A Security Approach In The Cloud

Rick Rodin

Dwight Bygrave

Evgeni Sadovski

Maria Azua

DPS Class of 2012 – Team 2

1

Decreasing cost of Information

Two Key Trends

Time to 60M Users

Radio

Internet

Farmville

40 years

3 years

20 years TV

4 months!

Acceleration of technology adoption

* Figueres from The Social Factor by Maria Azua 2

Virtualization, Images

Service CatalogProvisioning,

Management/Billing System

Virtual NetworkElasticity.

•Diagram from IBM cloud presentation

What is Cloud Computing and how we got here?

Clusters

Grids

Clouds

(Physical wiring of multiple computers)High Performance clustersHigh Availability clusters

(Peer-to-Peer architctue, No Abstraction layer)Compute GridData GridService GridApplication Grid

(Virtualized, Abstraction Layer, Image standardization, Services Driven, Utility model)Public CloudsPrivate ClouddsHybrid Clouds

•Diagram from Pankaj Deep Kaur, I.C.: ‘Unfolding the Distributed Computing Paradigms 3

Scale

Unit cost

Traditional Infrastructure

InternalCloud

Service Provider Cloud(cost)

Large enterprises can significantly reduce costs for some workloads compared with traditional IT.

•Diagram from IBM cloud presentation

Cloud Computing enables economies of scale

4

Banks use automated teller machines to improve

service and lower cost.

Manufacturers use robotics to improve quality and

lower cost.

Telcos automate traffic through switches to assure

service and lower cost.

Standardization and Automation have changed many other industries become more efficient.

… breakthroughs like these are enabled by service management systems.

•Diagram from IBM cloud presentation5

Cloud Computing technology enables low cost IT which made possible the creation of new

Social Networking “clouds”

Social NetworksFacebook, YouTube

Informational / Services

Yahoo, MSN, Google

Yahoo MSN Google YouTube Facebook

% o

f Tim

e S

pen

t, World

wid

e

* Figuere from The Social Factor by Maria Azua 6

The World is connected…. And more vulnerable to internet security attacks than ever before…

Byproduct of low cost communication and Cloud Computing

* Figuere from The Social Factor by Maria Azua 7

8

Image Mangement Life Cycle Unsecure ProcessSecure Image management system

•Strict registration process.•Filter for publisher’s personal information like browser log files & cookies.•Verifies Signature•Monitors for Trojan horse and other malware patterns•Role base and ACL access control

Benefits / Value

* Diagram from Jinpeng Wei, Xiaolan Zhang, Vasanth Bala, and Ning, P.: ‘Managing Security of Virtual Machine Images in a Cloud Environment’

9

Quantum ComputingTraditional Computing

– Computes in a linear fashion– Computation done by microprocessors one computation at a time– Push to have many tasks process at once (Parallel Computing)

Parallel Computing – Many calculations are carried out simultaneously– Major tasks are divided into smaller ones and processed at once– This would allow for enormous leaps in the world of computing

Essence of Quantum Computing – A computer must be able to store information as strings of 1’s and 0’s (Bits).– A computer must be able to manipulate the stored bits per given instructions.

• NOT OR and AND Gates. – The operating environment must be completely protected from radiation, magnetic

and electric fields as well as noise and motion.

Quantum Key Distribution (QKD)

Classical Cryptography (becoming vulnerable)–Secret or symmetric key cryptography–Public key cryptography or asymmetric cryptography

Important Quantum Properties–Principle of Superposition–Heisenberg Uncertainty Principle–Quantum Entanglement

10

Quantum Key Distribution (QKD)

11

1984Charles Bennett and Gilles Brassard Protocol (BB84) –Photon polarization state to encode 0’s and 1‘s at 0o or 90o in the

rectilinear base or 45o and 135o in a diagonal base.

1992 Charles Bennett (B92)

Only two of the four states mentioned are necessary for B92

12

The most basic QKD system involves:– A sender(Alice) and receiver (Bob), – A quantum channel and a– Conventional communication channel. – Then you might encounter (Eve) the eavesdropper.

Quantum Key Distribution (QKD) System

ITIL Service Transition

Source: ITIL Service Transition

We need a Release Management process that leverages QKD Integrity of the modules (Cloud Images)

Track, Install, Verify and Validate deployed modules

Manage deviations

Risk: Breach in physical/information security

Security depends on VPN

Secure key exchange required

Conclusion