Twitter Feed
Operation Golden Phoenix
This week, Dataline is participating in Operation Golden Phoenix. Operation Golden Phoenix is a four-day multi-agency collaborative training event designed to assist federal, state and local agencies with large and…
DISA Reaches out to Industry on Cloud Computing
In an interview with Computerworld , published in the New York Times, John Garing expanded on his goals for the DISA cloud computing initiative. Garing said that, “… he and…
Cloud Computing is $160B Market
According to the Financial Post, a Merrill Lynch Note estimates that cloud computing could be a $160B market by 2011. The companies that they see in the marketplace are shown…
SOA-R Educational Series: What is Cloud Computing
On July 16th, SOA-R held it’s first of six educational sessions on cloud computing for national security missions. Presenters during this first event were: Steven L Armentrout, PhDPresident & CEOParabon…
Gartner: Cloud Computing Fraught with Security Risks
Cloud computing is fraught with security risks, according to analyst firm Gartner. Smart customers will ask tough questions, and consider getting a security assessment from a neutral third party before…
The Definition of “Net-centric”
Last week, the Google Cloud Computing Group debated the definition of net-centric. The key thought was that net-centric was nothing more than internet-centric or basically “online” and therefore it really…
Cloud Computing Journal Launched
“The world’s first journal devoted to the delivery of massively scalable IT resources as a service using Internet technologies has been launched by SYS-CON Media. The all-new “Cloud Computing Journal”…
SOA-R First Session Presentations Announced
The presentations for the first session of the SOA-R Educational Series sesion have just been announced: Steven L Armentrout, PhDPresident & CEOParabon Grids, Clouds and Computation: Getting to Ground Truth…
Cloud Storage as a Service
In SAN vs cloud storage – a gray or silver lining? , Joseph Hunkins review last December’s observations of cloud storage by Chris Mellor of Techworld: “Google does not use…
Google: Model for the Systems Architecture of the Future
In December of 2005, Prof. Paul A. Strassmann of George Mason University, provided an excellent outline for cloud computing success in a netcentric environment: Network-Centric Requirements (2010)• Downtime ( 1…
From Sam Johnston’s Taxonomy post
- Clients (examples) are computer hardware and/or computer software which rely on The Cloud for application delivery, or which is specifically designed for delivery of cloud services, and which are in either case essentially useless without it.
- Services (examples) (aka Web Service) are “software system[s] designed to support interoperable machine-to-machine interaction over a network“[36] which may be accessed by other cloud computing components, software (eg Software plus services) or end users directly.
- Application (examples) leverages The Cloud in software architecture, often eliminating the need to install and run the application on the customer’s own computer, thus alleviating the burden of software maintenance, ongoing operation, and support.
- Platform (examples) (aka Platform as a service) (the delivery of a computing platform and/or solution stack as a service) facilitates deployment of applications without the cost and complexity of buying and managing the underlying hardware and software layers
- Storage (examples) is the delivery of data storage as a service (including database-like services), often billed on a utility computing basis (eg per gigabyte per month)
- Infrastructure (examples) (aka Infrastructure as a service) is the delivery of computer infrastructure (typically a platform virtualization environment) as a service
2 Comments
Cloud Computing
- CPUcoin Expands CPU/GPU Power Sharing with Cudo Ventures Enterprise Network Partnership
- CPUcoin Expands CPU/GPU Power Sharing with Cudo Ventures Enterprise Network Partnership
- Route1 Announces Q2 2019 Financial Results
- CPUcoin Expands CPU/GPU Power Sharing with Cudo Ventures Enterprise Network Partnership
- ChannelAdvisor to Present at the D.A. Davidson 18th Annual Technology Conference
Cybersecurity
- Route1 Announces Q2 2019 Financial Results
- FIRST US BANCSHARES, INC. DECLARES CASH DIVIDEND
- Business Continuity Management Planning Solution Market is Expected to Grow ~ US$ 1.6 Bn by the end of 2029 - PMR
- Atos delivers Quantum-Learning-as-a-Service to Xofia to enable artificial intelligence solutions
- New Ares IoT Botnet discovered on Android OS based Set-Top Boxes
You don’t mention where security fits in this stack. I know security is important at every level and it is there at every level now, but really there should be a single source of secure control of access to resources.
That’s something big we need to work out. How can I have one account, the account I use to log into my cloud application and I can use that application with any other layer of stack or in combination with them without having to know that amazon requires these credentials and nirvanix requires another set.
The end user shouldn’t care about these things, it should be handled at the platform level, but from my perspective there is no robust security model for the cloud, not yet.
Any ideas what we might see fill this gap?
Actually security is something that I do think about as a CISSP, but having looked at the various solutions it was clear that they permiated every layer of the stack. The resources themselves are secured by various mechanisms (AWS request signing for example) and from the user point of view you have OpenID and OAuth at the services layer. Even on the clients we don’t want cloud apps interfering with each other and you can see that browsers like chrome go to great lengths to prevent this.
So yes it’s a valid point, but not one that wasn’t well considered.
Cheers,
Sam