DOCSLIB.ORG

Cloud Computing Parallel Session Cloud Computing

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Cloud Computing Parallel Session Cloud Computing Cloud Computing Parallel Session Jean-Pierre Laisné Open Source Strategy Bull OW2 Open Source Cloudware Initiative Cloud computing -Which context? -Which road map? -Is it so cloudy? -Openness vs. freedom? -Opportunity for Europe? Cloud in formation Source: http://fr.wikipedia.org/wiki/Fichier:Clouds_edited.jpg ©Bull, 2 ITEA2 - Artemis: Cloud Computing 2010 1 Context 1: Software commoditization Common Specifications Not process specific •Marginal product •Economies of scope differentiation Offshore •Input in many different •Recognized quality end-products or usage standards •Added value is created •Substituable goods downstream Open source •Minimize addition to end-user cost Mature products Volume trading •Marginal innovation Cloud •Economies of scale •Well known production computing •Industry-wide price process levelling •Multiple alternative •Additional margins providers through additional volume Commoditized IT & Internet-based IT usage ©Bull, 3 ITEA2 - Artemis: Cloud Computing 2010 Context 2: The Internet is evolving ©Bull, 4 ITEA2 - Artemis: Cloud Computing 2010 2 New trends, new usages, new business -Apps vs. web pages - Specialized apps vs. HTML5 - Segmentation vs. Uniformity -User “friendly” - Pay for convenience -New devices - Phones, TV, appliances, etc. - Global economic benefits of the Internet - 2010: $1.5 Trillion - 2020: $3.8 Trillion Information Technology and Innovation Foundation (ITIF) Long live the Internet ©Bull, 5 ITEA2 - Artemis: Cloud Computing 2010 Context 3: Cloud on peak of inflated expectations According to professional weathermen ©Bull, 6 ITEA2 - Artemis: Cloud Computing 2010 3 Cloud history ©Bull, 7 ITEA2 - Artemis: Cloud Computing 2010 Cloud history BULL ©Bull, 8 ITEA2 - Artemis: Cloud Computing 2010 4 Cloud history Time Sharing BULL ©Bull, 9 ITEA2 - Artemis: Cloud Computing 2010 Cloud history Time Service Sharing Bureau BULL ©Bull, 10 ITEA2 - Artemis: Cloud Computing 2010 5 Cloud history Time Service Sharing Bureau BULL Microsoft ©Bull, 11 ITEA2 - Artemis: Cloud Computing 2010 Cloud history Time Service Sharing Bureau BULL Microsoft ©Bull, 12 ITEA2 - Artemis: Cloud Computing 2010 6 Cloud history Time Service Sharing Bureau BULL Microsoft Apple ©Bull, 13 ITEA2 - Artemis: Cloud Computing 2010 Cloud history Time Service Sharing Bureau Oracle BULL Microsoft Apple ©Bull, 14 ITEA2 - Artemis: Cloud Computing 2010 7 Cloud history Time Service Sharing Bureau Oracle BULL Microsoft Sun Apple ©Bull, 15 ITEA2 - Artemis: Cloud Computing 2010 Cloud history Time Service Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 16 ITEA2 - Artemis: Cloud Computing 2010 8 Cloud history ASP Time Service Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 17 ITEA2 - Artemis: Cloud Computing 2010 Cloud history IaaS ASP Time Service RackSpace Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 18 ITEA2 - Artemis: Cloud Computing 2010 9 Cloud history IaaS ASP Apache Linux Time Service RackSpace Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 19 ITEA2 - Artemis: Cloud Computing 2010 Cloud history IaaS ASP Napster Apache Linux Time Service RackSpace Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 20 ITEA2 - Artemis: Cloud Computing 2010 10 Cloud history SaaS IaaS Napster Apache Linux Salesforce Time Service RackSpace Sharing Bureau Oracle Amazon BULL Microsoft Sun Google Apple ©Bull, 21 ITEA2 - Artemis: Cloud Computing 2010 Cloud