Chapter 1 – Introduction

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 1
Contents

■ Network-centric computing and network-centric content.

■ Cloud computing.
■ Delivery models and services.
■ Ethical issues in cloud computing.
■ Cloud vulnerabilities.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 2
Network-centric computing

■ Information processing can be done more efficiently on large farms of

computing and storage systems accessible via the Internet.
Grid computing – initiated by the National Labs in the early 1990s; targeted
primarily at scientific computing.
Utility computing – initiated in 2005-2006 by IT companies and targeted at
enterprise computing.
■ The focus of utility computing is on the business model for providing
computing services; it often requires a cloud-like infrastructure.
■ Cloud computing is a path to utility computing embraced by major IT
companies including: Amazon, HP, IBM, Microsoft, Oracle, and others.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 3
Network-centric content

■ Content: any type or volume of media, be it static or dynamic,

monolithic or modular, live or stored, produced by aggregation, or
mixed.
■ The “Future Internet” will be content-centric.
The creation and consumption of audio and visual content is likely to
transform the Internet to support increased quality in terms of
resolution, frame rate, color depth, stereoscopic information.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 4
Network-centric computing and content
■ Data-intensive: large scale simulations in science and engineering
require large volumes of data. Multimedia streaming transfers large
volume of data.
■ Network-intensive: transferring large volumes of data requires high
bandwidth networks.
■ Low-latency networks for data streaming, parallel computing,
computation steering.
■ The systems are accessed using thin clients running on systems with
limited resources, e.g., wireless devices such as smart phones and
tablets.
■ The infrastructure should support some form of workflow
management.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 5
Evolution of concepts and technologies
■ The concepts and technologies for network-centric computing and
content evolved along the years.

The web and the semantic web - expected to support composition of

services. The web is dominated by unstructured or semi-structured data,
while the semantic web advocates inclusion of sematic content in web
pages.
The Grid - initiated in the early 1990s by National Laboratories and
Universities; used primarily for applications in the area of science and
engineering.
Peer-to-peer systems.
Computer clouds.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 6
Cloud computing
■ Uses Internet technologies to offer scalable and elastic services.
The term “elastic computing” refers to the ability of dynamically
acquiring computing resources and supporting a variable workload.

■ The resources used for these services can be metered and

the users can be charged only for the resources they used.

■ The maintenance and security are ensured by service providers.

■ The service providers can operate more efficiently due to

specialization and centralization.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 7
Cloud computing (cont’d)
■ Lower costs for the cloud service provider are past to the cloud users.

■ Data is stored:
closer to the site where it is used.
in a device and in a location-independent manner.

■ The data storage strategy can increase reliability, as well as security,

and can lower communication costs.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 8
Types of clouds
■ Public Cloud - the infrastructure is made available to the general
public or a large industry group and is owned by the organization
selling cloud services.

■ Private Cloud – the infrastructure is operated solely for an

organization.

■ Community Cloud - the infrastructure is shared by several

organizations and supports a community that has shared concerns.

■ Hybrid Cloud - composition of two or more clouds (public, private,

or community) as unique entities but bound by standardized
technology that enables data and application portability.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 9
The “good” about cloud computing
■ Resources, such as CPU cycles, storage, network bandwidth, are
shared.

■ When multiple applications share a system, their peak demands for

resources are not synchronized thus, multiplexing leads to a higher
resource utilization.

■ Resources can be aggregated to support data-intensive

applications.

■ Data sharing facilitates collaborative activities. Many applications

require multiple types of analysis of shared data sets and multiple
decisions carried out by groups scattered around the globe.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 10
More “good” about cloud computing

■ Eliminates the initial investment costs for a private computing

infrastructure and the maintenance and operation costs.

■ Cost reduction: concentration of resources creates the opportunity to

pay as you go for computing.

■ Elasticity: the ability to accommodate workloads with very large

peak-to-average ratios.

