No description available.

Dans le contexte du cloud computing, l'IaaS fournit des ressources de calcul virtualisées à la demande suivant un modèle de paiement à l'utilisation. Du point de vue de l'utilisateur, ce nouveau paradigme fournit un stock inépuisable de ressources, qui peuvent être dynamiquement demandées et relâchées. L'IaaS permet l'exécution de calculs scientifiques sur un budget de fonctionnement plutôt que sur un investissement initial important. L'ordonnancement sur une telle plateforme élastique constitue un défi important dans le grand nombre de tâches et de ressources à prendre en compte pour réaliser le provisioning, mais également dans le grand nombre de plateformes et de modèles économiques disponibles. Nous avons abordé ce problème en concevant un système de courtage côté client capable (1) d'automatiser le provisioning en fonction d'une stratégie sélectionnée par l'utilisateur et (2) de simuler l'exécution afin de fournir à l'utilisateur une estimation des coûts et temps qu'impliquent les différentes stratégies. Son architecture ouverte permet de s'adapter à un grand nombre de fournisseur de cloud et de stratégies de provisioning. Des expérimentations à grande échelle ont été menées sur plusieurs plateformes de clouds avec des applications de type bag-of-tasks et workflows. Elles montrent la capacité de nos outils à exécuter différents types de workloads sur des plateformes variés et à simuler avec une grande précision ces exécutions. / In the field of cloud computing, IaaS provide virtualized on-demand computing resources on a pay-per-use model. From the user point of view, the cloud provides an inexhaustible supply of resources, which can be dynamically claimed and released. IaaS is especially useful to execute scientific computations using operating budget instead of using a big initial investment. Provisioning the resources depending on the workload is an important challenge, especially regarding the big number of jobs and resoruces to take into account, but also the large amount of available platforms and economic model. We advocate the need for brokers on the client-side with two main capabilities: (1) automate the provisioning depending on the strategy selected by the user and (2) able to simulate an execution in order to provide the user with an estimation of the costs and times of his workload's execution. Many provisioning strategies and cloud providers can be used in this broker thanks to its open architecture. Large scale experiments have been conducted on many cloud platforms and show our tool's ability to execute different kind of workloads on various platforms and to simulate these executions with high accuracy.

The target of the theoretical part is to provide an outlook in enterprising, describe optimal structure and a content of business plans and to give some recommendations regarding its elaboration. The practical part of this document includes the business plan elaborated by myself. This business plan describes an opportunity and business advantages of commercial providing IT infrastructure and hardware as a service. My goal is detailed description of essential elements of this enterprise, providing a market analysis, a customer targeting and an optimal resource planning. Furthermore I want to prove that the human resources planning is an essence even in the business with highly advanced IT technologies.

