Copyright © 2013 cloudbook: The Cloud Computing & SaaS Information Resource. All Rights Reserved.

|
|
|
|
|
|
|
|
| Featured Stories |
| Contributions |
| Videos |
| News |
| Cloud Wars, Part I: Framing the Standardization in Cloud Computing | |
| Standards and Standardization Practices in Cloud Computing | |
| by Tuomas MT Nurmela & Alex Krikos | |
| This article frames the international cloud SDO environment and process, categorizes cloud standards, and provides an example of the use of categorization. | |
| read the full story >> | |
| Risk Evaporation? Part 1 | |
| Emerging Cyber Risks: Better Visibility for the Cloud Forecast | |
| by Drew Bartkiewicz & Meghan Hannes | |
| Virtually every established industry in the world presently involves risk transfer and massive insurance markets to absorb unexpected catastrophic financial or legal impacts, except for the cloud computing industry. Industries that rely on the insurance marketplace range from banking to property, energy to transportation; even the rental car industry relies on insurance for business-sustaining risk mitigation purposes. The cloud computing sector is an emerging industry with enormous promise with equally great unseen, aggregated financial liabilities. Prediction: The risk transfer marketplace for cloud computing will soon take hold through the powerful force of sheer, simple economics. | |
| read the full story >> | |
| Rights and Responsibilities for Consumers of Cloud Computing Services | |
| by Daryl Plummer | |
| Over four months during the first half of 2010, Gartner convened an IT council comprising CIOs of large enterprises that consume cloud services. The Gartner Global IT Council for Cloud Services defined six rights and one responsibility of service consumers that will help both providers and consumers establish and maintain successful business relationships. This article is an excerpt from a paper authored by the council and describes some of the most pressing rights and responsibilities, along with the reasons why they are necessary. | |
| read the full story >> | |
| Managing a Cloud Service Level Agreement | |
| Managing a cloud service level agreement effectively requires two different modes, each with its own set of unique demands -- business as usual mode and crisis mode | |
| by J Bruce Daley & Alan Rudolph | |
| Business as usual mode revolves around the normal execution of operations to ensure a reliable service. The data center is up and running, the metrics for downtime, latency, and other measurements are being met. There is a lot of work that needs to done to maintain this order, but the pace of events is steady and everyone knows what to expect. | |
| read the full story >> | |
| Accurately Monitoring Cloud SLAs | |
| by J Bruce Daley & Alan Rudolph | |
| Once the Service Level Agreement (SLA) has been negotiated, the actual work of managing the relationship begins. Interestingly, the responsibility of monitoring performance falls to the customer. Without the right processes and tools, this can be more difficult than it looks. | |
| read the full story >> | |
| Negotiating Cloud Service Level Agreements | |
| by J Bruce Daley & Alan Rudolph | |
| The greatest value of negotiating a service level agreement comes from establishing a strong working relationship that allows the two parties to work together to mend the fence when it falls down. | |
| read the full story >> | |
| eDiscovery in the Cloud: A Nightmare Scenario | |
| by James Berriman & Jack Notarangelo | |
| Your company uses cloud computing as a cost-effective element of its business operations. And then one day your company is sued. What are the implications? | |
| read the full story >> | |
| The Four Step Method of Cloud Service Level Agreements | |
| by J Bruce Daley & Alan Rudolph | |
| Despite some claims, all cloud computing services will be subject to outages. No system, however large, nor process, however elaborate, nor support, however fanatical, can prevent computers from occasionally going down. The important point to keep in mind is the word “occasionally”. Occasional outages should be expected, planned for, and accepted as cost of doing business. What determines the definition of an occasional outage is a negotiated agreement between two parties called a service level agreement (or SLA). | |
| read the full story >> | |
| ClickSoftware – Great Case of an AWS Cloud Adoption: Part 1, Operations | ||||
| November 14 2012 |
||||
|
||||
| My first interview was with Mr. Korach, discussing operation and his “cloud day” as the senior DevOps of this cloud service leader. ClickSoftware started utilizing the AWS cloud for non-critical services such as demos and proof of concepts for new opportunities, customers’ training and development staging environments. According to Mr. Korach, there is a clear separation between the company’s internal needs on the Amazon cloud and the cloud service offering. The former are consumed by the specific provisioned and relevant department (Sales, Professional Services, R&D) in the organization, and are managed and monitored by the company IT department. The latter (i.e., the company’s Cloud services offerings) needs are deployed, managed and monitored by Korach’s DevOps team. |
||||
| Prepare for the next cloud outage: Analyze and Improve | ||||
| July 16 2012 |
||||
|
||||
| It happened again… this was the second AWS outage in the same month. Did you fail to protect your service online? Don’t forget – you can’t pass your liability onto your IaaS vendor.
