Directions: Answer each question individual and respond with full knowledge and understanding. Use 100% original work and turn in on before or date requested.. 1. How did you apply the knowledge, skills, and attitudes from previous courses to the application of your capstone project? What did you learn from those experiences that prepared you for the capstone? 2. After implementing your capstone, you will have an opportunity to conduct a post-assessment and evaluate the success of the project. Before getting the results, what do you expect to learn from the post-assessment? Do you feel your capstone project was successful? What could you have done differently or improved upon? 3. Now that you have finished your capstone project, reflect on its function, purpose, and success with your classmates. What do you wish you had known before starting? If you wanted to continue the project, what would be your next steps? 4. During this topic, you will compile a leadership portfolio that encapsulates key assignments that helped shape you as a leader. How will this portfolio reflect your vision as a leader? How does it demonstrate your growth throughout the program? School of Computer & Information Sciences ITS-532 Cloud Computing Chapter 5 – Identity as a Service (IDaaS) Content from: Primary Textbook: Jamsa, K. A. (2013). Cloud computing: SaaS, PaaS, IaaS, virtualization, business models, mobile, security and more. Burlington, MA: Jones & Bartlett Learning. Secondary Textbook: Erl, T., Mahmood, Z., & Puttini, R. (2014). Cloud computing: concepts, technology, & architecture. Upper Saddle River, NJ: Prentice Hall. 1 Learning Objectives Describe challenges related to ID management. Describe and discuss single sign-on (SSO) capabilities. List the advantages of IDaaS solutions. Discuss IDaaS solutions offered by various companies. IDaaS Defined Identity (or identification) as a service (IDaaS)—Cloud-based approaches to managing user identities, including usernames, passwords, and access. Also sometimes referred to as “identity management as a service. Identity and Access Management (IAM) Identity and Access Management includes the components and policies necessary to control user identify and access privileges. Authentication Username/Password, digital signatures, digital certificates, biometrics Authorization Granular controls for mapping identities and rights User Management Creation and administration of new user identities, groups, passwords, and policies Credential Management Establishes identities and access control rules for user accounts 4 (Erl, 2014) Single Sign-On (SSO) Single sign-on (SSO)—PA process that allows a user to log into a central authority and then access other sites and services for which he or she has credentials. Advantages of SSO Fewer username and password combinations for users to remember and manage Less password fatigue caused by the stress of managing multiple passwords Less user time con.

1. Directions: Answer each question individual and respond with
full knowledge and understanding. Use 100% original work and
turn in on before or date requested..
1. How did you apply the knowledge, skills, and attitudes from
previous courses to the application of your capstone project?
What did you learn from those experiences that prepared you for
the capstone?
2. After implementing your capstone, you will have an
opportunity to conduct a post-assessment and evaluate the
success of the project. Before getting the results, what do you
expect to learn from the post-assessment? Do you feel your
capstone project was successful? What could you have done
differently or improved upon?
3. Now that you have finished your capstone project, reflect on
its function, purpose, and success with your classmates. What
do you wish you had known before starting? If you wanted to
continue the project, what would be your next steps?
4. During this topic, you will compile a leadership portfolio that
encapsulates key assignments that helped shape you as a leader.
How will this portfolio reflect your vision as a leader? How
does it demonstrate your growth throughout the program?
School of Computer & Information Sciences
ITS-532 Cloud Computing

2. Chapter 5 – Identity as a Service (IDaaS)
Content from:
Primary Textbook: Jamsa, K. A. (2013). Cloud computing:
SaaS, PaaS, IaaS, virtualization, business models, mobile,
security and more. Burlington, MA: Jones & Bartlett Learning.
Secondary Textbook: Erl, T., Mahmood, Z., & Puttini, R.
(2014). Cloud computing: concepts, technology, & architecture.
Upper Saddle River, NJ: Prentice Hall.
1
Learning Objectives
Describe challenges related to ID management.
Describe and discuss single sign-on (SSO) capabilities.
List the advantages of IDaaS solutions.
Discuss IDaaS solutions offered by various companies.
IDaaS Defined
Identity (or identification) as a service (IDaaS)—Cloud-based
approaches to managing user identities, including usernames,
passwords, and access. Also sometimes referred to as “identity
management as a service.
Identity and Access Management (IAM)
Identity and Access Management includes the components and
policies necessary to control user identify and access
privileges.

