Presentation at CloudArena - on Cloud Security

2. My name is Tim
I explain technology…

3. to people who don’t understand it…

4. people who think
they do understand it…

5. people who despise it…

6. and people who worship it.

7. …that help people understand how
technology might help their Organisation…

8. I live here... According to Google Streetmaps
8

9. In Technical Terms
•I’m a Webservice –
•Sitting between the Technical Teams and the
Business Teams, translating and relating
between them..
•With Plenty of SOAP and REST....
Turn that noise off, can’t you see I’m busy…
keep your silly ideas to yourself - I’ve got a
job to do!

10. I live in Naas…
• NAAS
– Network as a Service
• Used to be a Nice place to shop!

11. Can Cloud Computing
transform
Government?

12. Not all Clouds are good!

13. Open Government?
“If people don’t know what you’re doing, they
don’t know what you’re doing wrong”
“Jim Hacker”
Open Government (I980)

14. Cloud is forcing Change
With or Without the Owners / Shareholders

16. So far ICT has not fundamentally
changed government
• 1990s: lCT expected
to make government
more transparent,
efficient and user
oriented
• 2005+: disillusion as
bureaucracy still in
existence
• Can Cloud Help?
Jane E. Fountain – Gov 1.0 – Just Replicating the Silos on the Internet

17. Goverment dont always Understand
What the people Want?

18. What governments often Deliver

19. Why have we not done so well?
It is unfortunate that the first 3
letters of eGovernment are…

21. Security is changing
• Security has to be appropriate
• Security has to be measured
• Can have things so secure that they are
unusable.

25. CIO Priorities…
Source: “ Gartner Scenario: The Current State and Future Directions of the IT Industry”

26. What is Cloud
• Vendors – Whatever you want / Need it to
be…
• Its too Vague –
• Talking about Cloud Security – when Cloud is
defined as everything you ever wished for…

27. Moving to the Cloud?
1. Leaving your apartment!
2. Moving your Data

28. Barriers
 Psychological Barriers
 Platform Lock-In, Dependence, Governance
 Security
 Compliance
 Costs
 Application Architecture
 How do we design applications lo take advantage of the cloud?
 Grow and shnnk on-demand (scalability)
 Data affinity
 Portability
 Efficiency
 Performance
 Fault-tolerance and self-healing

30. Positives
 Scale
 Cost
 CAPEX
 OPEX
 Advance Architecture
 Agility
 Cost - Clouds are renowned for being dirt cheap
for storage and burst-y processing.
 Elasticity - Growth and shrinkage

32. Negatives
 Security & Privacy
 . Conflicts with international laws?
 Where is my Data - Is it safe?
 For Whom and at what level?
 Regulatory compliance:
 Interoperability
 Lack of control
 Standardisation
 SLA ( Model T Ford)

33. Dark Cloud?
Letter from CSSO

34. Challenges
 Organisational barriers (Silo mentality)
 Reliability (service outage)
 Definition of SLAs (Service Level Agreement)
 Service management, Monitoring
 Customisation / Integration with other
applications

35. If you are going to do it..
1. Understand the options and technologies
2. Have a look at what you do..
3. If its complex inside the firewall…Rationalize
infrastructure & applications
4. leverage SOA for applications, appropriate
standards, governance
5. Identify the costs per user - Compare costs with
internal hosting.
6. Start with Open Data… no arguments here….

36. …We have come a long way...

37. Understanding the Adoption Curve

38. Pilot for Success

39. Watch for

42. Identity
• Still not fixed in the Enterprise…
• Or on the Internet..

44. Legal
• Cross Border data Transfer, etc

45. why is Crowd and Cloud sourcing
important?
Crowd Source –
Group Collaboration is
more powerful than
individual achievement

46. Typical Individual effort
many hours, one map

47. OpenStreetMap, 2012
200,000 contributors, one map

48. What is Cloud?
DON’T WORRY, TRUST US, WE HAVE IT ALL UNDER
CONTROL

49. What has Cloud ever done for us?
Apart from Scale, Speed, Agility, Low Cost,
Enterprise Mapping, Open Data, Standards, Google, API’s,
Open Street Maps, Map Servers,
GIS - More than just Location, Spatial Analysis and wider adoption now possible
49

50. Mashup

51. Why this is so compelling:
It’s a disruptive technology
• Does it meet
enterprise needs
• Easy to control
• SLA / Support
• Good enough for
startups and SME
• “Cheap” compute
• Pilot and trial…
Source: upcoming research, Cloud Computing: Not Ready For The Enterprise...Yet.