history SaaS IaaS Napster Apache Linux Salesforce Time Service RackSpace Sharing Bureau Oracle Amazon AWS BULL Microsoft Sun Google Apple ©Bull, 22 ITEA2 - Artemis: Cloud Computing 2010 11 Cloud history PaaS SaaS IaaS Napster Apache Linux Salesforce Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Sun Google GApps Apple ©Bull, 23 ITEA2 - Artemis: Cloud Computing 2010 Cloud history PaaS SaaS IaaS Twitter Apache Facebook Linux Salesforce Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Sun Google GApps Apple ©Bull, 24 ITEA2 - Artemis: Cloud Computing 2010 12 Cloud history PaaS SaaS IaaS App Store Twitter Apache Facebook Linux Salesforce Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Sun Google GApps Apple ©Bull, 25 ITEA2 - Artemis: Cloud Computing 2010 Cloud forecast PaaS SaaS IaaS App Store Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 26 ITEA2 - Artemis: Cloud Computing 2010 13 Cloud forecast PaaS SaaS Cloud IaaS App Store Apps Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 27 ITEA2 - Artemis: Cloud Computing 2010 Cloud forecast XaaS PaaS SaaS Cloud IaaS App Store Apps Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 28 ITEA2 - Artemis: Cloud Computing 2010 14 Cloud forecast XaaS Internet of PaaS Things SaaS Cloud IaaS App Store Apps Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 29 ITEA2 - Artemis: Cloud Computing 2010 Cloud forecast Smart Grid XaaS Internet of PaaS Things SaaS Cloud IaaS App Store Apps Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 30 ITEA2 - Artemis: Cloud Computing 2010 15 Cloud forecast Smart Grid XaaS Internet of PaaS Things Free SaaS Cloud Cloud IaaS App Store Apps Twitter Apache Facebook Linux Salesforce Open Cloud Time Service RackSpace App Sharing Bureau Oracle Amazon AWS Eng BULL Microsoft Google GApps Apple ©Bull, 31 ITEA2 - Artemis: Cloud Computing 2010 Cloud as for 2010 3Tera AppLogic / Amazon EC2 / Amazon S3 / Amazon SimpleDB / Amazon SQS / Appian Anywhere / Appirio / AppNexus / Aptana CloudStudio / Aria / Beowulf / Boomi / Bungee Labs Connect / Bungee Labs Connect / Cassatt Active Response / CastIron / Coghead / CohesiveFTSmart / Concur / ElasticHosts / Elastra Cloud Server / Enomaly EnomalismGrid Platform / Eucalyptus / eVapt / Flexiscale / Gemstone GeXaaSmfire / GigaSpaces Data Grid / Globus Toolkit / gnip / Google App Engine / Google Apps / Google BigTable / Hadoop / Heroku / Hyperic InternetCloudStatus of / IBM eXtreme PaaS Things Scale / Intuit Quickbase / Joyent Accelerators / Kaavo IMOD / LongJump / Microsoft BizTalkSaaS Services / Microsoft SSDS / Morph Labs Free Cloud / MuleSource Mule OnDemandCloud / Netsuite / OpenID/ OAuth / OpSource Billing /IaaS OpSource Connect /Apps Oracle Coherence / Oracle OnDemand / Ping Identity / RaTwitterckspace Mosso Cloud / Rackspace ASP Mosso CloudFS /Apache RightscaleFacebook / rPath / Salesforce.com Salesforce.com force.com /Linux Scalr / ServePathSalesforce GoGridOpen / Skemma c SaaS Solution Cloud Time Service RackSpace Packs / AppStrikeiron / Sharing Bureau Oracle SunAmazon Project Caroline AWS Eng/ Taleo / Vindicia / Zuora BULL Microsoft Google GApps Apple ©Bull, 32 ITEA2 - Artemis: Cloud Computing 2010 16 IDC's cartography No single vendor can provide this! ©Bull, 33 ITEA2 - Artemis: Cloud Computing 2010 Cloudy or messy? ©Bull, 34 ITEA2 - Artemis: Cloud Computing 2010 17 Cloudy but shiny Cloud Services IaaS / PaaS / SaaS / XaaS ©Bull, 35 ITEA2 - Artemis: Cloud Computing 2010 Cloudy but shiny Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 36 ITEA2 - Artemis: Cloud Computing 