By: Farnaz Zeidi M.Sc. student in Information Technology, Mazandaran University of Science and Technology (MUST), Babol, Mazandaran, IRAN F.zeidi@ustmb.ac.ir Supervisor: Hadi Salimi February 2011 1 Outline ● Standards for Application Developers The purpose : ● Standards for Messaging Is to ensure uniform, consistent, high-quality software ●solutions. Standards for Security ● Standards Groups Browsers (Ajax) ● Some Activities in Cloud Computing Standardization Data (XML, JSON) ●Solution Recommendations Stacks (LAMP and LAPP) ● Refrence Common Standards In Cloud Computing 2 Standards for Application Developers(Cont’d) Browsers (Ajax) Its predecessor AJAX (Asynchronous JavaScript and XML). A web application can request only the content that needs to be updated. This greatly reduces networking bandwidth usage and page load times. Use in interactive animation on web pages. Common Standards In Cloud Computing 3 Standards for Application Developers(Cont’d) Data (XML, JSON) XML(Extensible Markup Language) •Usually combination with other standards. •Define the content of a document separately. JSON(JavaScript Object Notation) •A lightweight computer data interchange format •Is specified in Internet Engineering •Request for Comment (RFC) •Independent data format Common Standards In Cloud Computing 4 Standards for Application Developers(Cont’d) Solution Stacks (LAMP and LAPP) LAMP The acronym Linux,Apache,MySQL, and PHP (or Perl or Python) Open source nature, low cost, and the wide distribution of its components Used to •Run dynamic web sites and servers. •Development and deployment of highperformance web applications. •Define a web server infrastructure. •Creating a programming environment for developing software. LAPP •It is more powerful than LAMP stack Common Standards In Cloud Computing 5 Outline ● Standards for Application Developers The purpose : Standards for Messaging Standards for message that is a unit of information thatfor is moved from one place to ● Standards Security another ● Standards Groups Simple Message Transfer Protocol (SMTP) ● Some Activities Cloud Computing Post Office Protocol in (POP) Standardization Internet Messaging Access Protocol (IMAP) ● Recommendations Syndication (Atom, Atom Publishing ● Refrence Protocol, and RSS) Communications (HTTP, SIMPLE, and XMPP) Common Standards In Cloud Computing 6 Standards for Messaging (Cont’d) Simple Message Transfer Protocol (SMTP) •SMTP is usually used for: •Sending a message from a workstation to a mail server. •Or communications between mail servers. •Client must have a constant connection to the host to receive SMTP messages. Common Standards In Cloud Computing 7 Standards for Messaging (Cont’d) Post Office Protocol (POP) •Purpose is to download messages from a server. •This allows a server to store messages until a client connects and requests them. •Once the client connects, POP servers begin to download the messages and subsequently delete them from the server Internet Messaging Access Protocol (IMAP) •IMAP allows messages to be kept on the server. •But viewed as though they were stored locally. Common Standards In Cloud Computing 8 Standards for Messaging (Cont’d) Syndication (Atom & Atom Publishing Protocol, and RSS) RSS •The acronym “Really Simple Syndication” or “Rich Site Summary”. •Used to publish frequently updated works—such as news headlines •RSS is a family of web feed formats Atom & Atom Publishing Protocol •The Atom format was developed as an alternative to RSS Common Standards In Cloud Computing 9 Standards for Messaging (Cont’d) Communications (HTTP, SIMPLE, and XMPP) HTTP •The acronym “Hypertext Transfer Protocol. •HTTP is a request/response standard between a client and a server •For distributed, collaborative,hypermedia information systems. XMPP(Extensible Messaging and Presence Protocol) •Used for near-real-time, extensible instant messaging and prsence information. •XMPP remains the core protocol of the Jabber Instant Messaging and Presence technology Common Standards In Cloud Computing 10 Standards for Messaging (Cont’d) Communications (HTTP, SIMPLE, and XMPP) SIMPLE •Session Initiation Protocol for Instant Messaging and Presence Leveraging Extensions •For registering for presence information and receiving notifications. •It is also used for sending short messages and managing a session of realtime messages between two or more participants. Common Standards In Cloud Computing 11 Outline The purpose : Standards for Application Developers ● Standards for Messaging Security standards define the processes, procedures, and practices necessary for implementing a security program. ● Standards for Security SAML ● Standards Groups OAuth ● Some Activities in Cloud Computing Standardization OpenID SSL/TLS ● Recommendations ● Refrence ● Common Standards In Cloud Computing 12 Standards for Security(Cont’d) SAML •Standard for communicating authentication, authorization, and attribute information among online partners. •It allows businesses to securely send assertions between partners. •SAML protocol refers to what is transmitted, not how it is transmitted. •Three