Antonopoulos / Gillam Cloud Computing

Principles, Systems and Applications
1. Auflage 2010
ISBN: 978-1-84996-241-4
Verlag: Springer
Format: PDF
Kopierschutz: 1 - PDF Watermark

E-Book, Englisch, 382 Seiten

Reihe: Computer Communications and Networks

Cloud computing continues to emerge as a subject of substantial industrial and academic interest. Although the meaning and scope of 'cloud computing' continues to be debated, the current notion of clouds blurs the distinctions between grid services, web services, and data centers, among other areas. Clouds also bring considerations of lowering the cost for relatively bursty applications to the fore. Cloud Computing: Principles, Systems and Applications is an essential reference/guide that provides thorough and timely examination of the services, interfaces and types of applications that can be executed on cloud-based systems. The book identifies and highlights state-of-the-art techniques and methods for designing cloud systems, presents mechanisms and schemes for linking clouds to economic activities, and offers balanced coverage of all related technologies that collectively contribute towards the realization of cloud computing. With an emphasis on the conceptual and systemic links between cloud computing and other distributed computing approaches, this text also addresses the practical importance of efficiency, scalability, robustness and security as the four cornerstones of quality of service. Topics and features: explores the relationship of cloud computing to other distributed computing paradigms, namely peer-to-peer, grids, high performance computing and web services; presents the principles, techniques, protocols and algorithms that can be adapted from other distributed computing paradigms to the development of successful clouds; includes a Foreword by Professor Mark Baker of the University of Reading, UK; examines current cloud-practical applications and highlights early deployment experiences; elaborates the economic schemes needed for clouds to become viable business models. This book will serve as a comprehensive reference for researchers and students engaged in cloud computing. Professional system architects, technical managers, and IT consultants will also find this unique text a practical guide to the application and delivery of commercial cloud services. Prof. Nick Antonopoulos is Head of the School of Computing, University of Derby, UK. Dr. Lee Gillam is a Lecturer in the Department of Computing at the University of Surrey, UK.

Autoren/Hrsg.

Antonopoulos, Nick

Gillam, Lee

Antonopoulos, Nikos

Inhaltsverzeichnis

1;Foreword;6
2;Preface;10
2.1;Introduction;10
2.2;Expected Audience;12
2.3;Book Overview;12
2.4;Part 1: Cloud Base;13
2.5;Part 2: Cloud Seeding;13
2.6;Part 3: Cloud Breaks;14
2.7;Part 4: Cloud Feedback;15
