Nist Cloud Computing Program Overview Nov 2010

Download Nist Cloud Computing Program Overview Nov 2010

Post on 12-May-2015

829 views

Category:

Technology

0 download

Embed Size (px)

DESCRIPTION

Dawn Leaf on NIST activities

TRANSCRIPT

  • 1.NIST Cloud ComputingProgram Overview Presented by Dawn LeafNIST Senior Executive for Cloud ComputingNovember 4, 2010Information Technology Laboratory NIST National Institute ofStandards and Technology

2. National Institute of Standards and Technology (NIST) Cloud Computing Role NIST Cloud Computing efforts are consistent with the NIST mission: To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life. Cornerstone: Advancing Standards Development government needs to work collaboratively with private sectorInformation Technology Laboratory NIST National Institute ofStandards and Technology 3. Goal of this briefing summarize progress since May 2010 & set the stage for the next phase of our work together How to build a roadmap Introduce NIST Strategic CloudComputing Initiative priorities1. Define TargetUSG CloudrisksComputingobstaclesBusiness UseCases Goal: Work together with Federal Chief 3. Generate CloudComputing Roadmap iteratively Information Officers, Industry and Translate, Define &Track Cloud Computing 2. Define Neutral Standards Developing OrganizationsCloud ComputingPriorities Reference to define a USG Cloud Computing Architecture and Taxonomy Roadmap Concurrent & Iterative 3-step processInformation Technology Laboratory NIST National Institute ofStandards and Technology 4. UPDATE: NIST Tactical projectswhat we said we would do in May 2010 and what weve doneSpecial Publications:1. SP 800 -125, DRAFT Guide to Security for Full Virtualization Technologies, July 20102. SP 800 xxx, Cloud Computing Synopsis & Guidelines Dec 2010 draft releaseComplex Information Systems Measurement Science -- CloudComputing Simulation Model in ProgressTechnical Advisor to Federal CIO Council Cloud Computing ExecutiveSteering Committee, Cloud Computing Advisory Council, Standards &Security Working GroupsStandards Acceleration to Jumpstart Adoption of Cloud Computing (SAJACC)Information Technology Laboratory NIST National Institute ofStandards and Technology 5. *Cloud Computing Simulation Model goal & approach: Understand & Predict Behavior in a Cloud Computing System Koala simulating an Infrastructure as aservice (IaaS) Cloud systemObjectives:(1) Compare behavior of proposed resourceallocation algorithms for IaaS clouds(2) Discover and characterize complexbehaviors that may emerge in IaaS clouds Early 2011 -- Target timeframe to share initial project findings Contributors: C. Dabrowski, J. Filliben, D. Genin, K. Mills & S. Ressler *Previous work investigated proposed Congestion Control Mechanisms or the Internet see NIST Special Publication 500-282 http://www.nist.gov/itl/antd/Congestion_Control_Study.cfmInformation Technology LaboratoryNISTNational Institute of Standards and Technology 6. Update: Support to Federal CIO Council Cloud Computing Advisory Council Security Working Group Recommendations Federal Risk & Authorization Management Program concept Technical Process: aligned to NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach Draft Security controls: selected from NIST SP 800-53 Recommended Security Controls for Federal Information Systems For low & moderate security impact cloud information systems Authorizing officials & information system owners have the authority &responsibility to define requirements and security plans which definehow the controls are implemented.Information Technology LaboratoryNISTNational Institute of Standards and Technology 7. Update: Standards Acceleration to Jumpstart Adoption of CloudComputing (SAJACC) SAJACC goal is to help solve the problem: How do we support the adoption of a new complextechnology during the interim period between whenstandards are needed and when they are available, andhow do we develop standards more quickly? SAJAAC is: Project, Process & PortalInformation Technology Laboratory NIST National Institute ofStandards and Technology 8. SAJACC: What does it look like? Where are we?Portal (version 1) NIST CloudCommunity Standards Outreach ProcessSept. 2010 -- publicInternet accessible Existing Standards Enablewebsite Working Groups Open,interoperable information Free Access.cloud computingNov. 2010 -- populatedbefore finalizedwith draft use casesNIST Cloud Standards Portal standards Use CasesPlan -- iteratively & Faster standardsValidated referenceincrementally populateSpecificationsImplementationsportal development specifications documented interfacesStandards pointers - reference standardsDevelopmentimplementations Organizations test resultsInformation Technology Laboratory NIST National Institute ofStandards and Technology 9. NIST Strategy to Develop a Cloud Computing Roadmap -- Why? Why Now? NIST Strategic & Tactical Cloud Computing program initiated in parallel Tactical efforts are fundamental to supportadoption of any new emerging technology Tactical projects are necessary, but not sufficient toaggressively respond to the rapid pace ofCloud Computing services evolutionInformation Technology LaboratoryNISTNational Institute of Standards and Technology 10. NIST Strategic Cloud Computing Program Timeline MayNovMarch 2010 2010 2011STExecute CCR Outreach & Fact finding with StrategicA USG, Industry, SDOsLaunch CC programT StrategicEvaluate past models & Program ContinueElessons learnedStakeholderG InitiatemeetingsI StakeholderCDefine fresh approach to meetingsIntegratesupport secure & results intoeffective USG cloudtacticalcomputing adoption,prioritiesprioritize interoperability, portability, &security requirements, collaborate, moreNISTquickly respond to operational needsCCDefinitionTactical effortsInformation Technology LaboratoryNISTNational Institute of Standards and Technology 11. NIST Strategy to Develop a USG Cloud Computing Roadmap1. Define TargetUSG CloudComputing prioritiesBusiness UserisksCases obstaclesInformation Technology Laboratory NIST National Institute ofStandards and Technology 12. NIST Strategy to Develop a USG Cloud Computing Roadmap1. Define TargetUSG CloudComputing prioritiesBusiness UserisksCases obstacles2. Define NeutralExpandedCloud Computing CC DefinitionReference ref. architecture Architecture Reference & Taxonomy implementationsInformation Technology Laboratory NIST National Institute ofStandards and Technology 13. NIST Strategy to Develop a USG Cloud Computing Roadmap1. Define TargetUSG CloudComputing prioritiesBusiness UserisksCases obstacles3. Generate CloudComputing Roadmap -- iteratively Translate,Define & TrackCloud Computing Priorities2. Define NeutralExpandCloud Computing CC DefinitionReference ref. architecture Architecture Reference & Taxonomy implementationsInformation Technology LaboratoryNISTNational Institute of Standards and Technology 14. NIST Strategy to Develop a USG Cloud Computing Roadmap1. Define Target Prioritized TacticalUSG CloudRequirements &Computing priorities DeliverablesBusiness Userisks Performance basedCases obstaclesinteroperability, security,3. Generate Cloudportability standards requirements (SAJACC)Computing Roadmap -- iteratively Translate, GuidanceDefine & TrackCloud ComputingPrototypes Priorities2. Define Neutral PilotsExpandCloud Computing CC Definition R&D prioritiesReference ref. architecture Architecture PoliciesReference & Taxonomy implementationsInformation Technology LaboratoryNISTNational Institute of Standards and Technology 15. Getting to Work -- November 5 WorkshopOverview: GSA related efforts, Lessons Learned, Review of the NIST Strategy to Develop a CloudComputing Roadmap; Process & Working logisticsPlease sign up today for a Nov. 5 AM & PMbreakoutTRACKAMPMsessionStrategic USG Business ReferenceUse CasesArchitectureStandards Cloud Standards SAJACC AdoptionSecurity Applications & ConsiderationsIssuesInformation Technology Laboratory NIST National Institute ofStandards and Technology

Recommended

View more >