You can find a great amount of knowledge resources with regards to AWS cloud High Availability architectures in Newvem’s resources center, starting from Best Practice for High Availability Deployment all the way to knowing more about how to maintain availability for your specific environment, such as how to maintain a failover to MSSQL DB server, or a case study on how to replicate PostgreSQL DB Between AWS Regions. |
||||
| 5 Steps to design and build your Cloud Computing Infrastructure |
||||
| May 02 2012 |
||||
|
||||
| Cloud computing necessarily requires coordination not just across a variety of data center infrastructure but disparate teams as well. Organization must be ready and willing to change its thinking about applications and how they are deployed, as well as how they are budgeted and assigned resources. The following article talks about the basic steps one must consider adopting when planning to build their own Cloud Computing Infrastructure |
||||
| Amazon and Eucalyptus join forces for “Hybrid Cloud” or vs. Open Stack + Other Public Clouds | ||||
| March 27 2012 |
||||
|
||||
| What you call an alliance when two different kinds of market holders collaborate? By the definition from Google Search, Hybrid means “A thing made by combining two different elements”. Here that thing is an “Alliance”. It is the Alliance of one of the Biggest or arguably the biggest public cloud service provider and one of the biggest private cloud service providers in open source and enterprise versions.
As part of this agreement, AWS will support Eucalyptus as they continue to extend compatibility with AWS APIs and customer use cases. Customers can run applications in their existing datacenters that are compatible with popular Amazon Web Services such as Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simple Storage Service (Amazon S3).
For me as a Cloud user it is a simple case of 1st step in the direction of:
1) Acceptance of the existence of “Private Clouds”.
2) Hybrid Cloud implementation
|
||||
| The Future is C-cubed | ||||
| November 18 2011 |
||||
|
||||
| The future belongs to 3 important technology domains - Communication, computing and the cloud |
||||
| Who’s Protecting Your Data in the Cloud? All Eyes are on You | ||||
| May 23 2011 |
||||
|
||||
| A recap of our recent videocast about cloud security. Panelists discussed the issue from both the customer and the service provider perspective. Many questions were raised about who is responsible for cloud security and how useful Service Level Agreements (SLAs) are in contract negotiations. |
||||
| Tough Questions To Ask Cloud Service Providers | ||||
| May 13 2011 |
||||
|
||||
| The cloud is not one thing, so when you're thinking about moving to the cloud, try to find the one that most closely matches the IT environment you've built for yourself. And beware of cloud SLAs, advised Carl Meadows, director of managed services product management at SunGard.
|
||||
| Is There Auditable Security in the Cloud? | ||||
| February 18 2011 |
||||
|
||||
| I recently watched the CSPAN coverage of Cloud Computing in political campaigns held at the Graduate School of Political Management at George Washington University. Participants shared their views about cloud computing in campaigns, but the issue of“Auditing through the Cloud” appeared problematic. I put on my “Auditor” hat and began to question a number of issues related to the performance of a reliable audit in a Private, Public or Hybrid Cloud environment.
An extensive discussion about various platforms, architectures and application layers as well as corporate protocols and policies provide a lot of food for thought as we consider how, when and if we should deploy a Public or Private Cloud in our enterprise.
The ability to establish standards for auditing through the cloud is captured in ISO/IEC27001 “Information Security Management which replaces BS7799-2. The standardapplies Organization for Economic Cooperation and Development (OECD) principlesgoverning security of information and network systems to the process of developing“Best Practices” which will ensure that providers and customers are satisfied with thelevel of transparency, security and verifiability of both the process and the results of anaudit review. The standard is intended to provide a foundation for third party audits. |
||||
| The Challenge of Cloud Integration | ||||
| February 02 2011 |
||||
|
||||
| Thoughts on James Urquhart’s recent articles on “’Go to’ clouds of the future”. |
||||
| Cloud Computing Standards – Not This Year | ||||
| January 26 2011 |
||||
|
||||
| It’s clear that end users of cloud computing would like to see true interoperability
I started out writing a blog about the state of cloud computing to review how things have evolved in the cloud space over the last year (2010 was a good year for cloud computing) but I got sidetracked thinking about how clouds are converging, or in reality, not converging.