3;Contents;16
4;Part I:Cloud Base;20
4.1;Chapter 1: Tools and Technologies for Building Clouds;21
4.1.1;1.1 Introduction;21
4.1.1.1;1.1.1 Cloud Services and Enabling Technologies;23
4.1.2;1.2 Virtualization Technology;24
4.1.2.1;1.2.1 Virtual Machines;25
4.1.2.2;1.2.2 Virtualization Platforms;25
4.1.2.3;1.2.3 Virtual Infrastructure Management;27
4.1.2.4;1.2.4 Cloud Infrastructure Manager;29
4.1.3;1.3 The MapReduce System;30
4.1.3.1;1.3.1 Hadoop MapReduce Overview;31
4.1.4;1.4 Web Services;31
4.1.4.1;1.4.1 RPC (Remote Procedure Call);32
4.1.4.2;1.4.2 SOA (Service-Oriented Architecture);33
4.1.4.3;1.4.3 REST (Representative State Transfer);34
4.1.4.4;1.4.4 Mashup;34
4.1.4.5;1.4.5 Web Services in Practice;35
4.1.5;1.5 Conclusions;35
4.1.6;References;36
4.2;Chapter 2: A Taxonomy, Survey, and Issues of Cloud Computing Ecosystems;39
4.2.1;2.1 Introduction;39
4.2.2;2.2 Background and Related Work;41
4.2.3;2.3 Taxonomy of Cloud Computing;42
4.2.3.1;2.3.1 Cloud Architecture;42
4.2.3.1.1;2.3.1.1 Services and Modes of Cloud Computing;43
4.2.3.1.1.1;Software-as-a-Service (SaaS);43
4.2.3.1.1.2;Platform-as-a-Service (PaaS);43
4.2.3.1.1.3;Hardware-as-a-Service (HaaS);43
4.2.3.1.1.4;Infrastructure-as-a-Service (IaaS);44
4.2.3.2;2.3.2 Virtualization Management;44
4.2.3.3;2.3.3 Core Services;45
4.2.3.3.1;2.3.3.1 Discovery and Replication;45
4.2.3.3.2;2.3.3.2 Load Balancing;45
4.2.3.3.3;2.3.3.3 Resource Management;46
4.2.3.4;2.3.4 Data Governance;46
4.2.3.4.1;2.3.4.1 Interoperability;46
4.2.3.4.2;2.3.4.2 Data Migration;47
4.2.3.5;2.3.5 Management Services;47
4.2.3.5.1;2.3.5.1 Deployment and Configuration;47
4.2.3.5.2;2.3.5.2 Monitoring and Reporting;47
4.2.3.5.3;2.3.5.3 Service-Level Agreements (SLAs) Management;48
4.2.3.5.4;2.3.5.4 Metering and Billing;48
4.2.3.5.5;2.3.5.5 Provisioning;49
4.2.3.6;2.3.6 Security;49
4.2.3.6.1;2.3.6.1 Encryption/Decryption;49
4.2.3.6.2;2.3.6.2 Privacy and Federated Identity;49
4.2.3.6.3;2.3.6.3 Authorization and Authentication;50
4.2.3.7;2.3.7 Fault Tolerance;50
4.2.4;2.4 Classification and Comparison between Cloud Computing Ecosystems;51
4.2.5;2.5 Findings;51
4.2.5.1;2.5.1 Cloud Computing Infrastructure Technologyand Solution Provider;51
4.2.5.2;2.5.2 Cloud Computing PaaS and SaaS Provider;59
4.2.5.3;2.5.3 Open Source Based Cloud Computing Services;60
4.2.6;2.6 Comments on Issues and Opportunities;60
4.2.7;2.7 Conclusions;62
4.2.8;References;62
4.3;Chapter 3: Towards a Taxonomy for Cloud Computing from an e-Science Perspective;65
4.3.1;3.1 Introduction;65
4.3.2;3.2 Scientific Workflows and e-Science;67
4.3.2.1;3.2.1 Scientific Workflows;67
4.3.2.2;3.2.2 Scientific Workflow Management Systems;67
4.3.2.3;3.2.3 Important Aspects of In Silico Experiments;68
4.3.3;3.3 A Taxonomy for Cloud Computing;69
4.3.3.1;3.3.1 Business Model;70
4.3.3.2;3.3.2 Privacy;71
