4.4 Public Cloud Platforms: GAE, AWS, and AZURE 4.4.1 Public Clouds and Server Offerings Fig. 4.19 introduces five levels of cloud players. The application providers at the SaaS level serve mainly individual users. Most business organizations are serviced by IaaS and PaaS providers. The IaaS provides compute, storage, and communication resources to both applications and organizational users. Table 4.5 summaries the profile of five major cloud providers by 2010 standards. 4.4.2 Google App Engine (GAE) Google Cloud Infrastructure Google has pioneered cloud development by leveraging the large number of data centers it operates. GAE Architecture Fig. 4.20 shows the major building blocks of the Google cloud platform which as been used to deliver the cloud services. Public Cloud Platform

Functional Modules of GAE GFS is used for storing large amount of data. MapReduce is for use in application program development. Chubby is used for distributed application lock services. BigTable offers a storage for accessing structured data. Functional Modules of GAE The GAE platform comprises the following five major components. datastore application runtime environment software development kit (SDK) administration console GAE web service infrastructure GAE Applications Well-known GAE applications include the Google Search Engine, Google Docs, Google Earth, and Gmail. Users can interact with Google applications via the web interface provided by each applications. Third-party application providers can use GAE to build cloud applications for providing services. GAE supports many web applications. Public Cloud Platform

4.4.3 Amazon Web Services (AWS) Amazon has been to share computing resources both flexibly and safely. Amazon has been a leader in providing public cloud services. Amazon applies the IaaS model in providing its services. Fig. 4,21 shows the AWS architecture. EC2 provides the virtualized platforms to the host VMs where the cloud application can run. Public Cloud Platform

S3 (Simple Storage Service) provides the object-oriented storage service for users. EBS (Elastic Block Service) provides the block storage interface which can be used to support traditional applications SQS stands for Simple Queue Service, and its job is to ensure a reliable message service between two processes. Table 4.6 summaries the service offerings by AWS in 12 application tracks. Public Cloud Platform

4.4.4 Microsoft Windows Azure Microsoft launched a Windows Azure platform to meet the challenges in cloud computing (2008). This platform is built over Microsoft data cenetrs. Fig. 4.22 shows the overall architecture of Microsoft’s cloud platform. The platform is divided into three major component platforms. Window Azure Azure service platform User applications Cloud-level services provided by the Azure platform are introduced below Live service, .NET service, SQL Azure, SharePoint service, Dynamic CRM service CRM (고객 관계 관리)은 잠재 고객을 포함한 기존 고객과 기업간의 모든 관계를 관리하는 것을 말한다. CRM의 궁극적인 목표는 기업의 프로세스, 임직원 및 IT기술을 통합시켜 신규고객 유치, 기존 고객 만족, 그리고 지속적인 만족도 유지를 실현하는 것이다 Public Cloud Platform

4.5 Inter-Cloud Resource Management 4.5.1 Extended Cloud Computing Services Fig. 4.23 shows six layers of cloud services, ranging from hardware, network, and collocation to infrastructure, platform, and software applications. Location as a Service (LaaS) provides a collocation service to house, power, and secure all the physical hardware and network resources. Collocation service: 웹 서버를 운영하는 기업 또는 개인에게 초고속 인터넷 전용회선이 연결되어 있는 전산실의 일정한 공간과 전용회선을 임대래 주는 서비스 Public Cloud Platform

4.5.2 Resource Provisioning and Platform Deployment Software Stack for Cloud Computing Table 4.7 4.5.2 Resource Provisioning and Platform Deployment Underprovisioning of resources will lead to broken SLAs and penalties. Overprovisioning of resources will lead to resource underutilization, and consequently, a decrease in revenue for the provider. Resource Provisioning Methods Fig. 4.24 shows three cases of static cloud resource provisioning polices. Demand-Driven Resource Provisioning This method adds or removes computing instances based on the current utilization level of the allocated resources Event-Driven Resource Provisioning This scheme adds or removes machine instances based on a specific time event. Popularity-driven Resource Provisioning In this method, the Internet searches for popularity of certain applications and creates the instances by popularity demand. Public Cloud Platform

4.6 Cloud Security and Trust Management Dynamic Resource Deployment Dynamic resource deployment can be implemented to achieve scalability in performance. Fig. 4.26 4.6 Cloud Security and Trust Management 4.6.1 Cloud Security Defense Strategies Basic Cloud Security Fig. 4.31 shows the mapping of cloud models, where special security measures are deployed at various cloud operating levels. Some cloud components demand special security protection: Protection of servers from malicious software attacks Protection of hypervisors or VM monitors from software-based attacks and vulnerabilities Protection of VMs and monitors from service disruption and DoS attacks Protection of data and information from theft, corruption, and natural disasters Providing authenticated and authorized access to critical data and services. Table 4.9 lists eight protection schemes to secure public clouds and data centers. Public Cloud Platform

4.6.2 Distributed Intrusion/Anomaly Detection Fig. 4.33 4.6.3 Data and Software Protection Techniques Data Coloring and Cloud Watermarking Fig. 4.35 4.6.4 Reputation-Guided Protection of Data Centers Public Cloud Platform

Public Cloud Platform