Information Security and Cloud Computing

Notes:	Hide Notes

Slide 1: Information Security & Cloud Computing Dr Paul Miller The Cloud of Data paul.miller@cloudofdata.com cloudofdata.com Slide 2: Topics Cloud Stack redux Some (quick!) ‘truths’ about the Cloud Information Security? cloudofdata.com Slide 3: The Cloud Stack ‘The Cloud’ lumps different concepts/capabilities together cloudofdata.com www.ﬂickr.com/photos/wonderlane/3089163372/ Slide 4: “convenient, on-demand network access to a shared pool of conﬁgurable computing resources...” cloudofdata.com csrc.nist.gov/groups/SNS/cloud-computing/ Slide 5: Traditional 3 layer model - there are plenty of others! all ‘Cloud’… but DIFFERENT! Software/Application [as a Service] (SaaS) Platform [as a Service] (PaaS) Infrastructure [as a Service] (IaaS) cloudofdata.com Slide 6: outsource raw infrastructure - avoid significant CapEx scale to meet demand - Eli Lilly, payroll public/ SaaS private/ hybrid PaaS Infrastructure as a Service (IaaS) computers (Amazon EC2, Rackspace, GoGrid...) storage (Amazon S3, MobileMe, Google Drive...) Elasticity (Rightscale…) Bandwidth (Limelight, Amazon CloudFront…) Electricity Cooling etc. cloudofdata.com Slide 7: ‘does heavy lifting’ concentrate on your app’s USP least developed but most potential? SaaS Platform as a Service (PaaS) Salesforce force.com Apprenda SaaSGrid Google App Engine Microsoft Azure Appistry Talis Platform IaaS cloudofdata.com Slide 8: light weight applications, delivered over Web mostly low-end disruptors for now... Software as a Service (SaaS) Google Apps, Zoho Acrobat.com, iWork.com Kashﬂow, FreeAgent WordPress.com MobileMe Salesforce.com PaaS IaaS cloudofdata.com Slide 9: Some more true than others! Some ‘Truths’ about the Cloud cloudofdata.com www.ﬂickr.com/photos/dpicker/2255136085/ Slide 10: Microsoft Data Centre, Dublin Cisco, VMware et al pushing on-premise G-Cloud, here and in USA... It’s All Off-Premise cloudofdata.com www.datacenterknowledge.com/wp-content/uploads/2009/09/aerial-1000.jpg Slide 11: For elastic or periodic jobs. Less clear-cut for ‘normal’ load It’s Cheap cloudofdata.com www.ﬂickr.com/photos/esdrascalderan/357434020/ Slide 12: Probably… but Simon Wardley It’s Green http://tr.im/greenclouds cloudofdata.com www.ﬂickr.com/photos/venteco/2851026377/ Slide 13: Numbers don’t add up... It’s Not Reliable cloudofdata.com www.ﬂickr.com/photos/raver_mikey/2300514593/ Slide 14: And your data centre ? It’s Not Secure cloudofdata.com www.ﬂickr.com/photos/8323834@N07/500995147/ Slide 15: PATRIOT Act and data territoriality are real… but manageable USA will read my data cloudofdata.com www.ﬂickr.com/photos/whitehouse/3484013571/ Slide 16: It’s Amazon And Rackspace, and Microsoft, and Sun, and HP, and Google, and... cloudofdata.com www.ﬂickr.com/photos/lucasartoni/2967023166/ Slide 17: Amazon Rackspace Joyent GoGrid OpSource FlexiScale Guy Rosen has begun tracking trends, using 2,250 QuantCast’s top 500,000 sites 1,500 3,000 750 0 July September November January March May cloudofdata.com www.jackofallclouds.com/2010/05/state-of-the-cloud-may-2010/ Slide 18: With thanks to Simon Wardley “It’s like computers on the Internet, innit?” cloudofdata.com www.ﬂickr.com/photos/ﬁmbrethil/2642775023/ Slide 19: What are you securing… and Why? 5 broad areas... Security cloudofdata.com Slide 20: Secure Physical Infrastructure cloudofdata.com www.ﬂickr.com/photos/treborrenrut/4481585336/ Slide 21: Secure the Network cloudofdata.com Slide 22: Secure Applications cloudofdata.com Slide 23: Secure Data cloudofdata.com Slide 24: Secure People cloudofdata.com Slide 25: Conclusion cloudofdata.com Slide 26: it can be! what matters? security costs time, money and effort identify appropriate levels of security… always remember that people will be people. cloudofdata.com Slide 27: cloud of data Thank you Dr Paul Miller The Cloud of Data paul.miller@cloudofdata.com skype: cloudofdata phone: +44 7769 740083 Download this presentation slideshare.net/cloudofdata Made on a Mac cloudofdata.com Except where otherwise noted, this work is licensed under the Creative Commons Attribution Licence. To view a copy of this licence, visit creativecommons.org/licenses/by/2.0/uk/ or send a letter to Creative Commons, 171 Second St, San Francisco, CA 94105, United States of America