SlideShare a Scribd company logo
Standards Adoption Deep Dive #1
1
14:30 Welcome, Summary of previous workshop & Summary of points of
contention - David Wallom, University of Oxford
14:45 Trust Based Approach to Advanced Security - CSA
15:00 Coffee
15:15 Specific discussion on points of contention
* Policy standardisation
* Technical Standardisation
16:30 Process for taking forward a standards profile, SDO(s) hosting and
coordinate which profile, lead authors/contributors identification,
timeline & roadmap
17:00 Workshop close
2
Welcome
Summary of previous workshop
Summary of points of contention
David Wallom
3
4
From Usecases, to Standards Profiles
Project
Engagement
• Project selection
• Use-case collection
Standards
Profiles
• Review and condense project
use cases
• Cloud standards service
models
• Review standards for profiling
dissemination&iteration
5
From Usecases, Ecosystem analysis to
Standards Profiles
Project
Engagement
• Project selection
• Use-case collection
• Characteristics scoring
Data
Analysis
• Principal Components Analysis (PCA)
• Biplot and numerical representation
• Heirarchical clustering
Interpretation
• Cluster data quality
• Functional vs. non-functional characteristics
Standards
Profiles
• Review and condense project use cases
• Cloud standards service models
• Review standards for profiling
Quantitative
Methodology
dissemination&iteration
The NIST Cloud Definition Framework
6
Community
Cloud
Private
Cloud
Public Cloud
Hybrid Clouds
Deployment
Models
Service
Models
Essential
Characteristics
Common
Characteristics
Software as a
Service (SaaS)
Platform as a
Service (PaaS)
Infrastructure as a
Service (IaaS)
Resource Pooling
High Perf Network Access Rapid Elasticity
Measured Service
On Demand Self-Service
Low Cost Software
Virtualization Service Orientation
Advanced Security
Homogeneity
Massive Scale Resilient Computing
Geographic Distribution
Based upon original chart created by Alex Dowbor - http://ornot.wordpress.com
7
Principle Component
8
• 37 projects
• EC and non-
EC supported
• Self scoring
9
1
2
3
Identified Clusters
Cluster 1 – Scientific computing. This cluster
comprises a number of projects that aim at highly
distributed data processing in an academic context.
Cluster 2 – Trusted public clouds for government.
This cluster consists of a set of initiatives driven by
public sector organisations.
Cluster 3 – High performance, dedicated purpose
applications. This cluster is similar to Cluster 1, but
comprises projects concentrating on high
performance computing that are more focussed
regarding their objectives.
10
Cloudwatch(1) Final Workshop
September 2015
Built on clustering to support discussion
between relevant groups who have similar
identified interests in characteristics.
~30 attendees
11
Breakout Group 1 –
Scientific Computing
Strawman profile confirmed as in scope and useful
Measured service vs. service monitoring
Group’s perception deviated from profile term
Terminology issue? Can we arrive at a single understanding
for each?
Workshop is an information bazaar
Learn about existence of standards (e.g. OCCI, WS-
Agreement)
12
Breakout Group 2 -
Trusted Public Cloud for Government
Largest breakout group
Name is perceived as misleading
Applied methodology led to narrowing of scope
Probably more of a subgroup of an otherwise valid
main profile
Scope requires cross-SDO standards profile
How does that affect the SDO hosting scheme?
13
Breakout group 3 -
High-performance, Dedicated-Purpose
Applications
A profile on standards is very much needed
In fact, profiles are needed at large, not only for this group
13 NIST characteristics are a good start
BUT:
“Advanced Security” is too broadly defined
E.g. hiding Privacy which should be its own
characteristic, really!
There is scope to refine and amend the applicable
characteristics
14
Workshop Takeaways
Broad concept of profiles understood
But technicalities require further education
Profiles on standards should not break
conformance of incorporated standards
IEEE P2301 happy to collaborate with ETSI CSC
Great potential for global synergies
Audience positive on follow-up workshops
15
Extending the dataset
• Further develop the clustering tool towards
self service
• Apply single parameters to move beyond hand
tuning
• Online self-service tool developed
• https://tethys.oerc.ox.ac.uk:8443/CW2Clustering
WebApp/index.xhtml
16
Todays Workshop goals
Discuss the previously identified short
comings
Advanced Security; a superset of other areas?
Provider security
Consumer privacy
Measured service vs. service monitoring
Accounting information availability and commonality
How can a single customer Monitor multiple providers?
How to get profiles through process?
17
CLOUD SECURITY ALLIANCE
Trust Based Approach to
Advanced Security
18