53. In how many years…

54. Cloud Computing Challenges
1) Scalability
2) Availability End User
3) Maintenance
4) Cost 5) Security

55. Mind the Gap…
Technology
Stuff
Our Stuff

56. G Cloud – UK…
• Distributed Cloud
• Work like a Network
• Everyone
• Can See
• Can Play
• Can Add Value (Within
Limits)
• Shared Data Centres
• App Store
• Issues –
• Support
• Code Base
• Open Source Push
• My View – 3 Models
• Car Boot Sale
• Charity Shop
• Department Store

58. Smart Cities
Gartner: “networked sensors in everything we own will form a
new Web (the Internet of Things). But it will only be of value if
the ‘terabyte torrent’ of data it generates could be collected,
analysed and interpreted”
… and .. just because we can….

59. Smart Local Government?

61. Confusion or Hype
• Public Cloud
• Private Cloud
• Hybrid Cloud
• IAAS
• PAAS
• NAAS
• SAAS
• Etc AAS

63. Sharing!

64. BIG DATA?
 Massive network of services: water, sewage, drains …
 Need to know asset location for planning and maintenance
 Many databases, varying accuracy and provenance
 Context
 Ongoing street openings p.a.
 Safety!

65. Its all about where..

66. GIS
Geographic Information
System
• We have come a long way

67. Or Wizards
GIS is now
Mainstream

69. Future use of Cloud!

70. Water Meters
• Read the Meter
• View or Pay the Bill
• Compare the Usage to the
Local or National
Averages
• Look for areas of Savings

71. My Water Usage
• Smart Metering
• Change my practise

72. Environment
• Advice and Tips on
Money
• Energy
• Recycling (locations of
Centres)
• Refuse
• Water
• Energy Design

73. Bring Banks App

74. Parking
• Select County
• Select Zone
• Select Price willing to
pay?
• Where is the Cheapest

75. Tourism
• History
• Old Maps
• Business Interests
• Tourist Sites

76. Traffic
• Maps
• Plan a Route
• Feedback
• GPS
• Accidents
• Salt
• Weather alert

77. Roadworks
• Link to System – Online
Road Works Control
(OLRWC)
• License for Road
Opening
• Cost of Reinstatement
(Local Authority Usage)
• License for any Street
usage.

78. Planning Applications
• View Applications
• Get notified of Changes
• Make Comments
• Make a Submission
• Notify Local Authority
of Issues?

79. Check the Register
• Map the Polling Stations
• Where is the Nearest
• Map the Route
• Check the Register

80. Blue Flag Beaches
• Location
• Nearest
• Water Quality
• History
• Tides
• Weather
• Things to do…

81. Sports
• What is available now
• How do I get there
• What if I have to Cancel
• Pay for it now

82. Parking
• Select County
• Select Zone
• Select Price willing to
pay?
• Where is the Cheapest

83. Tourism
• History
• Old Maps
• Business Interests
• Tourist Sites

84. Opportunity - Unfinished Estates
QR Codes for Public Participation

85. QR Codes

86. But all of these are static…..
But… would you
cross the road
based on 5 min
old information

87. Where next - Augmented Reality
Bring together Big Data, Visualisation,
GIS, GPS -
A problem that needs cloud to work…

88. What is Augmented Reality?

91. Water Meter

92. Water Meter

93. What do Clouds currently not do?
• Anything subject to compliancy
– Includes PCI-compliant applications
• Apps that call back to performance sensitive
services in your data centre
• Apps that require tight coupling between
instances
• Sensitive Data
• Large applications that don’t fit inside VMs
Is there anything they can’t do?

94. Cloud conclusions
• Government cannot ignore cloud
• Public Cloud and Big Data
• Public Cloud and Open Data
• SLA needs to be more Open
• Future is Cloudy