20
Multi-tenancy in federated Clouds A CloudWATCH webinar © 2013 Cloud Security Alliance - All Rights Reserved.

Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Multi-tenancy in federated CloudsA CloudWATCH webinar

© 2013 Cloud Security Alliance - All Rights Reserved.

Page 2: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

14:00 – Welcome and Introduction 5’

14:05 – One minute madness 5’

14:10 – Multi tenancy in federated Clouds 30’

14:40 – Open discussion 20’

CloudBytes // Multi-tenancy in federated

Clouds© 2013 Cloud Security Alliance - All Rights Reserved.

Agenda

Page 3: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Introduction

© 2013 Cloud Security Alliance - All Rights Reserved.

Page 4: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

© 2013 Cloud Security Alliance - All Rights Reserved.

Introduction

“Multi-tenancy in federated Cloud systems is unequivocally linked with identity management and federation.”

CloudBytes // Multi-tenancy in federated

Clouds

Michel Drescher (Host)

EGI.eu

Page 5: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

© 2013 Cloud Security Alliance - All Rights Reserved.

Introduction

“End to end trust in multi-tenancy clouds (and other multi-clouds) will become critical for the uptake of these systems.”

CloudBytes // Multi-tenancy in federated

Clouds

Jesus Luna,

Cloud Security Alliance

Page 6: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

© 2013 Cloud Security Alliance - All Rights Reserved.

Introduction

“Bring simplicity and clarity to the task of understanding the business potential of modern computing practices.”

CloudBytes // Multi-tenancy in federated

Clouds

Ian Osborne

The Knowledge Transfer Network

Page 7: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

© 2013 Cloud Security Alliance - All Rights Reserved.

Introduction

“Multi-tenancy and Intercloud bring both opportunities & threats - interoperability, standardization, latency and privacy.”

CloudBytes // Multi-tenancy in federated

Clouds

Colin Wallis

New Zealand Government, GCIO’s Office

Page 8: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

One minute madness

© 2013 Cloud Security Alliance - All Rights Reserved.

Page 9: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Jesus Luna• Customers perceive lack of

security assurance and transparency in multi-cloud/multi-tenant systems.

• Three main pillars of trustworthy systems

• Transparency and Accountability in the supply chain.

• Security assurance e.g., through Service Level Agreements.

• Security certifications that enable continuous monitoring.

One minute madness

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 10: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Ian Osborne• Create simple, robust patterns that can be reliably implemented across the

Cloud infrastructure

• Multi-tenancy: Sharing of software implementations by multiple end-users

• How consistently can multi-tenancy be implemented in different infrastructure platforms?

• How would such information be made available to be used selectively?

One minute madness

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 11: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Colin Wallis• Cloud standardisation has started – but lags too far behind

• Challenges in Intercloud data portability and interoperability

• Multi-tenancy may put pressure on service latency and privacy

• Significant work is still to be done

One minute madness

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 12: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Multi-tenancy in federated cloudsA camp-fire style discussion among experts

© 2013 Cloud Security Alliance - All Rights Reserved.

Page 13: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Cloud federation models: IEEE Intercloud, EGI Federated Cloud

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

IEEE Intercloud federation model EGI federation model

Key:

… Cloud Service

Provider

CSP network connection

Customer overlaid

network

Public standard

(e.g. OCCI)

Page 14: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Multi-tenancy across Cloud providers - SaaS, PaaS and IaaS

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 15: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Question 1:How do we define tenancy? Corporate affiliation, or collaboration grouping (virtual organisation)?

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Virtual Organisation

Page 16: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Question 2:Do CSPs require end-user identities or are permanent surrogates sufficient (identity privacy etc.)? How does that interfere with data access regulations - and what about individuals affiliated with more than one tenant?

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 17: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Question 3:Privacy in multi-tenant Cloud federations: Privacy and pan-jurisdiction perspective:

• The location of those cloud providers would need to be in the EU or one of the EC ‘endorsement’ nations• Argentina, Uruguay, Canada, Israel, New Zealand

• Security perspective: a security risk assessment might reduce the the above list

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 18: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Question 4: Portability

• Data PortabilityThe ability to easily transfer data from one cloud service to another, without being required to re-enter the data

• Application PortabilityThe ability to easily transfer an application or application components from one cloud service to a comparable cloud service and run the application in the new cloud service

Camp-fire discussion: Multi-tenancy in federated Clouds

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds

Page 19: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Open discussionQuestions from the audience provided via chat

© 2013 Cloud Security Alliance - All Rights Reserved.

Page 20: Multi-tenancy in federated Clouds · 2015-02-25 · Jesus Luna •Customers perceive lack of security assurance and transparency in multi-cloud/multi- tenant systems. •Three main

Contact Us

cloudwatchhub.eu

THANK YOU!

© 2013 Cloud Security Alliance - All Rights Reserved.CloudBytes // Multi-tenancy in federated

Clouds