Cloud Computing

Agenda Why we call “Cloud Computing” ?

• What is Cloud Computing?
• Milestone of Cloud Computing
• Common Attributes of Cloud Computing
• Cloud Service Layers
• Cloud Implementation Types
• Cloud Computing – Trend
• Applications of Cloud Computing
• Pros and Cons

What is Cloud Computing

“Cloud computing is a style of computing where
massively scalable IT-related capabilities are
provided as a service across the Internet to multiple
external customers” (Gartner)

“Cloud computing: A pool of abstracted, highly

scalable, and managed infrastructure capable of
hosting end-customer applications and billed by
consumption” (Forrester)

“Cloud computing is Web-based processing, whereby

shared resources, software, and information are
provided to computers and other devices (such as
smart phones) on demand over the Internet.”
(Wikipedia)

Why we should know about it ? Common Attributes of Cloud Computing

Gartner top 10 Strategic Technologies for 2010-2011 • Pooled computing – advanced virtualization
• Delivered over the Internet
• Elastic scaling
• Flexible pricing – pay only for they use
• Provide resources as a service

Google Trends
Milestone of Cloud Computing Cloud Service Layers - Example
Software as a - Gmail
Service (SaaS) - Sales force
- Google
Platform as a
- Force.com
Service (PaaS)
- Windows Azure
- Gogrid
Infrastructure as
- Amazon web services
a Service (IaaS)
- The rackspace cloud

Cloud Implementation Type

Type of Cloud Computing
Cloud Service Layers - Characteristics
• Sometimes free; easy to use;
good consumer adoption; proven
Software as a
business models
Service (SaaS)
• You can only use the application
as far as what it is designed for
• Developers can upload a
configured applications and it Private Cloud
“runs” within the platform’s • Owned and managed by the enterprise
Platform as a • Limits access to enterprise and partner network
framework;
Service (PaaS) • Retains high degree of control, privacy and security
• Restricted to the platform’s ability
only; sometimes dependant on • Enables business to more easily customize service
Cloud Infrastructure provider • Accessed from "inside" the firewall
• Offers full control of a company’s
infrastructure; not confined to Public Cloud
Infrastructure applications or restrictive • Owned and managed by service provider
as a Service instances • Delivers select set business process, application or
(IaaS) • Sometimes comes with a price infrastructure services on a “pay per use” basis
premium; can be complex to build, • Highly standardized
manage and maintain • Limited customization options
• Accessed from "outside" the firewall

Cloud Service Layers - Containing Hybrid Cloud

- Collaboration A hybrid infrastructure takes advantage of both public
Software as a - Business Processes and private clouds:
Service (SaaS) - Industry Applications • Services provided over the Internet—the public
- CRM/ERP/HR cloud
- Middleware • Services provided by the enterprise data center—
- Database the private cloud
Platform as a - Web 2.0 Application
Service (PaaS) - Runtime Product of Cloud Computing
- Java Runtime Amazon EC2 & S3 - Amazon web services
- Development Tooling Google App Engine - Google
- Shared virtualized, dynamic Windows Azure - Windows azure
provisioning Google App - Google
Infrastructure as - Servers Panda Cloud - Panda security
a Service (IaaS) - Networking
- Storage
- Data Center Fabric
Amazon Web Service
• Amazon is one of the foremost and most reputed
Cloud Computing service-provider
• Product Offerings include:
- Simple Storage Service (S3)
- Elastic Compute Cloud (EC2)
- SimpleDB

Amazon Simple Storage Service

Google App Engine

Google App Engine (GAE) is a service, offered by
Google, that allows developers to build applications
- Playfish that can run on Google’s infrastructure.
- Dropbox It is a form of Cloud Computing.
- Twitter - Python
- Java
Windows Azure
“ Windows Azure is an integrated cloud solution,
utilizing Microsoft products already familiar with IT
professionals ”

Google App & Microsoft live

Panda Cloud Antivirus
• Desktop Application use cloud service
• Small size
• Virus DB on Provider server
• Send file to scan in cloud
• No need update

