Cloud Computing

Fundamentals
Mr.M.Jaganathan
Assistant Professor @ K S R Institute for Engineering and Technology
jaganbecs@gmail.com

Session-I
Evolution
Introduction
The basics of cloud computing
Issues of migrating to the cloud
Three layers
Open source cloud technologies
Security in the cloud
Cloud Operating Systems
Advantages and disadvantages
Conclusion

Session-II
Types of Cloud
Some programming Concepts.
Job opportunities and Designations
About EMC2
Social Networks
Courses on Cloud computing

A revolution..
Cloud computing is indeed a revolution
Change in
- Computer architecture,
- Software and tools development,
- The way we store,
- Distribute and Consume information.

The Next Frontier - On Demand Solutions For Your Business

Cloud
Web
Client-Server Computing
Personal Computers
Mainframe

What is cloud computing?

solution that delivers IT as a service
Internet-based
configured to work together and the various
applications on single system.
The benefits of Cloud Computing, especially for
companies, are many, but primarily the costs of:
- licensing,
- new computers, and
- servers get minimized

The Basics of Cloud Computing

Virtual workspaces:
Execution environment that can be made dynamically
clients (e.g. CPU, memory share),
Software configuration (e.g. O/S, provided services).
Implement on Virtual Machines (VMs):
Abstraction of a physical host machine,
Instructs VMs, and allows management of VMs,
VMWare, Xen, etc.
Provide infrastructure API:
Plug-ins to hardware/support structures

App

App

App

OS

OS

OS

Hypervisor
Hardware
Virtualized Stack

 VM technology allows multiple virtual machines

to run on a single physical machine.
App

App

App

App

App

Guest OS
(Linux)

Guest OS
(NetBSD)

Guest OS
(Windows)

VM

VM

VM

Virtual Machine Monitor (VMM) / Hypervisor

Denali

Xen
VMWare
UML
Denali

etc.

Hardware

Some Commercial Cloud Offerings

Issues of migrating to the cloud

Most companies today spend roughly 80% of
their IT budget on operations and maintenance.
20%

80%

50%
Labor
Expense
50%
Other
Expenses

Deploy

10%

Operate

25%

Support

10%

Facilities

7%

Network

11%

SW

9%

HW

23%

Cloud Computing reduces

Labor costs

Cloud Computing reduces

Facilities, Network,
Hardware, Software
maintenance costs

Three layers
SaaS Software as a Service
IaaS Infrastructure as a Service
PaaS Platform as a Service
DaaS Desktop as a Service
Storage, Database, Information, Process,
Application, Integration, Security, Management,
Testing-as-a-service

Software as a Service-End Users

- Just run it for me!

- Also known as On-demand Service.

- Is an application that can be accessed from
anywhere on the world as long as you can
have an computer with an Internet Connection.
- We can access this cloud hosted application without
any additional hardware or software.

- E.g. : G-mail, Yahoo mail, Hotmail etc..,

SaaS Examples

Infrastructure as a Service (IaaS)-Network Architect

- Also known as hardware as a service.
- Is a computing power that you can rent for a limited
period of time.
- Allows existing applications to be run on a cloud
suppliers hardware.
- Cloud providers offer computers as physical or more
often as virtual machines raw (block) storage,
firewalls, load balancers, and networks

IaaS Examples

Platform as a Service (PaaS)-Application Developers

- Gives us nice API (Application Programming Interface) and take care of
the implementation.

- Delivers a computing platform and/or solution (operating system)

- Programming language execution environment, database, and web
server.

- Is a platform for developers to write and create their own SaaS i.e.
applications.
- Which means rapid development at low cost.
- E.g.: Salesforce.com, Windows Azure etc.

PaaS Examples

Microsoft Consumer Cloud Services

500M Active Live IDs
59 markets and
36 languages

355M Active
Accounts

Over 4B WW
Queries Each
Month

Over 303M Users

76 markets and
48 languages

Over 459M
Unique Users

Over 6M Songs
In The Catalog

25M Users

14B Ads
Per Month

200+ CLOUD SERVICES

PC

MOBILE

TV/HOME

The Windows Azure Platform

Developer Experience
Use existing skills and tools.

services
AppFabric

Compute Storage Management Networ

k

Relational data

Management

Connectivity

Access control

Cloud Distribution Examined

Open source cloud technologies

Eucalyptus
- Elastic Utility Computing Architecture for Linking
Your Programs to Useful Systems
- Packages for building cloud computing
infrastructures
- Amazon EC2Amazon's cloud computing
interface
- Amazon S3Amazon's cloud storage interface

OpenNebula
@ Universidad Complutense de Madrid
Supports the idea of hybrid clouds
Combining a private cloud with a public cloud
Supports Xen, KVM/Linux, and VMware

Barriers to Cloud
Security
Privacy
Connectivity and Open access
Reliability
Interoperability
Independence from CSP (cloud service provider)
Economic value
IR governance
Changes in IT organization
Political issues

Security Issues

"It is so easy
to get started"
Just pick up your credit
card and get started on
AWS
Not many questions asked
..... maybe that's a problem?

