<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: cloud]]></title>
    <link>http://www.securityratty.com/tag/cloud</link>
    <description></description>
    <pubDate>Wed, 05 Nov 2008 13:30:01 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[The myth of cloud computing]]></title>
      <link>http://www.securityratty.com/article/b5f273c3f5b7803a33b5092308c6da7d</link>
      <guid>http://www.securityratty.com/article/b5f273c3f5b7803a33b5092308c6da7d</guid>
      <description><![CDATA[Companies hungry for IT efficiency and cost savings absolutely love virtualization. The idea of reducing racks of servers into smaller and cheaper machine farms is simply irresistible in just about...]]></description>
      <content:encoded><![CDATA[Companies hungry for IT efficiency and cost savings absolutely love virtualization. The idea of reducing racks of servers into smaller and cheaper machine farms is simply irresistible in just about every enterprise.<br style="clear: both;"/>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:ec025ab23baeee01bcffa3a21b725548:OmnPKJOmxi4qLoVMPjsClPh%2B%2FHi4GUghsU2X61zzIzxIOtzwhdWwzSiO2%2FakUAc6U5oX6nJwtNXW'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:3528ef820ab8b0c9c84acfbb52e6d843:fKN6jtH5yd7aSRcoxiTumbcUN%2F9XAXxQ5Ywyjvueb2lH90lLhp1gZQyArlfV5VQ4RWxCY6Mrg6OuRQ%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:ff57134571fc565efa394be316352561:yY0DO12YL1wdNdZesywRlbCJCoXBjGcE0lxleA3dJIHdWz7ePngb4MfEHTfqtGzyQVkzvyyHqB8KoQ%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
  <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:932383cec86c4ca0bbbf6911b68a7cbf:JFn51sHrriSiV0PcEIPv9g9FZ2z2wRiWKPIN6eAp7HVbFmi0KMf%2FoizMnghCvdADVxtgSJrVQQtDhg%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>
<a href="http://www.pheedo.com/click.phdo?s=40809126bcd7311e321df2ad3c56f76b&p=1"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=40809126bcd7311e321df2ad3c56f76b&p=1"/></a>
<img src="http://www.pheedo.com/feeds/tracker.php?i=40809126bcd7311e321df2ad3c56f76b" style="display: none;" border="0" height="1" width="1" alt=""/>
]]></content:encoded>
      <pubDate>Mon, 01 Dec 2008 02:00:00 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cheaper machine farms">cheaper machine farms</category>
      <category domain="http://www.securityratty.com/tag/simply irresistible">simply irresistible</category>
      <category domain="http://www.securityratty.com/tag/companies hungry">companies hungry</category>
      <category domain="http://www.securityratty.com/tag/efficiency">efficiency</category>
      <category domain="http://www.securityratty.com/tag/enterprise">enterprise</category>
      <category domain="http://www.securityratty.com/tag/racks">racks</category>
      <category domain="http://www.securityratty.com/tag/idea">idea</category>
      <category domain="http://www.securityratty.com/tag/servers">servers</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=40809126bcd7311e321df2ad3c56f76b">The myth of cloud computing</source>
    </item>
    <item>
      <title><![CDATA[Blurring the Lines Between Managed Service Provider and Cloud Computing]]></title>
      <link>http://www.securityratty.com/article/23238e9889824f8ebd65b8a0149c5f4a</link>
      <guid>http://www.securityratty.com/article/23238e9889824f8ebd65b8a0149c5f4a</guid>
      <description><![CDATA[VMware made big announcements at their VMworld conference back in September, talking about adding on a slew of virtualization management functionality to a revamped vCenter and extending into the...]]></description>
      <content:encoded><![CDATA[<p>VMware made big announcements at their <a href="http://www.vmworld.com/index.jspa" target="_blank">VMworld conference</a> back in September, talking about adding on a slew of virtualization management functionality to a revamped vCenter and extending into the “cloud” with vCloud services. Like most people, I had a lot of skepticism about what vCloud really meant; was this just more hype trying to take advantage of the cloud computing buzz? Certainly CEO Paul Maritz came from this world and virtualization itself (and especially vMotion) is an enabling technology for cloud computing. But how ready were VMware and its ecosystem of partner vendors to actually fulfill on the promise?</p>
<p>So I was very interested when I heard that <a href="http://opusinteractive.com/" target="_blank">Opus Interactive</a>, a customer of ours, had “joined the VMware vCloud initiative as a <a href="http://www.opusinteractive.com/news_detail.asp?item=40" target="_blank">VMware Service Provider</a>”. I talked to Eric Hulbert, CTO of Opus Interactive, to get some details directly from the source.</p>
<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image0025.jpg" border="0" alt="clip_image002" width="202" height="74" align="left" /></p>
<p>Eric shared our own caution about making “cloud-ready” announcements. There have simply been too many companies talking about cloud solutions that lack any substance – usually based on definitions of cloud computing that are hazy or just too broad. The backlash against the cloud hype is often quite justified. But in Opus’ case, there are real components that if they don’t add up to a “full” cloud computing solution just yet, are well on their way – and enabled by <a href="http://www.vmware.com/partners/vip/service-providers/" target="_blank">VMware’s program for service providers</a> (VSPP).</p>
<p>Opus Interactive is <a href="http://www.viddler.com/explore/sciencelogic/videos/3" target="_blank">serious about virtualization</a>, which is an indispensable tool in their stated goal of creating a high-density micro-data center with the smallest footprint possible. They are 100% wind-powered and have already virtualized much of their data center, reducing the amount of hardware necessary to run the business and driving down costs to produce even more competitive advantage in a crowded marketplace.</p>
<p>VSPP for vCloud provides a rental model of VMware licenses – e.g., for Enterprise ESX or VDI. VMware Service Providers report on their customers’ virtual machines (vm) and pay only for what is actually used. This model lets Opus Interactive quickly spin up a vm to get a new customer up and running in about an hour and stay very cost competitive at the same time; Opus offers their <a href="http://opusinteractive.com/vClustr.asp" target="_blank">vClustr entry-level virtual server</a> for only $99.</p>