Normal Antivirus

Cloud Computing - Trend

• Large enterprises are building their own private
clouds
• Cloud computing will shift the skills needed by IT
workers
• IT departments will shrink as users go directly to the
cloud for IT resources
• Professional services will be bundled with
Panda Antivirus commodity cloud services

• Cloud-computing resources will become more

customizable
• Large enterprises will become parttime cloud-
computing vendors
JoliCloud

Cloud Computing - Trend

• Large enterprises are building their own private • Cloud computing will unleash innovation
clouds • The browser will be all the desktop software you
• Cloud computing will shift the skills needed by IT need
workers
• IT departments will shrink as users go directly to the
cloud for IT resources
• Professional services will be bundled with
commodity cloud services
Cloud Computing , Tomorrow

Pros and Cons

y
 Computer Security and Safety, Ethics, and Privacy

Discovering Computers Fundamentals

Your Interactive Guide to the Digital World

Computer Security Risks

• A computer security risk is any event or action
that could cause a loss of or damage to computer
hardware, software, data, information, or processing
capability
• A cybercrime is an online or Internet-based illegal
act
- Hackers
- Crackers
- Script Kiddies
- Corporate Spies
- Unethical • Users can take several precautions to protect their
- Employees home and work computers and mobile devices from
- Cyberextortionists these malicious infections

Internet and Network Attacks

• Information transmitted over networks has a higher
degree of security risk than information kept on an
organization’s premises

Computer Virus
• An infected computer has one or more of the • A botnet is a group of compromised computers
following symptoms: connected to a network
- Operating system runs much slower than usual – A compromised computer is known as a zombie
- Available memory is less than expected • A denial of service attack (DoS attack) disrupts
- Files become corrupted computer access to Internet services
- Screen displays unusual message or image • A back door is a program or set of instructions in a
- Music or unusual sound plays randomly program that allow users to bypass security controls
- Existing programs and files disappear • Spoofing is a technique intruders use to make their
- Programs or files do not work properly network or Internet transmission appear legitimate
- Unknown programs or files mysteriously appear • A firewall is hardware and/or software that
- System properties change protects a network’s resources from intrusion
- Operating system does not start up
- Operating system shuts down unexpectedly
 • Digital forensics is the discovery, collection, and
analysis of evidence found on computers and
networks
• Many areas use digital forensics:
- Law enforcement
- Criminal prosecutors
- Military intelligence
- Insurance agencies
- Information security departments

Hardware Theft and Vandalism

Intrusion detection software Hardware theft is the act of stealing computer
• Analyzes all network traffic equipment
• Assesses system vulnerabilities Hardware vandalism is the act of defacing or
• Identifies any unauthorized intrusions destroying computer equipment
• Notifies network administrators of suspicious • To help the reduce of chances of theft, companies
behavior patterns or security breaches and schools use a variety of security measures
- Physical access controls
Unauthorized Access and Use - Alarm systems
Unauthorized access is the use of a computer or - Cables to lock equipment
network without permission - Real time location system
Unauthorized use is the use of a computer or its - Passwords, possessed objects, and biometrics
data for unapproved or possibly illegal activities
Software Theft
• Access controls define who can access a computer, • Software theft occurs when someone:
when they can access it, and what actions they can - Steals software media
take - Intentionally erases programs
– Two-phase processes called identification and - Illegally copies a program
authentication - Illegally registers and/or activates a program
– User name
– Password • A single-user license agreement typically contains
– CAPTCHA the following conditions:
Permitted to:
• Install the software on one computer
• Make one copy of the software
• Remove the software from your computer before
giving it away or selling it
Not permitted to:
• Install the software on a network
• Give copies to friends or colleagues while
continuing to use the software
• Export the software
• Rent or lease the software

