Security Concerns with Cloud Computing
Total Page:16
File Type:pdf, Size:1020Kb
IBM Power Systems Security Considerations for Cloud Deployment Jeff Uehling, IBM i Network & Security Development [email protected] IBM - Rochester, MN © 2010 IBM Corporation IBM Power Systems What is Cloud Computing? Is Cloud Computing really a new concept? © 2010 IBM Corporation IBM Power Systems What is Cloud Computing? … An IT consumption and delivery model Cloud computing is a consumption and delivery model inspired by consumer Internet service and is optimized for IT / Business Services Cloud enables : – User self-service – Outsourcing options – Dynamic scalability Multiple types of clouds will coexist: – Private – Deployed Inside a customer’s firewall – Public – Provided and managed by a 3 rd party via subscription An effective cloud deployment is built on a – Hybrid – a mix of Public and Private dynamic Infrastructure and should be part of models based on Workload an overall Data Center transformation plan © 2010 IBM Corporation IBM Power Systems Clouds enable a broad spectrum of deployment options © 2010© 2010IBM CorporationIBM Corporation IBM Power Systems Cloud Differentiators… There are Many! Time to Deploy a Server Weeks or Months Seconds to Minutes Commitment to use Service Negotiate & Commit Year-long Contract Select from Catalog & Pay As You Go Necessary Upfront Investment $ $K-$M in Infrastructure → $$ per IT hour No or Low Upfront → ¢ per IT hour © 2010 IBM Corporation IBM Power Systems IT Benefits from Cloud Computing are Real… Results from IBM cloud computing engagements Increasing Test provisioning Weeks Minutes speed and flexibility Change management Months Days/hours Release management Weeks Minutes Service access Administered Self-service Standardization Complex Reuse/share Metering/billing Fixed cost Variable cost Reducing Server/storage utilization 10–20% 70–90% costs Payback period Years Months Source: Based on IBM and client experience. © 2010 IBM Corporation IBM Power Systems Cloud technologies can offer operational expense reductions and improved service at all layers Agents End Users Support Community People Crowdsourcing Services Retail Banking Trade & SC Finance Payments Mobile Banking Front Office Optimization Business Services Customer Care Payments Int. Risk Mgmt. Industry Frameworks & Information Foundation Application Services End User Interaces Service/Software Partnerships B2B Mashup Server Catalogs Open Foundation (WS Framework, Service Bus) Platform Fulfillment Assurance Billing Services Experience Service Cloud Business & Operations Support Management. Dynamic Provisioning Process & Policy Mgmt. Problem & Change Mgmt. Distributed Cloud Computing Services Infrastructure Services Data Mgmt. Virtualization Workload Mgmt SLA & Capacity Provisioning Security Monitoring © 2010 IBM Corporation IBM Power Systems Cloud: because the majority of IT cost is in people, Cloud Computing is becoming popular at the higher layers MBPS (eHR, LBPS, etc.) Live Mesh ‘People’ Services Business Services Live BCRS Application Services ISS Platform Services Service Cloud Layers Cloud Service ISSC/SO Infrastructure Services 2000 2006 2009 Static, dedicated, outsourced Network-delivered, off-premises Shared, automated, dynamic © 2010 IBM Corporation IBM Power Systems What Cloud Services are available today? Hundreds… Thousands… growing by the day! © 2010 IBM Corporation IBM Power Systems Cloud Delivery Examples Market IBM Examples Examples Collaboration CRM/ERP/HR Business Industry Processes Applications Software-as-a-Service Web 2.0 Application Java Middleware Runtime Runtime Development Database Tooling Developer Platform-as-a-Service Cloud Data Center Servers Networking Storage Fabric Shared virtualized, dynamic provisioning Computing on Infrastructure-as-a-Service Demand © 2010 IBM Corporation IBM Power Systems Top public workloads Top private workloads Audio/video/Web conferencing Data mining, text mining, or other analytics Service help desk Data warehouses or data marts Infrastructure for training and demonstration Business continuity and disaster recovery WAN capacity and VoIP infrastructure Test environment infrastructure Desktop Long-term data archiving/preservation Test environment infrastructure Transactional databases Storage Industry-specific applications Data center network capacity ERP applications Server Infrastructure and Database, application and collaboration workloads infrastructure workloads emerge as most appropriate emerge as most appropriate for a for a Public offering Private offering © 2010 IBM Corporation IBM Power Systems Cloud Usage Models 1. End User to Cloud - Application running on the cloud with access for end-users 2. Enterprise to Cloud to End-user (Interoperability) - Applications running in the public