Cloud is hot and Boeing has started to dip their toes in the water. Jim Rubert gave a great presentation on options and pitfalls. If you have access to the presentation, you should download it.
Key Points
- In 2009, cloud hit the top of the hype cycle
- In 2010, they started into the trough of disillusionment
- in 2010, cloud got it’s own hype cycle
Key point about the trough: Not there yet with security. Not enough people are supporting SAML 2.0.
Quote: You should demand that every cloud vendor supports SAML 2.0
Five Key characteristics of cloud
- On-demand self-service
- Broad network access
- Resource pooling
- Rapid elasticity
- Measured Service
Cloud Types:
- SaaS (software as a service) Complete apps delivered over the internet. Salesforce.com
- PaaS (platform as a service) Dev platform and middleware make it easier to simply code and go. Salesforce + force.com
- IaaS (infrastructure as a service) storage and servers as a base set of on-demand servers. GiveBackTen for example
Boxes in blue are what you cannot change.
What are your options in the cloud?
Terremark
13 data centers world wide. They are used by the federal government. They were recently purchased by Verizon
Skytap
Skytap has a very easy UI with little training. Smaller company. Note: per the demo it’s REALLY easy to use.
Amazon
Out of the box and fully automated solution. 95% of all facebook apps are hosted here. They have a really easy scaling model that keeps up with your demand.
IBM
Deploying worldwide. Allows you to deploy any software you want. Still maturing but rapidly.
Microsoft
It’s an appliance you manage so it’s IaaS. You can buy and install the OS. You can lease and install. They are deploying to global data centers.
So whats the value?
Here are real examples of the value provided.
Security
This is the biggest threat you have on the cloud. Jim had some great points to consider.
•Authentication –Federated Identity (SAML 2.0)
•Authorization –Federated directory services for IaaS
•Password quality controls –Saas, PaaS, IaaS(SSO)
•Information Classification
•Securely sending and receiving information
•ISP security (physical, information protection controls)
•Non-exhaustive list regulations, acts, directives, etc…
•Sarbanes-Oxley Act
•Healthcare Insurance Portability and Accountability Act
•European Union Data Protection Directive
•Payment Card Industry Data Security Standards
•Japan’s Personal Information Protection Act
•Gramm-Leach-Bliley Act
•Breach Notification Legislation
•Export Administration Regulations
•Knowledge of virtual server vulnerabilities are immature
Howdy! I hope you can help. Searching and forums definitely didn’t. I ran across a website all.biz that allows create a account and submit your services and products free. Your information is available to the site visitors. Advanced packages have extra features … certainly. Kind of seems too good to be true. Are you aware if there is a catch? Thank you for you advice.