Submitted by Lucienne Costa (lucienneferreira@ufcg.edu.br) on 2018-04-30T19:01:14Z No. of bitstreams: 1 FÁBIO JORGE ALMEIDA MORAIS – TESE (PPGCC) 2017.pdf: 3034209 bytes, checksum: 9738969168558e8931ce426f6da55132 (MD5) / Made available in DSpace on 2018-04-30T19:01:14Z (GMT). No. of bitstreams: 1 FÁBIO JORGE ALMEIDA MORAIS – TESE (PPGCC) 2017.pdf: 3034209 bytes, checksum: 9738969168558e8931ce426f6da55132 (MD5) Previous issue date: 2017-08 / O modelo de IaaS proporcionado pelo paradigma de Computação na Nuvem tem como principais características a provisão sob demanda de recursos e a tarifação do uso de recursos a partir de um modelo pay-as-you-go, que permitem que o custo de utilização do serviço seja proporcional à quantidade e ao tempo de uso dos recursos. Essas características possibilitam a criação de infraestruturas virtuais elásticas, que podem ser dinamicamente modificadas, em termos da capacidade de recursos, a fim de acomodar as demandas da aplicação que nela executa. Tal elasticidade é principalmente explorada para o provisionamento de aplicações horizontalmente escaláveis, que possuem demandas variáveis no tempo e executam por longos períodos. Idealmente, para aplicações desse tipo, a capacidade da infraestrutura de execução pode ser automaticamente provisionada com base nas demandas da aplicação, de forma a assegurar a QoS da aplicação e ao mesmo tempo minimizar os custos de execução em termos dos recursos adquiridos. Esse cenário de provisionamento automático pode ser expandido para o desenvolvimento de um serviço de provisionamento automático de recursos em IaaS. Desta forma, o responsável pela aplicação pode contratar um serviço que assuma a responsabilidade de dinâmica e eficientemente provisionar a sua aplicação durante a execução desta. No entanto, por questões de privacidade e principalmente generalidade em termos das aplicações provisionadas, espera-se que um serviço desse tipo opere com informações não específicas da aplicação, tais como utilização de CPU, memória, etc., ou seja, de forma não intrusiva. Este trabalho visa investigar a tese sobre a viabilidade de construção de um serviço de provisionamento automático e não intrusivo para diferentes aplicações horizontalmente escaláveis em um ambiente de IaaS. Tal serviço deve ser capaz de manter a QoS da aplicação provisionada em níveis aceitáveis e, havendo variação de carga de trabalho, minimizar os custos de sua execução. Em geral, as atuais soluções de provisionamento automático fazem uso de abordagens de provisionamento que operam de forma reativa ou proativa. Desta forma, o principal objetivo desse trabalho consiste em analisar como soluções de provisionamento, reativas e proativas, podem ser empregadas na construção de um serviço de provisionamento em IaaS, destacando eficiências e limitações destas abordagens e apontando diretrizes para a criação desse serviço. / The IaaS model, provided by the Cloud Computing paradigm, is defined by two main features: the on-demand provision of resources; and the pay-as-you-go pricing model, that allows application providers to pay proportionally to the quantity and time of use of the acquired resources. These features are used to build elastic virtual infrastructures, which can have its resources capacity dynamically modified to accommodate demands’ fluctuations of the running application. Such elasticity is mainly exploited for running horizontally scalable applications, that executes over a long period of time and have time-varying workloads. Ideally, for such applications, the capacity of the execution infrastructure can be automatically provisioned based on the application demands, to ensure the application QoS and at the same time minimize the execution costs, in terms of the acquired resources. This provisioning context can be expanded to conceive a scenario of auto scaling as a service in IaaS. In this way, the application owner can contract a service that assumes the responsibility of dynamically and efficiently provisioning the application during its execution. However, due to privacy and mainly generality issues in terms of the provisioned applications, this service needs to operate with non-application-specific information, such as CPU utilization, memory, etc., i.e., in a non-intrusive way. This work aims to investigate the thesis on the construction feasibility of a non-intrusive auto scaling service for different horizontally scalable applications in an IaaS environment. Such service must be able to keep the QoS of the provisioned application at acceptable levels and, if there are workload variations, minimize the execution costs. In general, current provisioning solutions use provisioning approaches that operate in a reactive or proactive manner. Thus, the main objective of this work is to analyze how reactive and proactive auto scaling solutions can be used to basis an auto scaling service in IaaS, describing the efficiencies and limitations of these approaches and pointing out guidelines for the service construction.