2010 18 Cloudy but shiny Flexibility Auto-scaling Rapid provisioning Auto-recovery Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 37 ITEA2 - Artemis: Cloud Computing 2010 Cloudy but shiny Integration Value-Add Applications Flexibility Auto-scaling Rapid provisioning Auto-recovery Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 38 ITEA2 - Artemis: Cloud Computing 2010 19 Cloudy but shiny On Demand Broad Network Access Resource Pooling Rapid Elasticity Measured Service Integration Value-Add Applications Flexibility Auto-scaling Rapid provisioning Auto-recovery Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 39 ITEA2 - Artemis: Cloud Computing 2010 Cloudy but shiny On Demand Public Cloud Broad Network Access Private Cloud Resource Pooling Hybrid Cloud Rapid Elasticity Measured Service Integration Value-Add Applications Flexibility Auto-scaling Rapid provisioning Auto-recovery Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 40 ITEA2 - Artemis: Cloud Computing 2010 20 Cloudy but shiny On Demand Public Cloud Broad Network Access Private Cloud Resource Pooling Hybrid Cloud Rapid Elasticity Measured Service No Capex Integration Lower Costs Value-Add Greater Automation Applications Flexibility Auto-scaling Rapid provisioning Auto-recovery Virtualization Storage Cloud OS DC Management Cloud Services Cloud Management IaaS / PaaS / SaaS / XaaS ©Bull, 41 ITEA2 - Artemis: Cloud Computing 2010 An overcast sky What about maturity? ©Bull, 42 ITEA2 - Artemis: Cloud Computing 2010 21 An overcast sky Encryption Transparency Privacy Identity Management Access Controls Audit Controls Intrusion Detection What about security? ©Bull, 43 ITEA2
Load more

Recommended publications
  • Certified Ubuntu on Joyent Cloud
    Certied Ubuntu on Joyent Cloud Ubuntu is the most popular Linux OS in the cloud. Every Joyent and Canonical share a focus and passion for open day, users choose Ubuntu for its performance, reliability and source technology. Joyent has been supporting key open robust ecosystem of tools and applications. As Joyent source projects such as SmartOS and Node.js for years and customers deploy their mission-critical and essential Canonical is the company driving the evolution and support of applications to the Joyent Cloud the importance of having a Ubuntu. By combining the uniquely powerful Joyent Cloud certied version of Ubuntu that is consistent and fully service with the best of breed Linux as a certied option backed by Canonical in their data center, private cloud or Joyent customers can enjoy the best possible user public cloud is essential. Joyent customers get the experience available in cloud. assurance that the Ubuntu they trust to run their business is highly optimized,fully secure and eligible for support and Accelerate your applications today! upgrade services from Canonical. à www.joyent.com à www.ubuntu.com/cloud/ecosystem Certied Ubuntu Value Enhancements for Joyent Users Ubuntu Cloud images, tuned and tested for the Joyent environment Stock Kernel • All kernel patches, drivers, tools and packages By using Stock Kernel for each release we have gained a faster boot • Timely image updates including critical bug xes and security time, increased overall performance, and a wider application usage updates such as supporting Docker out of the box. • Eligible for support from Canonical through Ubuntu Advantage Cloud-Init Cloud Image Quality Assurance Cloud-Init is the multi CSP system that handles early initialization of a • Joyent specic testing atop the Ubuntu Server testing cloud instance.