3. Authentication
Username/Password, digital signatures, digital certificates,
biometrics
Authorization
Granular controls for mapping identities and rights
User Management
Creation and administration of new user identities, groups,
passwords, and policies
Credential Management
Establishes identities and access control rules for user accounts
4
(Erl, 2014)
Single Sign-On (SSO)
Single sign-on (SSO)—PA process that allows a user to log into
a central authority and then access other sites and services for
which he or she has credentials.
Advantages of SSO
Fewer username and password combinations for users to
remember and manage
Less password fatigue caused by the stress of managing
multiple passwords
Less user time consumed by having to log in to individual
systems
Fewer calls to help desks for forgotten passwords
A centralized location for IT staff to manage password

4. compliance and reporting
Disadvantages of SSO
The primary disadvantage of SSO systems is the potential for a
single source of failure. If the authentication server fails, users
will not be able to log in to other servers.
Thus, having a cloud-based authentication server with system
redundancy reduces the risk of system unavailability.
How Single Sign On Works
The single sign on mechanism enables one cloud service
consumer to be authenticated by a security broker. Once
established, the security context is persistent when the
consumer accesses other cloud based IT resources.
8
(Erl, 2014)
Figure 10.9 - A cloud consumer provides the security broker
with login credentials (1). The security broker response with an
authentication token (message with small lock symbol) upon
successful authentication, which contains cloud service
consumer identify information (2) that is used to automatically
authenticate the cloud service consumer across Cloud Services
A, B, and C (3).

5. Federated ID Management
FIDM describes the technologies and protocols that combine to
enable a user to bring security credentials across different
security domains (different servers running potentially different
operating systems).
Security Assertion Markup Language (SAML)
Behind the scenes, many FIDM systems use the Security
Assertion Markup Language (SAML) to package a user’s
security credentials.
Account Provisioning
The process of creating a user account on a system is called
account provisioning.
Because different employees may need different capabilities on
each system, the provisioning process can be complex.
When an employee leaves the company, a deprovisioning
process must occur to remove the user’s accounts.
Unfortunately, the IT staff is not always immediately informed
that an employee no longer works for the company, or the IT
staff misses a server account and the user may still have access
to one or more systems.
4 A’s of Cloud Identity

6. Authentication: The process of validating a user for on-site and
cloud-based solutions.
Authorization: The process of determining and specifying what
a user is allowed to do on each server.
Account management: The process of synchronizing user
accounts by provisioning and deprovisioning access.
Audit logging: The process of tracking which applications users
access and when.
Real World: Ping Identity IDaaS
Ping Identity provides cloud-based ID management software
that supports FIDM and user account provisioning.
Real World: PassworkBank IDaaS
PasswordBank provides an IDaaS solution that supports on-site
and cloud-based system access. Its FIDM service supports
enterprise-wide SSO (E-SSO) and SSO for web-based
applications (WebSSO).
The PasswordBank solutions perform the FIDM without the use
of SAML.
PasswordBank solutions support a myriad of devices, including
the iPhone.

7. OpenID
OpenID allows users to use an existing account to log in to
multiple websites. Today, more than 1 billion OpenID accounts
exist and are accepted by thousands of websites.
Companies that support OpenID include Google, Yahoo!, Flickr,
Myspace, WordPress.com, and more
Advantages of Using OpenID
Increased site conversion rates (rates at which customers choose
to join websites) because users do not need to register
Access to greater user profile content
Fewer problems with lost passwords
Ease of content integration into social networking sites
Mobile ID Management
Threats to mobile devices include the following:
Identity theft if a device is lost or stolen
Eavesdropping on data communications
Surveillance of confidential screen content
Phishing of content from rogue sites
Man-in-the-middle attacks through intercepted signals
Inadequate device resources to provide a strong security
implementation
Social attacks on unaware users that yield identity information