Incident response plans are faced with new challenges as organisations expands to the cloud, this thesis aims to highlight these challenges and their potential solutions. Our work has focused on managing the incident response in contrast to earlier work that has been focusing on preventing them.As with any development, security is seldom prioritized. Instead the focus are often aimed towards usability and functionality, which means incident response plans are written, implemented, forgotten and finally becomes obsolete. This could result in an organization losing their ability to produce acceptable forensic images, avoid severe downtime, or prevent similar incidents in the future, which are all important parts of incident response.Traditional incident response plans does not address incidents in the cloud. Thus, an absence of guidelines for managing incidents in the cloud becomes apparent. By compiling literature and performing practical experiments, this thesis exposes weaknesses in traditional incident response plans and demonstrates a need for cloud-specific incident response plans.Based on the conducted experiments, we can conclude that with our cloud-specific incident response plan as a basis, a forensic recovery from a cloud instance can be done in such a way that privacy and confidentiality is maintained. The experiments have also provided a forensically sound method for connecting tools to a cloud instance, we call this approach "Virtual Incident Response Disk" (VIRD). / Incidenthanteringsplaner ställs inför nya utmaningar vid en expandering till molnmiljö, detta arbete ämnar att belysa de problem som uppstår vid hantering av incidenter i molnmiljö samt potentiella lösningar. Incidenthantering i denna nya miljö har inte behandlats i någon större utsträckning i tidigare arbeten då forskningens fokus har legat på att förhindra incidenter istället för att hantera dessa.Som med all utveckling är det lätt att säkerhetsarbetet hamnar på efterkälken till förmån för användarvänlighet och funktion. Detta visar sig ofta inom incidenthantering där planer för incidenthantering skrivs och implementeras för att sedan glömmas bort och sedermera bli förlegade. Detta kan medföra att en organisation förlorar förmågan att producera forensiskt godtagbara avbilder vilket är en viktig del av incidenthantering.Då incidenthanteringsplaner ämnade för traditionell servermiljö inte behandlar hanteringen av incidenter i molnmiljö fungerar det inte att applicera dessa på ny teknik såsom molnmiljö. Genom att sammanställa litteratur och utföra praktiska experiment har vi i detta arbete exponerat svagheter i traditionell incidenthantering och påvisat behovet av en molnspecifik incidenthanteringsplan.Utifrån våra utförda experiment kan vi konstatera att med vår molnspecifika incidenthanteringsplan som grund kan en forensisk utvinning från en molninstans ske på så sätt att bevisets integritet och konfidentialitet bibehålls. Baserat på erfarenheter utifrån våra experiment har även en forensiskt godtagbar metod för att ansluta verktyg till en molninstans arbetats fram, vi kallar detta tillvägagångssätt “Virtual Incident Response Disk” (VIRD).

L’émergence du Cloud Computing change le paysage des infrastructures qui soutiennent les systèmes informatiques. L’originalité du Cloud Computing réside avant tout dans l’offre d’un nouveau mode de consommation proposé aux clients: les ressources informatiques en tant que service à la demande. Les fournisseurs de "hardware" et de "software" qui ont historiquement fondé leurs revenus sur la vente de produits matériels et de licences logiciels ont fait face à un changement de leurs modèles de revenus, et donc à considérer de nouveau Business Models. Ce travail révèle que les fournisseurs de services d’infrastructure Cloud Computing se définissent comme étant des opérateurs Cloud. Ils ont un rôle d’agrégateur de service et proposent des services d’infrastructures fonctionnelles, disponible à la demande et accessible à distance. Ces fournisseurs construisent un écosystème de partenaires-fournisseurs et un écosystème de partenaires-produits pour accroitre la valeur ajoutée globale. La garantie de niveau de service (SLA) devient l’objet de la transaction entre le fournisseur et le client. Ce dernier se décharge de toutes les problématiques techniques, et les transfère au fournisseur lors de la signature du contrat. Lors de la fixation des prix, une hypothèse de taux d’usage est prise en compte et sera à la base des calculs des coûts. Nous proposons alors trois leviers d’actions aux fournisseurs d’infrastructure Cloud Computing pour accroître leur part de valeur ajoutée : (1) la baisse des coûts par l’innovation technologique, (2) la capacité d’attirer et de garder les clients pour avoir un taux d’usage élevé, et (3) le développement d’un écosystème de services. / The emergence of cloud computing is changing the landscape of the infrastructure supporting IT systems. The originality of cloud computing lies primarily in the offer of a new consumption mode available to consumers: IT resources as a service provided on demand. IT providers that have based their income from products sales (hardware and software licenses) faced a change in their revenue models, and thus have to consider new business models. This research reveals that IaaS provider is defined as cloud operators. They are service aggregator and offer functional infrastructure available on demand available over the network. IaaS providers are building a supplier-partners and product-partners ecosystems to increase the overall value. When consumers sign contract, they declaim all technical issues by transferring them to providers. Service Level Agreement (SLA) becomes the object of transaction between providers and consumers. For the pricing process, rate of use is the basis of cost assessment. We suggest three leverage to IaaS providers in order to increase their share of value added: (1) lower costs through technological innovation, (2) ability to attract and retain customers to have high rate of use, and (3) development of services ecosystem.