    [Show full text]
  • WEIYANG (STEPHEN) YUAN [email protected] | Chicago | 608-504-0649 | Stephenyuan.Urspace.Io Education University of Wisconsin-Madison B.S
    WEIYANG (STEPHEN) YUAN [email protected] | Chicago | 608-504-0649 | stephenyuan.urspace.io Education University of Wisconsin-Madison B.S. in Computer Engineering May 2020 ● GPA: 3.83/4.0 ​ ● Related Coursework: Operating Systems • A​ rtificial Intelligence • Computer Networks and Communication • Databases • Information Security • Big Data Systems • Android Mobile Development Skills ● Programming Languages: Java • Golang • C++ • Scala • MATLAB • SQL • Julia • C • Python ​ ● Technologies: Git, Linux, Java Spring, Amazon Web Services (AWS), MongoDB, Postgres, React, Node.js, Docker, Jenkins, ​ Play Framework, Hadoop, Spark, Wireshark, Visual Studio Experience Enfusion, Chicago Java Software Developer July 2020 - Current ● Develop the portfolio management software system used by over 500 clients that supports a variety of financial calculation and valuation over 20 financial derivatives as well as back office general ledger and cash flow with more than 10,000 daily positions on average ● Take responsibility in the whole development lifecycle from designing (10%), implementing (40%), running regression & unit testing (40%) to supporting internal and production issues (10%) ● Apply experience of Object-Oriented design patterns and best practices to creating a robust and reliable infrastructure for the system with knowledge of Java SE, Hibernate, JMS, JVM and MySQL and deliver constant results in weekly production ​ ​ ​ ​ ​ ​ ​ ​ ​ ​ release ● Automate development and testing frameworks by writing python and shell scripts to improve overall
    [Show full text]
  • Update on Cloud Activities at LBNL
    Update on cloud activities at LBNL *Val Hendrix: [email protected], Doug Benjamin2: [email protected], Roberto Vitillo1: [email protected] 1Lawrence Berkeley National Lab 2Duke University 7/12/12 ADC Cloud Computing RnD Overview Overview ● Goal ● Progress ● Plans 7/12/12 ADC Cloud Computing RnD 2 Goal Goal ● Use Case: A site should be able to easily deploy new analysis cluster (batch, PROOF) in commercial or private cloud resources. https://twiki.cern. ch/twiki/bin/view/Atlas/CloudcomputingRnD#Use_Cases ● Solution: Elastic Data Analysis Cluster (E-DAC): a fully configured data analysis cluster that is elastic and deployable on multiple clouds. ● We have chosen Scalr Open Source as the cluster management tool we will use to deliver E-DAC 7/12/12 ADC Cloud Computing RnD 3 Progress Progress ● Scalr 3.5 release ● Scalr + Openstack ● ScalrEDAC 7/12/12 ADC Cloud Computing RnD 4 Progress Scalr 3.5 Released ● Scalr 3.5 Released June 13th ○ RAID over EBS – increased performance for EBS on EC2 ○ The two scalarizr repositories- time and control your updates ○ Scripts & Roles attachment – create your custom images ○ Role versioning – improved control ● This fixed a series of issues that were impeding the development of Condor Cluster roles ○ Custom metric scaling ○ Scalarizr agent bug: This blocked successfully running the Condor Cluster configuration scripts ● Openstack supported was promised for this release but unfortunately it is still not available 7/12/12 ADC Cloud Computing RnD 5 Progress Scalr + Openstack ● Scalr does not officially support Openstack yet (although they are trying) “We haven't gotten it to work (Essex) on our own servers, TryStack lacks Swift and Volumes, and every cluster that the community has lent us has been disappointingly buggy or incomplete.” Sebastian Stadil on scalr-discuss google group ● Scalr has a Eucalyptus interface, will that work for Openstack? ○ There’s more to adding support for a cloud than a simple API.