More Related Content

PPTX
e-infrastructural needs to support informatics
PPT
Hedstrom Infrastructure
PPTX
Synergy 2014 - Syn122 Moving Australian National Research into the Cloud
PDF
Sgci esip-7-20-18
PPS
Inn Presentation
PPT
Implementing an Institutional Repository for Leeds Met
DOCX
Wind throw trees ambience effect
PDF
Wind Measurement Strategies to Optimize Lidar Return on Investment
e-infrastructural needs to support informatics
Hedstrom Infrastructure
Synergy 2014 - Syn122 Moving Australian National Research into the Cloud
Sgci esip-7-20-18
Inn Presentation
Implementing an Institutional Repository for Leeds Met
Wind throw trees ambience effect
Wind Measurement Strategies to Optimize Lidar Return on Investment

Viewers also liked (20)

PDF
Wind in Forest
PDF
New England's Changing Climate
PDF
Uncertainty analysis & validation of power curve wind turbine
PDF
Climate Change Effects on Water
PDF
Joint Forest Management - Kerala
PDF
Managing Climate Change Risk in the Forest
PDF
PDF
Climate Change Effects on Forest
PDF
Wind energy II. Lesson 2. Wind speed measurement
PDF
Final ingredient for el ...n since the summer 1997
PDF
Wind energy I. Lesson 5. Wind turbines general
PPTX
Joint forest management
PPTX
Presentation1.ppt
PDF
Forest management plan
PPTX
Joint Forest Management
PPTX
International Forest Risk Model
PDF
Tales of correlation inflation (2013 CADD GRC)
PDF
Libertarianism Compassionate
PPTX
Production schedule
Wind in Forest
New England's Changing Climate
Uncertainty analysis & validation of power curve wind turbine
Climate Change Effects on Water
Joint Forest Management - Kerala
Managing Climate Change Risk in the Forest
Climate Change Effects on Forest
Wind energy II. Lesson 2. Wind speed measurement
Final ingredient for el ...n since the summer 1997
Wind energy I. Lesson 5. Wind turbines general
Joint forest management
Presentation1.ppt
Forest management plan
Joint Forest Management
International Forest Risk Model
Tales of correlation inflation (2013 CADD GRC)
Libertarianism Compassionate
Production schedule
Ad

Similar to CloudWatch2 Adoption Deep Dive (20)

PDF
Forecast 2014: Welcome to the ODCA University - School is Way Cool!
PPTX
Research on Architecting Microservices: Trends, Focus, and Potential for Indu...
PPT
Clinical Document Architecture Implementations - Lessons Learnt to Date
PDF
MPLS/SDN 2013 Intercloud Standardization and Testbeds - Sill
PDF
Standards for clinical research data - steps to an information model (CRIM).
PDF
Top Down Network Design - ebrahma.com
PPTX
it-Craft-a-Cloud-Strategy-for-the-Enterprise-Database-Phases-1-3.pptx
PPTX
Transforming cloud security into an advantage
PPTX
Impact of cloud services on software development life
PPTX
Cloud application security (CCSP Domain 4)
PPTX
Cloud Services Management Intro PPT.pptx
PPTX
CCSK Certificate of Cloud Computing Knowledge - overview
PPTX
1606662359-chapter-1-top-down-network-design.pptx
PDF
Peter Mell Cloud Standards 20090915
PPT
Bob Plumridge - Enabling easier Cloud Solution Deployment (Storage Expo 2010)
PDF
ILA23 • Unlocking Global Product Teams Success
PPTX
Introduction to the CSA Cloud Controls Matrix
PPTX
20140508 sip@isotc184 sc4
PDF
Craig Lee Driving Cloud Progress Final
PDF
Security & Compliance in the Cloud [2019]
Forecast 2014: Welcome to the ODCA University - School is Way Cool!
Research on Architecting Microservices: Trends, Focus, and Potential for Indu...
Clinical Document Architecture Implementations - Lessons Learnt to Date
MPLS/SDN 2013 Intercloud Standardization and Testbeds - Sill
Standards for clinical research data - steps to an information model (CRIM).
Top Down Network Design - ebrahma.com
it-Craft-a-Cloud-Strategy-for-the-Enterprise-Database-Phases-1-3.pptx
Transforming cloud security into an advantage
Impact of cloud services on software development life
Cloud application security (CCSP Domain 4)
Cloud Services Management Intro PPT.pptx
CCSK Certificate of Cloud Computing Knowledge - overview
1606662359-chapter-1-top-down-network-design.pptx
Peter Mell Cloud Standards 20090915
Bob Plumridge - Enabling easier Cloud Solution Deployment (Storage Expo 2010)
ILA23 • Unlocking Global Product Teams Success
Introduction to the CSA Cloud Controls Matrix
20140508 sip@isotc184 sc4
Craig Lee Driving Cloud Progress Final
Security & Compliance in the Cloud [2019]
Ad

