Smart Usage of Cloud Services 2
Upcoming SlideShare
Loading in...5
×
 

Like this? Share it with your network

Share

Smart Usage of Cloud Services 2

on

  • 202 views

 

Statistics

Views

Total Views
202
Views on SlideShare
202
Embed Views
0

Actions

Likes
0
Downloads
1
Comments
0

0 Embeds 0

No embeds

Accessibility

Upload Details

Uploaded via as Adobe PDF

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Smart Usage of Cloud Services 2 Presentation Transcript

  • 1. SMART USAGE OF CLOUD SERVICES II Christoph Hechenblaikner
  • 2. REVIEW
  • 3. REVIEW • Cloud Computing • CC-Forecast • Evolution of CC • CC-Models Christoph Hechenblaikner
  • 4. XAAS user value SaaS End User PaaS Developer IaaS System Engineers Developers Christoph Hechenblaikner
  • 5. REVIEW • Cloud storage today: • Service-structure • Business models • Problems Christoph Hechenblaikner
  • 6. REVIEW • Security / Privacy • Management • Smart systems Systems • myCloud Christoph Hechenblaikner
  • 7. SMART USAGE OF CLOUD SERVICES • Last time: • Smart • system to use cloud services Today: • Smart • Legal selection of cloud services (business) issues / privacy issues Christoph Hechenblaikner
  • 8. TERMS OF SERVICE
  • 9. OBJECTIVES • Give an overview / idea • Point out major differences / similarities • Provide examples • Illustrate impact on myCloud Christoph Hechenblaikner
  • 10. DATA OWNERSHIP Usage Rights + Responsibility Assign rights [1] http://www.niu.edu/rcrportal/datamanagement/dotopic.html [2] Van Alstyne, M., Brynjolfsson, E., & Madnick, S. (1995). Why not one big database? Principles for data ownership. Decision Support Systems, 15(4), 267–284. doi:http://dx.doi.org/10.1016/0167-9236(94)00042-4 Christoph Hechenblaikner
  • 11. DROPBOX - TOS • DB • Use does not own files data according to privacy regulations • Exception: files • Deletion not owned by user of files is possible (DB) [3] http://www.digitaltrends.com/web/terms-conditions-dropbox-terms-and-privacy-policy/ [4] https://www.dropbox.com/privacy#terms Christoph Hechenblaikner
  • 12. DROPBOX - TOS deleted (not retained) on account / file deletion • Files • Account can be deleted without reasons • Warnings are issued to the user ! [3] http://www.digitaltrends.com/web/terms-conditions-dropbox-terms-and-privacy-policy/ [4] https://www.dropbox.com/privacy#terms Christoph Hechenblaikner
  • 13. DROPBOX - TOS • Users must not • Hack DB or use DB to hack other sites • Distribute • Host Spam / Viruses illegal / misleading / deceptive content • Use bonus programs or additional mailaddresses to increase space [3] http://www.digitaltrends.com/web/terms-conditions-dropbox-terms-and-privacy-policy/ [4] https://www.dropbox.com/privacy#terms Christoph Hechenblaikner
  • 14. DROPBOX - PRIVACY ! Name Credit card number (if you pay for service) Billing address (if you pay for service) Email address of anyone with whom you share a Dropbox folder Email address of anyone you refer to Dropbox IP address Browser type Website visited prior to arriving on Dropbox.com Location data Mobile device type (if applicable) Wireless carrier information (if applicable) Date and time of transactions All files you upload or download from Dropbox [3] http://www.digitaltrends.com/web/terms-conditions-dropbox-terms-and-privacy-policy/ [4] https://www.dropbox.com/privacy#terms Christoph Hechenblaikner
  • 15. DROPBOX - PRIVACY • Use of data: • Analytics • Offers (GoogleAnalytics) (DB and partners) • Running service (!) / not assigning rights [3] http://www.digitaltrends.com/web/terms-conditions-dropbox-terms-and-privacy-policy/ [4] https://www.dropbox.com/privacy#terms Christoph Hechenblaikner
  • 16. GOOGLE DRIVE - TOS • “Unified • Google terms of service and privacy” does not own files • Rights needed to run service • Keep rights after account / data deletion [5] https://www.google.com/intl/en/policies/terms/ [6] http://news.cnet.com/8301-1023_3-57421406-93/google-drive-terms-of-service-a-toxic-brew/ [7] http://www.theverge.com/2012/4/25/2973849/google-drive-terms-privacy-data-skydrive-dropbox-icloud Christoph Hechenblaikner
  • 17. GOOGLE DRIVE - TOS • Rights needed to run service: • use • modify • publish • host • • publicly perform • store create derivative works • publicly display and distribute • reproduce • Operating • communicate / Promoting / Improving / Development [5] https://www.google.com/intl/en/policies/terms/ [6] http://news.cnet.com/8301-1023_3-57421406-93/google-drive-terms-of-service-a-toxic-brew/ [7] http://www.theverge.com/2012/4/25/2973849/google-drive-terms-privacy-data-skydrive-dropbox-icloud Christoph Hechenblaikner
