By Farnaz Zeidi M Sc student in Information

By: Farnaz Zeidi M. Sc. student in Information Technology, Mazandaran University of Science and Technology (MUST), Babol, Mazandaran, IRAN F. zeidi@ustmb. ac. ir Supervisor: Hadi Salimi February 2011 1

Outline ● Standards for Application Developers ●The purpose for Messaging Standards : Is to ensure uniform, consistent, high-quality software ●solutions. Standards for Security ● Standards Groups ●v. Browsers (Ajax) in Cloud Computing Standardization Some Activities v. Data (XML, JSON) ●v. Solution Stacks (LAMP and LAPP) Recommendations ● Refrence Common Standards In Cloud Computing 2

Standards for Application Developers(Cont’d) v. Browsers (Ajax) v. Its predecessor AJAX (Asynchronous Java. Script and XML). v. A web application can request only the content that needs to be updated. v This greatly reduces networking bandwidth usage and page load times. v. Use in interactive animation on web pages. Common Standards In Cloud Computing 3

Standards for Application Developers(Cont’d) v. Data (XML, JSON) v. XML(Extensible Markup Language) • Usually combination with other standards. • Define the content of a document separately. v. JSON(Java. Script Object Notation) • A lightweight computer data interchange format • Is specified in Internet Engineering • Request for Comment (RFC) • Independent data format Common Standards In Cloud Computing 4

Standards for Application Developers(Cont’d) v. Solution Stacks (LAMP and LAPP) v. LAMP ØThe acronym Linux, Apache, My. SQL, and PHP (or Perl or Python) ØOpen source nature, low cost, and the wide distribution of its components ØUsed to • Run dynamic web sites and servers. • Development and deployment of highperformance web applications. • Define a web server infrastructure. • Creating a programming environment for developing software. v. LAPP • It is more powerful than LAMP stack Common Standards In Cloud Computing 5

Outline ● Standards for Application Developers The purpose : for Messaging Standards for message that is a unit of ● Standards for Security information that is moved from one place to ● Standards Groups another v. Simple Message Transfer Protocol (SMTP) Standardization ● Some Activities in Cloud Computing v. Post Office Protocol (POP) ● Recommendations v. Internet Messaging Access Protocol (IMAP) ● Refrence v. Syndication (Atom, Atom Publishing Protocol, and RSS) v. Communications (HTTP, SIMPLE, and XMPP) Common Standards In Cloud Computing 6

Standards for Messaging (Cont’d) v. Simple Message Transfer Protocol (SMTP) • SMTP is usually used for: • Sending a message from a workstation to a mail server. • Or communications between mail servers. • Client must have a constant connection to the host to receive SMTP messages. Common Standards In Cloud Computing 7

Standards for Messaging (Cont’d) v. Post Office Protocol (POP) • Purpose is to download messages from a server. • This allows a server to store messages until a client connects and requests them. • Once the client connects, POP servers begin to download the messages and subsequently delete them from the server v. Internet Messaging Access Protocol (IMAP) • IMAP allows messages to be kept on the server. • But viewed as though they were stored locally. Common Standards In Cloud Computing 8

Standards for Messaging (Cont’d) v. Syndication (Atom & Atom Publishing Protocol, and RSS) v. RSS • The acronym “Really Simple Syndication” or “Rich Site Summary”. • Used to publish frequently updated works—such as news headlines • RSS is a family of web feed formats v. Atom & Atom Publishing Protocol • The Atom format was developed as an alternative to RSS Common Standards In Cloud Computing 9

Standards for Messaging (Cont’d) v. Communications (HTTP, SIMPLE, and XMPP) v. HTTP • The acronym “Hypertext Transfer Protocol. • HTTP is a request/response standard between a client and a server • For distributed, collaborative, hypermedia information systems. v. XMPP(Extensible Messaging and Presence Protocol) • Used for near-real-time, extensible instant messaging and prsence information. • XMPP remains the core protocol of the Jabber Instant Messaging and Presence technology Common Standards In Cloud Computing 10

Standards for Messaging (Cont’d) v. Communications (HTTP, SIMPLE, and XMPP) v. SIMPLE • Session Initiation Protocol for Instant Messaging and Presence Leveraging Extensions • For registering for presence information and receiving notifications. • It is also used for sending short messages and managing a session of realtime messages between two or more participants. Common Standards In Cloud Computing 11

Outline ● ● ● ● The purpose : Standards for Application Developers Standards for Messaging processes, procedures, and Security standards define the practices necessary for implementing a security program. Standards for Security v. SAML Standards Groups v. OAuth Some Activities in Cloud Computing Standardization v. Open. ID v. SSL/TLS Recommendations Refrence Common Standards In Cloud Computing 12

Standards for Security(Cont’d) v. SAML • Standard for communicating authentication, authorization, and attribute information among online partners. • It allows businesses to securely send assertions between partners. • SAML protocol refers to what is transmitted, not how it is transmitted. • Three types of statements are provided by SAML: authentication statements, attribute statements, and authorization decision statements Common Standards In Cloud Computing 13