More from David Wallom (20)

PPTX
Quantifying the impact of green leasing on energy use in a retail portfolio: ...
PPTX
Trust and Cloud computing, removing the need for the consumer to trust their ...
PPTX
Trust and Cloud computing, removing the need for the consumer to trust their ...
PPTX
The University of Oxford e-Research Centre
PPTX
Introduction to Cloud Computing
PPTX
Benefits of big data analytics in Smart Metering, ADEPT, WICKED and beyond
PPTX
Smarter Energy, Infrastruture service, consumtion analytics and applications
PPTX
The Climateprediction.net programme, big data climate modelling
PPTX
1990-2050 sulphur dioxide emissions data from ECLIPSE v5a for use in Met Offi...
PPTX
Supporting Research through "Desktop as a Service" models of e-infrastructure...
PPTX
e-Research & the art of linking Astrophysics to Deforestation
PPTX
Privacy and Security policies in the cloud
PPTX
Working with Earth Observation Data, INFORM and the IEA
PPTX
WICKED - Working with the data rich
PPTX
Mapping Priorities and Future Collaborations for you Projects
PPTX
CloudWatch: Mapping priorities and future collaboration for your project
PPTX
Trust and Cloud Computing, removing the need to trust your cloud provider
PPTX
Generating Insight from Big Data
PPTX
Generating Insight from Big Data in Energy and the Environment
PPTX
Smart Grid, Smart Metering and Cybersecurity
Quantifying the impact of green leasing on energy use in a retail portfolio: ...
Trust and Cloud computing, removing the need for the consumer to trust their ...
Trust and Cloud computing, removing the need for the consumer to trust their ...
The University of Oxford e-Research Centre
Introduction to Cloud Computing
Benefits of big data analytics in Smart Metering, ADEPT, WICKED and beyond
Smarter Energy, Infrastruture service, consumtion analytics and applications
The Climateprediction.net programme, big data climate modelling
1990-2050 sulphur dioxide emissions data from ECLIPSE v5a for use in Met Offi...
Supporting Research through "Desktop as a Service" models of e-infrastructure...
e-Research & the art of linking Astrophysics to Deforestation
Privacy and Security policies in the cloud
Working with Earth Observation Data, INFORM and the IEA
WICKED - Working with the data rich
Mapping Priorities and Future Collaborations for you Projects
CloudWatch: Mapping priorities and future collaboration for your project
Trust and Cloud Computing, removing the need to trust your cloud provider
Generating Insight from Big Data
Generating Insight from Big Data in Energy and the Environment
Smart Grid, Smart Metering and Cybersecurity

Recently uploaded (20)

PDF
Modernizing your data center with Dell and AMD
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PPTX
Cloud computing and distributed systems.
PDF
NewMind AI Weekly Chronicles - August'25 Week I
PPTX
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
cuic standard and advanced reporting.pdf
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PPTX
Understanding_Digital_Forensics_Presentation.pptx
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
PDF
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
PDF
Approach and Philosophy of On baking technology
PDF
Per capita expenditure prediction using model stacking based on satellite ima...
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
Building Integrated photovoltaic BIPV_UPV.pdf
PDF
Machine learning based COVID-19 study performance prediction
DOCX
The AUB Centre for AI in Media Proposal.docx
Modernizing your data center with Dell and AMD
Dropbox Q2 2025 Financial Results & Investor Presentation
Cloud computing and distributed systems.
NewMind AI Weekly Chronicles - August'25 Week I
Detection-First SIEM: Rule Types, Dashboards, and Threat-Informed Strategy
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
cuic standard and advanced reporting.pdf
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Understanding_Digital_Forensics_Presentation.pptx
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Peak of Data & AI Encore- AI for Metadata and Smarter Workflows
How UI/UX Design Impacts User Retention in Mobile Apps.pdf
Approach and Philosophy of On baking technology
Per capita expenditure prediction using model stacking based on satellite ima...
“AI and Expert System Decision Support & Business Intelligence Systems”
Review of recent advances in non-invasive hemoglobin estimation
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Building Integrated photovoltaic BIPV_UPV.pdf
Machine learning based COVID-19 study performance prediction
The AUB Centre for AI in Media Proposal.docx