Infrastructure-as-a-Service (IaaS) cloud solutions continue to experience growth, but many enterprises and organizations are of the opinion that cloud adoption has decreased security in several aspects. This thesis addresses protection of IaaS-environment non- volatile data. A risk analysis is conducted, using the CORAS method, to identify and evaluate risks, and to propose treatments to those risks considered non-acceptable. The complex and distributed nature of an IaaS deployment is investigated to identify di↵erent approaches to data protection using encryption in combination with Trusted Computing principles. Additionally, the outcome of the risk analysis is used to decide the advantages and/or drawbacks of the di↵erent approaches; encryption on the storage host, on the compute host or inside the virtual machine. As a result of this thesis, encryption on the compute host is decided to be most beneficial due to minimal needs for trust, minimal data exposure and key management aspects. At the same time, a high grade of automation can be obtained, retaining usability for cloud consumers without any specific security knowledge. A revisited risk analysis shows that both non- acceptable and acceptable risks are mitigated and partly eliminated, but leaves virtual machine security as an important topic for further research. Along with the risk analysis and treatment proposal, this thesis provides a proof-of-concept implementation using encryption and Trusted Computing on the compute host to protect block storage data in an OpenStack environment. The implementation directly follows the Domain-Based Storage Protection (DBSP) protocol, invented by Ericsson Research and SICS, for key management and attestation of involved hosts.

The thesis deals with the field called Integration as a Service (IaaS), where the essence is to provide integration functionality in cloud computing environment. The goal of the thesis is to research from the publicly available sources, whether capabilities of the services in the field of application integration, which are labeled as integration as a service, match by the market leaders functionality of middleware. In order to achieve the goal Integration as a Service is defined and the key capabilities for these kinds of services are found. It's followed with identification of the main providers and analysis of their services. Capabilities, which should be achieved by the IaaS services, are based upon the definitions and characteristics of middleware, cloud computing and services in general. Together they create a standard, which can be used to evaluate these services. That's utilized in the practical part, where the analysis of the particular IaaS services takes place. Also the questions regarding expected capabilities of the services, their fulfillment and the level of publicly available information about the services are answered in this part.

A Computação em Nuvem (CN) é um dos temas mais abordados por profissionais de TI atualmente. Com um forte apelo econômico, a CN torna possível a ideia da computação como uma utilidade, na qual recursos computacionais (processamento e armazenamento, por exemplo) podem ser consumidos e pagos com a mesma conveniência que a energia elétrica. Com este novo paradigma, uma empresa, ao iniciar suas atividades, não necessita mais investir antecipadamente um alto capital em equipamentos de TI. Os recursos computacionais são adquiridos conforme são necessários e o consumidor paga apenas pelo que utiliza. Esta pesquisa traz uma contribuição para as organizações e para o meio acadêmico, uma vez que analisa a adoção da CN por empresas brasileiras. A pesquisa abrange empresas privadas de diversos portes e setores que tenham adotado pelo menos um serviço de TI no modelo de CN. O modelo de pesquisa foi elaborado com base nos objetivos específicos, os quais se originaram das lacunas existentes sobre o uso de serviços de CN no Brasil. A pesquisa utilizou uma amostra não probabilística contendo 96 casos, os quais contemplaram aspectos do respondente, da organização e do serviço de CN mais importante para a organização. Os dados foram coletados por meio de um questionário e tratados estatisticamente usando técnicas não paramétricas e Análise de Agrupamentos. A pesquisa se caracteriza por ser exploratória, verificando frequências e ligações entre as características organizacionais e os serviços de CN. A pesquisa identificou as características dos serviços de CN utilizados no Brasil e o grau de aderência de cada serviço à definição de CN proposta. Adicionalmente, foram apresentadas as relações entre as características organizacionais e as características dos serviços de CN. Além disso, foi possível identificar três grupos distintos de empresas, em relação às características dos serviços de CN utilizados, e descrever às características organizacionais e dos serviços associados a cada grupo. Finalmente, a CN foi discutida à luz das Teorias de Terceirização. / Cloud Computing (CC) is one of the most discussed topics among IT professionals today. With a strong economic appeal, CC makes possible the idea of computing as a utility, in which computing resources (processing power and storage, for example) can be consumed and paid with the same convenience as electricity. In this new paradigm, a startup company does not need up-front capital to invest in advanced IT assets. The computing resources are acquired as needed and the customer pays only for what is used. This research makes an important contribution to organizations and academia, since it analyzes CC adoption by Brazilian companies. The survey covers private companies of all sizes and sectors that have adopted at least one IT service in CC model. The research model was designed based on the research specific objectives, which were made from the gaps of CC services usage in Brazil. This paper used a not randomly picked sample with 96 cases, which specified aspects of the respondent, organization and the most important CC service to the organization. Data was collected through a questionnaire and statistically analyzed using nonparametric techniques and Cluster Analysis. This research is characterized as exploratory, checking frequencies and links between organizational characteristics and CC services characteristics. This research identified the characteristics of CC services used in Brazil and the compliance degree of each service to the proposed CC definition. Additionally, we presented and discussed the relationships between organizational characteristics and characteristics of CC services. Furthermore, it was possible to identify three distinct groups of companies in relation to the characteristics of CC services they use, and describe organizational characteristics and services associated with each group. Finally, CC was discussed in the light of the Outsourcing Theories.