<p>Cost-effective, rapidly scalable computing “on-demand” based on shared resources, managed by “expert” third-parties, enabled by virtualization technology and pay-per-use vm licenses. Cloud computing? Instead of thinking about a single definition of cloud computing, perhaps it’s more relevant as the market matures to think about a continuum of cloud computing. And by that definition, Opus Interactive is providing cloud services, enabled by VMware’s VSP program. Next on the schedule, automated provisioning and perhaps in the future, API’s that make it even easier for application developers to test and deploy apps on Opus Interactive’s cloud platform – which, by the way, uses <a href="http://www.sciencelogic.com/products.htm" target="_blank">EM7</a> for its core management solution.</p>
]]></content:encoded>
      <pubDate>Tue, 25 Nov 2008 11:20:47 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cloud">cloud</category>
      <category domain="http://www.securityratty.com/tag/cloud hype">cloud hype</category>
      <category domain="http://www.securityratty.com/tag/hype">hype</category>
      <category domain="http://www.securityratty.com/tag/cloud-ready announcements">cloud-ready announcements</category>
      <category domain="http://www.securityratty.com/tag/cloud solutions">cloud solutions</category>
      <category domain="http://www.securityratty.com/tag/announcements">announcements</category>
      <category domain="http://www.securityratty.com/tag/vmware vcloud initiative">vmware vcloud initiative</category>
      <category domain="http://www.securityratty.com/tag/ready">ready</category>
      <category domain="http://www.securityratty.com/tag/vmware">vmware</category>
      <source url="http://blog.sciencelogic.com/blurring-the-lines-between-managed-service-provider-and-cloud-computing/11/2008">Blurring the Lines Between Managed Service Provider and Cloud Computing</source>
    </item>
    <item>
      <title><![CDATA[Links List 11.24.08]]></title>
      <link>http://www.securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</link>
      <guid>http://www.securityratty.com/article/f209f4653ec3034a29d9cf1ff2ca5cd8</guid>
      <description><![CDATA[The hunt for the nations first CTO continues . Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/markcuban.jpg" border="0" alt="markcuban" width="240" height="164" align="left" /> The hunt for the <a href="http://weblog.infoworld.com/robertxcringely/archives/2008/11/the_once_and_fu.html?source=NLC-NOTES&amp;cgd=2008-11-17" target="_blank">nation’s first CTO continues</a>. Although names have been suggested, such as standout nominees include Bruce Schneier, founder of Counterpane and now chief security technology officer at BT; Mark Cuban for his obvious business sense – and in spite of the <a href="http://www.huffingtonpost.com/2008/11/17/mark-cuban-insider-tradin_n_144320.html" target="_blank">insider trading indictment</a> – and Carly Fiorina, former controversial CEO of HP, the next question is what policies should this CTO pursue? Visit <a href="http://obamacto.org/" target="_blank">ObamaCTO.org</a> to view and vote for policies.</p>
<p>SaaS is taking a bite out of the $18 billion IT management market. A <a href="http://www.informationweek.com/blog/main/archives/2008/11/will_it_managem.html?cid=RSSfeed_IWK_ALL" target="_blank">new Forrester Research report forecasts SaaS-based IT management accounts will be 10%</a> of the market by 2013. The reason: high level of interest from medium-sized and large enterprises. Forrester also predicts that enterprises with 1,000 or more employees will account for 50% of SaaS installations in 2009. We’ve seen this on the service desk side with the <a href="http://www.redmonk.com/cote/2007/01/17/service-nowcom-briefing-itil-saas/" target="_blank">rapid growth of upstart Service-now.com</a>. Companies are looking for easier and rapid deployment, lower upfront and capital costs and rapid time to value – all benefits of SaaS as well as our own <a href="http://www.sciencelogic.com/appliancebenefits.htm" target="_blank">appliance model</a>.</p>
<p><a href="http://chucksblog.emc.com/chucks_blog/2008/11/the-speculation-game-ibm-buys-transitive.html" target="_blank">IBM snapped up Transitive</a> this week. Their QuickTransit software dynamically translates native code <a href="http://arstechnica.com/news.ars/post/20081120-ibm-to-buy-transitive.html" target="_blank">between architectures</a>, enabling apps compiled for one processor to be run on another without any modification. Apple was the first licensee and used it to build Rosetta, a translation system that allowed users of Intel Macs to seamlessly run legacy PowerPC apps. IBM plans to use the technology to move workloads onto IBM systems without recompiling, allowing customers to “save on energy costs due to hardware consolidation and reduced TCO.”</p>
<p>At CA World, CA announced a partnership with Amazon to provide “<a href="http://stage.vambenepe.com/archives/442" target="_blank">management capabilities around Amazon’s EC2</a> utility computing platform, potentially including discovery of software running on EC2 instances, performance monitoring, configuration management, software deployment capabilities and provisioning”. John Willis, in spite of some pretty funny potshots and stories about CA (don’t we all have them), writes that “<a href="http://www.johnmwillis.com/amazon/what-color-is-your-cloud/" target="_blank">CA is the first of the Big Four to take the cloud serious</a>”.</p>
]]></content:encoded>
      <pubDate>Mon, 24 Nov 2008 11:15:36 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/software deployment capabilities">software deployment capabilities</category>
      <category domain="http://www.securityratty.com/tag/software">software</category>
      <category domain="http://www.securityratty.com/tag/ibm plans">ibm plans</category>
      <category domain="http://www.securityratty.com/tag/ibm">ibm</category>
      <category domain="http://www.securityratty.com/tag/apps">apps</category>
