www oasisopen org Taking Cloud Standards Testing from

www. oasis-open. org Taking Cloud Standards Testing from Ideas to Reality Alan F. Sill, Ph. D Vice President of Standards, Open Grid Forum Senior Scientist, High Performance Computing Center; Adjunct Professor of Physics; Site Director, Cloud and Autonomic Computing Industry/University Cooperative Research Center, Texas Tech University OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC

www. oasis-open. org Let’s Re-Examine The Original Challenges To This Panel From Our Chair: Certification and Accreditation – the need Ø A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary. Ø Testing would need to verify that the specified functions required for any given service are in place. Ø But how successful generally are Certification and Accreditation programs? ØThe conclusions of this session will be used by the new Cloud Requirements TC (PACR). OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC 2

www. oasis-open. org Let’s Re-Examine The Original Challenges To This Panel From Our Chair: Certification and Accreditation – the need Ø A certification and accreditation system for Public Sector Cloud computing to reduce the burden on industry and government is thought to be necessary. Ø Testing would need to verify that the specified functions required for any given service are in place. Ø But how successful generally are Certification and Accreditation programs? ØThe conclusions of this session will be used by the new Cloud Requirements TC (PACR). OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC 3

www. oasis-open. org And the original issues: Ø Which of the non-technical components in a Cloud service can be tested and included in an Accreditation program? Ø How can the client remain in control of its assets through an Accreditation program? Ø Existing / Planned Accreditation programs that can be used? Ø Which organizations, public or private, are best placed to run an Accreditation program? Ø Would the costs be prohibitive? Ø Other aspects of introducing an Accreditation program ? OASIS International Cloud Symposium 2012 10 th – 12 th October 2012 Washington DC 4

I propose to answer all of these questions with a single formulation: A Range of Solutions Must Be Deployed In Order to Achieve Success In slightly more detail: 1. Developers, users, customers and vendors must all be involved in selection of the elements of a testing program. 2. Accreditation cannot proceed independently from validation of the expected use cases and applications. 3. The speed of cloud computing evolution requires special solutions for accreditation that are different from other computing and. Cloud ITSymposium acquisition processes. 5 OASIS International 2012 10 th – 12 th October 2012 Washington DC

Basis for many of my claims: Open Grid Forum An Open Community-Based Forum With Open Processes Focused on Development, Implementation and Testing of Open Standards © 2012 Open Grid Forum 6

GFD Publication History 2001 2006 24 18 12 6 2000 - 2012. . . 2011

Example of OGF Standards Use: EGI Fed. Cloud Task Force Demo EGI Technical Forum 2012 – Prague 17/21 Sep © 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8 -10, 2012 (Credit: Matteo Turilli, Oxford) 8

Example of OGF Standards Use: EGI Fed. Cloud Task Force Demo EGI Technical Forum 2012 – Prague 17/21 Sep © 2012 Open Grid Forum OGF 36 Chicago, Illinois Oct 8 -10, 2012 (Credit: Matteo Turilli, Oxford) 9

http: //cloudplugfest. org

NIST CLOUD PROCESS & TWIKI http: //collaborate. nist. gov/twiki-cloud-computing/bin/view/Cloud. Computing/SAJACC

http: //collaborate. nist. gov/twiki-cloudcomputing/bin/view/Cloud. Computing. Use. Cases

• • • When testing and. Conclusions accrediting cloud standards, a variety of test platforms, resources and procedures is needed and these are already in use for various phases, aspects and features. A full range of approaches is needed! These range from open-access, public forums and public input requirements gathering processes to open-access forums to private testbeds that require various levels of agreements to access. All are needed to have a successful accreditation program! Speed must be balanced with thoroughness, inclusiveness with openness, proprietary features with the dynamic aspects of the cloud to encourage the broadest possible adoption and greatest acceleration of. OASIS reliable results. Join us in helping International Cloud Symposium 2012 10 – 12 October 2012 Washington DC this to happen! th th 17