4.3.3.3;3.3.3 Pricing;72
4.3.3.4;3.3.4 Architecture;72
4.3.3.5;3.3.5 Technology Infrastructure;73
4.3.3.6;3.3.6 Access;74
4.3.3.7;3.3.7 Standards;74
4.3.3.8;3.3.8 Orientation;75
4.3.4;3.4 Classifying Cloud Computing Environments Using the Taxonomy;76
4.3.5;3.5 Taxonomies for Cloud Computing;77
4.3.6;3.6 Conclusions and Final Remarks;78
4.3.7;References;78
4.4;Chapter 4: Examining Cloud Computingfrom the Perspective of Grid and Computer-Supported Cooperative Work;81
4.4.1;4.1 Introduction;81
4.4.2;4.2 Cloud and Grid: A Comparison;82
4.4.2.1;4.2.1 A Retrospective View;83
4.4.2.2;4.2.2 Comparison from the Viewpoint of System;84
4.4.2.3;4.2.3 Comparison from the Viewpoint of Users;86
4.4.2.4;4.2.4 A Summary;88
4.4.3;4.3 Examining Cloud Computing from the CSCW Perspective;88
4.4.3.1;4.3.1 CSCW Findings;89
4.4.3.2;4.3.2 The Anatomy of Cloud Computing;89
4.4.3.2.1;4.3.2.1 Security and Privacy;91
4.4.3.2.2;4.3.2.2 Data and/or Vendor Lock-In;91
4.4.3.2.3;4.3.2.3 Service Availability/Reliability;92
4.4.4;4.4 Conclusions;93
4.4.5;References;93
4.5;Chapter 5: Overview of Cloud Standards;95
4.5.1;5.1 Overview – Cloud Standards – What and Why?;95
4.5.2;5.2 Deep Dive: Interoperability Standards;97
4.5.2.1;5.2.1 Purpose, Expectations and Challenges;97
4.5.2.2;5.2.2 Initiatives – Focus, Sponsors and Status;98
4.5.2.3;5.2.3 Market Adoption;98
4.5.2.4;5.2.4 Gaps/Areas of Improvement;99
4.5.3;5.3 Deep Dive: Security Standards;99
4.5.3.1;5.3.1 Purpose, Expectations and Challenges;100
4.5.3.2;5.3.2 Initiatives – Focus, Sponsors and Status;100
4.5.3.3;5.3.3 Market Adoption;101
4.5.3.4;5.3.4 Gaps/Areas of Improvement;101
4.5.4;5.4 Deep Dive: Portability Standards;101
4.5.4.1;5.4.1 Purpose, Expectations and Challenges;102
4.5.4.2;5.4.2 Initiatives – Focus, Sponsors and Status;102
4.5.4.3;5.4.3 Market Adoption;102
4.5.4.4;5.4.4 Gaps/Areas of Improvement;103
4.5.5;5.5 Deep Dive: Governance, Risk Managementand Compliance Standards;103
4.5.5.1;5.5.1 Purpose, Expectations and Challenges;103
4.5.5.2;5.5.2 Initiatives – Focus, Sponsors and Status;104
4.5.5.3;5.5.3 Market Adoption;105
4.5.5.4;5.5.4 Gaps/Areas of Improvement;105
4.5.6;5.6 Deep Dive: Other Key Standards;105
4.5.6.1;5.6.1 Initiatives – Focus, Sponsors and Status;105
4.5.7;5.7 Closing Notes;106
4.5.8;References;106
5;Part II:Cloud Seeding;108
5.1;Chapter 6: Open and Interoperable Clouds: The Cloud@Home Way;109
5.1.1;6.1 Introduction and Motivation;109
5.1.2;6.2 Cloud@Home Overview;112
5.1.2.1;6.2.1 Issues, Challenges, and Open Problems;113
5.1.2.2;6.2.2 Basic Architecture;116
5.1.2.2.1;6.2.2.1 Software Environment;117
5.1.2.2.2;6.2.2.2 Software Infrastructure;118
5.1.2.2.3;6.2.2.3 Software Kernel;118
5.1.2.2.4;6.2.2.4 Firmware/Hardware;119
5.1.2.3;6.2.3 Application Scenarios;119
5.1.3;6.3 Cloud@Home Core Structure;121
5.1.3.1;6.3.1 Management Subsystem;122