      <category domain="http://www.securityratty.com/tag/legacy powerpc apps">legacy powerpc apps</category>
      <category domain="http://www.securityratty.com/tag/saas">saas</category>
      <category domain="http://www.securityratty.com/tag/saas installations">saas installations</category>
      <category domain="http://www.securityratty.com/tag/market">market</category>
      <source url="http://blog.sciencelogic.com/links-list-112408/11/2008">Links List 11.24.08</source>
    </item>
    <item>
      <title><![CDATA[National Security Perspectives A Post-Election Insider View]]></title>
      <link>http://www.securityratty.com/article/caa8257ee971993e58e1b834379f8c71</link>
      <guid>http://www.securityratty.com/article/caa8257ee971993e58e1b834379f8c71</guid>
      <description><![CDATA[Recently I participated in an event entitled National Security Perspectives held at the famous Congressional Country Club in Maryland . The featured panelists had impressive credentials from the NSA ,...]]></description>
      <content:encoded><![CDATA[<p>Recently I participated in an event entitled National Security Perspectives held at the famous <a href="http://www.ccclub.org/" target="_blank">Congressional Country Club in Maryland</a>. The featured panelists had impressive credentials from the <a href="http://www.nsa.gov/" target="_blank">NSA</a>, <a href="http://www.dhs.gov/" target="_blank">DHS</a> and the <a href="https://www.cia.gov/" target="_blank">CIA</a>. The topics of discussion ranged from Current Geopolitical Threats and Evolving Technology Demands to predictions about the New Administrations Intelligence, Defense and Homeland Security focus.</p>
<p>The panelists were:<br />
<a href="http://en.wikipedia.org/wiki/National_Security_Agency" target="_blank">William P. Crowell</a> – former Deputy Director of the National Security Agency<br />
<a href="http://www.whitehouse.gov/government/m_jackson-bio.html" target="_blank">Michael P. Jackson</a> – Deputy Secretary, Department of Homeland Security<br />
<a href="http://en.wikipedia.org/wiki/Jose_Rodriguez_(intelligence)" target="_blank">Jose A. Rodriguez, Jr</a>. – former Director CIA, National Clandestine Service &amp; CIA, DCI Counterterrorist Center</p>
<p>Overall, it was a very nicely arranged event on a brisk fall evening with about 100 CXO attendees; mostly large but some small government contractors and a few product companies like ScienceLogic that conduct business with military, intelligence and the public sector.</p>
<p>No surprise, given the financial crisis the economy is suffering from that the panelists said we also have a <a href="http://obsidianwings.blogs.com/obsidian_wings/2008/11/defictits-actua.html" target="_blank">crisis coming on the Federal budget front</a>. This will put enormous pressure on the way Administration thinks, and how and where to spend the $$.</p>
<p>Obama’s tone regarding the issues he will be confronting in the world during the election was encouraging. Make the world more non-partisan and take on the threats that we have in front of us head-on!</p>
<p>The panel was very upfront about current threats. William Crowell said,</p>
<blockquote><p>“It is highly imprudent to believe that there will not be another 9-11. We have to fund and support the work to stop other attacks. We can only mitigate risk but we can’t eliminate risk. We have to try to absorb the sense of urgency and wake up every day looking at the intelligence screens as if 9-11 happened within the last couple of months.”</p></blockquote>
<p>He added,</p>
<blockquote><p>“They (the intelligence community) need the innovation, sense of commitment and urgency that comes from the private sector – a sense of mutual commitment to that mission.”</p></blockquote>
<p>Predicted Priorities for investment for DHS:</p>
<ol>
<li>Cyber attack as the top issue</li>
<li>Nuclear threats including dirty bomb</li>
<li>Chemical and biological attacks</li>
<li>Explosive attacks against critical infrastructure with maximum # of lives and or financial disruption / loss.</li>
<li>Large scale natural disasters – hurricane + earthquakes</li>
<li>Border penetration - identity management and border management issues</li>
</ol>
<p>An <a href="http://www.barackobama.com/index.php" target="_blank">Obama administration</a> will spend dollars around these threat vectors. They will want to spend $$ to help state and local governments. Grants to state and local governments should significantly increase with the Obama administration, so think about how you will increase your focus on the state and local government spending initiatives.</p>
<p><a href="http://lawprofessors.typepad.com/immigration/2008/11/pressure-on-oba.html" target="_blank">Secure border investments</a> – the panelists believe that the new administration will feel compelled to invest here. Michael P. Jackson bluntly said, “You have to make investments in border tools to get meaningful immigration reform.”</p>
<p>Panelists agreed that the 1<sup>st</sup> year will be an intense period of scrutiny about fundamental directions. We can’t afford it all at DHS; it is dramatically under budgeted. At TSA/DOT and then at DHS, we spent about $4 Billion on technology investments since 9-11; those investments are now reaching the end of the original service life.</p>
<p>One gripe from the panel that I found humorous: “We don’t have a group of people who think like entrepreneurs.” It is insane how long things last when you buy things in the government. As an example, we are still replacing vacuum tubes in some of the very old FAA gear… this is well beyond what any reasonable person would think these initial investments should/would last.</p>
<p>Final Thoughts:<br />
