Focus of this diploma thesis is on Cloud Computing -- a new delivery model of IS/ICT services for companies. Cloud Computing services are IT resources available to users via internet on pay-as-you-use basis. The aim of the thesis is define underlying Cloud Computing concepts and evaluate the current state of Cloud Computing adoption in the Czech Republic. We discuss the framework for definition of Cloud Computing concepts in the theoretical part of the thesis drawing on resources available in the literature. Cloud Computing survey is conducted using an online questionnaire and followsthe principles established in theoretical part. The main contribution of this thesis is creating working definition of Cloud Computing and identifying reasons that affect adoption rate in the Czech Republic.

The thesis introduces a study about the vulnerabilities that a company as Scania IT faces towards vendor lock-in in the transition to a cloud computing platform. Cloud computing is a term that refers to anetwork of remote servers hosted on the internet to store, manage and process data, rather than on a local server or a personal computer. Vendor lock-in is an outcome that causes companies to pay a significant cost to move between cloud providers. The effects that cause vendor lock-in that will be described are portability, interoperability and federation are called the lock-in effects. The goal of the research is to help Scania IT understand the vendor lock-in and the vulnerabilities they can face in the transition to the cloud as well as to clarify the concern that they may have against falling in vendor lock-in. The main purpose of the research is to present the various lock-in effects that are related to the transition from one cloud provider to another and the vulnerabilities that cause companies to fall in vendor lock-in. The thesis presents the reasons that motivates why Scania IT would consider using the cloud and the concerns that they may have against usage of a cloud computing platform. The results will be based on a case study of a similar company that has moved to a cloud provider and specifically Microsoft Azure and an interview of Microsoft Azure point of view with the risk of vendor lock-in. Finally, a process of interviews with different people from Scania IT to extract the current bottleneck in the development process that caused the company to think of a cloud computing platform. The results show that companies should consider many risks and factors while moving to the cloud, as vendor lock-in, cloud maturity index and their IT strategies. As a result, the thesis gives recommendations of the steps needed to minimize the risks of the cloud while maintaining the positivity of the cloud. / Uppsatsen presenterar en studie om de sårbarheter som ett företag som Scania IT har mot inlåsning i övergången till molntjänster. Molntjänster är en term som hänvisar till ett nätverk av servrar som finns på internet för att lagra, hantera och processa data, istället för på en lokal server eller en persondator. Inlåsning är ett resultat i vilket orsakar att företagen behöver betala en betydande kostnad för att flytta mellan molnleverantörer. De effekter som orsakar inlåsning vilket kommer att beskrivas är portabilitet, interoperabilitet och federation, dessa kallas inlåsningseffekter. Målet med forskningen är att hjälpa Scania IT att förstå inlåsning och sårbarheter som de kan möta i övergången till molnet. Dessutom är målet att klarlägga riskerna som de kan ha mot att falla i inlåsning. Det huvudsakliga syftet med forskningen är att presentera de olika inlåsningseffekter som är relaterade till övergången från en molnleverantör till en annan samt de sårbarheter som orsakar företagen att falla i inlåsning. Uppsatsen presenterar skäl som motiverar varför Scania IT ska överväga att använda molnet samt den oro som de kan ha mot användning av en molnleverantör. Resultaten kommer att baseras på en fallstudie av ett liknande företag som har flyttat till en molnleverantör och specifikt Microsoft Azure samt en intervju av Microsoft Azure synvinkel med risken för inlåsning. Slutligen, en rad av intervjuer med olika personer från Scania IT för att extrahera den nuvarande flaskhalsen i utvecklingsprocessen som orsakade företaget att tänka på molntjänster. Resultaten visar att företagen bör överväga många risker och faktorer när de flyttar till molnet, som exempelvis inlåsning, cloud maturity index och deras IT-strategier. Som ett resultat ger examensarbetet nödvändiga rekommendationer för att minimera riskerna för molnet samtidigt som positivitet av molnet.

Social networking applications that are developed using traditional software and architecture have scalability issues. One way to overcome the high cost of scaling social applications is to use Cloud Computing (CC). There are various cloud computing platforms available. One very interesting CC platform is Google App Engine (GAE). This research focuses on using the free GAE as a way to re-implement existing social networking applications.<p> The research focuses on how to move social applications into the cloud and on the evaluation of their performance. The thesis investigates the GAE platform, and its features. The study shows how to re-implement a social networking application using GAE cloud with limited code approximately 600 lines and evaluates the scalability of the applications.