5.1.3.2;6.3.2 Resource Subsystem;123
5.1.4;6.4 Conclusions;125
5.1.5;References;126
5.2;Chapter 7: A Peer-to-Peer Framework for Supporting MapReduce Applications in Dynamic Cloud Environments;128
5.2.1;7.1 Introduction;128
5.2.2;7.2 MapReduce;129
5.2.3;7.3 P2P-MapReduce;131
5.2.3.1;7.3.1 Architecture;131
5.2.3.2;7.3.2 Implementation;133
5.2.3.2.1;7.3.2.1 Basic Mechanisms;134
5.2.3.2.1.1;Resource Discovery;134
5.2.3.2.1.2;Network Maintenance;134
5.2.3.2.1.3;Job Submission and Failure Recovery;135
5.2.3.2.2;7.3.2.2 State Diagram and Software Modules;135
5.2.3.3;7.3.3 Evaluation;138
5.2.4;7.4 Conclusions;140
5.2.5;References;140
5.3;Chapter 8: Enhanced Network Support for Scalable Computing Clouds;141
5.3.1;8.1 Introduction;141
5.3.2;8.2 The Cloud Evolution;142
5.3.3;8.3 Improved Network Support for Cloud Computing;143
5.3.3.1;8.3.1 Why the Internet is Not Enough?;144
5.3.3.2;8.3.2 Transparent Optical Networks for Cloud Applications: The Dedicated Bandwidth Paradigm;145
5.3.4;8.4 Architecture and Implementation Details;146
5.3.4.1;8.4.1 Traffic Management and Control Plane Facilities;148
5.3.4.2;8.4.2 Service Plane and Interfaces;149
5.3.4.2.1;8.4.2.1 Providing Network Services to Cloud-Computing Infrastructures;150
5.3.4.2.2;8.4.2.2 The Cloud Operating System–Network Interface;150
5.3.5;8.5 Proof of Concept Implementationand Performance Analysis;151
5.3.5.1;8.5.1 The Prototype Details;151
5.3.5.1.1;8.5.1.1 The Underlying Network Infrastructure;152
5.3.5.1.2;8.5.1.2 The Prototype Cloud Network Control Logic and its Services;153
5.3.5.2;8.5.2 Performance Evaluation and Results Discussion;154
5.3.6;8.6 Related Work;156
5.3.7;8.7 Conclusions;157
5.3.8;References;157
5.4;Chapter 9: YML-PC: A Reference Architecture Based on Workflow for Building Scientific Private Clouds;159
5.4.1;9.1 Introduction;159
5.4.2;9.2 Overview of YML;162
5.4.3;9.3 Design and Implementation of YML-PC;164
5.4.3.1;9.3.1 Concept Stack of Cloud Platform;164
5.4.3.2;9.3.2 Design of YML-PC;165
5.4.3.3;9.3.3 Core Design and Implementation of YML-PC;167
5.4.4;9.4 Primary Experiments on YML-PC;171
5.4.4.1;9.4.1 YML-PC Can Be Scaled Up Very Easily;172
5.4.4.2;9.4.2 Data Persistence in YML-PC;173
5.4.4.3;9.4.3 Schedule Mechanism in YML-PC;173
5.4.5;9.5 Conclusion and Future Work;174
5.4.6;References;175
5.5;Chapter 10: An Efficient Framework for Running Applications on Clusters, Grids, and Clouds;177
5.5.1;10.1 Introduction;177
5.5.2;10.2 Related Work;178
5.5.2.1;10.2.1 General View of Cloud Computing frameworks;178
5.5.2.2;10.2.2 Cloud Computing Middleware;179
5.5.3;10.3 Deploying Applications in the Cloud;179
5.5.3.1;10.3.1 Benchmarking the Cloud;179
5.5.3.2;10.3.2 The ProActive GCM Deployment;181
5.5.3.3;10.3.3 Technical Solutions for Deployment over Heterogeneous Infrastructures;183