8. Cloud Based Security Groups
Cloud resource segmentation is a process of creating separate
physical and virtual IT environments for different users and
groups to increase security.
18
(Erl, 2014)
Figure 10.11 - Cloud-Based Security Group A encompasses
Virtual Servers A and D and is assigned to Cloud Consumer A.
Cloud-Based Security Group B is comprised of Virtual Servers
B, C, and E and is assigned to Cloud Consumer B. If Cloud
Service Consumer A’s credentials are compromised, the attacker
would only be able to access and damage the virtual servers in
Cloud-Based Security Group A, thereby protecting Virtual
Servers B, C, and E.
Hardened Virtual Server Images
When creating a virtual server from a template, the hardening
process removes unnecessary software from the system to limit
vulnerabilities that could be exploited by hackers.
19
(Erl, 2014)
Figure 10.13 - A cloud provider applies its security policies to
harden its standard virtual server images.
Key Terms

9. References
Primary:
Jamsa, K. A. (2013). Cloud computing: SaaS, PaaS, IaaS,
virtualization, business models, mobile, security and more.
Burlington, MA: Jones & Bartlett Learning.
Secondary:
Erl, T., Mahmood, Z., & Puttini, R. (2014). Cloud computing:
concepts, technology, & architecture. Upper Saddle River, NJ:
Prentice Hall.
21
School of Computer & Information Sciences
ITS-532 Cloud Computing
Chapter 4 – Infrastructure as a Service (IaaS)
Content from:
Primary Textbook: Jamsa, K. A. (2013). Cloud computing:
SaaS, PaaS, IaaS, virtualization, business models, mobile,

10. security and more. Burlington, MA: Jones & Bartlett Learning.
Secondary Textbook: Erl, T., Mahmood, Z., & Puttini, R.
(2014). Cloud computing: concepts, technology, & architecture.
Upper Saddle River, NJ: Prentice Hall.
1
Define and describe IaaS and identify IaaS solution providers.
Define and describe colocation.
Define and describe system and storage redundancy.
Define and describe cloud-based network-attached storage
(NAS) devices and identify solution providers.
Define and describe load balancing and identify cloud-based
solution providers.
Describe the pros and cons of IaaS solutions.
Learning Objectives
An IaaS provider makes all of the computing hardware
resources available, and the customers, in turn, are responsible
for installing and managing the systems, which they can
normally do, for the most part, over the Internet.
IaaS Defined
What Data Centers Must Provide
Access to high-speed and redundant Internet service
Sufficient air conditioning to eliminate the heat generated by
servers and disk storage devices
Conditioned power with the potential for uninterrupted power

11. supply in the short term and long term through the use of on-
site diesel powered generators
Fire suppression systems
Administrative staffing to support hardware, networks, and
operating systems
Bottom Line: Data Centers are Expensive
Co-located Data Centers
To reduce the risk of a single point of failure, companies often
create a duplicate data center at a remote location.
Should one of the data centers fail, the other can immediately
take over operations.
Unfortunately, the second data center will increase the
company’s costs—essentially doubling them—because there are
duplicate servers, storage devices, network equipment, Internet
access, and staffing.
Co-located Data Center

12. What Co-located Systems Accomplish
Makes the company less susceptible to fire, acts of God, and
terrorism
Improves performance through a distributed workload
Makes the company less susceptible to downtime due to power
loss from a blackout or brownout
IaaS solutions allow smaller companies to eliminate the need
for their own on-site data center
IaaS
Solution
s May Support Many Different Companies
Load Balancing
Across the web, sites experience a wide range of network traffic
requirements.
Sites such as Google, Yahoo!, Amazon, and Microsoft
experience millions of user hits per day. To handle such web
requests, the sites use a technique known as load balancing, to

13. share the requests across multiple servers.
Load Balancing Continued
Load balancing uses a server to route traffic to multiple servers
which, in turn, share the workload.
Load Balancing and Replicated Databases
Load balanced systems, for data redundancy, often replicate
databases on multiple servers.
Each database, in turn, will send data updates to the other to
maintain data synchronization between the servers.

