Archive for category Cloud Computing

Security Guidance for Critical Areas of Focus in Cloud Computing

The Cloud Security Alliance was recently formed to “promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.” Their first publication is out and is worth reviewing.

1 Comment

Effectively and Securely Using the Cloud Computing Paradigm

Peter Mell and Tim Grance from NIST, Information Technology Laboratory provide some education on cloud technology and its benefits to set up a discussion of cloud security. They are quick to point out that it is NOT intended to provide official NIST guidance.

2 Comments

Cloud Computing Concepts and Overview from GSA Quarterly IT Forum

GSA hosted an excellent Quarterly IT Forum on Cloud Computing back in February. The following documents are worth reading if you’re new to the concepts.

Federal Cloud Computing IT Quarterly Forum Q1 2009 - Cloud Computing Concepts

Federal Cloud Computing IT Quarterly Forum Q1 2009 - Cloud Computing Basics

No Comments

Cloud Computing: DISA’s Operational Perspective

DISA’s been doing some excellent work around global hosting and creating centralized data centers for use across the government. A couple of weeks ago they presented their cloud computing operational perspective at the GSA Cloud Computing Quarterly IT Forum.

Their presentation is worth reviewing:

1 Comment

Cloud Computing Interoperability Workshop March 23 in Virginia

The Agenda for the Cloud Computing Interoperability Workshop on March 23 in Crystal City, Virginia is now online. Strategies and Technologies for Cloud Computing Interoperability (SATCCI) is a Workshop for Federal Computing Stakeholders.

The Obama Administration in general and the new Federal CIO specifically have espoused the benefits of cloud computing in government. If you’re interested in cloud computing and how it might apply to your federal architecture environment, please plan on attending.

If you’d like to propose contents, suggest questions that need to be answered, etc. please post them here and I will be happy to pass them along to the organizers.

Click here to register. The agenda is as follows:

Morning sessions (Standards)

  • NIST ‐ Tim Grance (NIST Cloud Program Manager), Peter Mell (Senior Computer Scientist)
  • Cloud Computing Interoperability Forum ‐ Reuven Cohen (Leader and Founder Enomaly Inc.)
  • Open Cloud Consortium ‐ Robert Grossman (Leader)
  • Open Grid Forum ‐ Craig Lee (President)
  • Network Centric Operations Industry Consortium ‐Krishna Sankar (Leader of Cloud Computing Team)
  • Distributed Management Task Force ‐ Winston Bumpus (President)
  • Storage Network Industry Association ‐  Mark Carlson (SNIA Technical Council and Sun)

Afternoon sessions (Vendors and Companies)

  • Cisco ‐ Krishna Sankar (Distinguished Engineer)
  • IBM ‐ Dirk Nicol (Program Director, Cloud Standards)
  • Microsoft ‐ Susie Adams (CTO of the Federal Sales organization)
  • Salesforce.com ‐ Dan Burton (Senior Vice President, Global Public Policy)
  • Sun ‐ Scott Radeztsky (Chief Architect for Americas Systems Engineering)
  • Elastra ‐ Stuart Charlton (Chief Software Architect)
  • Interactive Panel and Q&A with all Company Speakers

No Comments

Federal Open Cloud Computing Initiative (FOCI)

Many of us have been interested in using cloud computing technologies in the federal government — enough so that there’s a draft proposal circulating about a Federal Open Cloud Computing Initiative (FOCI). Bob Marcus, the author of the proposal, has been working with the Network Centric Operations Industry Consortium and the Open Group. Here are links to some recent meeting in September, December and February. Bob’s presentation describing the group and its goals is embedded below.

Federal Open Cloud Computing Initiative (FOCI)

No Comments

Time for a Federal Cloud Architecture

As most of us are already aware, there are many commercial cloud computing initiatives underway. Amazon, Google, Microsoft, are all looking to make their claims in the cloud space with IaaS (infrastructure as a service) and PaaS (platform as a service) strategies.

Most of us as federal architects of course don’t really have the ability to use or consume any of these cloud architectures since they are not at least FISMA compliant and they are generally not secure for us to use. The services can’t be logged and reliability is questionable.

However, if some of us got together (maybe with the eGov Infrastructure Line of Business) and figured out how to create a Federal Cloud Computing strategy I’m sure we’d be able to make secure, auditable, platform agnostic, reliable, and portable clouds for use by agencies. This way we could make SOA a reality and allow our architects to take advantage of IaaS and PaaS capabilities that we could build out.

Updated Sept 5, 2008: I just saw this press release — Apptis Teams with ServerVault to Launch the Trusted Cloud Computing Environment for the U.S. Federal Government. They claim that their “Secure Platform Complies with Federal IT Regulations and Helps Agencies Achieve Required Functionality Faster”.

No Comments