It’s clear that end users of cloud computing would like to see true interoperability. Companies want the freedom to pick a cloud that meets their needs, without worrying that choices made today will cost them big in the future or lock them in. Interoperability would mean that a company could choose a cloud for a given workload, and if conditions change, they could opt to bring the workload back in-house or move to another cloud environment – without requiring a major engineering project or a shift to a different computing paradigm. |
||||
| Do SLAs really matter? A 1 year case study of 38 cloud services | ||||
| January 15 2011 |
||||
|
||||
| A year ago we signed up for services with dozens of different IaaS and PaaS cloud providers. We then setup monitoring on each of those services. Scheduled maintenance periods were excluded and we also attempted to manually confirm and document extended outages. This article examines the availability we experienced during one full year with each of these services, and compares that metric to the provider SLAs to determine if there is a correlation between the two. |
||||
| Cloud Security is Dependent on the Law | ||||
| November 22 2010 |
||||
|
||||
| Lately there has been some intersting claims of the superiority of public clouds over privately managed forms of IT, including private cloud environments. Regardless of the technical and organizational realities, there is one element that is completely out of control of both the customer and cloud provider that makes public cloud an increased risk: the law. Ignoring this means you are not completely evaluating the "security" of potential deployment environments. |
||||
| Crisis Management in Cloud is Courage under Fire | ||||
| November 16 2010 |
||||
|
||||
| Cloud Service providers tout their near 100% availability, reliability and scale. But when accidents happen, and they will, their actions demonstrate their true quality |
||||
| The intersection of open source and cloud computing | ||||
| June 28 2010 |
||||
|
||||
| Cloud computing and open-source software have been intertwined since the early days of the cloud. Vendors such as Amazon.com, SugarCRM, Rackspace, and many others, utilized open-source choices for everything from virtualization to data stores to user interfaces. |
||||
| Overcast Show - The LAMP Cloud | ||||
| June 22 2010 |
||||
|
||||
| In this show James and Geva talk with Krishnan Subramanian of CloudAve about the LAMP Cloud. Geva started the conversation in a GigaOm post, Who Will Build the LAMP Cloud?, and James responded with, Does Cloud Computing Need LAMP?. In an indirectly related post, Krish wrote about the Relevance of Open Source in a Cloud Based World. Now they discuss whether it makes sense, who needs it, and what's the role of open source software in the world of cloud computing? They also discuss the adoption of Platform-as-a-Service and more. |
||||
| Does Cloud Computing Need LAMP? | ||||
| May 24 2010 |
||||
|
||||
| The LAMP stack is a collection of open-source technologies commonly integrated to create a platform capable of supporting a wide variety of Web applications. In response to a blog post on "Who will build the LAMP cloud?" the questions arises if cloud computing really needs LAMP when you consider the new alternatives. |
||||
| Have SaaS Contracts Become Commodities | ||||
| May 04 2010 |
||||
|
||||
| Have SaaS Contracts Become Commodities? From a software licensing attorney perspective the answer is in some ways yes, and other ways no. Here is a more thorough explanation. |
||||
| What is the Purpose of an End User Contract? | ||||
| March 19 2010 |
||||
|
||||
| IT contracts are arguably more important than contracts in other industries. In most industries, the buyer purchases a tangible product they then own, or generally knows what type of services they will receive. However, in the IT world the buyer does not own the product and is often unsure of exactly the type of service they will receive. Here is an article on figuring out the purpose of an end user contract. |
||||
| The German Data Protection Act (BDSG) and Cloud Computing in 2010 | ||||
| January 22 2010 |
||||
|
||||
| Why are the issues for BDSG any different in a cloud computing environment? People see it as a risk, some of which I believe are real and others which I believe are just perception. |
||||
| Does the Fourth Amendment Cover The Cloud? | ||||
| January 19 2010 |
||||
|
||||
| One of the biggest issues facing individuals and corporations choosing to adopt public cloud computing is the relative lack of clarity with respect to legal rights over data stored online. However, a recent note written for the Minnesota Law Review gives a thorough outline of where we stand with respect to the application of Fourth Amendment law to Internet computing. |
||||
| Open Cloud as a Set of Tools, Standards, and Community | ||||
| June 09 2011 |
||||
|
||||
| The CTO at Rackspace, John Engates, discusses open cloud as a set of tools, standards, and community at the SIIA All About the Cloud Conference. |
||||
| Minds for Sale | ||||
| October 27 2010 |
||||
|
||||
| Jonathan Zittrain reprises his popular Minds for Sale talk at Harvard Law School. He presents the potential dark side of cloud labor, discusses how cloud computing is not just for computing anymore, and takes questions from the Harvard Law School Alumni Community. |
||||
| Are Open APIs Enough to Prevent Lock-in? | ||||
| July 28 2010 |
||||
|
||||
| Are Open APIs Enough to Prevent Lock-in? |
||||
| Examining RightNow's Cloud Service Agreement | ||||
| March 09 2010 |
||||
|
||||
| CRM vendor, RightNow, announced a new service as a service agreement. Amy Konary, IDC pricing and licensing analyst, discusses how innovative the new policies really are. |
||||
| World Economic Forum (Dubai) | ||||
| November 22 2009 |
||||
|
||||
| CEO of CyberRiskPartners, LLC discusses the global impacts of the Internet and the implications for shared risk, self-governance, and the future of data privacy. |
||||
| Civic Technologies and the Future of the Internet | ||||
| November 19 2009 |
||||
|
||||
| Harvard law professor and author Jonathan Zittrain discusses the unusual and distinctive technologies whose power increases in proportion to the people participating in them, contrasted with other technologies that leverage what the few can impose on the many - whether a PC virus maker who crashes millions of machines or a law enforcement officer who can use new consumer platforms to spy far easier than before. |
||||
| Minds for Sale | ||||
| November 18 2009 |
||||
|
||||
| A new range of projects are making the application of crowdsourcing as purchasable over the cloud as additional server rackspace. Professor of Law and co-founder of the Berkman Center for Internet & Society at Harvard, dives into the ethics and issues surrounding cloud labor. |
||||
| Building Confidence in The Cloud | ||||
| June 09 2009 |
||||
|
||||
| Trust is the biggest obstacle to winning mainstream acceptance of cloud computing. Enterprises are not going to entrust business critical applications to the cloud unless they feel confident that providers won't let them down on a range of metrics including availability, performance, governance, security, privacy and sustainability. With a set of short presentations followed by a Q&A discussion, this panel looks at what SaaS and cloud providers can and are doing to enable and assure enterprise-class cloud computing.
