Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Information Security and Cloud Computing


Published on

A short presentation on Information Security and Cloud Computing, prepared for an event of the UK's Society of Archivists.
The slides were intended to shape the issues ahead of a longer discussion session.

Published in: Technology, Business
  • Be the first to comment

  • Be the first to like this

Information Security and Cloud Computing

  1. 1. Information Security & Cloud Computing Dr Paul Miller The Cloud of Data
  2. 2. Topics Cloud Stack redux Some (quick!) ‘truths’ about the Cloud Information Security?
  3. 3. ‘The Cloud’ lumps different concepts/capabilities together The Cloud Stack
  4. 4. “convenient, on-demand network access to a shared pool of configurable computing resources...”
  5. 5. Traditional 3 layer model - there are plenty of others! all ‘Cloud’… but DIFFERENT! Software/Application [as a Service] (SaaS) Platform [as a Service] (PaaS) Infrastructure [as a Service] (IaaS)
  6. 6. outsource raw infrastructure - avoid significant CapEx scale to meet demand - Eli Lilly, payroll SaaS private/ hybrid public/ PaaS Infrastructure as a Service (IaaS) computers (Amazon EC2, Rackspace, GoGrid...) storage (Amazon S3, MobileMe, Google Drive...) Elasticity (Rightscale…) Bandwidth (Limelight, Amazon CloudFront…) Electricity Cooling etc.
  7. 7. ‘does heavy lifting’ concentrate on your app’s USP least developed but most potential? SaaS Platform as a Service (PaaS) Salesforce Apprenda SaaSGrid Google App Engine Microsoft Azure Appistry Talis Platform IaaS
  8. 8. light weight applications, delivered over Web mostly low-end disruptors for now... Software as a Service (SaaS) Google Apps, Zoho, Kashflow, FreeAgent MobileMe PaaS IaaS
  9. 9. Some more true than others! Some ‘Truths’ about the Cloud
  10. 10. Microsoft Data Centre, Dublin Cisco, VMware et al pushing on-premise G-Cloud, here and in USA... It’s All Off-Premise
  11. 11. For elastic or periodic jobs. Less clear-cut for ‘normal’ load It’s Cheap
  12. 12. Probably… but Simon Wardley It’s Green
  13. 13. Numbers don’t add up... It’s Not Reliable
  14. 14. And your data centre ? It’s Not Secure
  15. 15. PATRIOT Act and data territoriality are real… but manageable USA will read my data
  16. 16. And Rackspace, and Microsoft, and Sun, and HP, It’s Amazon and Google, and...
  17. 17. Amazon Rackspace Joyent GoGrid OpSource FlexiScale 3,000 Guy Rosen has begun tracking trends, using QuantCast’s top 2,250 500,000 sites 1,500 750 0 July September November January March May
  18. 18. With thanks to Simon Wardley “It’s like computers on the Internet, innit?”
  19. 19. What are you securing… and Why? 5 broad areas... Security
  20. 20. Secure Physical Infrastructure
  21. 21. Secure the Network
  22. 22. Secure Applications
  23. 23. Secure Data
  24. 24. Secure People
  25. 25. Conclusion
  26. 26. it can be! what matters? security costs time, money and effort identify appropriate levels of security… always remember that people will be people.
  27. 27. cloud of data Thank you Download this presentation Dr Paul Miller The Cloud of Data Made on a skype: cloudofdata Mac phone: +44 7769 740083 Except where otherwise noted, this work is licensed under the Creative Commons Attribution Licence. To view a copy of this licence, visit or send a letter to Creative Commons, 171 Second St, San Francisco, CA 94105, United States of America