Cloud Security ADAD 1
Cloud Security Cloud and Virtualization Date: Presented By: Rubal Sagwal NIT Kurukshetra Department of Computer Engineering 2Rubal
Contents • Cloud • Underlying technology pieces from which cloud computing infrastructure is built • Characteristics of Cloud • Types of cloud services • Cloud deployment models • Virtualization • Using Virtualization to form Clouds 3
Introduction Cloud 4
Cloud Computing • What is Cloud Computing: • Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services). 5
Origin of Term - Cloud 6 Internet “Comes from the early days of the Internet where we drew the network as a cloud… we didn’t care where the messages went… the cloud hid it from us” – Kevin Marks
Cloud • What is Cloud Computing: • Cloud computing is set of resources and services offered through the Internet. • Cloud services are delivered from data centers located throughout the world. • Cloud computing facilitates its consumers by providing virtual resources via internet. 7
Underlying technology pieces from which cloud computing infrastructure is built 1. Infrastructure 2. IP Based Network 3. Virtualization 4. Software 5. Service Interface 8
Underlying technology pieces from which cloud computing infrastructure is built 1. Infrastructure: • Cloud computing infrastructure is an assemblage of computer servers, storage, and network components. 2. IP Based Network: • The network serves as the means to connect users to the cloud as well as to interconnect the internal cloud. 3. Virtualization: • Virtualization is used to partition a single physical server into multiple VMs—or a single physical resource (such as storage or networking) into multiple virtual ones. • Virtualization allows for server consolidation with great utilization flexibility. For cloud computing, virtualization has great value in rapid commissioning and decommissioning of servers. 4. Software • Enables all aspects of cloud infrastructure management, provisioning, service development, accounting, and security. 5. Service Interface 9
Characteristics of Cloud Computing 10
Characteristics of Cloud Computing 11 Cloud On-Demand Self-Services Broad Network Access Resource Pooling Rapid Elasticity Location Independent
Cloud Service Model 1. SaaS 2. PaaS 3. IaaS 12
Cloud Service Model • Software as a Service (SaaS): • software is accessed online via a subscription – rather than bought and installed on individual computers. • Cloud consumers release their applications on a hosting environment, which can be accessed through networks from various clients (e.g. web browser, PDA, etc.) by application users. • User doesn’t manage or control the network, servers, OS, storage or applications. • Ex: Google Mail, Google Docs 13
Cloud Service Model • Platform as a Service (SaaS): • a development platform supporting the full "Software Lifecycle" which allows cloud consumers to develop cloud services and applications (e.g. SaaS) directly on the PaaS cloud. • Hence the difference between SaaS and PaaS is that SaaS only hosts completed cloud applications whereas PaaS offers a development platform that hosts both completed and in-progress cloud applications. • Google AppEngine 14
Cloud Service Model • Infrastructure as a Service (SaaS): • Cloud consumers directly use IT infrastructures (processing, storage, networks, and other fundamental computing resources) provided in the IaaS cloud. • Virtualization is extensively used in IaaS cloud in order to integrate/decompose physical resources in an ad-hoc manner to meet growing or shrinking resource demand from cloud consumers. • Amazon's EC2. 15
Cloud Service Models 16 Software as a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS)
Cloud Service Model 17
Cloud Service Model • Data Storage as a Service (SaaS): • The delivery of virtualized storage on demand becomes a separate Cloud service - data storage service. • Notice that DaaS could be seen as a special type IaaS. • This kind of DaaS include Amazon S3, Google BigTable, and Apache HBase, etc. 18
Cloud Deployment Models • Private cloud • Community cloud • Public Cloud • Hybrid cloud 19
Cloud Deployment Models • Private cloud: • Operated solely for an organization • May be managed by the organization or a third party • Limits access to enterprise and partner network • Retains high degree of control, privacy and security • Community cloud: • shared infrastructure by several organizations which have shared concerns • May be managed by the organizations or a third party • Public Cloud • Owned and managed by service provider • Made available to the general public or a large industry group • Hybrid cloud • Composition of two or more clouds (private, community, or public) bound together by standardized or proprietary technology that enables data and application portability 20
Virtualization 21
Virtual Not physically existing as such but made by software to appear to do so. 22