Moderator: Alexis Richardson - CEO & Co-Founder, Rabbit Technologies Ltd Presenters: Kevin O'Brien - Director, SaaS Strategy & Programs, Oracle Corporation; Pascal Walschots - Communications Sector, Microsoft EMEA; Werner Vogels - VP & CTO, Amazon.com |
||||
| PCI Compliance in the Cloud | ||||
| May 15 2009 |
||||
|
||||
| PCI Compliance in the Cloud |
||||
| Civic Technologies and the Future of the Internet | ||||
| May 04 2009 |
||||
|
||||
| Dartmouth College Institute for Security, Technology, and Society presents Professor Jonathan Zittrain, Harvard Law School on Civic Technologies and the Future of the Internet. |
||||
| 4 Critical Questions About The Cloud | ||||
| August 16 2011 - InformationWeek | ||||
|
||||
| read the full article >> | ||||
| After power outages, cloud insurance looks even better | ||||
| August 15 2011 - GigaOm | ||||
|
||||
| read the full article >> | ||||
| Two Open-Source Cloud Standards: What It Means to You | ||||
| April 20 2011 - PCWorld | ||||
|
||||
| read the full article >> | ||||
| Red Hat extends cloud computing collaboration with NTT | ||||
| April 18 2011 - CBR | ||||
|
||||
| read the full article >> | ||||
| OpenStack Cactus Advances Open Source Cloud Computing | ||||
| April 15 2011 - Server Watch | ||||
|
||||
| read the full article >> | ||||
| VMware Launches Open-Source Cloud | ||||
| April 12 2011 - GigaOm | ||||
|
||||
| read the full article >> | ||||
| IEEE's cloud portability project: A fool's errand? | ||||
| April 07 2011 - InfoWorld | ||||
|
||||
| read the full article >> | ||||
| Crash Course in Open Source Cloud Computing | ||||
| March 05 2011 - Sys-Con Media | ||||
|
||||
| read the full article >> | ||||
| Cloud Computing and Patent Trolls: How To Prepare Now | ||||
| February 22 2011 - ComputerWorld | ||||
|
||||
| read the full article >> | ||||
| Is Your Cloud System Safe From the Law? | ||||
| February 13 2011 - GovMonitor | ||||
|
||||
| read the full article >> | ||||
| Cloud computing: A legal maze for Europe | ||||
| February 11 2011 - EurActiv | ||||
|
||||
| read the full article >> | ||||
| Canonical: open source is the driving force of cloud computing | ||||
| February 03 2011 - Computer Weekly | ||||
|
||||
| read the full article >> | ||||
| Compliance in the Cloud and the Implications on eDiscovery | ||||
| January 20 2011 - law.com | ||||
|
||||
| read the full article >> | ||||
| Security isn't the only barrier to cloud computing | ||||
| January 13 2011 - NextGov | ||||
|
||||
| read the full article >> | ||||
| Keeping your legal head above the cloud | ||||
| January 10 2011 - Guardian | ||||
|
||||
| read the full article >> | ||||
| Eucalyptus & Red Hat: The Cloud’s New Best Friends | ||||
| December 15 2010 - Sys-Con Media | ||||
|
||||
| read the full article >> | ||||
| 50 Open Source Apps You Can Use in the Cloud | ||||
| November 24 2010 - Datamation | ||||
|
||||
| read the full article >> | ||||