• A possessed object is any item that you must • Copying, loaning,

carry to gain access to a computer or computer borrowing, renting, or
facility distributing software
– Often are used in combination with a personal can be a violation of
identification number (PIN) copyright law
• A biometric device authenticates a person’s • Some software
identity by translating a personal characteristic into a requires product
digital code that is compared with a digital code in a activation to
computer function fully
Information Theft • Three-generation backup policy:
• Information theft occurs when someone steals - Grandparent
personal or confidential information - Parent
• Encryption is a process of converting readable - Child
data into unreadable characters to prevent
unauthorized access Wireless Security
• Wireless access poses additional security risks
– About 80 percent of wireless networks have no
security protection
• War driving allows individuals to detect wireless
• A digital signature is an encrypted code that a networks while driving a vehicle through the area
person, Web site, or organization attaches to an - A wireless access point should not broadcast a
electronic message to verify the identity of the sender network name
• A digital certificate is a notice that guarantees a - Change the default network name
user or a Web site is legitimate - Configure a WAP so that only certain devices can
– Issued by a certificate authority access it
- Use WPA or WPA2 security standards

Health Concerns of Computer Use

• The widespread use of computers has led to health
concerns
– Repetitive strain injury (RSI)
• Tendonitis
• Carpal tunnel syndrome (CTS)
– Computer vision syndrome (CVS)

System Failure
• A system failure is the prolonged malfunction of a
computer
• A variety of factors can lead to system failure,
including:
– Aging hardware
– Natural disasters • Ergonomics is an applied science devoted to
– Electrical power problems incorporating comfort, efficiency, and safety into the
– Errors in computer programs design of items in the workplace
• Two ways to protect from system failures caused by
electrical power variations include surge protectors
and uninterruptable power supplies (UPS)

Backing Up – The Ultimate Safeguard

• A backup is a duplicate of a file, program, or disk
that can be used if the original is lost, damaged, or
destroyed
– To back up a file means to make a copy of it
• Offsite backups are stored in a location separate
from the computer site
• Two categories of backups:
– Full backup
– Selective backup
• Computer addiction occurs when the computer • When you fill out a form, the merchant that receives
consumes someone’s entire social life the form usually enters it into a database
• Symptoms of users include: • Many companies today allow people to specify
- Craves computer time whether they want their personal information
- Overjoyed when at the computer distributed
- Unable to stop computer activity
- Irritable when not at the computer
- Neglects family and friends
- Problems at work or school

Ethics and Society

• Computer ethics are the moral guidelines that
govern the use of computers and information systems
• Information accuracy is a concern
– Not all information on the Web is correct
• Intellectual property rights are the rights to which
creators are entitled for their work
• A copyright protects any tangible form of
expression
• Digital rights management is a strategy designed
to prevent illegal distribution of movies, music, and • A cookie is a small text file that a Web server stores
other digital content on your computer
• Green computing involves reducing the electricity • Web sites use cookies for a variety of reasons:
and environmental waste while using a computer - Allow for personalization
– ENERGY STAR program - Store users’ passwords
- Assist with online shopping
- Track how often users visit a site
- Target advertisements

• Spam is an unsolicited e-mail message or

newsgroup posting
• E-mail filtering blocks e-mail messages from
designated sources
• Anti-spam programs attempt to remove spam
before it reaches your inbox

• Information privacy refers to the right of individuals

and companies to deny or restrict the collection and
use of information about them
• Huge databases store data online
• It is important to safeguard your information

• Phishing is a scam in which a perpetrator sends an

official looking e-mail message that attempts to obtain
your personal and financial information
• Pharming is a scam where a perpetrator attempts
to obtain your personal and financial information via
spoofing
• The concern about privacy has led to the enactment
of federal and state laws regarding the storage and
disclosure of personal data
– See Figure 10-25 on page 406 for a listing of major
U.S. government laws concerning privacy
• Social engineering is defined as gaining
unauthorized access or obtaining confidential
information by taking advantage of trust and naivety
• Employee monitoring involves the use of
computers to observe, record, and review an
employee’s use of a computer
• Content filtering is the process of restricting
access to certain material on the Web
• Many businesses use content filtering
• Web filtering software restricts access to specified
Web sites

Summary
- Potential computer risks and the safeguards
- Wireless security risks and safeguards
- Computer-related health issues and preventions
- Ethical issues surrounding information accuracy,
intellectual property rights, green computing, and
information privacy