Virtualization Virtualization is creation of replica – rather than actual – version of something. Virtualization enables multiple operating systems to run on the same physical platform. 23
Virtualization • A VM is simply an environment, typically an operating system (OS) or a program, that is created within another environment. • Guest – is usually used to refer to the VM. • Host – we refer to the hosting environment as the host. • A single host can support multiple guest environments in a dynamic on-demand manner. • Guest VMs can execute completely different instruction sets that are foreign to the underlying physical hardware, which can be abstracted away by the host environment. 25
Using Virtualization to form Clouds • Virtualization has several key attributes, which also happen to be key attributes of cloud computing: • Sharing of Infrastructure • Scalability and Elasticity • Redundancy • Location Independency • Virtualization technologies are what enable the forming of most modern cloud computing architectures. 26
Using Virtualization to form Clouds • These key virtualization attributes contribute immensely to the implementation of clouds. • Server/ OS/ Application Virtualization for Clouds • Desktop Virtualization for Clouds • Storage Virtualization for Clouds 27
Real world Cloud usage Scenarios Forming Cloud using Virtualization • Private: • Using VMware • It is very common to use simple virtualization if you have particular applications that consume server capacity at different times of day or applications that require the operating system in which they run to be dedicated but consume very little overall system resources to operate. 28
Real world Cloud usage Scenarios Forming Cloud using Virtualization • Public: • One of the most common forms of a public cloud at the virtualization level would be any company that purchases a virtual server running on the Amazon EC2 platform (or any other cloud hosting provider). • Already very scalable and highly resilient, they did this by building out a Platform-as-a-Service offering called Amazon Web Services and then basically allowed subscribers to purchase excess capacity of their private cloud in the form of a public cloud. 29
Using Virtualization to form Clouds • These key virtualization attributes contribute immensely to the implementation of clouds. • However, the tradeoff to all of these benefits is the fact that with more abstraction can come greater complication. • Greater complexity both challenges and requires increased security as the attack surface is generally wider. • In general, complex interactions require more complicated security. 30
How Virtualization works in Clouds • Virtualization plays a significant role in cloud technology and its working mechanism. Usually, what happens in the cloud - the users not only share the data that are located in the cloud like an application but also share their infrastructures with the help of virtualization. • Virtualization is used mainly to provide applications with standard versions for the cloud customers & with the release of the latest version of an application the providers can efficiently provide that application to the cloud and its users and it is possible using virtualization only. • By the use of this virtualization concept, all servers & software other cloud providers require those are maintained by a third-party, and the cloud provider pays them on a monthly or yearly basis. 31
How Virtualization works in Clouds • Essentially there is a gap between these two terms, though cloud technology requires the concept of virtualization. • Virtualization is a technology - it can also be treated as software that can manipulate hardware. • Whereas cloud computing is a service which is the result of the manipulation. • Virtualization is the foundation element of cloud computing whereas Cloud technology is the delivery of shared resources as a service-on-demand via the internet. • Cloud is essentially made-up from the concept of virtualization. 32
References • https://www.disasterrecovery.org/cloud-computing-for-disaster-recovery- business-continuity/ • http://www.new.alionis.net/en/pca_pra/ • http://techgenix.com/security-considerations-infrastructure-service-cloud- computing-model/ • https://www.csoonline.com/article/2126885/saas-paas-and-iaas-a-security- checklist-for-cloud-models.html • https://www.valencynetworks.com/articles/ensuring-security-on-open-source- virtual-platform.html • https://resources.infosecinstitute.com/virtualization-security-2/#gref • https://www.valencynetworks.com/articles/ensuring-security-on-open-source- virtual-platform.html 33
Thank You ADAD 34

Cloud and Virtualization (Using Virtualization to form Clouds)

  • 1.
  • 2.
    Cloud Security Cloud andVirtualization Date: Presented By: Rubal Sagwal NIT Kurukshetra Department of Computer Engineering 2Rubal
  • 3.