I actually think that the Obama Administration will be quite favorable to COTS software products, SaaS offerings, and creative financing initiatives from the private sector. The government just won’t have the capital budget to do everything it wants to accomplish. I would say if you look at how intelligently and aggressively <a href="http://www.concurringopinions.com/archives/2008/11/obama_and_techn.html" target="_blank">Obama used technology</a> to assist his campaign, the odds are good that this new breed of IT talent (which is already really comfortable with SaaS products, blogs, wiki’s, hosted/outsourced Cloud solutions… this team really understands the latest technology trends) will quickly work to bring these new IT paradigms to the Federal marketplace. Clearly the private sector can help the Government achieve more with lower capital budgets – beginning to provide services rather than transaction-based selling. Another clear idea is to think about leasing as a better way to work with the government which going forward will have increased budgets restrictions.</p>
<p>They will likely be in confrontation with members of Congress that won’t change fast enough, however the future of our nation’s ability to fight terror lies in becoming more efficient and effective. It requires the government be flexible enough to figure out what <a href="http://blogs.techrepublic.com.com/hiner/?p=880" target="_blank">jobs and IT functions to outsource</a> in a nimble and smart way. My prediction: this is great news for Service Providers. Overall the next 4 years should be great for our business as well as the Managed Service Provider/SaaS industry!</p>
<p><em><span style="color: #333333;"> </span></em></p>
]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 11:13:25 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/secure border investments">secure border investments</category>
      <category domain="http://www.securityratty.com/tag/investments">investments</category>
      <category domain="http://www.securityratty.com/tag/government contractors">government contractors</category>
      <category domain="http://www.securityratty.com/tag/government">government</category>
      <category domain="http://www.securityratty.com/tag/threats">threats</category>
      <category domain="http://www.securityratty.com/tag/government achieve">government achieve</category>
      <category domain="http://www.securityratty.com/tag/initial investments shouldwould">initial investments shouldwould</category>
      <category domain="http://www.securityratty.com/tag/obama administration">obama administration</category>
      <category domain="http://www.securityratty.com/tag/current threats">current threats</category>
      <source url="http://blog.sciencelogic.com/national-security-perspectives-a-post-election-insider-view/11/2008">National Security Perspectives A Post-Election Insider View</source>
    </item>
    <item>
      <title><![CDATA[Hosting Meets the Cloud Debate Part II]]></title>
      <link>http://www.securityratty.com/article/3a3393b304f09ea17d212e2f5b730d65</link>
      <guid>http://www.securityratty.com/article/3a3393b304f09ea17d212e2f5b730d65</guid>
      <description><![CDATA[I have to say that Part II of this session was much anticipated after the lively interaction yesterday. It turned out to be less of a debate and more like a fireside chat. (image from pro.corbis.com...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; border-right-width: 0px" height="220" alt="clip_image002" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image0024.jpg" width="323" align="left" border="0" />I have to say that Part II of this session was much anticipated after the lively interaction yesterday. It turned out to be less of a debate and more like a fireside chat. <a href="http://pro.corbis.com/images/CB042667.jpg?size=572&amp;uid=%7bDA13F798-FDA1-4B54-BFA9-4B15492E024F%7d" target="_blank">(image from pro.corbis.com)</a></p>
<p>The analysts paired up today:   <br />Antonio Piraino (<a href="http://www.t1r.com/" target="_blank">Tier1 Research</a>)    <br /><a href="http://the451group.com/about/bio_detail.php?eid=113" target="_blank">William Fellows</a> (<a href="http://the451group.com/" target="_blank">The 451 Group</a>)</p>
<p><em>My usual disclaimers on live-blogging: doesn&#8217;t include everything covered (just what was most interesting to me) and had to paraphrase some answers because I simply cannot type that fast. </em></p>
<p><strong>Quick definition of Cloud Computing     <br /></strong><strong>WF:</strong> The cloud is a continuum of grid, virtualization and utility done right. It is about provisioning services instead of servers; flexible computing instead of fixed assets. Done right, the cloud abstracts users from the complexity of grid. <a href="http://www.the451group.com/images/content/ice/ice_iceberg.jpg">Cloud computing is IT as a service</a>. Cloud computing is the Third Way &#8211; not entirely in-house or outsourced, but an optimized hybridized version of both. In light of the Goldman Sachs report out resetting IT spending forecast from up 6% to down 1%, don&#8217;t underestimate the ability for enterprises to move from capex to opex by buying cloud computing instead of building it themselves.</p>
<p>The 451 Group conducted a survey on cloud computing in March, and then revisited it a month ago. Some interesting results:</p>
<ul>
<li>84% have no plans to develop an internal cloud. 5% had no answer to this question. And for the 10% who did answer &#8211; the uses for a private/internal cloud were the same as those for a public cloud. </li>
<li>Top 6 vendors they look to help them develop an internal cloud: <a href="http://www.alleyinsider.com/2008/11/microsoft-s-smart-cloud-catch-up-plan-three-years-of-free-software-msft-" target="_blank">Microsoft</a>, <a href="http://topnews.in/ibm-expand-its-cloud-computing-efforts-285364" target="_blank">IBM</a>, Cisco, HP, Oracle, VMware </li>
</ul>
<p><strong><em>Is it all &#8220;upside&#8221; when it comes to cloud computing?       <br /></em></strong><strong>     <br />WF:</strong> Watch out for the Trojan horse, the red flag. What about the software needed to manage all this stuff? Any management software needs to take a holistic approach to solve the problem.</p>
<p><strong>AP:</strong> Increased management requirements and capability &#8211; this is actually a great story for managed hosters who can hold your hand while getting you up into the cloud. Hosters alleviate the pain points, and this is why we&#8217;re going to see continued growth and focus in the managed hosting sector.</p>
<p><strong>WF:</strong> I would argue that they&#8217;re too expensive. <a href="http://tech.blorge.com/Structure:%20/2008/10/25/amazons-ec2-cloud-moves-into-production/" target="_blank">Look at Amazon</a> &#8211; 10 cents a hit adds up.</p>