types of statements are provided by SAML: authentication statements, attribute statements, and authorization decision statements Common Standards In Cloud Computing 13 Standards for Security(Cont’d) OAuth(Open Authentication) •OAuth is a method for publishing and interacting with protected data. •For developers, OAuth provides users access to their data . •OAuth allows users to grant access to their. •OAuth by itself provides no privacy at all and depends on other protocols such as SSL . Common Standards In Cloud Computing 14 Standards for Security(Cont’d) OpenID •OpenID is an open, decentralized standard for user authentication. •And allows users to log on to many services using the same digital identity. •It is a single-sign-on (SSO) method of access control. SSL/TLS •TLS or its predecessor SSL •To provide security and data integrity for communications. •To prevent eavesdropping, tampering, and message forgery. Common Standards In Cloud Computing 15 Outline Standards for Application Developers ● Standards for Messaging ● Standards for Security ● Standards Groups ● Some Activities in Cloud Computing Standardization ● of Open Standards ● Recommendations ● Refrence ● Common Standards In Cloud Computing 16 Standards Groups (Cont’d) Common Standards In Cloud Computing 17 Standards Groups (Cont’d) Cloud Security Alliance (CSA) Distributed Management Task Force (DMTF) Storage Networking Industry Association (SNIA) Open Grid Forum (OGF) Open Cloud Consortium (OCC) Organization for the Advancement of Structured Information Standards (OASIS) TM Forum Internet Engineering Task Force (IETF) International Telecommunications Union (ITU) European Telecommunications Standards Institute (ETSI) Object Management Group (OMG) Common Standards In Cloud Computing 18 Standards Groups (Cont’d) Which Organizations doing What? SaaS PaaS Provisioning IaaS DaaS OGF/DMTF SNIA Metering and Billing SNIA Security OGF/DMTF/ CSA SNIA (IETF) DMTF SNIA Privacy Quality of Service Identity OASIS Common Standards In Cloud Computing 19 Standards Groups (Cont’d) Which Organizations doing What? SaaS PaaS IaaS DaaS Client Application Interface Development Platform Virtual Machine Interface DMTF Data Storage Interface SNIA Common Standards In Cloud Computing 20 Outline Open Grid Forum (OGF) – Open Cloud Computing Interface, an API for managing cloud ● Standards computing infrastructure for Application Developers ● Standards for Messaging ● Some Activities in Cloud Computing Standardization Open Cloud Standards Incubator focuses on tandardising of –Open Standards interactions between cloud environments by developing resource Recommendations management protocols, packaging formats and security mechanisms. Refrence Distributed Management Task Force (DMTF) ● Standards for Security – Open Virtualisation Format Standard describes an open, secure,portable, efficient, extensible format for packaging and ● Standards Groups distribution of virtual appliances and applications ● ● ● Cloud Security Alliance (CSA) – Best practices for providing security assurance within Cloud computing Common Standards In Cloud Computing 21 Some Activities in Cloud Computing Standardization (Cont’d) European Telecommunications Standards Institute (ETSI) – Looks at commercial trend towards cloud computing with particular emphasis on ubiquitous network access to scalable computing storage resource and IaaS delivery model National Institute of Standards and Technology (NIST) – Developed a working definition of cloud computing Object Management Group (OMG) – Focus on modeling deployment of applications & services on cloud for portability, interoperability & reuse Storage Networking Industry Association (SNIA) – Cloud Data Management Interface, an architecture standard that allows for interoperable cloud storage zmplementation from cloud service providers and storage vendors Common Standards In Cloud Computing 22 Some Activities in Cloud Computing Standardization (Cont’d) Template [Common name of organization, consortium, group] Summary Full name of (standards) body / group [full name] Membership [short description of who is participating] Website [official website] Activities Summary of activities [outline of activities, ToR] Common Standards In Cloud Computing 23 Some Activities in Cloud Computing Standardization (Cont’d) DMTF Open Cloud Standards Incubator Template DMTF Open Cloud Standards Incubator Summary Full name of (standards) body / group Distributed Management Task Force: Open Cloud Standards Incubator Membership DMTF members Website http://www.dmtf.org/about/cloud-incubator/ Activities Summary of activities DMTF’s Open Cloud Standards Incubator focuses on standardizing interactions between cloud environments by developing cloud resource management protocols, packaging formats and security mechanisms to facilitate interoperability. Common Standards In Cloud Computing 24 Some Activities in Cloud Computing Standardization (Cont’d) Template Cloud Computing Use Cases Group Summary Full name of (standards) body / group Cloud Computing Use Cases Group Membership collaboration of cloud