    Contents • Cloud • Underlyingtechnology pieces from which cloud computing infrastructure is built • Characteristics of Cloud • Types of cloud services • Cloud deployment models • Virtualization • Using Virtualization to form Clouds 3
  • 4.
  • 5.
    Cloud Computing • Whatis Cloud Computing: • Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services). 5
  • 6.
    Origin of Term- Cloud 6 Internet “Comes from the early days of the Internet where we drew the network as a cloud… we didn’t care where the messages went… the cloud hid it from us” – Kevin Marks
  • 7.
    Cloud • What isCloud Computing: • Cloud computing is set of resources and services offered through the Internet. • Cloud services are delivered from data centers located throughout the world. • Cloud computing facilitates its consumers by providing virtual resources via internet. 7
  • 8.
    Underlying technology piecesfrom which cloud computing infrastructure is built 1. Infrastructure 2. IP Based Network 3. Virtualization 4. Software 5. Service Interface 8
  • 9.
    Underlying technology piecesfrom which cloud computing infrastructure is built 1. Infrastructure: • Cloud computing infrastructure is an assemblage of computer servers, storage, and network components. 2. IP Based Network: • The network serves as the means to connect users to the cloud as well as to interconnect the internal cloud. 3. Virtualization: • Virtualization is used to partition a single physical server into multiple VMs—or a single physical resource (such as storage or networking) into multiple virtual ones. • Virtualization allows for server consolidation with great utilization flexibility. For cloud computing, virtualization has great value in rapid commissioning and decommissioning of servers. 4. Software • Enables all aspects of cloud infrastructure management, provisioning, service development, accounting, and security. 5. Service Interface 9
  • 10.
  • 11.
    Characteristics of CloudComputing 11 Cloud On-Demand Self-Services Broad Network Access Resource Pooling Rapid Elasticity Location Independent
  • 12.
    Cloud Service Model 1.SaaS 2. PaaS 3. IaaS 12
  • 13.
    Cloud Service Model •Software as a Service (SaaS): • software is accessed online via a subscription – rather than bought and installed on individual computers. • Cloud consumers release their applications on a hosting environment, which can be accessed through networks from various clients (e.g. web browser, PDA, etc.) by application users. • User doesn’t manage or control the network, servers, OS, storage or applications. • Ex: Google Mail, Google Docs 13
  • 14.
    Cloud Service Model •Platform as a Service (SaaS): • a development platform supporting the full "Software Lifecycle" which allows cloud consumers to develop cloud services and applications (e.g. SaaS) directly on the PaaS cloud. • Hence the difference between SaaS and PaaS is that SaaS only hosts completed cloud applications whereas PaaS offers a development platform that hosts both completed and in-progress cloud applications. • Google AppEngine 14
  • 15.
    Cloud Service Model •Infrastructure as a Service (SaaS): • Cloud consumers directly use IT infrastructures (processing, storage, networks, and other fundamental computing resources) provided in the IaaS cloud. • Virtualization is extensively used in IaaS cloud in order to integrate/decompose physical resources in an ad-hoc manner to meet growing or shrinking resource demand from cloud consumers. • Amazon's EC2. 15
  • 16.
    Cloud Service Models 16 Softwareas a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS)
  • 17.
  • 18.
    Cloud Service Model •Data Storage as a Service (SaaS): • The delivery of virtualized storage on demand becomes a separate Cloud service - data storage service. • Notice that DaaS could be seen as a special type IaaS. • This kind of DaaS include Amazon S3, Google BigTable, and Apache HBase, etc. 18
  • 19.
    Cloud Deployment Models •Private cloud • Community cloud • Public Cloud • Hybrid cloud 19
  • 20.
    Cloud Deployment Models •Private cloud: • Operated solely for an organization • May be managed by the organization or a third party • Limits access to enterprise and partner network • Retains high degree of control, privacy and security • Community cloud: • shared infrastructure by several organizations which have shared concerns • May be managed by the organizations or a third party • Public Cloud • Owned and managed by service provider • Made available to the general public or a large industry group • Hybrid cloud • Composition of two or more clouds (private, community, or public) bound together by standardized or proprietary technology that enables data and application portability 20
  • 21.