Social networking applications that are developed using traditional software and architecture have scalability issues. One way to overcome the high cost of scaling social applications is to use Cloud Computing (CC). There are various cloud computing platforms available. One very interesting CC platform is Google App Engine (GAE). This research focuses on using the free GAE as a way to re-implement existing social networking applications.<p> The research focuses on how to move social applications into the cloud and on the evaluation of their performance. The thesis investigates the GAE platform, and its features. The study shows how to re-implement a social networking application using GAE cloud with limited code approximately 600 lines and evaluates the scalability of the applications.

<p>With Cloud Computing becoming a popular term on the Information Technology (IT) market, security and accountability has become important issues to highlight. In our research we review these concepts by focusing on security risks with Cloud Computing and the associated services; Software, Platform and Infrastructure (SPI) and connecting them with a social study of trust.</p><p>The method that was conducted during our research was reviewing secondary literature, interviewing different experts regarding Cloud Computing and relating standards already established by ENISA, NIST, and CSA to the interviews.</p><p>The result of this study shows connections between the specific SPIs, both how they compare, but also how they differ. In the end we were also able to rank the top security risks from interviews with experts and see which SPI could be the most insecure one and  what countermeasures could be applied.</p><p>This was further related to trust and Service Level Agreement (SLA) in Cloud Computing to show how the security risks we discuss are related to these two specific areas. By highlighting this we wanted to present useable information for both clients and providers in how to create a better Cloud Computing environment.</p>

Submitted by João Arthur Martins (joao.arthur@ufpe.br) on 2015-03-11T17:58:21Z No. of bitstreams: 2 license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) Dissertacao José Lutiano da Silva.pdf: 3688182 bytes, checksum: 3aa20a3af7ab28f4114f4925cef77dcb (MD5) / Approved for entry into archive by Daniella Sodre (daniella.sodre@ufpe.br) on 2015-03-13T13:00:30Z (GMT) No. of bitstreams: 2 license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) Dissertacao José Lutiano da Silva.pdf: 3688182 bytes, checksum: 3aa20a3af7ab28f4114f4925cef77dcb (MD5) / Made available in DSpace on 2015-03-13T13:00:30Z (GMT). No. of bitstreams: 2 license_rdf: 1232 bytes, checksum: 66e71c371cc565284e70f40736c94386 (MD5) Dissertacao José Lutiano da Silva.pdf: 3688182 bytes, checksum: 3aa20a3af7ab28f4114f4925cef77dcb (MD5) Previous issue date: 2013-09-19 / Com o advento do uso de serviços hospedados em cenários de computação em nuvem, presencia-se a necessidade de organizações utilizarem seus benefícios. Neste âmbito, empresas governamentais ainda possuem receio em hospedarem seus dados no ambiente de computação em nuvem, o que por sua vez, faz com que muitas dessas entidades utilizem um modelo de oferta de serviços tradicionais não otimizados no contexto de recursos computacionais. Devido a isso, a computação em nuvem privada surge como ambiente alternativo para hospedagem de serviços dentro da própria infraestrutura da empresa pública, suprimindo as preocupações de conformidades à segurança da informação e adequação do modelo de oferta de serviços. Com o objetivo de discutir e ampliar a literatura acerca do assunto são apresentados passos a serem utilizados para implantação de um cenário em computação em nuvem privada, como solução destes problemas em uma empresa pública de processamento de dados. Como contribuição prática, o estudo apresenta uma solução escalável com baixo investimento, uma vez que todo o cenário proposto é utilizado em ferramental de software livre, permitindo impactos positivos e valor agregado no modelo de oferta de serviços do provedor para os clientes.

With Cloud Computing becoming a popular term on the Information Technology (IT) market, security and accountability has become important issues to highlight. In our research we review these concepts by focusing on security risks with Cloud Computing and the associated services; Software, Platform and Infrastructure (SPI) and connecting them with a social study of trust. The method that was conducted during our research was reviewing secondary literature, interviewing different experts regarding Cloud Computing and relating standards already established by ENISA, NIST, and CSA to the interviews. The result of this study shows connections between the specific SPIs, both how they compare, but also how they differ. In the end we were also able to rank the top security risks from interviews with experts and see which SPI could be the most insecure one and  what countermeasures could be applied. This was further related to trust and Service Level Agreement (SLA) in Cloud Computing to show how the security risks we discuss are related to these two specific areas. By highlighting this we wanted to present useable information for both clients and providers in how to create a better Cloud Computing environment.