Standards for Security(Cont’d) v. OAuth(Open Authentication) • OAuth is a method for publishing and interacting with protected data. • For developers, OAuth provides users access to their data. • OAuth allows users to grant access to their. • OAuth by itself provides no privacy at all and depends on other protocols such as SSL. Common Standards In Cloud Computing 14

Standards for Security(Cont’d) v. Open. ID • Open. ID is an open, decentralized standard for user authentication. • And allows users to log on to many services using the same digital identity. • It is a single-sign-on (SSO) method of access control. v. SSL/TLS • TLS or its predecessor SSL • To provide security and data integrity for communications. • To prevent eavesdropping, tampering, and message forgery. Common Standards In Cloud Computing 15

Outline ● ● ● ● Standards for Application Developers Standards for Messaging Standards for Security Standards Groups Some Activities in Cloud Computing Standardization of Open Standards Recommendations Refrence Common Standards In Cloud Computing 16

Standards Groups (Cont’d) Common Standards In Cloud Computing 17

Standards Groups (Cont’d) Cloud Security Alliance (CSA) Distributed Management Task Force (DMTF) Storage Networking Industry Association (SNIA) Open Grid Forum (OGF) Open Cloud Consortium (OCC) Organization for the Advancement of Structured Information Standards (OASIS) TM Forum Internet Engineering Task Force (IETF) International Telecommunications Union (ITU) European Telecommunications Standards Institute (ETSI) Object Management Group (OMG) Common Standards In Cloud Computing 18

Standards Groups (Cont’d) Which Organizations doing What? Saa. S Paa. S Daa. S OGF/DMTF Provisioning Iaa. S SNIA Metering and Billing SNIA Security OGF/DMTF/ CSA SNIA (IETF) DMTF SNIA Privacy Quality of Service Identity OASIS Common Standards In Cloud Computing 19

Standards Groups (Cont’d) Which Organizations doing What? Saa. S Paa. S Iaa. S Daa. S Client Application Interface Development Platform Virtual Machine Interface DMTF Data Storage Interface SNIA Common Standards In Cloud Computing 20

Outline v. Open Grid Forum (OGF) – Open Cloud Computing Interface, an API for managing cloud ● Standards infrastructure computing for Application Developers ● Standards for Messaging v. Distributed Management Task Force (DMTF) ● Standards for Security Standard describes an open, – Open Virtualisation Format secure, portable, efficient, extensible format for packaging and ● Standards Groups distribution of virtual appliances and applications Some Activities in Cloud Computing Standardization ● of – Open Cloud Standards Incubator focuses on tandardising Open Standards interactions between cloud environments by developing resource ● Recommendations packaging formats and security management protocols, mechanisms. ● Refrence ● v. Cloud Security Alliance (CSA) – Best practices for providing security assurance within Cloud computing Common Standards In Cloud Computing 21

Some Activities in Cloud Computing Standardization (Cont’d) v. European Telecommunications Standards Institute (ETSI) – Looks at commercial trend towards cloud computing with particular emphasis on ubiquitous network access to scalable computing storage resource and Iaa. S delivery model v National Institute of Standards and Technology (NIST) – Developed a working definition of cloud computing v. Object Management Group (OMG) – Focus on modeling deployment of applications & services on cloud for portability, interoperability & reuse v Storage Networking Industry Association (SNIA) – Cloud Data Management Interface, an architecture standard that allows for interoperable cloud storage zmplementation from cloud service providers and storage vendors Common Standards In Cloud Computing 22

Some Activities in Cloud Computing Standardization (Cont’d) Template [Common name of organization, consortium, group] Summary Full name of (standards) body / group [full name] Membership [short description of who is participating] Website [official website] Activities Summary of activities [outline of activities, To. R] Common Standards In Cloud Computing 23

Some Activities in Cloud Computing Standardization (Cont’d) DMTF Open Cloud Standards Incubator Template DMTF Open Cloud Standards Incubator Summary Full name of (standards) body / group Distributed Management Task Force: Open Cloud Standards Incubator Membership DMTF members Website http: //www. dmtf. org/about/cloud-incubator/ Activities Summary of activities DMTF’s Open Cloud Standards Incubator focuses on standardizing interactions between cloud environments by developing cloud resource management protocols, packaging formats and security mechanisms to facilitate interoperability. Common Standards In Cloud Computing 24

Some Activities in Cloud Computing Standardization (Cont’d) Template Cloud Computing Use Cases Group Summary Full name of (standards) body / group Cloud Computing Use Cases Group Membership collaboration of cloud consumers and cloud vendors Website http: //groups. google. com/group/cloudcomputing-use-cases Activities Summary of activities This group exists to define use cases for cloud computing. - Definitions and Taxonomy - Use Case Scenarios - Customer Scenarios - Developer Requirements - Security Scenarios Common Standards In Cloud - Security Use Case Scenarios Computing 25