CloudWatch2 Adoption Deep Dive

  • 2. 14:30 Welcome, Summary of previous workshop & Summary of points of contention - David Wallom, University of Oxford 14:45 Trust Based Approach to Advanced Security - CSA 15:00 Coffee 15:15 Specific discussion on points of contention * Policy standardisation * Technical Standardisation 16:30 Process for taking forward a standards profile, SDO(s) hosting and coordinate which profile, lead authors/contributors identification, timeline & roadmap 17:00 Workshop close 2
  • 3. Welcome Summary of previous workshop Summary of points of contention David Wallom 3
  • 4. 4 From Usecases, to Standards Profiles Project Engagement • Project selection • Use-case collection Standards Profiles • Review and condense project use cases • Cloud standards service models • Review standards for profiling dissemination&iteration
  • 5. 5 From Usecases, Ecosystem analysis to Standards Profiles Project Engagement • Project selection • Use-case collection • Characteristics scoring Data Analysis • Principal Components Analysis (PCA) • Biplot and numerical representation • Heirarchical clustering Interpretation • Cluster data quality • Functional vs. non-functional characteristics Standards Profiles • Review and condense project use cases • Cloud standards service models • Review standards for profiling Quantitative Methodology dissemination&iteration
  • 6. The NIST Cloud Definition Framework 6 Community Cloud Private Cloud Public Cloud Hybrid Clouds Deployment Models Service Models Essential Characteristics Common Characteristics Software as a Service (SaaS) Platform as a Service (PaaS) Infrastructure as a Service (IaaS) Resource Pooling High Perf Network Access Rapid Elasticity Measured Service On Demand Self-Service Low Cost Software Virtualization Service Orientation Advanced Security Homogeneity Massive Scale Resilient Computing Geographic Distribution Based upon original chart created by Alex Dowbor - http://ornot.wordpress.com
  • 7. 7
  • 8. Principle Component 8 • 37 projects • EC and non- EC supported • Self scoring
  • 10. Identified Clusters Cluster 1 – Scientific computing. This cluster comprises a number of projects that aim at highly distributed data processing in an academic context. Cluster 2 – Trusted public clouds for government. This cluster consists of a set of initiatives driven by public sector organisations. Cluster 3 – High performance, dedicated purpose applications. This cluster is similar to Cluster 1, but comprises projects concentrating on high performance computing that are more focussed regarding their objectives. 10
  • 11. Cloudwatch(1) Final Workshop September 2015 Built on clustering to support discussion between relevant groups who have similar identified interests in characteristics. ~30 attendees 11
  • 12. Breakout Group 1 – Scientific Computing Strawman profile confirmed as in scope and useful Measured service vs. service monitoring Group’s perception deviated from profile term Terminology issue? Can we arrive at a single understanding for each? Workshop is an information bazaar Learn about existence of standards (e.g. OCCI, WS- Agreement) 12
  • 13. Breakout Group 2 - Trusted Public Cloud for Government Largest breakout group Name is perceived as misleading Applied methodology led to narrowing of scope Probably more of a subgroup of an otherwise valid main profile Scope requires cross-SDO standards profile How does that affect the SDO hosting scheme? 13
  • 14. Breakout group 3 - High-performance, Dedicated-Purpose Applications A profile on standards is very much needed In fact, profiles are needed at large, not only for this group 13 NIST characteristics are a good start BUT: “Advanced Security” is too broadly defined E.g. hiding Privacy which should be its own characteristic, really! There is scope to refine and amend the applicable characteristics 14
  • 15. Workshop Takeaways Broad concept of profiles understood But technicalities require further education Profiles on standards should not break conformance of incorporated standards IEEE P2301 happy to collaborate with ETSI CSC Great potential for global synergies Audience positive on follow-up workshops 15
  • 16. Extending the dataset • Further develop the clustering tool towards self service • Apply single parameters to move beyond hand tuning • Online self-service tool developed • https://tethys.oerc.ox.ac.uk:8443/CW2Clustering WebApp/index.xhtml 16
  • 17. Todays Workshop goals Discuss the previously identified short comings Advanced Security; a superset of other areas? Provider security Consumer privacy Measured service vs. service monitoring Accounting information availability and commonality How can a single customer Monitor multiple providers? How to get profiles through process? 17
  • 18. CLOUD SECURITY ALLIANCE Trust Based Approach to Advanced Security 18

Editor's Notes

  • #7: Cloud diagram idea inspired by Maria Spinola 8-31-09