cloud – access from employees and customers 3. Enterprise to Cloud (Integration) - Cloud application integrated with internal IT capabilities 4. Enterprise to Cloud to Enterprise (Interoperability) - Cloud application running in the public cloud and interoperates with partner applications (supply chain) 5. Enterprise to Cloud (Portability) - Cloud application running in the cloud – flexibility to move to a different cloud provider in the future or in-house 6. Private (intra) Clouds - Interoperability / integration within elements of a private cloud and between a private cloud and a traditional environment © 2010 IBM Corporation IBM Power Systems Model 1: End User to Cloud What is it ? – Application running in the cloud with access for end-users Public Cloud Scenarios : Application – Get new Web app provisioned worldwide quickly (e.g., the next facebook, linkedin, gmail, etc …) – Don’t need IT infrastructure, flexible acquisition © 2010 IBM Corporation IBM Power Systems Model 2: Enterprise to Cloud to End-user What is it: – Deploy cloud based application specifically for the cloud – access for employees and for customers Public Cloud Scenarios: – Online sales through catalog, needs to link back into enterprise systems for fulfillment Application • web app and shopping cart in cloud, fulfillment inside existing enterprise systems External – Two sub-models • End User is employee in the Enterprise (e.g., Travel Expense Account Internal application) • End User is Web customer outside the Enterprise (e.g., online sales) Enterprise IT (Traditional, Private Cloud or Hybrid) © 2010 IBM Corporation IBM Power Systems Model 3: Enterprise to Cloud (Integration) What is it? Public Cloud B – Cloud application – integrated with internal IT capabilities Application / Data Scenarios : – Typical approach of integrate with existing on premises and off- External premises capabilities or other cloud application (customer list, access Internal Integrate with control, data) existing on premise capabilities Enterprise IT (Traditional, Private Cloud or Hybrid) © 2010 IBM Corporation IBM Power Systems Model 4: Enterprise to Cloud to Enterprise What is it? – Cloud application running in the public cloud – interoperate with partner applications (supply chain) Public Cloud Scenarios : Application – Brokers, common function providers Application (e.g., supply chain, broadcast recall to multiple customers, broadcast RFP to suppliers, “classic” B2B) Large manufacturer A External Internal Large manufacturer B © 2010 IBM Corporation IBM Power Systems Model 5: Enterprise to Cloud (Portability) What is it? – Cloud application and/or data running in the cloud – flexibility to move to a different cloud Public Cloud A Public Cloud B provider in the future or in-house Application / Application / Scenarios: Data Data – Flexibility and choice to change application Move to platform suppliers another cloud – “Write once, run anywhere” External Move in- Internal house Application / Data Enterprise IT (Traditional, Private Cloud or Hybrid) © 2010 IBM Corporation IBM Power Systems Model 6: Private (intranet) Cloud What is it? – A “private” cloud-based service, offers many of the benefits of a public cloud computing environment. The difference is External that data and processes are managed within the organization. Internal Scenarios : – The enterprise would leverage a private cloud to provide Self-service capabilities, On-Premise or Off Premise real-time infrastructure. – Interoperability / integration within elements of a private cloud and between a Private Cloud private cloud and a traditional environment OS Images (Virtual / Physical) Database Schema /Instances Storage (SAN/NAS) © 2010 IBM Corporation IBM Power Systems If this is so logical… Why isn’t everyone doing it? © 2010 IBM Corporation IBM Power Systems So what type of business and security challenges does cloud computing introduce? Today’s Data Center Tomorrow’s Public Cloud We Have Control Who Has Control? It’s located at X. Where is it located? It’s stored in server’s Y, Z. Where is it stored? We have backups in place. Who backs it up? Our admins control access. Who has access? Our uptime is sufficient. How resilient is it? The auditors are happy. How do auditors observe? Our security team is engaged. How does our security team engage? © 2010 IBM Corporation IBM Power Systems Security is a top concern with cloud computing… The Tale of two studies shows that Security is the number one inhibitor to customers adopting cloud technologies. What, if anything, do you perceive as actual or potential barriers to acquiring public cloud services? Security/privacy of company data 69% Service quality 54% Doubts about true cost savings 53% Performance / Insufficient 52% responsiveness over network Difficulty integrating with in-house IT