5.5.3.3.1;10.3.3.1 Virtual Private Network (VPN);183
5.5.3.3.2;10.3.3.2 Amazon Virtual Private Cloud (VPC);183
5.5.3.3.3;10.3.3.3 Message Forwarding and Tunneling;183
5.5.3.4;10.3.4 Conclusion and Motivation for Mixing;184
5.5.4;10.4 Moving HPC Applications from Grids to Clouds;185
5.5.4.1;10.4.1 HPC on Heterogeneous Multi-Domain Platforms;185
5.5.4.2;10.4.2 The Hierarchical SPMD Concept and Multi-level Partitioning of Numerical Meshes;185
5.5.4.3;10.4.3 The GCM/ProActive-Based Lightweight Framework;186
5.5.4.4;10.4.4 Performance Evaluation;187
5.5.5;10.5 Dynamic Mixing of Clusters, Grids, and Clouds;188
5.5.5.1;10.5.1 The ProActive Resource Manager;188
5.5.5.2;10.5.2 Cloud Bursting: Managing Spike Demand;190
5.5.5.3;10.5.3 Cloud Seeding: Dealing with Heterogeneous Hardware and Private Data;190
5.5.6;10.6 Conclusion;191
5.5.7;References;192
5.6;Chapter 11: Resource Management for Hybrid Grid and Cloud Computing;193
5.6.1;11.1 Introduction;193
5.6.2;11.2 Background;194
5.6.2.1;11.2.1 ASKALON;195
5.6.2.2;11.2.2 Cloud Computing;196
5.6.3;11.3 Resource Management Architecture;196
5.6.3.1;11.3.1 Cloud Management;198
5.6.3.2;11.3.2 Image Catalog;199
5.6.3.3;11.3.3 Security;200
5.6.4;11.4 Evaluation;202
5.6.5;11.5 Related Work;206
5.6.6;11.6 Conclusions and Future Work;207
5.6.7;References;207
5.7;Chapter 12: Peer-to-Peer Cloud Provisioning: Service Discovery and Load-Balancing;209
5.7.1;12.1 Introduction;210
5.7.2;12.2 Layered Peer-to-Peer Cloud Provisioning Architecture;212
5.7.3;12.3 Current State-of-the-Art and Practice in Cloud Provisioning;214
5.7.4;12.4 Cloud Service Discovery and Load-Balancing Using DHT Overlay;215
5.7.4.1;12.4.1 Distributed Hash Tables;215
5.7.4.2;12.4.2 Designing Complex Services over DHTs;217
5.7.5;12.5 Cloud Peer Software Fabric: Design and Implementation;220
5.7.5.1;12.5.1 Overlay Construction;220
5.7.5.2;12.5.2 Multidimensional Query Indexing;221
5.7.5.3;12.5.3 Multidimensional Query Routing;221
5.7.5.4;12.5.4 Designing Decentralized and Co-ordinated Load-Balancing Mechanism;223
5.7.6;12.6 Experiments and Evaluation;225
5.7.6.1;12.6.1 Cloud Peer Details;225
5.7.6.2;12.6.2 Aneka: PaaS Layer Application Provisioning and Management Service;226
5.7.6.3;12.6.3 Test Application;226
5.7.6.4;12.6.4 Deployment of Test Services on Amazon EC2 Platform;227
5.7.7;12.7 Results and Discussions;227
5.7.8;12.8 Conclusions and Path Forward;229
5.7.9;References;230
5.8;Chapter 13: Mixing Grids and Clouds: High-Throughput Science Using the Nimrod Tool Family;232
5.8.1;13.1 Introduction;232
5.8.2;13.2 High-Throughput Science with the Nimrod Tools;234
5.8.2.1;13.2.1 The Nimrod Tool Family;235
5.8.2.2;13.2.2 Nimrod and the Grid;235
5.8.2.3;13.2.3 Scheduling in Nimrod;236
5.8.3;13.3 Extensions to Support Amazon’s Elastic Compute Cloud;238
5.8.3.1;13.3.1 The Nimrod Architecture;239