14. Cloud-Based Data Replication
Using cloud-based NAS devices and cloud-based databases,
companies can replicate key data within the cloud.
Real World: Rackspace IaaS
Rackspace has emerged as one of the largest players in the IaaS
market. Rackspace offers a set of solutions that include cloud
hosting, managed hosting (including 24/7 data-center like
management), and hybrid solutions that combine the cloud and
managed services.
Within minutes, from the Rackspace website an administrator
can select a solution that deploys from 1 to 50 servers. Larger
configurations are available.
Rackspace Continued

15. Today Rackspace offers cloudbased solutions to hundreds of
thousands of clients. Rackspace houses its data centers at very
large facilities located around the world.
With respect to the cloud, Rackspace offers pay as you go
scalability, with on-demand storage and load balancing. Beyond
cloud hosting, Rackspace provides solutions for cloud-based e-
mail, Exchange hosting, file sharing, backups, and
collaboration.
Network Attached Storage (NAS)
Cloud-based NAS devices present cloud-based storage as
mountable devices, which may be replicated in the cloud to
meet a company’s data redundancy needs.
Real World: Nirvanix IaaS
The Nirvanix IaaS provides cloud-based NAS, which is

16. accessible through the CloudNAS file system.
Advantages of IaaS
Elimination of an expensive and staff-intensive data center
Ease of hardware scalability
Reduced hardware cost
On-demand, pay as you go scalability
Reduction of IT staff
Suitability for ad hoc test environments
Allows complete system administration and management
IaaS Server Types
Physical server: Actual hardware is allocated for the customer’s
dedicated use.
Dedicated virtual server: The customer is allocated a virtual
server, which runs on a physical server that may or may not

17. have other virtual servers.
Shared virtual server: The customer can access a virtual server
on a device that may be shared with other customers.
IaaS Server Types Continued
Within an IaaS environment, customers can allocate various
server types.
Data Center Technology
Virtualization
Standardization and Modularity
Automation
Remote Operation and Management
High Availability
Security-Aware Design, Operation, and Management
Facilities

18. Computing Hardware
Storage Hardware
(Erl, 2014)
Storage Technologies
Hard Disk Arrays
I/O Caching
Hot-Swappable Hard Disks
Storage Virtualization
Fast Data Replication Mechanisms
Network Storage Devices
Storage Area Networks (SAN) – dedicated network
Network Attached Storage (NAS) – device connected to network
(Erl, 2014)
Network Hardware
Carrier and External Network Interconnection – LAN/WAN
Load Balancing and Acceleration

19. LAN Fabric – High performance and redundant connectivity
SAN Fabric – Used to connect servers to storage devices
NAS Gateways – connection points for NAS storage devices
(Erl, 2014)
Key Terms
References
Primary:
Jamsa, K. A. (2013). Cloud computing: SaaS, PaaS, IaaS,
virtualization, business models, mobile, security and more.
Burlington, MA: Jones & Bartlett Learning.
Secondary:
Erl, T., Mahmood, Z., & Puttini, R. (2014). Cloud computing:
concepts, technology, & architecture. Upper Saddle River, NJ:
Prentice Hall.
25

20. School of Computer & Information Sciences
ITS-532 Cloud Computing
Chapter 3 – Platform as a Service (PaaS)
Content from:
Primary Textbook: Jamsa, K. A. (2013). Cloud computing:
SaaS, PaaS, IaaS, virtualization, business models, mobile,
security and more. Burlington, MA: Jones & Bartlett Learning.
Secondary Textbook: Erl, T., Mahmood, Z., & Puttini, R.
(2014). Cloud computing: concepts, technology, & architecture.

21. Upper Saddle River, NJ: Prentice Hall.
1
Learning Objectives
Define and describe the PaaS model.
Describe the advantages and disadvantages of PaaS solutions.
List and describe several real-world PaaS solutions.
List and describe cloud-based database solutions and describe
their advantages.
Discuss the development history that led to PaaS.
2
Platform as a Service (PaaS) Defined
Provide a collection of hardware and software resources that
developers can use to build and deploy applications within the
cloud.
Depending on their needs, developers may use a Windows-based
PaaS solution or a Linux-based PaaS.
3

22. PaaS Advantages
Developers eliminate the need to buy and maintain hardware,
and the need to install and manage operating system and
database software.
Because the computing resources no longer reside in the data
center, but rather in the cloud, the resources can scale on
demand and the company can pay for only resources it
consumes.
Further, because PaaS eliminates the developers’ need to worry
about servers, they can more quickly deploy their web-based
solutions.
4
PaaS Disadvantages
Some developers and administrators want finer control over the
underlying systems (versions, patch releases/applications, …)
5