<p><strong>AP:</strong> It&#8217;s almost impossible to do an apples-to-apples comparison between cloud providers. One reason is that they charge differently. I&#8217;d say that when you&#8217;re talking about the big cloud providers, you are right &#8211; that they are expensive over the long-term, but for use in the short-term, they can be optimal.</p>
<p><strong>WF:</strong> The cloud is setting big expectations. Can IT deliver? It&#8217;s nice to talk about &#8220;shared resources for the greater good&#8221; but in any organization, you will still run into issues of power and control! Plus it&#8217;s still early days for resolution of regulatory issues and compliance around the cloud.</p>
<p><strong>Final Thoughts</strong></p>
<p><strong>AP:</strong> Think of the opportunities of using cloud computing resources in the areas of testing and pre-production &#8211; short-term use/environment (quick up/quick down), inexpensive, opex not capex. We&#8217;re already seeing the cloud fostering much innovation.</p>
<p><strong>WF:</strong> &#8220;It&#8217;s okay to fall in love with the term.&#8221; It is real but keep the expectations lower and realistic.</p>
<p><strong>AP:</strong> I agree with you. The reality is that the cloud is driving a very fundamental underlying platform change. This is not just a term or something that will fall out of fashion. There&#8217;s a real need to build trust in the cloud and leveraging shared resources in this way &#8211; so use the cloud computing term cautiously; don&#8217;t abuse it and make the cloud seem like IT&#8217;s new toy.</p>
]]></content:encoded>
      <pubDate>Wed, 12 Nov 2008 18:35:55 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cloud">cloud</category>
      <category domain="http://www.securityratty.com/tag/public cloud">public cloud</category>
      <category domain="http://www.securityratty.com/tag/cloud providers">cloud providers</category>
      <category domain="http://www.securityratty.com/tag/cloud abstracts users">cloud abstracts users</category>
      <category domain="http://www.securityratty.com/tag/privateinternal cloud">privateinternal cloud</category>
      <category domain="http://www.securityratty.com/tag/internal cloud">internal cloud</category>
      <category domain="http://www.securityratty.com/tag/term">term</category>
      <category domain="http://www.securityratty.com/tag/pre-production short-term useenvironment">pre-production short-term useenvironment</category>
      <category domain="http://www.securityratty.com/tag/short-term">short-term</category>
      <source url="http://blog.sciencelogic.com/hosting-meets-the-cloud-debate-part-ii/11/2008">Hosting Meets the Cloud Debate Part II</source>
    </item>
    <item>
      <title><![CDATA[Innovation In Security--Lessons from TelePresence and Cloud]]></title>
      <link>http://www.securityratty.com/article/301883cbb5e30fc8992da3c13f88e3b7</link>
      <guid>http://www.securityratty.com/article/301883cbb5e30fc8992da3c13f88e3b7</guid>
      <description><![CDATA[Innovation in Security is a theme that we at EMC and RSA strongly believe in it was central to my keynote speech at the NCA Security and Technology Conference in Seattle on the 29th of October. Yet,...]]></description>
      <content:encoded><![CDATA[<p>Innovation in Security is a theme that we at EMC and RSA  strongly believe in&mdash; it was central to my <a href="http://www.ncanet.com/SatchitDokras.php">keynote</a> speech at the NCA  Security and Technology Conference in Seattle on the 29th of  October. Yet, as the day progressed, I could not help but think of how  extensively we need to innovate in our security deployments, to enable vibrant  new information exchange capabilities, and to sustain the rapid changes in our  information-centric lifestyles.<br />
  <br />
    <strong>And are we being hit with Change!</strong><br />
  Carlos Dominguez, the SVP at Cisco, spoke to <B>the profound  impact of Web 2.0 and TelePresence [TP] technologies on our business and social  lifestyles...</b>]]></content:encoded>
      <pubDate>Tue, 11 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/security">security</category>
      <category domain="http://www.securityratty.com/tag/security deployments">security deployments</category>
      <category domain="http://www.securityratty.com/tag/social lifestyles">social lifestyles</category>
      <category domain="http://www.securityratty.com/tag/nca security">nca security</category>
      <category domain="http://www.securityratty.com/tag/information exchange capabilities">information exchange capabilities</category>
      <category domain="http://www.securityratty.com/tag/lifestyles">lifestyles</category>
      <category domain="http://www.securityratty.com/tag/rsa strongly">rsa strongly</category>
      <category domain="http://www.securityratty.com/tag/telepresence">telepresence</category>
      <category domain="http://www.securityratty.com/tag/innovation">innovation</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1386">Innovation In Security--Lessons from TelePresence and Cloud</source>
    </item>
    <item>
      <title><![CDATA[Hosting meets the cloud]]></title>
      <link>http://www.securityratty.com/article/5ce6d3370e235e215b980a588e616472</link>
      <guid>http://www.securityratty.com/article/5ce6d3370e235e215b980a588e616472</guid>
      <description><![CDATA[Im out at The 451 Group Client Conference in Boston, lovely Boston. Its been over ten years since I lived here, but somehow Boston always has a feel of home
After meetings and calls, I was finally...]]></description>
      <content:encoded><![CDATA[<p>I’m out at <a href="http://clientconference.the451group.com/na/2008/" target="_blank">The 451 Group Client Conference</a> in Boston, lovely Boston. It’s been over ten years since I lived here, but somehow Boston always has a feel of home.</p>
<p>After meetings and calls, I was finally able to slip into a conference session – just in time to catch uber-smart analysts Rachel Chalmers (<a href="http://the451group.com/" target="_blank">The 451 Group</a>) and Dan Golding (<a href="http://tier1research.com/" target="_blank">Tier1 Research</a>) engage in a lively and not-so-mock debate on “<a href="http://clientconference.the451group.com/na/2008/agenda.html" target="_blank">Hosting Meets the Cloud</a>”.</p>