"The cloud" has been a hot subject the last couple of years, and has been considered especially attractive to SMEs due to making it possible for whole information systems to be fully managed by the vendor. This can unburden the customer organization regarding for example large investment costs, hardware and software maintenance, while also adding flexibility and scalability. There are three types of service models: infrastructure, platform and software, which dictate what the customer and vendor manages. In Software-as-a-Service (SaaS), which is the focus of this study, a third part manages both the applications and hardware and the users access these resources through the Internet. However, with the usage of SaaS comes several issues for companies to handle and make use of, for example security and mobility. This master thesis' aim is to present organizational effects of SaaS usage in SME user companies, by studying customer organizations post implementation. A qualitative comparative study was conducted where we held semi-structured interviews with SME users mainly at their own offices. In total six interviews were conducted at five different companies. At least two years usage experience was a criteria we set to ensure we could retrieve enough data from the companies. To fulfill the aim of the study we set out to find common issues affecting SMEs using SaaS systems. Through a pre-study, including literature studies and customer interviews, we determined which of the common issues that could be considered most relevant. Factors taken into consideration was how SaaS specific an issue was and how relevant it is in the post implementation phase, and how much data we were able to retrieve regarding an issue through the interviews. The relevant issues were: price model, vendor relation, frequent updates, mobility and integration. Further, five hypotheses were derived, one for each relevant issue regarding the organizational effects of SaaS usage. An analytical model was constructed mainly based on DeLone and McLean's (1992; 2003) original and updated Information System Success Model. The model helped in deriving organizational effects of usage from the different relevant issues. By using the analytical model with interview and literature study material we came up with the findings of this report, as described below. The possible price models enables companies to be more flexible with their IT portfolio. Also, it was concluded that the costs of SaaS are based upon usage, which could make it harder to estimate, especially if the usage varies. But it can also be a strength enabling customers to scale their usage as needed. In general, the vendor relation between a customer and vendor was not too complex, however with one exception. Our main discovery was that certain factors of SaaS usage affect the degree of experienced vendor lock-in differently. These include the nature of the pricing model, contract binding times and data ownership rights. Further, the level of trust and lock-in level could also affect the customer intention to change system. Frequent updates, which are managed by the vendor, reduce time and effort in regards to maintenance performed by customers. However, sometimes the updates could also cause problems when the customer had own configurations. The mobility offered by SaaS systems extends organizations ability to work. This includes increased geographical freedom for mainly employees of an organization. We found that integration is much more of a general issue for information systems. But in SaaS connection of services are possible and can thus enable further value than each service can on its own. However, integration also causes increased lock-in and system management. / Molnet har var ett hett ämne de senaste åren, och har ansetts vara särskilt attraktivt för SME:s då det möjliggör att hela informationssystem sköts av systemleverantören. Detta avlastar kundorganisationer från stora investeringskostnader och underhåll av hårdvara och mjukvara, genom att samtidigt öka både skalbarheten och flexibiliteten. Det finns tre typer av tjänstetyper: infrastructure, platform och software, vilka avgör vad som leverantören och kunden hanterar. I Software-as-a-Service (SaaS), som är i fokus får denna studie, så hanteras både applikationer och hårdvara av tredje part och användare kan få åtkomst till dessa genom internet. Med SaaS tillkommer dock även vissa svårigheter som företag måste hantera, exempelvis gällande säkerhet och mobilitet. Syftet med examensarbetet var att presentera de organisatoriska effekterna av SaaS-användning för SMEs genom att studera kundorganisationer i postimplementations-fasen. En kvalitativ, jämförande studie genomfördes där vi höll semi-strukturerade intervjuer med SME:s främst på deras egna kontor. Totalt sex stycken intervjuer genomfördes på fem olika företag. Vi krävde åtminstone två års användningserfarenhet för att säkerställa åtkomst till tillräcklig data. För att uppnå syftet med arbetet så började vi med att hitta vanligt förekommande svårigheter (”common issues”) som påverkar SME-användare. Genom en förstudie som innefattade intervjuer, litterära studier och användarintervjuer så kunde vi fastställa vilka av dessa problemområden som var mest relevanta. Faktorer vi tog hänsyn till var hur SaaS-specifikt och relevanta svårigheterna var i postimplementations-fasen, samt hur mycket data vi kunde få ut av våra fallföretag genom intervjuer. De relevanta svårigheterna (”relevant issues”) var: prismodellen, relationen till systemleverantör, frekventa uppdateringar, mobilitet och integration. Dessutom tog vi fram fem hypoteser gällande de organisatoriska effekterna av SaaS-användning baserad på svårigheterna. En analytisk modell skapades huvudsakligen baserad på DeLone och McLeans (1992; 2003) ursprungliga och uppdaterade ”Information System Success Model”. Denna modell underlättade att ta fram organisatoriska effekter av användning för de olika relevanta svårigheterna. Genom användningen av den analytiska modellen tillsammans med intervjuer och litteratur så kom vi fram till resultatet av studien, beskrivet nedan. De möjliga prismodellerna möjliggör för företag att vara mer flexibla med deras IT-portföljer. Dessutom fastställdes det att när kostnaderna för SaaS baseras på användningen kan vara svårt att uppskatta totalkostnaden, särskilt när användningen varierar. Detta kan dock samtidigt vara en styrka då det möjliggör skalbarhet efter behov. Kundrelationen mellan en kund och systemleverantör var inte alltför komplicerad, dock med ett undantag. Vår huvudsakliga upptäckt var att vissa faktorer i SaaS-användning påverkar den upplevda graden av inlåsningseffekter till systemleverantören. Dessa inkluderar prismodellens utformning, bindningstider och äganderättigheter till sin data. Dessutom kunde förtroendet och inlåsningsgraden också påverka kunders avsikt att byta system. Frekventa uppdateringar som hanteras av systemleverantören, minskar både tid och ansträngning för kunden gällande underhåll. Däremot kunde uppdateringarna ibland orsaka problem när kunden hade egna konfigurationer. Mobiliteten som möjliggörs av SaaS-system utökar organisationers arbetsmöjligheter. Detta inkluderar större geografisk frihet för de anställda i en organisation. Vi kom fram till att integration är mer en generell svårighet för informationssystem. Däremot i SaaS så är det möjligt att ansluta olika SaaS-tjänster, vilket kan skapa större mervärde än vad varje tjänst var för sig kan skapa. Däremot kan integration också orsaka ökade inlåsningseffekter och ökat behov av systemunderhåll.

