hospital life support systems

30 Protecting your Privacy and the Privacy of your Customers

31 Protecting Your Private Life Backup everything in the Cloud and on the ground Use a number of complex unique passwords Don t link all your accounts together Turn on Two factor Authentication for Google and Facebook Login Login Approvals Lock your phone with a passcode Don t use find my mac service

32 Staying Safe on Social Networks Do take advantage of privacy settings and encourage your friends to do the same. Use the View As feature of FB to see what others can see Don t announce your vacation plans Accept friend requests with caution Don t include too much Identifying info Ask questions of the sender before clicking a link Don t automatically trust everyone

33 Cloud Security Standards you need to know as a Business Data Protection Directive COBIT 4.1 HIPAA / HITECH Act ISO/IEC NIST SP R3 PCI DSS v2.0 BITS Shared Assignments SIG v6.0 GAAP Jericho Forum NERC CIP

34 NIST Security Guidelines Carefully plan the security and privacy aspects of cloud computing solutions before engaging them Understand the public cloud computing environment offered by the cloud provider. Special Publication provides additional guidelines

35 What does all this mean to me as a Provider?

36 Can I be a player in the Cloud based economy? Yes, you should be considering options for offering services that leverage distributed and resilient computing This could be as simple as your own geographical backup solutions, You have the Pipe to the subscriber and can backup data much faster than they can send to dropbox or carbonate VPS is working with vendors to coordinate local Dropbox and Carbonate storage in Telco CO s Careful planning and a deep look into network and physical security is a must

37 Summary and Conclusions Cloud Based Computing and computing timesharing have been utilized since the 50 s. Cloud Based Computing brings a number of benefits for both legitimate leverage of additional CPU cycles and storage as well as potentially illegal and disruptive activities. Cloud Based Computing will continue to grow with customers adopting services without fully understanding the security implications or that it is even Cloud Based

38 Wrap-up Users are getting more technical and are more apt to do something stupid without knowing it Use of Cloud Based products, social networking etc. presents a risk of data harvesting and potential stalking, identify theft etc. For this reason it is important to understand and implement security features and limit exposure online of sensitive personal information.

39 Thank You!

40 Home Security Users more likely to purchase a package from local Telco than search among thousands of options online Telco could offer installation and support of the system Page 40