OASIS International Cloud Symposium 2012 10th – 12th October 2012 Washington DC

Taking Cloud Standards Testing Taking Cloud Standards Testing from Ideas to Realityfrom Ideas to Reality

Alan F. Sill, Ph.DVice President of Standards, Open Grid ForumSenior Scientist, High Performance Computing Center; Adjunct Professor of Physics; Site Director, Cloud and Autonomic Computing Industry/University Cooperative Research Center, Texas Tech University

www.oasis-open.org

2OASIS International Cloud Symposium 2012

10th – 12th October 2012 Washington DC

www.oasis-open.org

Certification and Accreditation – the need

A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary. Testing would need to verify that the specified functions required for any given service are in place. But how successful generally are Certification and Accreditation programs?The conclusions of this session will be used by the new Cloud Requirements TC (PACR).

Let’s Re-Examine The Original Challenges To This Panel From Our

Chair:

3OASIS International Cloud Symposium 2012

10th – 12th October 2012 Washington DC

www.oasis-open.org

Certification and Accreditation – the need

A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary. Testing would need to verify that the specified functions required for any given service are in place. But how successful generally are Certification and Accreditation programs?The conclusions of this session will be used by the new Cloud Requirements TC (PACR).

Let’s Re-Examine The Original Challenges To This Panel From Our

Chair:

4OASIS International Cloud Symposium 2012

10th – 12th October 2012 Washington DC

www.oasis-open.org

Which of the non-technical components in a Cloud service can be tested and included in an Accreditation program?

How can the client remain in control of its assets through an Accreditation program?

Existing / Planned Accreditation programs that can be used?

Which organizations, public or private, are best placed to run an Accreditation program?

Would the costs be prohibitive? Other aspects of introducing an Accreditation program ?

And the original issues:

5OASIS International Cloud Symposium 2012

10th – 12th October 2012 Washington DC

I propose to answer all of these questions with a single formulation:

A Range of Solutions Must Be Deployed In Order to Achieve

SuccessIn slightly more detail:1.Developers, users, customers and vendors

must all be involved in selection of the elements of a testing program.

2.Accreditation cannot proceed independently from validation of the expected use cases and applications.

3.The speed of cloud computing evolution requires special solutions for accreditation that are different from other computing and IT acquisition processes.

6©2012 Open Grid Forum

Open Grid Forum

An Open Community-Based Forum With Open Processes Focused on Development, Implementation and Testing of Open Standards

Basis for many of my claims:

6

12

18

24

2001 2006 2011

GFD Publication History

2000 - 2012 ...

8© 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8-10, 2012

Example of OGF Standards Use:

(Credit: Matteo Turilli, Oxford)

EGI FedCloud Task Force Demo

EGI Technical Forum 2012 – Prague 17/21 Sep

9© 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8-10, 2012

Example of OGF Standards Use:

(Credit: Matteo Turilli, Oxford)

EGI FedCloud Task Force Demo

EGI Technical Forum 2012 – Prague 17/21 Sep

http://cloudplugfest.org

NIST CLOUD PROCESS & TWIKI

http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/SAJACC

http://collaborate.nist.gov/twiki-cloud-computing/bin/view/CloudComputing/CloudComputingUseCases

17OASIS International Cloud Symposium 2012

10th – 12th October 2012 Washington DC

Conclusions•When testing and accrediting cloud standards, a variety of test platforms, resources and procedures is needed and these are already in use for various phases, aspects and features. A full range of approaches is needed!

•These range from open-access, public forums and public input requirements gathering processes to open-access forums to private testbeds that require various levels of agreements to access. All are needed to have a successful accreditation program!

•Speed must be balanced with thoroughness, inclusiveness with openness, proprietary features with the dynamic aspects of the cloud to encourage the broadest possible adoption and greatest acceleration of reliable results. Join us in helping this to happen!