  • 18. GOOGLE DRIVE - TOS • Users must not • Access • Use service against law • Google • not the service via anything not the interface might suspend users comply to TOS • investigating suspected misconduct [5] https://www.google.com/intl/en/policies/terms/ [6] http://news.cnet.com/8301-1023_3-57421406-93/google-drive-terms-of-service-a-toxic-brew/ [7] http://www.theverge.com/2012/4/25/2973849/google-drive-terms-privacy-data-skydrive-dropbox-icloud Christoph Hechenblaikner
  • 19. SKYDRIVE - TOC • “Microsoft • Microsoft • service agreement” does not own files “[...] Your content remains your content, and you are responsible for it. We do not control, verify, pay for, or endorse the content that you and others make available on the services. [...]” [8] needed to protect (MS and you) and run the service • Rights [8] http://windows.microsoft.com/en-us/windows-live/microsoft-services-agreement Christoph Hechenblaikner
  • 20. SKYDRIVE - TOC needed to protect (MS and you) and run the service • Rights • use • • • • distribute • • reproduce display modify adapt save • Interpretation of protection is crucial [8] http://windows.microsoft.com/en-us/windows-live/microsoft-services-agreement Christoph Hechenblaikner
  • 21. SKYDRIVE - TOC • Users • • must not upload content in a way that depicts nudity of any sort including full • is intended to harm or exploit minors in any way. or partial human nudity or nudity in non- • • threatens, stalks, defames, defrauds, is designed to solicit, or collect degrades, victimizes or intimidates an art or manga. personally identifiable information of any individual or group of individuals for any incites, advocates, or expresses minor (anyone under 18 years old), reason; including on the basis of age, including, but not limited to: name, gender, disability, ethnicity, sexual email address, home address, phone orientation, race or religion; or incites or number, or the name of their school. encourages anyone else to do so. human forms such as cartoons, fantasy • • pornography, obscenity, vulgarity, profanity, hatred, bigotry, racism, or gratuitous violence. • misrepresents the source of anything • consent. privacy or publicity, or any other applicable law unless you own or control the rights thereto or have received all necessary consents. [9] http://windows.microsoft.com/en-US/windows-live/code-of-conduct • without their knowledge and willing consent. is illegal or violates any applicable local • addresses, or other contact information without their knowledge and willing includes content that is protected by information, credit card numbers, • information, such as passwords, account addresses, or other contact information that violate this Code of Conduct. private or personally identifiable information, credit card numbers, provides or creates links to external sites to harvest, collect, store, or publish information, such as passwords, account entity. intellectual property laws, rights of invades anyone's privacy by attempting private or personally identifiable impersonation of another individual or • • to harvest, collect, store, or publish you post or upload, including • invades anyone's privacy by attempting • ! and national laws; including but not • • • • limited to child pornography, bestiality, incest, illegal drugs, software piracy, and • harassment. Christoph Hechenblaikner
  • 22. SKYDRIVE - TOC • Users • must not upload content in a way that is illegal or violates any applicable servers, including but not limited to local and national laws; including spamming. but not limited to child pornography, bestiality, incest, illegal drugs, • employee, agent, manager, host, software piracy, and harassment. • attempts to impersonate a Microsoft have already posted. • threatens, stalks, defames, systems in the services, by violating user or any other person through any means. intimidates an individual or group of individuals for any reason; including • on the basis of age, gender, firearms. disability, ethnicity, sexual orientation, race or religion; or • any of the provisions of this Code of Conduct, colluding with others on promotes or otherwise facilitates the purchase and sale of ammunition or voting or using multiple profiles. • asking price of an item, with intent 'junk mail', 'spam', 'chain letters', do so. 