nist cloud computing reference architecture nist sp 500-292 nist cloud computing reference...

Download NIST cloud computing reference architecture NIST SP 500-292 NIST Cloud Computing Reference Architecture

Post on 25-Mar-2020

0 views

Category:

Documents

0 download

Embed Size (px)

TRANSCRIPT

  • NIST Cloud Computing

    Reference Architecture

    Recommendations of the National Institute of Standards and Technology

    Fang Liu, Jin Tong, Jian Mao, Robert Bohn, John Messina, Lee Badger and Dawn Leaf

    Special Publication 500-292

  • i

    NIST Special Publication 500-292

    NIST Cloud Computing Reference Architecture Recommendations of the National Institute of Standards and Technology

    Fang Liu, Jin Tong, Jian Mao, Robert

    Bohn, John Messina, Lee Badger and

    Dawn Leaf

    Information Techonology Laboratory

    Cloud Computing Program

    Information Technology Laboratory

    National Institute of Standards and Technology

    Gaithersburg, MD 20899-8930

    September 2011

    U.S. Department of Commerce

    Rebecca M. Blank, Acting Secretary

    National Institute of Standards and Technology

    Patrick D. Gallagher, Under Secretary for Standards

    and Technology and Director

  • NIST SP 500-292 NIST Cloud Computing Reference Architecture

    ii

    Reports on Computer Systems Technology

    The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology

    (NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation‟s

    measurement and standards infrastructure. ITL develops tests, test methods, reference data, proof of

    concept implementations, and technical analysis to advance the development and productive use of

    information technology. ITL‟s responsibilities include the development of technical, physical,

    administrative, and management standards and guidelines for the cost-effective security and privacy of

    sensitive unclassified information in Federal computer systems. This Special Publication 800-series

    reports on ITL‟s research, guidance, and outreach efforts in computer security and its collaborative

    activities with industry, government, and academic organizations.

    Certain commercial entities, equipment, or materials may be identified in this

    document in order to describe an experimental procedure or concept adequately.

    Such identification is not intended to imply recommendation or endorsement by the

    National Institute of Standards and Technology, nor is it intended to imply that the

    entities, materials, or equipment are necessarily the best available for the purpose.

    National Institute of Standards and Technology Special Publication 500-292

    Natl. Inst. Stand. Technol. Spec. Publ. 500-292, 35 pages (September 2011)

  • NIST SP 500-292 NIST Cloud Computing Reference Architecture

    iii

    Acknowledgments

    The authors, Fang Liu, Jin Tong, Jian Mao of Knowcean Consulting Inc. (services acquired via US

    NAVY SPAWAR contract), Robert Bohn, John Messina, Lee Badger, Dawn Leaf of the National

    Institute of Standards and Technology (NIST), wish to thank their colleagues who reviewed drafts of this

    document and contributed to its technical content. The authors gratefully acknowledge and appreciate the

    broad contributions from members of the NIST Cloud Computing Reference Architecture and Taxonomy

    Working Group and the Reference Architecture Analysis Team.

    Trademark Information

    All names are trademarks or registered trademarks of their respective owners.

  • NIST SP 500-292 NIST Cloud Computing Reference Architecture

    iv

    Table of Contents

    Executive Summary ............................................................................................................................. vi

    1. Introduction .................................................................................................................................... 1

    1.1 Background ............................................................................................................................................ 1

    1.2 Objectives ................................................................................................................................................ 1

    1.3 How This Report Was Produced ..................................................................................................... 2

    1.4 Structure of This Report .................................................................................................................... 2

    2. Cloud Computing Reference Architecture: An Overview ................................................ 3

    2.1 The Conceptual Reference Model ................................................................................................... 3

    2.2 Cloud Consumer.................................................................................................................................... 5

    2.3 Cloud Provider ...................................................................................................................................... 7

    2.4 Cloud Auditor ........................................................................................................................................ 8

    2.5 Cloud Broker .......................................................................................................................................... 8

    2.6 Cloud Carrier ......................................................................................................................................... 8

    2.7 Scope of Control between Provider and Consumer ................................................................. 9

    3. Cloud Computing Reference Architecture: Architectural Components ................... 10

    3.1 Service Deployment ......................................................................................................................... 10

    3.2 Service Orchestration ...................................................................................................................... 12

    3.3 Cloud Service Management ........................................................................................................... 14

    3.3.1 Business Support ...................................................................................................................................... 14

    3.3.2 Provisioning and Configuration .......................................................................................................... 15

    3.3.3 Portability and Interoperability ......................................................................................................... 15

    3.4 Security ................................................................................................................................................. 15

    3.4.1 Cloud Service Model Perspectives ..................................................................................................... 16

    3.4.2 Implications of Cloud Deployment Models .................................................................................... 16

    3.4.3 Shared Security Responsibilities ........................................................................................................ 16

    3.5 Privacy .................................................................................................................................................. 17

    4. Cloud Taxonomy .......................................................................................................................... 18

    Appendix A: Cloud Taxonomy Terms and Definitions ........................................................... 20

    Appendix B: Examples of Cloud Services .................................................................................... 24

    Appendix C: Acronyms ...................................................................................................................... 26

    Appendix D: References .................................................................................................................... 27

  • NIST SP 500-292 NIST Cloud Computing Reference Architecture

    v

    List of Figures

    Figure 1: The Conceptual Reference Model ............................................................................... 3

    Figure 2: Interactions between the Actors in Cloud Computing .................................................. 4

    Figure 3: Usage Scenario for Cloud Brokers .............................................................................. 4

    Figure 4: Usage Scenario for Cloud Carriers .............................................................................. 5

    Figure 5: Usage Scenario for Cloud Auditors ............................................................................. 5

    Figure 6: Example Services Available to a Cloud Consumer ...................................................... 6

    Figure 7: Cloud Provider - Major Activities ................................................................................. 7

    Figure 8: Scope of Controls between Provider and Consumer ................................................... 9

    Figure 10: On-site Private Cloud ...............................................................................................10

    Figure 11: Out-sourced Private Cloud .......................................................................................11

    Figure 12:

Recommended

View more >