5.8.3.2;13.3.2 The EC2 Actuator;240
5.8.3.3;13.3.3 Additions to the Schedulers;242
5.8.4;13.4 A Case Study in High-Throughput Science and Economic Scheduling;242
5.8.4.1;13.4.1 Introduction and Background;243
5.8.4.2;13.4.2 Computational Requirements;243
5.8.4.3;13.4.3 The Experiment;244
5.8.4.4;13.4.4 Computational and Economic Results;245
5.8.4.5;13.4.5 Scientific Results;247
5.8.5;13.5 Conclusions;247
5.8.6;References;248
6;Part III:Cloud Breaks;251
6.1;Chapter 14: Cloud Compliance: A Framework for Using Cloud Computing in a Regulated World;252
6.1.1;14.1 Using the Cloud;252
6.1.1.1;14.1.1 Overview;252
6.1.1.2;14.1.2 Background;253
6.1.1.3;14.1.3 Requirements and Obligations;253
6.1.1.3.1;14.1.3.1 Regional Laws;254
6.1.1.3.2;14.1.3.2 Industry Regulations;255
6.1.2;14.2 Cloud Compliance;255
6.1.2.1;14.2.1 Information Security Organization;255
6.1.2.2;14.2.2 Data Classification;256
6.1.2.2.1;14.2.2.1 Classifying Data and Systems;256
6.1.2.2.2;14.2.2.2 Specific Type of Data of Concern;256
6.1.2.2.3;14.2.2.3 Labeling;257
6.1.2.3;14.2.3 Access Control and Connectivity;257
6.1.2.3.1;14.2.3.1 Authentication and Authorization;258
6.1.2.3.2;14.2.3.2 Accounting and Auditing;258
6.1.2.3.3;14.2.3.3 Encrypting Data in Motion;259
6.1.2.3.4;14.2.3.4 Encrypting Data at Rest;259
6.1.2.4;14.2.4 Risk Assessments;259
6.1.2.4.1;14.2.4.1 Threat and Risk Assessments;260
6.1.2.4.2;14.2.4.2 Business Impact Assessments;261
6.1.2.4.3;14.2.4.3 Privacy Impact Assessments;261
6.1.2.5;14.2.5 Due Diligence and Provider Contract Requirements;261
6.1.2.5.1;14.2.5.1 ISO Certification;262
6.1.2.5.2;14.2.5.2 SAS 70 Type II;262
6.1.2.5.3;14.2.5.3 PCI PA DSS or Service Provider;262
6.1.2.5.4;14.2.5.4 Portability and Interoperability;263
6.1.2.5.5;14.2.5.5 Right to Audit;263
6.1.2.5.6;14.2.5.6 Service Level Agreements;264
6.1.2.6;14.2.6 Other Considerations;264
6.1.2.6.1;14.2.6.1 Disaster Recovery/Business Continuity;264
6.1.2.6.2;14.2.6.2 Governance Structure;264
6.1.2.6.3;14.2.6.3 Incident Response Plan;265
6.1.3;14.3 Conclusion;265
6.1.4;Bibliography;265
6.2;Chapter 15: Cloud Computing – Data Confidentiality and Interoperability Challenges;267
6.2.1;15.1 Confidentiality of Data and Principal Issues Globally: An Overview;268
6.2.1.1;15.1.1 Location of Cloud Data and Applicable Laws;268
6.2.1.2;15.1.2 Data Concerns Within a European Context;269
6.2.1.3;15.1.3 Government Data;270
6.2.1.4;15.1.4 Trust;270
6.2.1.5;15.1.5 Interoperability and Standardization in Cloud Computing;271
6.2.1.6;15.1.6 Open Grid Forum’s (OGF) Production Grid Interoperability Working Group (PGI-WG) Charter;271
6.2.1.7;15.1.7 Achievements in the OGF Open Cloud Computing Interface (OGF-OCCI);272
6.2.1.7.1;15.1.7.1 What will OCCI Provide?;272
6.2.1.7.2;15.1.7.2 Cloud Data Management Interface (CDMI);273
6.2.1.7.3;15.1.7.3 How it Works;273