'pyramid schemes', 'affiliate marketing' or unsolicited commercial harms or disrupts, or intends to advertisement. harm or disrupt, another user's computer or would allow you or others to illegally access software or • mischaracterizes content you post or upload or contains the same or offers to make international money transfers for amounts exceeding the contains or could be considered incites or encourages anyone else to attempts to manipulate the services, including ranking and reputation administrator, moderator, another defrauds, degrades, victimizes or • similar content to other content you to request a refund of any portion of the payment. • contains advertising for money making schemes, discount cards, credit counseling, online surveys or online contests. bypass security on Web sites, or [9] http://windows.microsoft.com/en-US/windows-live/code-of-conduct Christoph Hechenblaikner
  • 23. SKYDRIVE - TOC “[...] Microsoft reserves the right, at its sole discretion, and without any obligation to do so, to review and remove user-created services and content at will and without notice, and delete content and accounts. Microsoft reserves the right, at its sole discretion, to ban participants or terminate access to services. [...]” [9] [9] http://windows.microsoft.com/en-US/windows-live/code-of-conduct Christoph Hechenblaikner
  • 24. SKYDRIVE - TOC • Problem with protection and CoC • Microsoft extensively scans and removes stored files / suspends accounts • Scan • expands to private folders Examples • http://wmpoweruser.com/watch-what-you-store-on-skydriveyou-may-lose-your-microsoft-life/ • http://www.forbes.com/sites/kellyclay/2012/07/19/is-microsoft-spying-on-skydrive-users/ [9] http://windows.microsoft.com/en-US/windows-live/code-of-conduct Christoph Hechenblaikner
  • 25. IMPACT ON MYCLOUD • Not much • Uses defined interfaces / APIs • Limitations access • Issue of vendors only relate to content / with multiple DB accounts Christoph Hechenblaikner
  • 26. THE PATRIOT ACT
  • 27. THE PATRIOT ACT • USA Patriot Act • Uniting and Strengthening America by Providing appropriate tools required to intercept and obstruct terrorism Christoph Hechenblaikner
  • 28. THE PATRIOT ACT • 26th • In October 2001 (George W. Bush) response to 09/11 to support US agencies in their fight against terrorism • Intended laws and regulations are restricted or replaced in case of application • Several Christoph Hechenblaikner
  • 29. THE PATRIOT ACT • House owner search without knowledge of home • Terrorist organization determined by agencies • Foreigners can be deported for being a member of a terrorist organization [10] http://www.gpo.gov/fdsys/pkg/PLAW-107publ56/html/PLAW-107publ56.htm [11] http://archives.cnn.com/2002/LAW/08/23/patriot.act.explainer/ Christoph Hechenblaikner
  • 30. THE PATRIOT ACT ! • FBI has access to bank accounts • CIA is allowed to investigate on homeland surveillance without judicial decision and without knowledge / notification of users • Citizen [10] http://www.gpo.gov/fdsys/pkg/PLAW-107publ56/html/PLAW-107publ56.htm [11] http://archives.cnn.com/2002/LAW/08/23/patriot.act.explainer/ Christoph Hechenblaikner
  • 31. THE PATRIOT ACT ! • FBI has access to bank accounts • CIA is allowed to investigate on homeland surveillance without judicial decision and without knowledge / notification of users • Citizen [10] http://www.gpo.gov/fdsys/pkg/PLAW-107publ56/html/PLAW-107publ56.htm [11] http://archives.cnn.com/2002/LAW/08/23/patriot.act.explainer/ Christoph Hechenblaikner
  • 32. THE PATRIOT ACT • Application with headquarters in the US (and their sub companies abroad) • Companies • US sub-companies of other firms • Without any notification to the user [10] http://www.gpo.gov/fdsys/pkg/PLAW-107publ56/html/PLAW-107publ56.htm [11] http://archives.cnn.com/2002/LAW/08/23/patriot.act.explainer/ Christoph Hechenblaikner
  • 33. THE PATRIOT ACT • Impact on business • Avoid storing files in USA • Avoid using US-services • Impact on private users • Encryption becomes important Christoph Hechenblaikner
  • 34. THE PATRIOT ACT • Is PRISM directly related to the patriot act? • No • Permanent application of patriot act would not have been justifiable Christoph Hechenblaikner
  • 35. http://nedmartin.org/v3/amused/my-hard-drive-crashed-nsa-wont-send-me-their-backup http://de.webfail.com/ff61443e138
  • 36. THANK YOU!