■ User convenience: virtualization allows users to operate in familiar

environments rather than in idiosyncratic ones.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 11
Why cloud computing could be successful when
other paradigms have failed?
■ It is in a better position to exploit recent advances in software, networking,
storage, and processor technologies promoted by the same companies
who provide cloud services.
■ It is focused on enterprise computing; its adoption by industrial
organizations, financial institutions, government, and so on could have a
huge impact on the economy.
■ A cloud consists of a homogeneous set of hardware and software
resources.
■ The resources are in a single administrative domain (AD). Security,
resource management, fault-tolerance, and quality of service are less
challenging than in a heterogeneous environment with resources in
multiple ADs.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 12
Challenges for cloud computing

■ Availability of service; what happens when the service provider

cannot deliver?

■ Diversity of services, data organization, user interfaces available at

different service providers limit user mobility; once a customer is
hooked to one provider it is hard to move to another.
Standardization efforts at NIST!

■ Data confidentiality and auditability, a serious problem.

■ Data transfer bottleneck; many applications are data-intensive.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 13
More challenges
■ Performance unpredictability, one of the consequences of resource
sharing.
How to use resource virtualization and performance isolation for QoS
guarantees?
How to support elasticity, the ability to scale up and down quickly?

■ Resource management; are self-organization and self-management

the solution?

■ Security and confidentiality; major concern.

■ Addressing these challenges provides good research opportunities!!

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 14
Exercise. - Class discussion
▪ Can mobile devices benefit from Cloud computing.

▪ If yes, explain how.

▪ Also bring out few applications

15
Exercise - Class discussion

▪ Consider Grid Computing , Cloud computing

▪ Comment on the homogenity/hetrogenity of resources in

these models

▪ Is it advantageous to have homogeneity of hw-sw

resources? Discuss.

16
Exercise - Class discussion
▪ Discuss Peer-Peer models vs Cloud Computing

▪ Decentralised - Centralised

17
 Delivery models
Software as a Service (SaaS) Deployment models
Platform as a Service (PaaS) Public cloud

Infrastructure as a Service (IaaS) Private cloud

Community cloud
Hybrid cloud

Cloud computing
Infrastructure
Distributed infrastructure
Defining attributes
Resource virtualization
Massive infrastructure
Autonomous systems
Utility computing. Pay-per-usage
Resources
Accessible via the Internet
Compute & storage servers
Elasticity
Networks Services
Applications

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 18
Cloud delivery models

■ Software as a Service (SaaS)

■ Platform as a Service (PaaS)

■ Infrastructure as a Service (IaaS)

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 19
Software-as-a-Service (SaaS)

■ Applications are supplied by the service provider.

■ The user does not manage or control the underlying cloud
infrastructure or individual application capabilities.
■ Services offered include:
Enterprise services such as: workflow management, group-ware and
collaborative, supply chain, communications, digital signature, customer
relationship management (CRM), desktop software, financial
management, geo-spatial, and search.
Web 2.0 applications such as: metadata management, social networking,
blogs, wiki services, and portal services.
■ Not suitable for real-time applications or for those where data is not
allowed to be hosted externally.
■ Examples: Gmail, Google search engine.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 20
 Platform-as-a-Service (PaaS)
■ Allows a cloud user to deploy consumer-created or acquired
applications using programming languages and tools supported by
the service provider.
■ The user:
Has control over the deployed applications and, possibly, application
hosting environment configurations.
Does not manage or control the underlying cloud infrastructure including
network, servers, operating systems, or storage.
■ Not particularly useful when:
The application must be portable.
Proprietary programming languages are used.
The hardware and software must be customized to improve the
performance of the application.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 21
Infrastructure-as-a-Service (IaaS)

■ The user is able to deploy and run arbitrary software, which can
include operating systems and applications.

■ The user does not manage or control the underlying cloud

infrastructure but has control over operating systems, storage,
deployed applications, and possibly limited control of some
networking components, e.g., host firewalls.