A Computação em Nuvem (CN) é um dos temas mais abordados por profissionais de TI atualmente. Com um forte apelo econômico, a CN torna possível a ideia da computação como uma utilidade, na qual recursos computacionais (processamento e armazenamento, por exemplo) podem ser consumidos e pagos com a mesma conveniência que a energia elétrica. Com este novo paradigma, uma empresa, ao iniciar suas atividades, não necessita mais investir antecipadamente um alto capital em equipamentos de TI. Os recursos computacionais são adquiridos conforme são necessários e o consumidor paga apenas pelo que utiliza. Esta pesquisa traz uma contribuição para as organizações e para o meio acadêmico, uma vez que analisa a adoção da CN por empresas brasileiras. A pesquisa abrange empresas privadas de diversos portes e setores que tenham adotado pelo menos um serviço de TI no modelo de CN. O modelo de pesquisa foi elaborado com base nos objetivos específicos, os quais se originaram das lacunas existentes sobre o uso de serviços de CN no Brasil. A pesquisa utilizou uma amostra não probabilística contendo 96 casos, os quais contemplaram aspectos do respondente, da organização e do serviço de CN mais importante para a organização. Os dados foram coletados por meio de um questionário e tratados estatisticamente usando técnicas não paramétricas e Análise de Agrupamentos. A pesquisa se caracteriza por ser exploratória, verificando frequências e ligações entre as características organizacionais e os serviços de CN. A pesquisa identificou as características dos serviços de CN utilizados no Brasil e o grau de aderência de cada serviço à definição de CN proposta. Adicionalmente, foram apresentadas as relações entre as características organizacionais e as características dos serviços de CN. Além disso, foi possível identificar três grupos distintos de empresas, em relação às características dos serviços de CN utilizados, e descrever às características organizacionais e dos serviços associados a cada grupo. Finalmente, a CN foi discutida à luz das Teorias de Terceirização. / Cloud Computing (CC) is one of the most discussed topics among IT professionals today. With a strong economic appeal, CC makes possible the idea of computing as a utility, in which computing resources (processing power and storage, for example) can be consumed and paid with the same convenience as electricity. In this new paradigm, a startup company does not need up-front capital to invest in advanced IT assets. The computing resources are acquired as needed and the customer pays only for what is used. This research makes an important contribution to organizations and academia, since it analyzes CC adoption by Brazilian companies. The survey covers private companies of all sizes and sectors that have adopted at least one IT service in CC model. The research model was designed based on the research specific objectives, which were made from the gaps of CC services usage in Brazil. This paper used a not randomly picked sample with 96 cases, which specified aspects of the respondent, organization and the most important CC service to the organization. Data was collected through a questionnaire and statistically analyzed using nonparametric techniques and Cluster Analysis. This research is characterized as exploratory, checking frequencies and links between organizational characteristics and CC services characteristics. This research identified the characteristics of CC services used in Brazil and the compliance degree of each service to the proposed CC definition. Additionally, we presented and discussed the relationships between organizational characteristics and characteristics of CC services. Furthermore, it was possible to identify three distinct groups of companies in relation to the characteristics of CC services they use, and describe organizational characteristics and services associated with each group. Finally, CC was discussed in the light of the Outsourcing Theories.