6.2.1.8;15.1.8 SDOs and their Involvement with Clouds;274
6.2.1.9;15.1.9 An Example of Cloud Computing Interoperability at Microsoft;274
6.2.1.10;15.1.10 A Microsoft Cloud Interoperability Scenario;276
6.2.1.11;15.1.11 Opportunities for Public Authorities;276
6.2.1.12;15.1.12 Future Market Drivers and Challenges;277
6.2.1.13;15.1.13 Priorities Moving Forward;278
6.2.2;15.2 Conclusions;278
6.2.3;References;280
6.3;Chapter 16: Security Issues to Cloud Computing;281
6.3.1;16.1 Introduction;281
6.3.2;16.2 Cloud Computing (‘The Cloud’);282
6.3.3;16.3 Understanding Risks to Cloud Computing;285
6.3.3.1;16.3.1 Privacy Issues;286
6.3.3.2;16.3.2 Data Ownership and Content Disclosure Issues;287
6.3.3.3;16.3.3 Data Confidentiality;287
6.3.3.4;16.3.4 Data Location;289
6.3.3.5;16.3.5 Control Issues;290
6.3.3.6;16.3.6 Regulatory and Legislative Compliance;290
6.3.3.7;16.3.7 Forensic Evidence Issues;291
6.3.3.8;16.3.8 Auditing Issues;291
6.3.3.9;16.3.9 Business Continuity and Disaster Recovery Issues;292
6.3.3.10;16.3.10 Trust Issues;292
6.3.3.11;16.3.11 Security Policy Issues;293
6.3.3.12;16.3.12 Emerging Threats to Cloud Computing;293
6.3.4;16.4 Cloud Security Relationship Framework;294
6.3.4.1;16.4.1 Security Requirements in the Clouds;296
6.3.5;16.5 Conclusion;296
6.3.6;References;298
6.4;Chapter 17: Securing the Cloud;299
6.4.1;17.1 Introduction;300
6.4.1.1;17.1.1 What Is Security?;301
6.4.2;17.2 ISO 27002 Gap Analyses;301
6.4.2.1;17.2.1 Asset Management;302
6.4.2.2;17.2.2 Communications and Operations Management;302
6.4.2.3;17.2.3 Information Systems Acquisition, Development, and Maintenance;304
6.4.2.4;17.2.4 Information Security Incident Management;304
6.4.2.5;17.2.5 Compliance;305
6.4.3;17.3 Security Recommendations;305
6.4.4;17.4 Case Studies;309
6.4.4.1;17.4.1 Private Cloud: Fortune 100 Company;309
6.4.4.2;17.4.2 Public Cloud: Amazon.com;310
6.4.5;17.5 Summary and Conclusion;310
6.4.6;References;312
7;Part IV Cloud Feedback;313
7.1;Chapter 18: Technologies for Enforcement and Distribution of Policy in Cloud Architectures;314
7.1.1;18.1 Introduction;314
7.1.2;18.2 Decoupling Policy from Applications;315
7.1.2.1;18.2.1 Overlap of Concerns Between the PEP and PDP;316
7.1.2.2;18.2.2 Patterns for Binding PEPs to Services;317
7.1.2.3;18.2.3 Agents;317
7.1.2.4;18.2.4 Intermediaries;318
7.1.3;18.3 PEP Deployment Patterns in the Cloud;319
7.1.3.1;18.3.1 Software-as-a-Service Deployment;320
7.1.3.2;18.3.2 Platform-as-a-Service Deployment;320
7.1.3.3;18.3.3 Infrastructure-as-a-Service Deployment;320
7.1.3.4;18.3.4 Alternative Approaches to IaaS Policy Enforcement;321
7.1.3.5;18.3.5 Basic Web Application Security;321
7.1.3.6;18.3.6 VPN-Based Solutions;322
7.1.4;18.4 Challenges to Deploying PEPs in the Cloud;322
7.1.4.1;18.4.1 Performance Challenges in the Cloud;322
7.1.4.2;18.4.2 Strategies for Fault Tolerance;323
