Moving to the Cloud: NIST Vision and Initiatives

Transcription

1 Moving to the Cloud: NIST Vision and Initiatives part of the US Federal Cloud Computing Strategy Dawn Leaf NIST Senior Executive for Cloud Computing March 16, 2011

2 Gaithersburg, Maryland, USA NIST Mission: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life Robert Rathe Courtesy HDR Architecture, Inc./Steve Hall Hedrich Blessing Boulder, Colorado, USA Geoffrey Wheeler

3 Purpose Today Information Exchange Background: US Federal Cloud Computing Strategy universal challenges NIST program goals & rationale Context: program timeline Opportunities: collaboration & working group efforts Highlights: progress & examples of useful information for cloud adopters Special focus: Standards Acceleration to Jumpstart the Adoption of Cloud Computing (SAJACC) & security work General Comments & Questions? National Institute 3 of

4 NIST Cloud Computing Program Goal Accelerate the federal government s secure adoption of cloud computing* Build a USG Cloud Computing Technology Roadmap which focuses on the highest priority USG cloud computing security, interoperability and portability requirements Lead efforts to develop standards and guidelines in close consultation and collaboration with standards bodies, the private sector, and other stakeholders * REF 4

5 Universal Challenges Rule Book from the Chicago, Milwaukee, St. Paul and Pacific Railroad Company dated 1959., antiqueradio museum.org Adopters need a Rulebook cloud model is emerging -- there isn t a large installed base mainly commodity & infrastructure Providers need to understand the specific issues and barriers not just general security, interoperability & portability concerns Improve our music.com, Musicians are Expert Mind Readers, Mark Gibson, January 2009 Copy right free images Detailed cloud computing services are defined in the eye of the beholder hard to get apples to apples comparison 5

6 Universal Challenges Balance -- between advantages of formal standards development processes and market driven defacto standard specifications US Library of Congress Backlog of internet driven policy questions & decisions (e.g. privacy and security) now need to be considered in light of cloud roles & responsibilities US Library of Congress The Cloud Computing space & community is so broad that it isn t feasible to cover all relevant work & collaboration opportunities Copy Right Free Images 6

7 Strategic Program NIST Cloud Computing Program Concept & Rationale How to build a USG Cloud Computing Standards Roadmap 1. Define Target USG Cloud Computing Business Use Cases 2. Define Neutral Cloud Computing Reference Architecture & Taxonomy priorities risks obstacles 3. Generate Cloud Computing Roadmap Interagency Report: Translate Requirements USG Cloud Computing & Identify Gaps Technology Roadmap list of Tactical Priorities & Deliverables Expand CC Definition ref. architecture Tactical Program NIST CC efforts SDO submissions & support Guidance Special Publications; technical advisor to Fed CIO Council Standards Acceleration to Jumpstart the Adoption of Cloud Computing (SAJACC) -- through qualitative testing of specifications against interoperability, security, and portability requirements Complex Computing Simulation & Modeling Koala IaaS resource allocation algorithms Concurrent & Iterative 3-step process that drives tactical efforts Beneficial bi-product: Identify priorities for hand-off to other stakeholders policy makers, prototypes, pilots, R&D organizations 7

8 NIST Cloud Computing Program Timeline S T R A T E G I C NIST CC Definition May 2010 NIST CC Forum & Workshop I Outreach & Fact finding with USG, Industry, SDOs Evaluate past models & lessons learned Define fresh approach to support secure & effective USG cloud computing adoption, prioritize interoperability, portability, & security requirements, collaborate, more quickly respond to operational needs Tactical efforts Nov 2010 NIST CC Forum & Workshop II Launch CC Strategic Program Initiate Stakeholder Meetings Collaboratively define working group scope & resources Develop Detailed Plan March 2011 NIST CC Forum & Workshop III Execute CC Strategic program Continue Stakeholder meetings Integrate results into tactical priorities Oct 2011 NIST CC Forum & Workshop Complete USG Cloud Computing Standards Roadmap Interagency Report Assess Results & Replan 8

9 NIST Cloud Computing Forums & Workshops Cloud Computing Forums & Workshops (May & Nov. 2010) attendees with broad industry, SDO, government & international community program participants NEXT ONE is April 7 & 8, 2011 on the NIST Gaithersburg MD campus 9

10 NIST Cloud Computing Collaboration Site each strategic & tactical effort is a NIST-led project & working group Public NIST cloud web site url 10

11 NIST Cloud Computing Program Highlights May 2010 through February 2011 Reference Architecture -- surveyed and completed initial analysis of (10) cloud reference architecture models proposed by known cloud organizations, providers and federal agencies, including: Cloud Computing Use Case Discussion Group, Distributed Management Task Force, Cloud Security Alliance, IBM Cloud Reference Architecture, GSA: Federal Cloud Computing Initiative, Cisco Cloud Reference Architecture Framework Open Security Architecture: Secure Architecture Models, SNIA standard: Cloud Data Management Interface, Elastra: A Cloud Technology Reference Model for Enterprise Clouds; Developed reference architecture & taxonomy concepts to facilitate working group efforts Developing neutral reference architecture & companion taxonomy Concept only.. SaaS Application Biz Users CIOs and IT Managers PaaS IaaS Middle ware OS Hype rvisor Hard ware Software as a Service Platform as a Service Cloud Service Developers, Vendors System Developers Infrastructure as a Service

12 NIST Cloud Computing Program Highlights May 2010 through February 2011 Standards Developing Organizations participation NIST submitted the NIST Definition of Cloud Computing, V15, as a proposed US National Body contribution to the International Organization for Standardization/International Electrotechnical Commission - Joint Technical Committee 1/Subcommittee 38, Distributed Application Platforms & Services (JTC 1/SC 38 Cloud Computing Study Group) (Jan 2011) Standards Acceleration to Jumpstart Adoption of Cloud Computing (SAJACC) Portal launched September 2010; (24) interoperability, security, & portability requirements draft use cases publically available November 2010; Proof of concept test driver available for data interface February 2011 NIST SAJACC Process Community Outreach Existing Standards Working Groups NIST Cloud Standards Portal Use Cases Validated Specifications reference Implementations specifications standards Standards Development Organizations

13 NIST Cloud Computing Program Highlights May 2010 through February 2011 Special Publications: 1. SP , DRAFT Guide to Security for Full Virtualization Technologies, July 2010; revised Dec SP , DRAFT Guidelines on Security and Privacy Issues in Public Cloud Computing, Jan SP , DRAFT Cloud Computing Definition, Jan 2011 SPs inform best practices, but are not a rule book -- key considerations Cloud computing is another model each organization best understands its mission and requirements, and can best assess the deployment strategy, benefits, & risks Need an Exit Strategy Need to retain policies cloud is not an abdication of responsibility Consider negotiated service level agreements

14 Questions? 14