ITC/USA 2010 Conference Proceedings / The Forty-Sixth Annual International Telemetering Conference and Technical Exhibition / October 25-28, 2010 / Town and Country Resort & Convention Center, San Diego, California / The development and analysis cloud is a rapid development system being designed to support the Air Force Research Lab (AFRL) Simulation & Technology Assessment Branch. The purpose is to isolate research, development, test, and evaluation of unique software within a Zone D enclave [1] to allow researchers and analysts to develop and test software free of the many IT requirements that hamper development and without risk of contaminating the overall Air Force network. The cloud system is being designed so researchers and analysts will utilize Software as a Service (SaaS) models. Such a model makes it transparent to users such things as where the software originates and any licensing concerns. Utilities, tools, and other enhancing software that users need are published and using them frees the developer to focus on their specific development efforts versus tertiary development modules.

Studien avser att beskriva om och hur faktorernakärnkompetens, osäkerhet, nyttoaspekter och kontroll/flexibilitet påverkat besluten vid inköp av cloud-tjänsten SaaS. Uppsatsen är en kvalitativ studie som är baserad på semistruktuerade intervjuer med nyckelpersoner på två små IT-företag samt vetenskapliga artiklar och litteratur inom ämnesområdet. Studiens slutsats är att de båda företagen påverkats av några eller alla faktorer vid inköpen av cloud-tjänsten. Faktorn nyttoaspekter påverkade båda företagens inköpsbeslut i hög grad. Faktorerna osäkerhet och kontroll/flexibilitet påverkade inte alls inköpsbeslutet hos det ena företaget medan de till stor del påverkade inköpsbeslutet hos det andra företaget. Faktorn kärnverksamhet påverkade det ena företagets inköpsbeslut till en viss del och det andra företaget till en stor del.