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image0021.jpg"><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 5px; border-right-width: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image002-thumb.jpg" border="0" alt="clip_image002" width="240" height="157" align="left" /></a>Now this doesn’t cover the entire debate – and part II is coming tomorrow. But what it does cover is the most interesting questions (to me) and paraphrase the points made by the analysts. I thought they both had very interesting points and more similarities than differences in the end; the real difference is how they thought about the issues and through what lens – for Rachel it was the enterprise and for Dan it was managed hosting providers.<em> (</em><a href="http://images.inmagine.com/img/inspirestock/ispc037/ispc037046.jpg" target="_blank"><em>image from inmagine</em></a><em>)</em></p>
<p><strong><em>Question: What is a cloud and why?</em></strong></p>
<p><strong>Dan:</strong> Shared infrastructure leveraged/run by third parties for the benefit of enterprises, developers, etc. This is not a new idea – just recently “rebranded.” Given all the discussion and disagreement over this now, what will the cloud end up looking like?</p>
<p><strong>Rachel:</strong> The cloud is “IT infrastructure as a service” down to the level of a server operating system. Take the example of <a href="http://www.cmswatch.com/Trends/1418-Cloud-computing---Ellison-rants,-others-reap?source=RSS" target="_blank">Amazon web services</a> – in this case it’s not just the infrastructure but also the internal processes built around service delivery, e.g., provisioning, that are being exposed as a commodity to external customers.</p>
<p><strong><em>Dan’s Question for Rachel: In your opinion, how much is the <a href="http://computerworld.co.nz/news.nsf/devt/74F46C52ACB5316CCC2574F9007B3A37" target="_blank">cloud a fad versus CIOs</a> really trying to solve a problem?</em></strong></p>
<p><strong>Rachel:</strong> For the practical, roll-up-your-sleeves types of CIOs – those coming up from the engineering ranks – that I talk to, the cloud is real, as opposed to SOA and middleware.</p>
<p><strong><em>What about “internal” cloud computing – built and maintained by an enterprise versus a third-party provider?</em></strong></p>
<p><strong>Dan:</strong> Cloud computing is done by providers for customers. Certainly there are <a href="http://www.mashget.com/2008/11/02/salesforcecom-extends-cloud-computing-service/" target="_blank">enterprises that have made internal computing investments</a>, e.g., for publishing, large-scale phone systems, etc - but they were stupid ideas made by companies that have too much money. A better question here is does it make any sense for an enterprise to create their own cloud? While an enterprise can play at it, they can’t do it cost-effectively, not in a way that a third party provider can do it.</p>
<p><strong>Rachel:</strong> Many CIOs have “managed-hoster” envy – for things like chargeback and billing that hosters understand a do better. Of course there has been a rise in automation and virtualization tools in the enterprise which may not be as efficient and built for scalability as a hoster can achieve, but what is important is that they are customized/specialized for that business.</p>
<p><strong>Dan:</strong> Can you give a specific example of optimization to make it worthwhile for enterprises to do it themselves?</p>
<p><strong>Rachel:</strong> One example is sovereignty. The privacy laws around financial and healthcare information are not the same everywhere. Clouds and their geographically-dispersed data centers don’t necessarily have “national” borders. This is definitely a concern for the CIO that has to <a href="http://www.intomobile.com/2008/11/10/security-are-you-comfortable-sharing-your-information-with-%E2%80%98the-cloud%E2%80%99.html" target="_blank">comply with regulations in their industry around privacy protection</a>, for instance. Another example is security. Dow Chemical does a lot of work via joint ventures and has a need to provide but lock down desktops given to contractors as corporate workspaces. For their level of security, they need to “own” their computing resources.</p>
<p><strong>Dan:</strong> But why can’t someone like <a href="http://sungard.com/" target="_blank">SunGard</a> provide that as they do for many other large companies?</p>
<p><strong>Rachel:</strong> It comes down to a question of trust.</p>
<p><strong><em>Do people trust their hosting providers?</em></strong></p>
<p><strong>Dan</strong>: Yes. Whether it’s for a content delivery network or collocation, hosting the customers of hosting providers are some of the largest companies in the world in industries like energy and financial services. Give me a case when there was a major security issue with a hosting company. In fact, managed hosting providers usually provide better security than enterprises are capable of.</p>
<p><strong><em>And a question provided by an attendee from EMC: A few years ago, this would have been <a href="http://www.symmetrymagazine.org/breaking/2008/10/24/computing-in-a-grid-or-a-cloud/" target="_blank">a grid discussion. How is the cloud different</a>?</em></strong></p>
<p><strong>Rachel</strong>: Grid computing ended up being applicable only for niches – which I predicted. The real opportunity for everyone else with the cloud only comes up when you combine the kinds of automation tools (originally developed for grid computing) with x86 virtualization.</p>
<p><strong>Dan</strong>: I agree. Grid was a niche play. There were very few orgs that needed it and that the economics worked for. There were very few enterprises for whom it made sense to build their own for. The cloud is shared/leveraged versus grid computing. It economically makes sense in a way grid never did.</p>
]]></content:encoded>
      <pubDate>Tue, 11 Nov 2008 18:38:27 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cloud">cloud</category>
