Author: David

Grazed from Virtualization Practice. Author: Mike Kavis.

I just returned from attending the Cloud Expo in New York City this week. The conference was dominated by private and hybrid cloud topics. There were several private Platform as a Service (PaaS) vendors attending whom I spent a great deal of time talking to as I walked the floor. It seems these days that many enterprises default to private and hybrid clouds and therefore insist on private PaaS as well. It is critical that consumers of PaaS services understand the pros and cons of both public and private PaaS before making a commitment to a PaaS deployment model.

Public PaaS

Public PaaS solutions are platforms that run on the public cloud. The first PaaS solutions in the market place dictated both the stack that the code would be written in and the location of the datacenter that the code would be run on. For example, Force.com requires a proprietary language called Apex, and all of the Apex code runs on Force.com’s datacenter. Google’s PaaS forces developers to write in Python and runs the code in the Google datacenters. Microsoft’ PaaS requires .NET and runs in their datacenters…

Grazed from InfoQ. Author: Zef Hemel.

Netflix, the popular movie streaming site, deploys a hundred times per day, without the use of Chef or Puppet, without a quality assurance department and without release engineers. To do this, Netflix built an advanced in-house PaaS (Platform as a Service) that allows each team to deploy their own part of the infrastructure whenever they want, however many times they require.

During QCon New York 2013, Jeremy Edberg gave a talk about the infrastructure Netflix built to support this rapid pace of iteration on top of Amazon’s AWS.Netflix uses a service-oriented architecture to implement their API, which handles most of the site’s requests (2 billion requests per day). Behind the scenes, the API is separated into many services, where each service is managed by a team, allowing teams to work relatively autonomously and decide themselves when and how often they want to deploy new software…

Grazed from ProofPoint. Author: Editorial Staff.

Cloud computing has become increasingly popular for businesses in a range of sectors. These technologies can offer a variety of benefits that promote efficiency while minimizing costs for a considerable competitive edge. However, storing sensitive information in a cloud environment opens up new risks that need to be addressed to prevent a potential breach or attack. With staff support and the right combination of technologies, companies can enjoy the flexibility and agility that comes with cloud computing without the associated threats to data protection.

Business 2 Community contributor Lindsey LaManna explained that no cookie-cutter security plan can address the unique vulnerabilities and goals within an organization. The most successful strategies, she asserted, are aligned with all departments’ long-term objectives, and consider every potential threat. She also stressed that it is critical to develop an optimal risk management program to support those goals, regardless of where data is stored. This program, she noted, should be realistic, consistent and centrally developed to minimize overall susceptibilities and offer a holistic view of the risk landscape. Next, LaManna revealed that companies need to align goals with measurable results, such as a specified decrease amount of security incidents and further, make cloud providers aware of them…

Grazed from GCN. Author: Kevin McCaney.

Researchers at the Massachusetts Institute of Technology have developed an encryption technique that, down the road, could make cloud computing more secure by ensuring that data remains encrypted while being processed. The system combines three existing schemes — homomorphic encryption, garbled circuit and attribute-based encryption — into what the researchers call a functional-encryption scheme, according to a report in MIT News. The result is that a database in the cloud could handle a request and return a response without data being decrypted.

A scheme that keeps data secure every step of the way would likely appeal to public-sector agencies, which are increasingly moving applications and services to cloud systems, although for the foreseeable future they’ll have to rely on current security measures. The key barrier right now is computing power — the functional-encryption scheme requires more of it than would be practical…

Grazed from PR NewsWire. Author: PR Announcement.

Cloud Security Corporation, a Nevada corporation specializing in security technology for cloud computing, today announced it filed for U.S. Patent protection (U.S. Serial Number 61/832,534) on June 7th for system and methods for one-time password generation on a mobile computing device. This process reduces several risk factors related to current one-time password technology.