7.1.4.3;18.4.3 Strategies for Scalability;323
7.1.4.4;18.4.4 Clustering;323
7.1.4.5;18.4.5 Acceleration Strategies;324
7.1.4.5.1;18.4.5.1 Accelerating Message Processing;324
7.1.4.5.2;18.4.5.2 Acceleration of Cryptographic Operations;325
7.1.4.6;18.4.6 Transport Content Coding;325
7.1.4.7;18.4.7 Security Challenges in the Cloud;325
7.1.4.8;18.4.8 The PEP Air Gap;325
7.1.4.9;18.4.9 Binding PEPs and Applications;326
7.1.4.9.1;18.4.9.1 Intermediary Isolation;326
7.1.4.9.2;18.4.9.2 The Protected Application Stack;327
7.1.4.10;18.4.10 Authentication and Authorization;327
7.1.4.11;18.4.11 Clock Synchronization;330
7.1.4.12;18.4.12 Management Challenges in the Cloud;330
7.1.4.13;18.4.13 Audit, Logging, and Metrics;330
7.1.4.14;18.4.14 Repositories;331
7.1.4.15;18.4.15 Provisioning and Distribution;332
7.1.4.16;18.4.16 Policy Synchronization and Views;332
7.1.5;18.5 Conclusion;333
7.1.6;References;333
7.2;Chapter 19: The PRISM On-demand Digital Media Cloud;335
7.2.1;19.1 Introduction and Background;336
7.2.2;19.2 A Media Service Cloud for Traditional Broadcasting;337
7.2.2.1;19.2.1 Gridcast the PRISM Cloud 0.12;337
7.2.3;19.3 An On-demand Digital Media Cloud;341
7.2.4;19.4 PRISM Cloud Implementation;344
7.2.4.1;19.4.1 Cloud Resources;344
7.2.4.2;19.4.2 Cloud Service Deployment and Management;346
7.2.5;19.5 The PRISM Deployment;346
7.2.6;19.6 Summary;348
7.2.7;19.7 Content Note;348
7.2.8;References;348
7.3;Chapter 20: Cloud Economics: Principles, Costs, and Benefits;350
7.3.1;20.1 Cloud Computing Reference Model;350
7.3.2;20.2 Cloud Economics;352
7.3.2.1;20.2.1 Economic Context;352
7.3.2.2;20.2.2 Economic Benefits;353
7.3.2.3;20.2.3 Economic Costs;354
7.3.2.4;20.2.4 Company Size, Economic Costs, and Benefits of Cloud Computing;354
7.3.2.5;20.2.5 The Economics of Green Clouds;355
7.3.3;20.3 Quality of Experience in the Cloud;358
7.3.4;20.4 Monetization Models in the Cloud;362
7.3.5;20.5 Charging in the Cloud;364
7.3.5.1;20.5.1 Existing Models of Charging;364
7.3.5.1.1;20.5.1.1 On-Demand IaaS Instances;365
7.3.5.1.2;20.5.1.2 Reserved IaaS Instances;365
7.3.5.1.3;20.5.1.3 PaaS Charging;365
7.3.5.1.4;20.5.1.4 Cloud Vendor Pricing Model;365
7.3.5.1.5;20.5.1.5 Interprovider Charging;366
7.3.6;20.6 Taxation in the Cloud;366
7.3.7;References;367
7.4;Chapter 21: Towards Application-Specific Service Level Agreements: Experiments in Clouds and Grids;368
7.4.1;21.1 Introduction;368
7.4.2;21.2 Background;370
7.4.3;21.3 Experiment;371
7.4.3.1;21.3.1 Target Application: Value at Risk;371
7.4.3.2;21.3.2 Target Systems;372
7.4.3.2.1;21.3.2.1 Condor;372
7.4.3.2.2;21.3.2.2 Amazon EC2;372
7.4.3.2.3;21.3.2.3 Eucalyptus;373
7.4.3.3;21.3.3 Results;373
7.4.3.4;21.3.4 Job Completion;376
7.4.3.5;21.3.5 Cost;376
7.4.4;21.4 Conclusions and Future Work;377
7.4.5;References;378
8;Index;380