    [Show full text]
  • The Cloud‐Based Demand‐Driven Supply Chain
    The Cloud-Based Demand-Driven Supply Chain Wiley & SAS Business Series The Wiley & SAS Business Series presents books that help senior-level managers with their critical management decisions. Titles in the Wiley & SAS Business Series include: The Analytic Hospitality Executive by Kelly A. McGuire Analytics: The Agile Way by Phil Simon Analytics in a Big Data World: The Essential Guide to Data Science and Its Applications by Bart Baesens A Practical Guide to Analytics for Governments: Using Big Data for Good by Marie Lowman Bank Fraud: Using Technology to Combat Losses by Revathi Subramanian Big Data Analytics: Turning Big Data into Big Money by Frank Ohlhorst Big Data, Big Innovation: Enabling Competitive Differentiation through Business Analytics by Evan Stubbs Business Analytics for Customer Intelligence by Gert Laursen Business Intelligence Applied: Implementing an Effective Information and Communications Technology Infrastructure by Michael Gendron Business Intelligence and the Cloud: Strategic Implementation Guide by Michael S. Gendron Business Transformation: A Roadmap for Maximizing Organizational Insights by Aiman Zeid Connecting Organizational Silos: Taking Knowledge Flow Management to the Next Level with Social Media by Frank Leistner Data-Driven Healthcare: How Analytics and BI Are Transforming the Industry by Laura Madsen Delivering Business Analytics: Practical Guidelines for Best Practice by Evan Stubbs ii Demand-Driven Forecasting: A Structured Approach to Forecasting, Second Edition by Charles Chase Demand-Driven Inventory
    [Show full text]
  • Data Sheet Netsuite Integration Tools Achieve Cloud Business Efficiency and Preserve Existing Investments by Integrating with Third-Party Applications
    Data Sheet NetSuite Integration Tools Achieve Cloud Business Efficiency and Preserve Existing Investments by Integrating with Third-Party Applications NetSuite provides a complete cloud business management platform to power an entire business— but the reality is many companies may already be running other third-party on-premise or cloud applications for specific business processes, or they may have invested significant resources in an on-premise ERP solution like Oracle or SAP. The SuiteCloud development platform and SuiteCloud Connect integration solutions let you seamlessly integrate NetSuite with your existing systems, preserving your investments and enabling new business efficiency. In particular, a two-tier ERP model is fast emerging as the solution of choice for multinational companies expanding into new lines of business or geographic subsidiaries, or seeking standardization across a distributed environment. With a two-tier ERP model, enterprises are deploying cloud business management across their subsidiaries and synching it to on-premise ERP at headquarters at a fraction of the time and cost required for an in-house ERP deployment. With SuiteCloud integration solutions, NetSuite customers and partners can rapidly extend and integrate NetSuite capabilities for ERP/financials, CRM, ecommerce with other business systems, streamlining processes and speeding business value. SuiteCloud Connect Enterprises deploying NetSuite can use NetSuite’s SuiteCloud Connect solutions for best practices- based integration with Oracle or SAP, as well as Salesforce.com and Google. SuiteCloud Connect is based on the SuiteCloud platform, providing standards-based technology to enable the free flow of financial, supply chain and customer information between NetSuite and other business applications or cloud platforms, or between divisions running NetSuite and on-premise ERP systems at headquarters in a two-tier ERP model.
    [Show full text]
  • Q& a – Wavemaker Demo/Training Webinar – March 15, 2016
    Q& A – WaveMaker Demo/Training Webinar – March 15, 2016 Q: Is there a workflow engine ie BPMN v2 A: WaveMaker has strong integrations with APIs, web services and SDKs. You can integrate with rules engine platforms like JBPM and Drools using their Java SDKs (jars) or through their ReST APIs. You need to do this only if the workflow requires very complex workflows. Otherwise, the native capabilities of the WaveMaker should be enough to take care of your app requirements. Q: on oracle db's there are schemas, which should be considered...what is important to consider regarding to that (schema)? do I have to import the tables over each schema or is there a way how to import the whole tables (over all schemas)...? A: WaveMaker allows you to import tables from multiple schemas. See the image below. This is the second step of importing an Oracle DB. [Steps: Import > Database > Select Oracle > ….] Q: Can we provide read only access to a user group? A: For instance if you are dealing with an editable grid, which has an add/save button, all you to do is to hide the button for users with a specific role. If you are dealing with a specific widget then you can use the conditional read-only option as shown below. Here you need to write a one-line javascript as shown below, where the users with the role “rolename” will be presented a read-only birthdate. Q: Can we integrate the application for SSO ? A: You can configure SSO easily through the following approach.
    [Show full text]
  • Informatica Intelligent Cloud Services
    Informatica® Intelligent Cloud Services Summer 2019 July Data Integration Connections Informatica Intelligent Cloud Services Data Integration Connections Summer 2019 July July 2019 © Copyright Informatica LLC 2006, 2019 This software and documentation are provided only under a separate license agreement containing restrictions on use and disclosure. No part of this document may be reproduced or transmitted in any form, by any means (electronic, photocopying, recording or otherwise) without prior consent of Informatica LLC. U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation is subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License. Informatica, Informatica Cloud, Informatica Intelligent Cloud Services, PowerCenter, PowerExchange, and the Informatica logo are trademarks or registered trademarks of Informatica LLC in the United States and many jurisdictions throughout the world. A current list of Informatica trademarks is available on the web at https:// www.informatica.com/trademarks.html. Other company and product names may be trade names or trademarks of their respective owners. Portions of this software and/or documentation are subject to copyright held by third parties. Required third party notices are included with the product. The information in this documentation is subject to change without notice.
