Lifting the Fog Around Cloud Computing. Eric A. Hibbard, CISSP-ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems

Transcription

1 Lifting the Fog Around Cloud Computing Eric A. Hibbard, CISSP-ISSAP, ISSEP, ISSMP, CISA CTO Security & Privacy Hitachi Data systems 1

2 Straw Poll Cloud Awareness A. To truly understand clouds one should have a solid background in meteorology B. Cloud is the latest marketing buzz used by IT vendors to push their wares C. Cloud is a new business model to only pay for what you use D. New paradigm for using IT resources E. All of the above 2

3 Cloud Computing paradigm for enabling network access to a scalable and elastic pool of shareable physical or virtual resources with on-demand self-service provisioning and administration Terminology Source: ISO/IEC 2ndCD (Cloud computing Overview and vocabulary) 3

4 Major Cloud Computing Roles Cloud Service Customer party which is in a business relationship for the purpose of using cloud services Sub-roles: Cloud Service User, Customer Cloud Service Administrator, Customer Business Manager, and Customer Cloud Service Integrator Cloud Service Provider party which makes cloud services available Sub-roles: Cloud Service Manager, Development Manager, Cloud Service Administrator, Customer Support & Care Representative, Business Manager, Security & Risk Administrator, Inter-cloud Provider Cloud Service Partner party which is engaged in support of, or auxiliary to, activities of either the cloud service provider or the cloud service customer Sub-roles: Cloud Service Developer, Auditor, and Cloud Broker 4

5 Cloud Deployment Models Private Cloud cloud deployment model that is shared exclusively by a single cloud service customer and resources are controlled by the cloud service customer Public Cloud cloud deployment model that is potentially available to any cloud service customer and resources are controlled by the cloud service provider Hybrid Cloud deployment model of cloud computing using at least two different cloud deployment models Community Cloud cloud deployment model that exclusively supports and is shared by a specific collection of cloud service customers and resources are controlled by at least one member of this collection 5

6 NIST View of the Cloud 6

7 Cloud Service Capabilities Cloud Capabilities Type classification of the functionality, based on resources used, provided by a cloud service to the cloud service customer Application Capabilities Type cloud capabilities type in which the cloud service customer can use the cloud service provider s applications Platform Capabilities Type cloud capabilities type in which the cloud service customer can deploy, manage and run customercreated or customer-acquired applications using programming language specific execution environment supported by the cloud service provider Infrastructure Capabilities Type cloud capabilities type in which the cloud service customer can provision and use processing, storage and networking resources so that they are able to deploy and run arbitrary software 7

8 Common Cloud Service Categories Infrastructure as a Service (IaaS): a cloud service category in which the cloud capabilities type provided to the cloud service customer is an infrastructure capabilities type Platform as a Service (PaaS): a cloud service category in which the cloud capabilities type provided to the cloud service customer is a platform capabilities type Software as a Service (SaaS): a cloud service category in which the cloud capabilities type provided to the cloud service customer is an application capabilities type Network as a Service (NaaS): a cloud service category in which the capability provided to the cloud service customer is transport connectivity and related network functionalities. 8

9 Common Cloud Service Categories Communications as a Service (CaaS): a cloud service category in which the capability provided to the cloud service customer is real time communication and collaboration. Data Storage as a Service: (DSaaS): a cloud service category in which the capability provided to the cloud service customer is the provision and use of data storage and related capabilities Compute as a Service: (CompaaS): a cloud service category in which the capabilities provided to the cloud service customer are the provision and use of processing resources needed to deploy and run arbitrary software. 9

10 Building Cloud Service Categories Network as a Service (NaaS) Cloud Cross-cutting Aspects Cloud Service Capabilities Application Capabilities Type Platform Capabilities Type Infrastructure Capabilities Type Public Hybrid Private 10

11 Service Categories vs. Capability Types Cloud Service Categories Software as a Service Platform as a Service Infrastructure as a Service Cloud Capabilities Types Infrastructure Platform Application X Network as a Service X X X Data Storage as a Service X X X Compute as a Service X Communication as a Service X X... X X Washing-machine as a Service (WaaS) 11

12 Take Aways 12

13 Background Slides 13

14 Sample Cloud SDO Relationships CSA ITU-T CT-CC ENISA ISO/IEC SC27 ISO/IEC SC38 TCG INCITS/ CS1 INCITS/ DAPS38 Formal Informal IEEE NIST SNIA DMTF 14

15 Standards Alphabet Soup CSA = Cloud Security Alliance DMTF = Distributed Management Task Force ENISA = European Network and Information Security Agency ETSI = European Telecommunications Standards Institute IEC = International Electrotechnical Commission IEEE = Institute of Electrical and Electronics Engineers INCITS = International Committee for Information Technology Standards ISO = International Organization for Standardization ITU-T = International Telecommunication Union Telecom NIST = National Institute for Standards and Technology OASIS = Organization for the Advancement of Structured Information Standards SNIA = Storage Networking Industry Association TCG = Trusted Computing Group 15

16 ISO/IEC Cloud Computing Reference Architecture (Functional Components) 16

17 THANK YOU 17