Threat #1: Abuse and Nefarious Use of

Cloud Computing
The problem:
Cloud Computing providers (IaaS) are actively being targeted, partially
because their relatively weak registration, systems facilitate anonymity, and
providers fraud detection capabilities are limited.
What have happened (so far):
IaaS offerings have hosted the Zeus botnet, InfoStealer trojan horses, and
downloads for Microsoft Office and Adobe PDF exploits.
Botnets have used IaaS servers for command and control functions.
Spam continues to be a problem as a defensive measure, entire blocks of
IaaS network addresses have been publicly blacklist.
What to do about it:
- Stricter initial registration and validation processes.
- Enhanced credit card fraud monitoring and coordination.
- Comprehensive introspection of customer network traffic.
- Monitoring public blacklists for ones own network blocks.

Threat #2: Insecure Interfaces and APIs

The problem:
Reliance on a weak set of interfaces and APIs exposes variety of
security issues related to confidentiality, integrity, availability
and accountability.
What have happened (so far):
Anonymous access and/or reusable tokens or passwords, cleartext authentication or transmission of content, inflexible access
controls or improper authorizations, limited monitoring and
logging capabilities, unknown service or API dependencies.
What to do about it:
- Analyze the security model of cloud provider interfaces.
- Ensure strong authentication and access controls are
implemented in concert with encrypted transmission.
- Understand the dependency chain associated with the API.

Threat #3: Malicious Insiders

" If you work with a company long
enough, eventually you will have
access to everything, and no one
will know it. "

Sharing cage...
Bad neighbors....

Data loss....

The Microsoft data loss of 2009 resulted in an

estimated 800,000 smartphone users in the

United States temporarily losing personal data,
such as emails, address books and photos from
their mobile handsets.
The computer servers holding the data were
run by Microsoft.
At the time, it was described as the biggest
disaster to affect the concept of cloud
computing.

Threat #6: Account or

Service Hijacking

What to do about it:

Prohibit the sharing of account credentials between
users and services.
Leverage strong two-factor authentication techniques
where possible.
Employ proactive monitoring to detect unauthorized
activity.
Understand cloud provider security policies.

Summary
Cloud services gives economy of scale. The same amount
of investment in security buys better protection
But the massive concentrations of resources and data
present a more attractive target to attackers
Cloud providers need to guard against theft or denial of
service attacks by users.
Users need to be protected against one another.
And users need to be protected against their cloud
providers
The old problems didn't go away, they just got a little
bigger

Cloud Operating Systems

- Eye OS
- Amoeba OS
- Glide OS
- Start force
- myGoya
- CorneliOS
- Lucid Desktop
- Cloudo, Ghost, Zimdesk, Start force etc.,

Advantages
- Lower computer costs:

You do not need a high-powered and high-priced computer

to run cloud computing's web-based applications.

Since applications run in the cloud, not on the desktop PC,

your desktop PC does not need the processing power or
hard disk space demanded by traditional desktop
software.
When you are using web-based applications, your PC can
be less expensive, with a smaller hard disk, less memory,
more efficient processor...
In fact, your PC in this scenario does not even need a CD or
DVD drive, as no software programs have to be loaded and
no document files need to be saved.

Contd..
Improved performance:

With few large programs hogging your computer's

memory, you will see better performance from your
PC.
Computers in a cloud computing system boot and run
faster because they have fewer programs and
processes loaded into memory

Reduced software costs:

Instead of purchasing expensive software

applications, you can get most of what you need for
free-ish!
most cloud computing applications today, such as the Google Docs suite.

better than paying for similar commercial software

Contd..
Instant software updates:
No obsolete software and high upgrade costs.
When the application is web-based, updates happen automatically
available the next time you log into the cloud.
When you access a web-based application, you get the latest
version without needing to pay for or download an upgrade.

Improved document format compatibility.

You do not have to worry about the documents you create on your
machine being compatible with other users' applications or OSes
There are potentially no format incompatibilities when everyone
is sharing documents and applications in the cloud.

Contd..
Unlimited storage capacity:
Cloud computing offers virtually limitless storage.
Your computer's current 1 Tbyte hard drive is small
compared to the hundreds of Pbytes available in the cloud.

Increased data reliability

Universal document access:
That is not a problem with cloud computing, because you do
not take your documents with you.

Easier group collaboration:

Sharing documents leads directly to better collaboration.

Device independence.
You are no longer tethered to a single computer or network.

Disadvantages
Requires a constant Internet connection
Does not work well with low-speed connections
Features might be limited
Can be slow
Stored data might not be secure
Stored data can be lost

Conclusion
Cloud Computing is outpacing the IT industry
Real business value can be realized by customers of all
sizes
Cloud solutions are simple to acquire, dont require long
term contracts and are easier to scale up and down as
needed
Proper planning and migration services are needed to
ensure a successful implementation
Public and Private Clouds can be deployed together to
leverage the best of both
Third party monitoring services ensure customer are
getting the most out of their cloud environment
Security Compliance and Monitoring is achievable with
careful planning and analysis