    [Show full text]
  • Salesforce Heroku Enterprise: a Cloud Security Overview June 2016
    Salesforce Heroku Enterprise: A Cloud Security Overview June 2016 1 Contents INTRODUCTION 3 CASESTUDY:GLIBC 19 Heroku behind the Curtain: Patching SALESFORCETRUSTMODEL 4 the glibc Security Hole What Do We Do When a Security CLOUD COMPUTING AND Vulnerability Lands? THESHAREDSECURITYMODEL 5 Provider Responsibilities How Do We Do This with Minimum Downtime? Tenant Responsibilities What about Data? INFRASTRUCTURE AND What about Heroku Itself? APPLICATIONSECURITY 8 Keep Calm, Carry On Server Hardening Customer Applications BUSINESSCONTINUITY 23 Heroku Platform: High Availability Container Hardening and Disaster Recovery Application Security Customer Applications Heroku Flow Postgres Databases Identity and Access Management Customer Configuration and Identity Federation via Single Sign-On Meta-Information Organizations, Roles, and Permissions Service Resiliency and Availability Business Continuity and Emergency NETWORKSECURITY 14 Preparedness Secure Network Architecture Secure Access Points INCIDENTRESPONSE 27 Data in Motion ELEMENTSMARKETPLACE 28 Private Spaces App Permissions Building Secure Applications with Add-Ons DATASECURITY 16 Heroku Postgres PHYSICALSECURITY 29 Encryption Data Center Access Customer Data Retention and Destruction Environmental Controls Management SECURITYMONITORING 17 Storage Device Decommissioning Logging and Network Monitoring DDoS COMPLIANCEANDAUDIT 31 Man in the Middle and IP Spoofing SUMMARY 33 Patch Management HEROKU ENTERPRISE SECURITY WHITE PAPER 2 Introduction eroku Enterprise, a key component of the Salesforce Platform, is a cloud application platform used by organizations of all sizes to deploy and operate applications throughout Hthe world. The Heroku platform is one of the first cloud application platforms delivered entirely as a service, allowing organizations to focus on application development and business strategy while Salesforce and the Heroku division of Salesforce focus on infrastructure management, scaling, and security.
    [Show full text]
  • Cloud Computing: a Taxonomy of Platform and Infrastructure-Level Offerings David Hilley College of Computing Georgia Institute of Technology
    Cloud Computing: A Taxonomy of Platform and Infrastructure-level Offerings David Hilley College of Computing Georgia Institute of Technology April 2009 Cloud Computing: A Taxonomy of Platform and Infrastructure-level Offerings David Hilley 1 Introduction Cloud computing is a buzzword and umbrella term applied to several nascent trends in the turbulent landscape of information technology. Computing in the “cloud” alludes to ubiquitous and inexhaustible on-demand IT resources accessible through the Internet. Practically every new Internet-based service from Gmail [1] to Amazon Web Services [2] to Microsoft Online Services [3] to even Facebook [4] have been labeled “cloud” offerings, either officially or externally. Although cloud computing has garnered significant interest, factors such as unclear terminology, non-existent product “paper launches”, and opportunistic marketing have led to a significant lack of clarity surrounding discussions of cloud computing technology and products. The need for clarity is well-recognized within the industry [5] and by industry observers [6]. Perhaps more importantly, due to the relative infancy of the industry, currently-available product offerings are not standardized. Neither providers nor potential consumers really know what a “good” cloud computing product offering should look like and what classes of products are appropriate. Consequently, products are not easily comparable. The scope of various product offerings differ and overlap in complicated ways – for example, Ama- zon’s EC2 service [7] and Google’s App Engine [8] partially overlap in scope and applicability. EC2 is more flexible but also lower-level, while App Engine subsumes some functionality in Amazon Web Services suite of offerings [2] external to EC2.