Some Activities in Cloud Computing Standardization (Cont’d) Template CSA Summary Full name of (standards) body / group Cloud Security Alliance Membership Individuals (via Linked. In Group, http: //www. linkedin. com/groups? gid=1864210), Affiliates (Not-for-profit associations and industry groups), 40+ Corporate Members Website http: //www. cloudsecurityalliance. org/ Activities Summary of activities The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing. Common Standards In Cloud Computing 26

Some Activities in Cloud Computing Standardization (Cont’d) Template KCSA Summary Full name of (standards) body / group Korea Cloud Service Association Membership Website http: //www. kcsa. or. kr/index. jsp Activities Summary of activities 1. Create demand of Cloud service 2. Create Cloud service activation framework and its environments 3. Disseminate and promote Cloud service to public sectors Common Standards In Cloud Computing 27

Some Activities in Cloud Computing Standardization (Cont’d) Template DMTF VMAN Initiative Summary Full name of (standards) body / group Distributed Management Task Force: Virtualization Management Initiative Membership DMTF members: Technology vendors, government organizations Website http: //www. dmtf. org/initiatives/vman_initiative/ Activities Summary of activities DMTF’s Virtualization Management Initiative (VMAN) includes a set of specifications that address the management lifecycle of a virtual environment. VMAN’s OVF (Open Virtualization Format) specification provides a standard format for packaging and describing virtual machines and applications for deployment across heterogeneous virtualization platforms. VMAN’s profiles standardize many aspects of the operational management of a heterogeneous virtualized environment. Common Standards In Cloud Computing 28

Some Activities in Cloud Computing Standardization (Cont’d) DMTF’s Open Virtualization Format (OVF) ØFirst industry standard to enable interoperability within virtualized environments. Benefits: a) Improves your user experience with streamlined installations b) Offers customers virtualization platform independence and flexibility c) Creates complex pre-configured multi-tiered services more easily d) Efficiently delivers enterprise software through portable virtual machines e) Offers platform-specific enhancements and easier adoption of advances in virtualization through extensibility Common Standards In Cloud Computing 29

Some Activities in Cloud Computing Standardization (Cont’d) The key properties of the OVF: v. Optimized for distribution v. Supports both single VM and multiple-VM configurations. v. Vendor and platform independent v. Extensible v. Localizable v. Open standard v. Security Common Standards In Cloud Computing 30

Conclusion & Recommendations v. Working with Cloud standards groups and providers, develop a plan for creating demos, test-beds, and reference implementations. v. Document standards requirements and specifications. v. Verify that standards and innovative capabilities satisfy specifications and can be deployed by government projects. Common Standards In Cloud Computing Figure 10 - Alliances 31

Refrence §DMTF Informational , Interoperable Clouds , A White Paper from the Open Cloud Standards Incubator, 2009 -11 -11, : DSP-IS 0101 §Rittinghouse, Jon W. ; Ransome, James F. , " Cloud Computing mplementation, Management, and Security", 2010 §Mr. Krunal D. Trivedi, Mr. Kamaljit I. Lakhtaria, Mrs. Palak R. Shah, Dr. N. J. Patel, ” Analyzing Horizontal Integration among Soa, Cloud Computing and Grid Computing”, Global Journal of Computer Science and Technology Vol. 10 Issue 7 Ver. 1. 0 September 2010, P a g e 81 Common Standards In Cloud Computing 32

Refrence §Roy T. Fielding, “Architectural Styles and the Design of Network-Based Software rchitectures, ” dissertation, University of California, Irvine, 2000 §Mr. Krunal D. Trivedi 1, Mr. Kamaljit I. Lakhtaria 2, Mrs. Palak R. Shah 3, Dr. N. J. Patel 4 , Analyzing Horizontal Integration among Soa, Cloud Computing and Grid Computing, Global Journal of Computer Science and Technology, Vol. 10 Issue 7 Ver. 1. 0 September 2010 , P a g e 81 §http: //cloudstandards. org §http: //federalcloudcomputing. wik. is/@api/deki/files/105/ =Mell_Cloud_Standards_Roadmap. pdf §http: //groups. google. com/group/cloud-computing-use. Common Standards In Cloud cases Computing 33

Refrence §The Cloud Security Alliance. http: //www. cloudsecurityalliance. org. §The DMTF Open Virtualization Format. www. dmtf. org/standards/published_documents/D SP 0243_1. 0. 0. pdf. §The OGF Open Cloud Computing Interface. http: //www. occi-wg. org/doku. php. §The SNIA Cloud Data Management Interface. http: //www. snia. org/cloud. §http: //www. cloudsecurityalliance. org §http: //www. kcsa. or. kr/index. jsp Common Standards In Cloud Computing 34

Common Standards In Cloud Computing 35