      <category domain="http://www.securityratty.com/tag/internal cloud">internal cloud</category>
      <category domain="http://www.securityratty.com/tag/grid">grid</category>
      <category domain="http://www.securityratty.com/tag/grid discussion">grid discussion</category>
      <category domain="http://www.securityratty.com/tag/rachel">rachel</category>
      <category domain="http://www.securityratty.com/tag/dan">dan</category>
      <category domain="http://www.securityratty.com/tag/security">security</category>
      <category domain="http://www.securityratty.com/tag/enterprise">enterprise</category>
      <category domain="http://www.securityratty.com/tag/versus grid">versus grid</category>
      <source url="http://blog.sciencelogic.com/hosting-meets-the-cloud/11/2008">Hosting meets the cloud</source>
    </item>
    <item>
      <title><![CDATA[Podcast: Cloud Computing, Software Development, Testing and Security]]></title>
      <link>http://www.securityratty.com/article/17d0b9aafe426c2e469aa3ccc41622d5</link>
      <guid>http://www.securityratty.com/article/17d0b9aafe426c2e469aa3ccc41622d5</guid>
      <description><![CDATA[Last month I was interviewed for a podcast with SearchSoftwareQuality.com
We talked about some of the advantages Cloud Computing could bring to software development and testing. Notice I say could - I...]]></description>
      <content:encoded><![CDATA[<p><img class="alignleft" src="http://media.techtarget.com/searchSoftwareQuality/images/header_logo2.gif" alt="SearchSoftwareQuality Logo" /></p>
<p>Last month I was interviewed for a podcast with <a href="http://SearchSoftwareQuality.com">SearchSoftwareQuality.com</a>.</p>
<p>We talked about some of the advantages Cloud Computing could bring to software development and testing.  Notice I say &#8216;could&#8217; - I continue to see <a href="http://cloudsecurity.org/2008/07/21/assessing-the-security-benefits-of-cloud-computing/">great potential benefits</a> but some of these require us to rethink how we do things as &#8216;end-users&#8217; and depend on the Cloud Computing ecosystem maturing enough to deliver them (e.g. security monitoring of Cloud API calls).</p>
<p>This was recorded prior to the Microsoft Azure announcement hence the &#8220;software + services&#8221; model wasn&#8217;t covered.</p>
<p>Anyway, the podcast is broken into 3 x 8 minute segments (I think I broke the spoken word count ;-):</p>
<ul>
<li><span class="a3"> General benefits of cloud computing for software development</span></li>
<li><span class="a3"> Cloud computing&#8217;s impact on agile development practices, software testing, and e-commerce</span></li>
<li><span class="a3">Security elements surrounding cloud computing, such as software monitoring, implementing security patches, and the reduction of data leakage.</span></li>
</ul>
<p>You can access the podcast segments <a href="http://searchsoftwarequality.techtarget.com/generic/0,295582,sid92_gci1338164,00.html">here</a>.</p>
<p>My thanks to Michelle and Erick over at TechTarget for the opportunity.</p>
<h4>What About You?</h4>
<p>Apart from general feedback on whether the podcast was helpful or not, I&#8217;m interested to hear if you&#8217;ve started any Cloud based development projects - please share in the comments.</p>
<img src="http://feeds.feedburner.com/~r/CloudSecurity/~4/447347585" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sun, 09 Nov 2008 08:57:10 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cloud">cloud</category>
      <category domain="http://www.securityratty.com/tag/software development">software development</category>
      <category domain="http://www.securityratty.com/tag/software">software</category>
      <category domain="http://www.securityratty.com/tag/cloud computings impact">cloud computings impact</category>
      <category domain="http://www.securityratty.com/tag/security">security</category>
      <category domain="http://www.securityratty.com/tag/podcast">podcast</category>
      <category domain="http://www.securityratty.com/tag/cloud api calls">cloud api calls</category>
      <category domain="http://www.securityratty.com/tag/advantages cloud">advantages cloud</category>
      <category domain="http://www.securityratty.com/tag/podcast segments">podcast segments</category>
      <source url="http://feeds.feedburner.com/~r/CloudSecurity/~3/447347585/">Podcast: Cloud Computing, Software Development, Testing and Security</source>
    </item>
    <item>
      <title><![CDATA[Links List 11.7.08]]></title>
      <link>http://www.securityratty.com/article/005aeccf95461397bcc44aae9976e6f2</link>
      <guid>http://www.securityratty.com/article/005aeccf95461397bcc44aae9976e6f2</guid>
      <description><![CDATA[Government contractors spill their thoughts about how Obamas historic win will affect the industry. A majority of those questioned agreed to the fact that nothing will change overnight and everything...]]></description>
      <content:encoded><![CDATA[<p>Government <a href="http://www.bisnow.com/washington_dc_tech_news_story.php?p=1744">contractors spill their thoughts</a> about how Obama’s historic win will affect the industry. A majority of those questioned agreed to the fact that nothing will change overnight and everything will occur within 2-3 years. Others expressed thoughts on who will lead procurement and acquisition policy at GSA and OMB, as well as a possible hiring freeze for the government workforce. We’re also waiting to see what will happen to <a href="http://blog.sciencelogic.com/government-sent-home-with-a-c-on-fisma-report-card/08/2008">FISMA</a> and<a href="http://blog.sciencelogic.com/times-up-ipv6-omb-mandate/06/2008"> IPv6</a> compliance going forward as a new administration and new OMB management sets their own agendas and mandates.<strong></strong></p>
<p>Due to the slow economy, most tech companies are being cautious and ratcheting back sales forecasts for software and hardware. <a href="http://blogs.wsj.com/biztech/2008/10/31/how-to-survive-the-downturn-sell-tech-to-bankruptcy-lawyers/?mod=djemTECH">The exception: Infra-Strategy</a>, a company that operates a group of Web sites that help people find a lawyer and info to deal with bankruptcies, divorces and DUI cases. Visits to the sites are booming – with visits to <a href="http://www.totaldivorce.com/">totaldivorce.com</a>, for example, up 112% in October 2008 (I found the picture on the website particularly compelling). Apparently, in bad times, divorce rates go up. Who knew?</p>