23. Real World: Google App Engine
Google App Engine, sometimes called GAE, is a PaaS solution
that lets developers create and host web-based applications that
reside and run on services managed by Google.
Like many Google services and offerings, Google App Engine is
a free service.
Google App Engine provides platform support for a variety of
programming languages, the three most common of which are
Java, Python, and Go.
6
Google App Engine Continued
Google App Engine features include the following:
Support for dynamic web pages
Data storage and query support
Load balancing for application scalability
Application program interface (API) support for application-
based e-mail through Google services
A local development environment that simulates Google App
Engine on the developer’s computer

24. Support for event scheduling and triggering
An application sandbox that limits access to the underlying
operating system
An administrative console for managing applications
7
Real World: Taleo Human-Resources SaaS
8
To achieve wide-scale use, an SaaS solution must have large
market potential.
Every business must recruit, hire, train, and compensate
employees.
The Taleo cloud-based talent management system provides
applications and services to meet company human resources
demands.
Google App Engine
9

25. Evolution to the Cloud
Mainframe Computers
Personal Computers
Local-Area Networks
Internet Service Providers (ISPs)
PaaS
10
Mainframe Computing
Large capital investment for data-center-based computers
Large, expensive disk and tape storage systems that often
provided only limited storage capacity
User interface to the system provided through dumb terminals
Limited computer–network interconnectivity
System security maintained through physical security (few users
had direct access to the computer hardware)

26. 11
Mainframe Computer
12
Tower-Based Servers
Large physical footprint
Considerable heat generation and power consumption
13
Internet Service Providers (ISPs)
14

27. ISP Advantages
Reduced cost: The ISP provided the high-speed, high-bandwidth
Internet connection, which it shared across several companies.
Less server administration: The ISP managed the servers to
which developers uploaded their solutions.
Less hardware to purchase and maintain: The ISP purchased and
managed the hardware and managed the infrastructure software,
such as the operating system.
15
ISP Advantages Continued
Greater system uptime: Through the use of redundant hardware
resources, the ISP provided high system uptime.
Potential scalability: The ISP had the ability to move a high-
demand application to a faster bandwidth connection.
16

28. Blade Computers
Reduced server footprint
Reduced power consumption and heat generation
17
Real World: Force.com PaaS
To extend its cloud capabilities to application developers,
Salesforce.com has released the Force.com PaaS.
Originally developed to provide a home for business
applications, Force.com now runs applications across most
sectors.
18

29. Benefits of PaaS
By shifting computing resources from an on-site data center to
the cloud, PaaS solutions offer:
Lower total cost of ownership: Companies no longer need to
purchase and maintain expensive hardware for servers, power,
and data storage.
Lower administration overhead: Companies shift the burden of
system software administration from in-house administration to
employees of the cloud provider.
19
Benefits of PaaS Continued
More current system software: The cloud administrator is
responsible for maintaining software versions and patch
installations.
Increased business and IT alignment: Company IT personnel can
focus on solutions as opposed to server-related issues.
Scalable solutions: Cloud-based solutions can scale up or down
automatically based on application resource demands.
Companies pay only for the resources they consume.
20

30. Disadvantages of PaaS
Potential disadvantages of PaaS solutions include:
Concerns about data security: Some companies are hesitant to
move their data storage off-site.
Challenges to integrating cloud solutions with legacy software:
A company may need to support on-site solutions as well as
cloud-based solutions. Communication between the two
application types may be difficult to impossible.
Risk of breach by the PaaS provider: If the company providing
the PaaS service fails to meet agreed-upon service levels,
performance, security, and availability may be at risk, and
moving the application may be difficult.
21
Real World: Windows Azure as a PaaS
Microsoft .NET has driven the development of many dynamic
web solutions and web services.
Windows Azure is a PaaS running within Microsoft data

31. centers.
Users pay only for the scalable processor resources that they
consume.
SQL Azure provides a cloud-based database solution for
applications running within Windows Azure.
22
Windows Azure Continued
Windows Azure goes beyond .NET and includes support for
Java, PHP, and Ruby. Developers can build and deploy their
solutions to Azure using an IDE such as Visual Studio or
Eclipse.
Developers can interface to SQL Azure using much of the same
code they would use to access a local database.
23
Windows Azure Continued
24

32. Key Terms
25
References
Jamsa, K. A. (2013). Cloud computing: SaaS, PaaS, IaaS,
virtualization, business models, mobile, security and more.
Burlington, MA: Jones & Bartlett Learning.
26