consumers and cloud vendors Website http://groups.google.com/group/cloudcomputing-use-cases Activities Summary of activities This group exists to define use cases for cloud computing. - Definitions and Taxonomy - Use Case Scenarios - Customer Scenarios - Developer Requirements - Security Scenarios Common Standards In Cloud - Security Use Case Scenarios Computing 25 Some Activities in Cloud Computing Standardization (Cont’d) Template CSA Summary Full name of (standards) body / group Cloud Security Alliance Membership Individuals (via LinkedIn Group, http://www.linkedin.com/groups?gid=1864210), Affiliates (Not-for-profit associations and industry groups), 40+ Corporate Members Website http://www.cloudsecurityalliance.org/ Activities Summary of activities The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing. Common Standards In Cloud Computing 26 Some Activities in Cloud Computing Standardization (Cont’d) Template KCSA Summary Full name of (standards) body / group Korea Cloud Service Association Membership Website http://www.kcsa.or.kr/index.jsp Activities Summary of activities 1. Create demand of Cloud service 2. Create Cloud service activation framework and its environments 3. Disseminate and promote Cloud service to public sectors Common Standards In Cloud Computing 27 Some Activities in Cloud Computing Standardization (Cont’d) Template DMTF VMAN Initiative Summary Full name of (standards) body / group Distributed Management Task Force: Virtualization Management Initiative Membership DMTF members: Technology vendors, government organizations Website http://www.dmtf.org/initiatives/vman_initiative/ Activities Summary of activities DMTF’s Virtualization Management Initiative (VMAN) includes a set of specifications that address the management lifecycle of a virtual environment. VMAN’s OVF (Open Virtualization Format) specification provides a standard format for packaging and describing virtual machines and applications for deployment across heterogeneous virtualization platforms. VMAN’s profiles standardize many aspects of the operational management of a heterogeneous virtualized environment. Common Standards In Cloud Computing 28 Some Activities in Cloud Computing Standardization (Cont’d) DMTF’s Open Virtualization Format (OVF) First industry standard to enable interoperability within virtualized environments. Benefits: a) Improves your user experience with streamlined installations b) Offers customers virtualization platform independence and flexibility c) Creates complex pre-configured multi-tiered services more easily d) Efficiently delivers enterprise software through portable virtual machines e) Offers platform-specific enhancements and easier adoption of advances in virtualization through extensibility Common Standards In Cloud Computing 29 Some Activities in Cloud Computing Standardization (Cont’d) The key properties of the OVF: Optimized for distribution Supports both single VM and multiple-VM configurations. Vendor and platform independent Extensible Localizable Open standard Security Common Standards In Cloud Computing 30 Conclusion & Recommendations Working with Cloud standards groups and providers, develop a plan for creating demos, test-beds, and reference implementations. Document standards requirements and specifications. Verify that standards and innovative capabilities satisfy specifications and can be deployed by government projects . Common Standards In Cloud Computing Figure 10- Alliances 31 Refrence DMTF Informational , Interoperable Clouds , A White Paper from the Open Cloud Standards Incubator, 2009-11-11, : DSP-IS0101 Rittinghouse, Jon W.;Ransome,James F.," Cloud Computing mplementation, Management, and Security",2010 Mr. Krunal D. Trivedi, Mr. Kamaljit I. Lakhtaria, Mrs. Palak R. Shah,Dr.N.J.Patel,” Analyzing Horizontal Integration among Soa, Cloud Computing and Grid Computing”, Global Journal of Computer Science and Technology Vol. 10 Issue 7 Ver. 1.0 September 2010, P a g e 81 Common Standards In Cloud Computing 32 Refrence Roy T.Fielding, “Architectural Styles and the Design of Network-Based Software rchitectures,” dissertation, University of California, Irvine, 2000 Mr. Krunal D. Trivedi1, Mr. Kamaljit I. Lakhtaria2, Mrs. Palak R. Shah3,Dr.N.J.Patel4 , Analyzing Horizontal Integration among Soa, Cloud Computing and Grid Computing, Global Journal of Computer Science and Technology, Vol. 10 Issue 7 Ver. 1.0 September 2010 ,P a g e 81 http://cloudstandards.org http://federalcloudcomputing.wik.is/@api/deki/files/105/ =Mell_Cloud_Standards_Roadmap.pdf http://groups.google.com/group/cloud-computing-useCommon Standards In Cloud cases Computing 33 Refrence The Cloud Security Alliance. http://www.cloudsecurityalliance.org. The DMTF Open Virtualization Format. www.dmtf.org/standards/published_documents/D SP0243_1.0.0.pdf. The OGF Open Cloud Computing Interface. http://www.occi-wg.org/doku.php. The SNIA Cloud Data Management Interface. http://www.snia.org/cloud. http://www.cloudsecurityalliance.org http://www.kcsa.or.kr/index.jsp Common Standards In Cloud Computing 34 Common Standards In Cloud Computing 35