Current one-time password technology on mobile computing devices has several points of vulnerability. These vulnerabilities are present during device theft, remote hacking and related in part to the time based nature of most algorithms for one-time passwords. This can lead to a device being compromised and the one-time password technology falling under control of the perpetrator…

Grazed from InformationWeek. Author: Charles Babcock.

OpenStack is a good foundation for a private cloud, but some say it’s hard to master all the skills you need to get the different components to work together. Maybe Python isn’t your thing. Still, you want your cloud operations to be on your hardware in your data center. OpenStack is one way to do it.

Metacloud says it will do that for you — build an OpenStack cloud on your hardware at your premises — then operate it for you remotely. "It’s a new paradigm," said Metacloud CEO Sean Lynch, a former senior VP of technical operations at Ticketmaster. Metacloud has released its Metacloud Carbon|OS version of OpenStack to serve as the foundation for private clouds…

Grazed from PRWeb. Author: PR Announcement.

Accumedic Computer Systems, Inc., provider of intelligent EHR solutions, announced the launch of AccuMed™ Cloud. It’s the latest evolution of their comprehensive agency management solutions for behavioral health. Now AccuMed™ EHR, the ONC certified software that seamlessly integrates every aspect of clinical documentation and revenue cycles, can be delivered as a service (SaaS) via the AccuMed secure cloud data center.

The AccuMed cloud solution provides increased accessibility, greater workflow efficiency, and improved security over traditional client-server systems. Users can enjoy the complete functionality of any AccuMed system and access all of their clinical data wherever there is an Internet connection. There is no software to install or IT infrastructure to maintain. All that is required to leverage the power of the AccuMed Cloud is a Windows tablet, laptop or PC. The AccuMed Cloud provides HIPAA compliant security with top-level data encryption. All data is housed in SSAE 16 compliant data centers at multiple locations with bank-level security ensuring data safety and security in the event of a disaster…

Grazed from PR NewsWire. Author: PR Announcement.

Piracle, a Utah-based company, launched the first and only SaaS application that is completely integrated into NetSuite, making accounts payable and payroll processes more efficient. Piracle Pay Service for NetSuite (PPS) allows NetSuite users to print MICR encoded checks and generate electronic ACH payments. NetSuite, a widely used Enterprise Resource Planning (ERP) solution, has effectively incorporated their cloud-based services into large and small businesses. Following suit, Piracle launched their cloud-based PPS application.

Piracle’s President and CEO John Bechard said Piracle’s move into the cloud was influenced heavily by NetSuite. John said the Piracle team, who has been using NetSuite for seven years, wanted to take a step into a new type of technology along with one of their partners, ultimately benefiting customers with complete integration of the two products…

Grazed from TechTarget. Author: Gabe Knuth.

Bromium announced the latest release of its micro-virtualization desktop security tool, vSentry 2.0, with improvements around mobile connections, document sharing and Intel support. Bromium vSentry is a unique approach to desktop security that uses micro-virtualization to isolate application threads to protect the host from malware. The product treats everything as untrusted while allowing only certain functions on the host to interact with the thread. In this manner, it can allow malware to execute fully without ever actually compromising a system — and still gives users full access to the sites and files they need.

Building on the 1.0 release, Bromium has reduced the size of its code base by developing the entire tool around Xen. Prior to this, there were other components that were needed to provide a certain level of functionality, but Xen has progressed to the point where it can now be used for everything vSentry needs to do. With Xen, vSentry can take advantage of processors that support Intel’s VT-d solution, which enables the isolation and management of device access to virtual machines (VMs)…

Grazed from TalkinCloud. Author: Chris Talbot.

Amazon (AMZN) Web Services is once again putting pricing pressure on its customers. The cloud computing company announced it has reduced the pricing on both on-demand and reserved instance pricing for Amazon Relational Database Service (RDS).

According to a blog entry on the AWS blog, Amazon has reduced on-demand prices by as much as 18 percent for MySQL and Oracle BYOL (bring your own license), and by 28 percent for SQL Server BYOL. The rates officially went into effect at the beginning of June…