■ Services offered by this delivery model include: server hosting, Web

servers, storage, computing hardware, operating systems, virtual
instances, load balancing, Internet access, and bandwidth
provisioning.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 22
 Infrastructure as a Service SAAA

Presentation

API

Applications

IAAS
Platform as a Service Data Metadata

Integration and Integration and

Software as a Service middleware middleware

API API API

connectivity

connectivity
connectivity

Abstraction

Abstraction
Abstraction

Core

Core
Core

Hardware Hardware Hardware

Facilities Facilities Facilities

Cloud Computing: Theory and Practice.
Dan C. Marinescu Chapter 1 23
Cloud activities

■ Service management and provisioning including:

Virtualization.
Service provisioning.
Call center.
Operations management.
Systems management.
QoS management.
Billing and accounting, asset management.
SLA management.
Technical support and backups.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 24
Cloud activities (cont’d)

■ Security management including:

ID and authentication.
Certification and accreditation.
Intrusion prevention.
Intrusion detection.
Virus protection.
Cryptography.
Physical security, incident response.
Access control, audit and trails, and firewalls.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 25
Cloud activities (cont’d)
■ Customer services such as:
■ Customer assistance and on-line help.
■ Subscriptions.
■ Business intelligence.
■ Reporting.
■ Customer preferences.
■ Personalization.
■ Integration services including:
■ Data management.
■ Development.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 26
NIST cloud reference model

Carrier

Service
Consumer Service Provider Broker

Service Layer Service

Management Intermediation
SaaS
S P
PaaS
Business e
Auditor IAAS
support
r
IaaS c i
Security
u v
Aggregation

audit Resource r a
abstraction and Provisioning i
control layer c
Privacy t
impact audit Physical resource
y
layer
y Arbitrage
Portability /
Hardware Interoperability
Performance
audit
Facility

Carrier

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 27
Ethical issues
■ Paradigm shift with implications on computing ethics:
■ The control is relinquished to third party services.
■ The data is stored on multiple sites administered by several
organizations.
■ Multiple services interoperate across the network.
■ Implications
■ Unauthorized access.
■ Data corruption.
■ Infrastructure failure, and service unavailability.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 28
De-perimeterisation

■ Systems can span the boundaries of multiple organizations and cross

the security borders.

■ The complex structure of cloud services can make it difficult to

determine who is responsible in case something undesirable happens.

■ Identity fraud and theft are made possible by the unauthorized access
to personal data in circulation and by new forms of dissemination
through social networks and they could also pose a danger to cloud
computing.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 29
Privacy issues

■ Cloud service providers have already collected petabytes of sensitive

personal information stored in data centers around the world. The
acceptance of cloud computing therefore will be determined by
privacy issues addressed by these companies and the countries
where the data centers are located.

■ Privacy is affected by cultural differences; some cultures favor

privacy, others emphasize community. This leads to an ambivalent
attitude towards privacy in the Internet which is a global system.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 30
Cloud vulnerabilities

■ Clouds are affected by malicious attacks and failures of the

infrastructure, e.g., power failures.

■ Such events can affect the Internet domain name servers and
prevent access to a cloud or can directly affect the clouds:
■ in 2004 an attack at Akamai caused a domain name outage and a
major blackout that affected Google, Yahoo, and other sites.
■ in 2009, Google was the target of a denial of service attack which
took down Google News and Gmail for several days;
■ in 2012 lightning caused a prolonged down time at Amazon.

Cloud Computing: Theory and Practice.

Dan C. Marinescu Chapter 1 31
Exercise - Class discussion
▪ Compare the three models SaaS, PaaS, IaaS from end
user and developer perspective.

32
Solution
▪ SaaS everything abstracted for end user. The user
doesn’t have to worry about direct interaction with OS, hw
etc. Customizations made possible through configuration
settings etc
▪ PaaS - useful to developers. The needed sw
development and deployment environment is made
available. Ex google APP Engine, Azure
▪ Iaas - the development organisation can configure
resources (OS etc) as per their requirement in required
numbers as needed

33
Exercise - Class discussion

▪ What factors will you consider in recommending Public or

Private Cloud for an organisation?

▪ If the organisation is a university, what will be the

recommendation?
▪ For scientific research,what will be the recommendation?

34
 Solution
▪ Privacy and Security aspects of the data will be a major
consideration. For Applications High on data privacy &
security public cloud may not be suitable. Also load
characteristics. Varying and seasonal loads benefit from
public cloud.
▪ For a university Public cloud solution will be fine as the
data may not be highly confidential. However handling
academic exercises involving use of licensed sw a
challenge.
▪ For scientific research where fine grain parallelism is
involved communication overhead in public cloud may be
prohibitive. Identical use and sw environment make case
for private cloud. If computing requirement is not too high,
dedicated high end servers may do as well.
35