  • 22.
    Virtual Not physically existingas such but made by software to appear to do so. 22
  • 23.
    Virtualization Virtualization is creationof replica – rather than actual – version of something. Virtualization enables multiple operating systems to run on the same physical platform. 23
  • 24.
    Virtualization • A VMis simply an environment, typically an operating system (OS) or a program, that is created within another environment. • Guest – is usually used to refer to the VM. • Host – we refer to the hosting environment as the host. • A single host can support multiple guest environments in a dynamic on-demand manner. • Guest VMs can execute completely different instruction sets that are foreign to the underlying physical hardware, which can be abstracted away by the host environment. 25
  • 25.
    Using Virtualization toform Clouds • Virtualization has several key attributes, which also happen to be key attributes of cloud computing: • Sharing of Infrastructure • Scalability and Elasticity • Redundancy • Location Independency • Virtualization technologies are what enable the forming of most modern cloud computing architectures. 26
  • 26.
    Using Virtualization toform Clouds • These key virtualization attributes contribute immensely to the implementation of clouds. • Server/ OS/ Application Virtualization for Clouds • Desktop Virtualization for Clouds • Storage Virtualization for Clouds 27
  • 27.
    Real world Cloudusage Scenarios Forming Cloud using Virtualization • Private: • Using VMware • It is very common to use simple virtualization if you have particular applications that consume server capacity at different times of day or applications that require the operating system in which they run to be dedicated but consume very little overall system resources to operate. 28
  • 28.
    Real world Cloudusage Scenarios Forming Cloud using Virtualization • Public: • One of the most common forms of a public cloud at the virtualization level would be any company that purchases a virtual server running on the Amazon EC2 platform (or any other cloud hosting provider). • Already very scalable and highly resilient, they did this by building out a Platform-as-a-Service offering called Amazon Web Services and then basically allowed subscribers to purchase excess capacity of their private cloud in the form of a public cloud. 29
  • 29.
    Using Virtualization toform Clouds • These key virtualization attributes contribute immensely to the implementation of clouds. • However, the tradeoff to all of these benefits is the fact that with more abstraction can come greater complication. • Greater complexity both challenges and requires increased security as the attack surface is generally wider. • In general, complex interactions require more complicated security. 30
  • 30.
    How Virtualization worksin Clouds • Virtualization plays a significant role in cloud technology and its working mechanism. Usually, what happens in the cloud - the users not only share the data that are located in the cloud like an application but also share their infrastructures with the help of virtualization. • Virtualization is used mainly to provide applications with standard versions for the cloud customers & with the release of the latest version of an application the providers can efficiently provide that application to the cloud and its users and it is possible using virtualization only. • By the use of this virtualization concept, all servers & software other cloud providers require those are maintained by a third-party, and the cloud provider pays them on a monthly or yearly basis. 31
  • 31.
    How Virtualization worksin Clouds • Essentially there is a gap between these two terms, though cloud technology requires the concept of virtualization. • Virtualization is a technology - it can also be treated as software that can manipulate hardware. • Whereas cloud computing is a service which is the result of the manipulation. • Virtualization is the foundation element of cloud computing whereas Cloud technology is the delivery of shared resources as a service-on-demand via the internet. • Cloud is essentially made-up from the concept of virtualization. 32
  • 32.
    References • https://www.disasterrecovery.org/cloud-computing-for-disaster-recovery- business-continuity/ • http://www.new.alionis.net/en/pca_pra/ •http://techgenix.com/security-considerations-infrastructure-service-cloud- computing-model/ • https://www.csoonline.com/article/2126885/saas-paas-and-iaas-a-security- checklist-for-cloud-models.html • https://www.valencynetworks.com/articles/ensuring-security-on-open-source- virtual-platform.html • https://resources.infosecinstitute.com/virtualization-security-2/#gref • https://www.valencynetworks.com/articles/ensuring-security-on-open-source- virtual-platform.html 33
  • 33.