    [Show full text]
  • Walmart & Azure
    Microsoft Azure: The Ultimate Flexible Enterprise-Level Solution Janet Bailey, PhD Bradley Jensen, PhD University of Arkansas at Little Rock Microsoft Corporation Background Project Assignment Evaluate the Value and Fit of Azure for Walmart Initiator Steven Lamey, Senior Business Manager, Walmart Corporation UALR Student Team 4 Graduates / 2 Undergraduates Time Frame 8 months (4 months research & development) Faculty Mentor Industry Support Janet Bailey, PhD Bradley Jensen, PhD UALR Student Team with Walmart and Microsoft Executives Corporate World’s largest Headquarters corporation Bentonville, AR 1962 $421.849 billion annual sales 2010 Brazil In 15 countries Asia >8,500 stores worldwide > 2.1 million associates worldwide India Walmart employs 1% of America US stores visited by 100 million customers every week In other words, 1/3 of America goes to Walmart every week!! > 1million customer transactions every hour databases estimated > 2.5 petabytes—the equivalent of 167 times the books in America’s Library of Congress So why did Walmart start considering Cloud Computing 2011? Dangerous to not #1 strategic have a cloud strategy technology initiative Gartner Initially, Walmart thought they needed a cloud provider that could/would… Meet Walmart’s massive processing/storage capacity requirements Provide a flexible application development environment Provide information on the cloud architecture Allow for secure access to data outside of the corporate firewall We found they also required… Fast and easy scalability An environment that supports
    [Show full text]
  • Cloud Computing
    Cloud Computing By Dennis Schmidt, Director, Office of Information Systems, UNC School of Medicine, and the GIR Information Security Working Group Cloud computing provides computing resources as an online service, not as a physical product. The user typically has little knowledge of the physical makeup or location of the supporting infrastructure. (Analogy: You buy electrical service instead of generating it yourself.) An entire spectrum of potentially lower cost, easy-to-use services with high reliability and rapid startup times is now available. Researchers and users are demanding access to the capabilities that these services provide, but security officers are reluctant to give them access and academic IT organizations are not typically resourced to provide them locally. This document provides some basic high level information and recommendations that institutions should consider before venturing into the public cloud. Types of Clouds: Security Concerns: Institutional Policies Should: Public cloud: available to the general public or a large industry group and is Access controls (Who has access to your data?) Address processing or storing owned by an organization providing cloud services. Lower cost, higher risk. Data Location (Is it being stored in a foreign country, not sensitive information in the cloud Private cloud: operated solely for one organization. It may be managed by subject to US laws?) Require that proper technical the organization or a third party and may exist on premise or off premise. Encryption (Is the data encrypted?
    [Show full text]
  • Towards Data Handling Requirements-Aware Cloud Computing
    View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by Publikationsserver der RWTH Aachen University Towards Data Handling Requirements-aware Cloud Computing Martin Henze, Marcel Großfengels, Maik Koprowski, Klaus Wehrle Communication and Distributed Systems, RWTH Aachen University, Germany Email: fhenze,grossfengels,koprowski,[email protected] S S S S Abstract—The adoption of the cloud computing paradigm is S S S S hindered by severe security and privacy concerns which arise when outsourcing sensitive data to the cloud. One important S S S S group are those concerns regarding the handling of data. On the one hand, users and companies have requirements how S S S S their data should be treated. On the other hand, lawmakers impose requirements and obligations for specific types of data. These requirements have to be addressed in order to enable the affected users and companies to utilize cloud computing. Figure 1. Intercloud Scenario However, we observe that current cloud offers, especially in an intercloud setting, fail to meet these requirements. Users have no way to specify their requirements for data handling data, especially to the cloud. These requirements typically in the cloud and providers in the cloud stack – even if they restrict, e.g., how long and where a specific piece of data were willing to meet these requirements – can thus not treat might be stored. However, in current cloud offers it is the data adequately. In this paper, we identify and discuss the impossible to meet these requirements adequately [9], as challenges for enabling data handling requirements awareness users cannot specify their requirements and cloud providers in the (inter-)cloud.
    [Show full text]