ITU Workshop on “Cloud Computing Standards – Today and the Future” (Geneva, Switzerland 14 November 2014) Cloud Computing - Overview and Vocabulary (Y.3500) Eric A. Hibbard, CISSP, CISA CTO Security & Privacy Hitachi Data Systems eric.hibbard@hds.com Geneva, Switzerland, 14 November 2014 Background Project initiated in ISO/IEC JTC 1/SC 38 as ISO/IEC 17788 in Oct-2011; progressed to Committee Draft (CD) Established Collaborative Team (CTCCVOCAB) with ITU-T/SG 13 in Sep2012 Goal: Develop a common text standard covering Cloud Terminology Core cloud concepts Published in Aug-2014 Geneva, Switzerland, 14 November 2014 2 Overview of Standard Both Rec. ITU-T Y.3500 and ISO/IEC 17788 published as “no-cost” standards Summary 10 page + wrapper material Defines 37 terms (imports 7) Cloud computing overview Annex – Cloud service categories Bibliography Geneva, Switzerland, 14 November 2014 3 Cloud Computing Overview Key characteristics Cloud computing roles & activities Cloud deployment models Cloud capability types & cloud services categories Cloud deployment models Cloud computing cross cutting aspects Geneva, Switzerland, 14 November 2014 4 Cloud Computing paradigm for enabling network access to a scalable and elastic pool of shareable physical or virtual resources with self-service provisioning and administration on-demand SOURCE: Rec. ITU-T Y.3500 | ISO/IEC 17788:2014, Information technology – Cloud computing – Overview and vocabulary Geneva, Switzerland, 14 November 2014 5 Service Categories vs. Capability Types The 7 defined cloud service categories Cloud Service Categories Cloud Capabilities Types Infrastructure Compute as a Service Data Storage as a Service X Infrastructure as a Service X Network as a Service X Software as a Service Geneva, Switzerland, 14 November 2014 Application X X X X X X X X Communication as a Service Platform as a Service Platform X 6 Sample Use of Y.3500 (e.g., ISO) ISO/IEC 27040 FDIS ISO/IEC 270364 WD ISO/IEC 27018: 2014 ITU-T X.CCControl | ISO/IEC 27017 DIS ISO/IEC 190864 NWIP ITU-T Y.3500 | ISO/IEC 17788 ISO/IEC 190861-3 WD & CD ISO/IEC 19944 WD ITU-T Y.3502 | ISO/IEC 17789 ISO/IEC 19941 WD Geneva, Switzerland, 14 November 2014 Actual Expected 7 Conclusions and Recommendations Y.3500 has stabilized the core cloud terminology Y.3500 is a little different than earlier works (NIST); industry is adjusting Geneva, Switzerland, 14 November 2014 While challenging to develop, Y.3500 is now getting significant use 8