Cloud Computing IT 5 3 4 Cloud computing

Cloud Computing 정의 (정의) 인터넷기술을 활용하여 IT자원을 필요한 만큼 빌려서 사용하고, 서비스 부하 변화시 실시간 확장성을 지원받으며, 사용한 만큼의 비용을 지불하는 컴퓨팅서비스 이며 5개의 특 성과 3가지 서비스모델, 4가지 수용모델로 구성 Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e. g. , networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This cloud model promotes availability and is composed of five essential characteristics, three service models, and four deployment models. –NIST 7

클라우드서비스 이해 당사자 Cloud 공급자 Person, organization or entity responsible for making a service available to Cloud Consumers. Cloud 소비자 Person or organization that maintains a business relationship with, and uses service from Cloud 전송 사업자 The intermediary that provides connectivity and transport of cloud services from Cloud Providers to Cloud Consumers. Cloud 감사자 A party that can conduct independent assessment of cloud services, information system operations, performance and security of the cloud implementation. Cloud 중개자 An entity manages the use, performance and delivery of cloud services, and negotiates relationships between Cloud Providers and Cloud Consumers.

참조모델 (Reference Architecture) Cloud Provider Cloud Consumer Cloud Broker Cloud Orchestration Cloud Service Management Service Layer Saa. S Privacy Impact Audit Performance Audit Iaa. S Resource Abstraction and Control Layer Provisioning/ Configuration Portability/ Interoperabili ty Physical Resource Layer Hardware Facility Cloud Carrier 13 Privacy Security Audit Paa. S Security Cloud Auditor Service Intermediation Business Support Service Aggregation Service Arbitrage

사실상 국제 표준 OCCI (Open Cloud Computing Interface) • Iaa. S service/VM management, • can be extended to support Paa. S, Saa. S service management • Implemented in Open. Nebula. CDMI (Cloud Data Management Interface) • Storage (BLOB/object storage) • CDMI reference implementation OVF (Open Virtualization Format) • Iaa. S level, Virtual machine format • OVF format is officially supported by a number of companies 18

국내표준(단체표준) • Cloud Computing Threats and Requirements Analysis(TTAK. KO- 10. 0466) • Cloud Computing Glossary(TTAK. KO-10. 0467) • Guideline for Resource Provision and Status Management in Cloud Infrastructure Service (TTAK. KO-10. 0465) • Cloud Computing Use cases (TTAK. OT-10. 0290) • API Requirements for Cloud Infrastructure as a Service (TTAK. OT-10. 0291) • Framework of Cloud Desktop as a Service (TTAK. KO-10. 0468) • Quality Factor for Establishing Cloud Computing Service level Agreement (TTAK. KO-10. 0469) 19

표준화 주요 이슈 분야 Provisioning / Config Rapid Provisioning Resource Change Monitoring & Reporting Cloud Service Consumers Metering SLA Management Portability/ Interoperability Data Portability Authentication and Authorization Copy Data To-From Availability Bulk Data Transfer Confidentiality Service Interoperability Identity Management Unified Management Interface Integrity System Portability Security Monitoring & Incident Response VM Images Migration Application/Svc Migration 자료 : NIST, 2011. 5월 Security 26 Security Policy Mgmt Cloud Brokers

활용가능 표준 현황 공통적용 가능한 표준 상위수준의 표준 및 정의 (Cloud and Web Services) 국가별 표준 또는 보고서 국제표준 또 는 보고서 TCP/IP, HTTP, HTML, XML, SOAP, REST, WSDL, SSL/TLS, XML/XMLD, JSON, TRP, DNS, SMTP… OVF, OCCI, CDMI, SPML, Web services, Grid. FTP, OAuth, Open. ID, WSS, SAML, Frameworx, XACML, …. Cloud Definition Taxonomy The Report of ISO/IEC JTC 1 SC 38 Reference Architecture Guideline, Use Case, Roadmap , Best Practice ITU-T FG Cloud의 생태 계 보고서 28

향후 표준화 중점 영역(Gap) 자료: NIST, 2011. 7월 Cloud Broker Cloud Provider Cloud Consumer Service Layer OCCI Business Support Iaa. S OVF Security Audit Privacy Impact Audit Resource Abstraction and Control Layer Provisionin g/Configura tion Physical Resource Layer Portability/ Interoperabilit y Hardware Performance Audit Privacy Cloud Auditor Service Implementation Paa. S Security CDMI Cloud Service Management Saa. S Service Aggregation Service Arbitrage Facility Cloud Carrier 사실상 표준화기구에서 연동, 이동성 표준화 완료, 국제표준화기구, 각국정 부는 이를 준용하여 표준화 진행 예 상 29 기존의 웹, 인터넷 관련 표준으로 대체 가능성 높으며, 클 라우드 특성을 위한 별도 표준은 선별적으로 적용예상

Ⅴ. 중기 ROAD MAP 45

yrlee@ksa. or. kr