<p>Is it always a recession when it comes to IT Operations? <a href="http://blogs.forrester.com/it_infrastructure/2008/10/how-is-the-econ.html">Companies are constantly trying to find ways to do more with less in IT – reducing costs but keeping the same or even adding functionality</a> – deploying technologies that drive IT consolidation such as mobile and remote access, unified communications and virtualization. Chris Silva of The Forrester Blog for IT Infrastructure &amp; Operations Professionals is looking for a research panel to find out what fellow IT companies are doing to keep their IT budgets in check. To join the research panel visit: <a href="http://itpanel.forrester.com/">http://itpanel.forrester.com/</a>.</p>
<p>The Cloud Computing Monopoly debate continues. O’Reilly Media founder Tim O’Reilly and technology writer Nicholas Carr (of <a href="http://www.computerworld.com/managementtopics/roi/story/0,10801,81045,00.html">“IT Doesn’t Matter”</a> fame/infamy) have been <a href="http://www.informationweek.com/blog/main/archives/2008/11/the_cloud_compu.html?cid=RSSfeed_IWK_ALL">discussing the ‘potential for a single company to achieve monopoly control of the world of cloud computing</a>.’ But what’s even more interesting is the “who will make a lot of money” in cloud computing question.</p>
]]></content:encoded>
      <pubDate>Fri, 07 Nov 2008 19:49:59 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/research panel visit">research panel visit</category>
      <category domain="http://www.securityratty.com/tag/research panel">research panel</category>
      <category domain="http://www.securityratty.com/tag/monopoly">monopoly</category>
      <category domain="http://www.securityratty.com/tag/achieve monopoly control">achieve monopoly control</category>
      <category domain="http://www.securityratty.com/tag/tech companies">tech companies</category>
      <category domain="http://www.securityratty.com/tag/omb management sets">omb management sets</category>
      <category domain="http://www.securityratty.com/tag/companies">companies</category>
      <category domain="http://www.securityratty.com/tag/omb">omb</category>
      <category domain="http://www.securityratty.com/tag/forrester">forrester</category>
      <source url="http://blog.sciencelogic.com/links-list-11708/11/2008">Links List 11.7.08</source>
    </item>
    <item>
      <title><![CDATA[I Dreamed a Dream of Clouds Gone Social]]></title>
      <link>http://www.securityratty.com/article/0080c2c0dc834c0843fe8598971ccd2f</link>
      <guid>http://www.securityratty.com/article/0080c2c0dc834c0843fe8598971ccd2f</guid>
      <description><![CDATA[Can Marc Benioff live up to his own hype plus the hype around cloud computing? Maybe. ( image from chris lyb
Salesforce.coms Dreamforce conference takes place this week in SF. Billed as The Cloud...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image002.jpg" border="0" alt="clip_image002" width="240" height="180" align="left" />Can Marc Benioff live up to his own hype plus the hype around cloud computing? Maybe. (<a href="http://www.flickr.com/photos/chriskramerblog/1411104892/in/set-72157602080811580/">image from chris_lyb</a>)</p>
<p>Salesforce.com’s <a href="http://www.salesforce.com/dreamforce/DF08/">Dreamforce conference</a> takes place this week in SF. Billed as “The Cloud Computing Event of the Year”, the <a href="http://blogs.wsj.com/biztech/2008/11/03/threes-a-cloud-for-salesforcecom-facebook-and-amazoncom/">conference kicked off with a keynote by Benioff</a> while people wearing puffy-white jackets and holding giant helium-filled cloud balloons stood outside.</p>
<p>Benioff announced partnerships with Facebook and Amazon.</p>
<p>Part 1: Force.com apps will be able to run on Facebook and leverage the Facebook users’ social network. An example shown was <a href="http://venturebeat.com/2008/11/03/dreamforce-salesforcecom-adds-facebook-amazon-and-neil-young/">integrating “My Starbucks Idea” into Facebook</a>. If a user submits an idea through Facebook, their friends can see it, comment or be prompted to submit their own.</p>
<p>Part 2: Force.com <a href="http://www.efluxmedia.com/news_Salesforcecom_Partners_with_Amazoncom_and_Facebook_28151.html">applications can now use Amazon’s cloud hosting services</a> in addition to the public Force.com sites.</p>
<p>This is smart and a surprisingly non-megalomaniac way of doing things. Instead of trying to own the entire cloud stack (<a href="http://blog.sciencelogic.com/blue-skies-for-microsofts-cloud-computing/10/2008%5d">hmmm – someone just made a very different announcement</a>), Salesforce looks like it’s focusing on what it does best – enabling application development in a hosted model. And letting Amazon take at least some of the future blame for any outages/interruptions in service (anyone who has Salesforce can say amen to that). That is smart.</p>
]]></content:encoded>
      <pubDate>Wed, 05 Nov 2008 13:30:01 +0000</pubDate>
      <category domain="http://www.securityratty.com/tag/cloud">cloud</category>
      <category domain="http://www.securityratty.com/tag/amazons cloud">amazons cloud</category>
      <category domain="http://www.securityratty.com/tag/cloud balloons stood">cloud balloons stood</category>
      <category domain="http://www.securityratty.com/tag/marc benioff live">marc benioff live</category>
      <category domain="http://www.securityratty.com/tag/entire cloud stack">entire cloud stack</category>
      <category domain="http://www.securityratty.com/tag/benioff">benioff</category>
      <category domain="http://www.securityratty.com/tag/facebook">facebook</category>
      <category domain="http://www.securityratty.com/tag/public force">public force</category>
      <category domain="http://www.securityratty.com/tag/force">force</category>
      <source url="http://blog.sciencelogic.com/i-dreamed-a-dream-of-clouds-gone-social/11/2008">I Dreamed a Dream of Clouds Gone Social</source>
    </item>
  </channel>
</rss>
