ITU-T Focus Group Cloud Computing Victor Kutukov Chair December 7 2010

Management & Structure Management team Chairman: Victor Kutukov (Russia) Vice-Chairman: Jamil Chawki (France Telecom Orange, France) Vice-Chairman: Kangchan Lee (ETRI, Korea) Vice-Chairman: Mingdong Li (ZTE, China) Vice-Chairman: Monique Morrow (Cisco Systems, USA) Vice-Chairman: Koji Nakao (KDDI, Japan) Structure: Two Working Groups covering several Working Areas WG1: Cloud computing benefits & requirements WA 1-1 Cloud Definition, Ecosystem & Taxonomy WA 1-2 Uses cases Requirements & Architecture WA 1-3 Cloud security WA 1-4 Infrastructure & Network enabled Cloud WA 1-5 Cloud Services & Resource Management, Platforms and Middleware WA 1-6 Cloud computing benefits & Requirements from ICT perspectives WG2: Gap Analysis and Roadmap on Cloud Standards development in ITU-T WA 2-1 Overview of cloud computing SDOs activities WA 2-2 Gap analysis & Action plan for development of relevant ITU-T Cloud Standard

Threats for Cloud Users Lack of trusting cloud provider's security level Lack of Information/Asset Management Data loss and leakage Loss of Account/Service management

Threats for Cloud Service Providers Abuse and Nefarious Use of Cloud Computing Insecure interfaces and APIs Malicious insider Impact of compromising the provisioning service Isolation management / data multi-tenancy Storage controller (Single point of failure / compromise) Exposure of data to foreign governments Application multi-tenancy Reliance on hypervisors Process isolation / Application sandboxes Additional risk when integrated with customer applications Needs certification and accreditation as a separate application Software code updates Virtual zoning with application mobility

Status from Meeting 3 We received 35 contributions with focus in orchestration; cloud management; cloud security; cloud broker functionality and cloud benefits These contributions were towards the five output documents produced in the second meeting A clear process and work plan for the FG Cloud activities and deliverables was defined in order to prepare the first FG Cloud report to be submitted to the next TSAG meeting of Feb 2011

Output Documents Introduction to the cloud ecosystem: definitions, taxonomies, use cases, high level requirements and capabilities. The scope of this deliverable is to provide an introduction to the Cloud ecosystems, focusing on integration and support of Cloud Computing model and technologies in telecommunication ecosystems. The major changes include the addition of the value proposition, requirements and capabilities clauses. Functional requirements and reference architecture. The scope of this deliverable is to define the functional requirement and reference architecture of cloud computing, which includes the functional architecture, functional entities and reference points. Overview of SDOs involved in cloud computing. The scope of this document is to provide an overview of SDOs; to map the FG cloud working group and output documents to these SDOs ; and , to be as a base to produce a gap analysis that will result in a unique areas that can be under the ITU-T purview, specifically from telecom perspective. Cloud security, threat & requirements: Security Cloud has started to be discussed from reviews of other SDOs which are related Cloud Security activities in CSA, DMTF, CloudAudit, NIST, GICTF, etc. After the observation of the existing activities, the FG Cloud tentatively identify security threats from view points of Cloud user and Cloud service provider. Considering the identified security threats, the FG Cloud also studied security requirements to be considered for Cloud Computing Technology. Infrastructure and network enabled cloud. Position existing network infrastructure capability is a unique opportunity for service providers to provide bundled offers combining Network and IT resources. In addition, service providers can leverage their network asset to address network availability and performance for secure end to end cloud services. Another opportunity for service providers is to evolve network resource allocation and control to more dynamic in order to meet the needs to provision on-demand cloud services.

Work Plan Final Report Deliverable Editors Milestone FG-Cloud#3 2010/12 FG-Cloud#4 2011/01 FG-Cloud#5 2011/05 1- Eco-system: taxonomy, definition, use case, general requirement Marco Carugi / Jamil Chawki / Kangchan Lee Draft for review Final review before TSAG Completion 2- Requirements & Reference architecture Jie Hu / Peter Tomsu 3-Infrastructure & Network enabled cloud Mingdong Li / Jamil Chawki 4-Security Koji Nakao Final review before TSAG 5-Overview of SDO: Gap analysis Monique Morrow Update (Final review) Update 6-Benefits from Telecommunication perspectives Jamil Chawki & Management Team Initial draft 7-Report to TSAG & Roadmap (Feb 2011) Management Team Final Report 8-Repository TSB completion Update if needed Update id needed

Meeting 4 Dates: Jan 10 - 13 2011 Place: Nanjing, PRC Important topics: Draft cloud benefits from Telecom perspectives Draft for review of Cloud networking and Security documents TSAG Report (Feb 2011 meeting)

ITU-T Positioning Cloud ”Portal” Inter Cloud BSS/OSS W3C, IETF DMTF, SNIA GICTF-ITU-T E-1 E-2 E-3 IaaS & NaaS PaaS SaaS CaaS BSS/OSS TMF CSA DMTF OGF CRM & Billing Cloud Services Middleware Platform Security I-1 Service provisioning DMTF-OVF SNIA? IETF, ITU-T ? I-2 I-3 I-4 Virtualization Layer Compute Storage Networks Monitoring & system management Physical Resources General Requirements & Enabling Technologies ISO, OMG, Open Source..

Thank you for your attention