Cloud adaptation in India

Outline
Basics of cloud Concerns Technical Legal Commercial Steps to adaption

Basics of cloud computing

Service Models
IaaS: Greater flexibility with responsibility, you can decide on the OS, storage, network, etc., PaaS: Given with OS, Compiler environment, database and server SaaS: use pre-installed software.

Deployment models
Public, community, hybrid, private in the order of increased privacy, security, cost, customization and decreed elasticity/scale-up.

Plus and Minus of Cloud

Deterrents:
Reliability, security, complexity, costs, regulations and legal issues, performance, migration, lack of standards, and limited customization

Motivation:
infrastructure flexibility, faster deployment of applications and data, cost control, adaptation of cloud resources to real needs, improved productivity, etc.

Characteristics of cloud
On-demand self-service Broad network access Resource pooling Rapid elasticity Measured service

Technical Issues
Software licenses across geographies IPR for in-house solvers Network availability and reliability Data management Data security due to communication over public network

Legal issues
Indian cyber laws, privacy and data protection laws and defective e-governance in India are major bottleneck for cloud adaption in India. cyber law due diligence act in India need to be followed

Commercial Issues
Pricing of cluster usage for tax benefit Cost benefit of remote cluster against leased line price should be assessed.

Compliance issues
Laws particular to cloud computing are not yet formulated in India.

Steps to adaption
Establish service-oriented architecture (SOA) to ensure that you can safely relocate each component Centralize management of data and application deployment and updates Use federated identity management to ensure every user is known at every point in the cloud Assign roles and other attributes to each user to verify data-access claims Assign access-control rules to applications and data that can move with them to the cloud Authorize access to applications and data based on verified user-access claims

SOA (Service oriented Architecture)

For the design to be service-oriented, each application needs to operate as a service that users can access either locally or in the cloud. Similarly for data, the location of the data should not be specified in the application.

SOA flowchart
(Ref: Dan Griffin and Tom Jones, Cloud Security: Safely Sharing IT Solutions)

THANK YOU