Cloud computing - Revision history

Shawndouglas: Cat

2022-09-19T21:08:36Z

Cat

← Older revision		Revision as of 21:08, 19 September 2022
Line 141:		Line 141:

	<!---Place all category tags here-->		<!---Place all category tags here-->
	[[Category:~~Software and hardware terms~~]]		[[Category:Cloud computing]]

Shawndouglas: /* Compliance */ Fixed citation errors.

2022-01-19T18:02:42Z

Compliance: Fixed citation errors.

← Older revision		Revision as of 18:02, 19 January 2022
Line 101:		Line 101:

	===Compliance===		===Compliance===
	In order to obtain compliance with regulations including FISMA, [[HIPAA]], and SOX in the United States, the Data Protection Directive in the European Union, and the credit card industry's PCI DSS, users may have to adopt community or hybrid deployment modes that are typically more expensive and may offer restricted benefits. This is how Google is able to "manage and meet additional government policy requirements beyond FISMA"<ref name="HowardFed">{{cite web \|url=https://searchcompliance.techtarget.com/news/1377298/FISMA-compliance-for-federal-cloud-computing-on-the-horizon-in-2010 \|https://web.archive.org/web/20200812174422/https://searchcompliance.techtarget.com/news/1377298/FISMA-compliance-for-federal-cloud-computing-on-the-horizon-in-2010 \|title=FISMA compliance for federal cloud computing on the horizon in 2010 \|author=Howard, A.B. \|work=SearchCompliance \|publisher=TechTarget \|date=18 December 2009 \|archivedate=12 August 2020 \|accessdate=07 January 2022}}</ref><ref name="GlotzbachGov">{{cite web \|url=https://cloud.googleblog.com/2009/09/google-apps-and-government.html \|title=Google Apps and Government \|author=Glotzbach, M. \|work=Google Official Enterprise Blog \|publisher=Google \|date=15 September 2009 \|accessdate=14 April 2020}}</ref> and Rackspace Cloud are able to claim PCI compliance.<ref name="BartelsSecure">{{cite web\|url=http://www.rackspace.com/cloud/blog/2009/03/05/cloud-hosting-is-secure-for-take-off-mosso-enables-the-spreadsheet-store-an-online-merchant-to-become-pci-compliant/ \|archiveurl=https://web.archive.org/web/20110223172816/http://www.rackspace.com/cloud/blog/2009/03/05/cloud-hosting-is-secure-for-take-off-mosso-enables-the-spreadsheet-store-an-online-merchant-to-become-pci-compliant/ \|title=Cloud Hosting is Secure for Take-off: Mosso Enables The Spreadsheet Store, an Online Merchant, to become PCI Compliant \|author=Bartels, Angela \|publisher=Rackspace \|date=05 March 2009 \|archivedate=23 February 2011 \|accessdate=21 August 2014}}</ref>		In order to obtain compliance with regulations including FISMA, [[HIPAA]], and SOX in the United States, the Data Protection Directive in the European Union, and the credit card industry's PCI DSS, users may have to adopt community or hybrid deployment modes that are typically more expensive and may offer restricted benefits. This is how Google is able to "manage and meet additional government policy requirements beyond FISMA"<ref name="HowardFed">{{cite web \|url=https://searchcompliance.techtarget.com/news/1377298/FISMA-compliance-for-federal-cloud-computing-on-the-horizon-in-2010 \|archiveurl=https://web.archive.org/web/20200812174422/https://searchcompliance.techtarget.com/news/1377298/FISMA-compliance-for-federal-cloud-computing-on-the-horizon-in-2010 \|title=FISMA compliance for federal cloud computing on the horizon in 2010 \|author=Howard, A.B. \|work=SearchCompliance \|publisher=TechTarget \|date=18 December 2009 \|archivedate=12 August 2020 \|accessdate=07 January 2022}}</ref><ref name="GlotzbachGov">{{cite web \|url=https://cloud.googleblog.com/2009/09/google-apps-and-government.html \|title=Google Apps and Government \|author=Glotzbach, M. \|work=Google Official Enterprise Blog \|publisher=Google \|date=15 September 2009 \|accessdate=14 April 2020}}</ref> and Rackspace Cloud are able to claim PCI compliance.<ref name="BartelsSecure">{{cite web\|url=http://www.rackspace.com/cloud/blog/2009/03/05/cloud-hosting-is-secure-for-take-off-mosso-enables-the-spreadsheet-store-an-online-merchant-to-become-pci-compliant/ \|archiveurl=https://web.archive.org/web/20110223172816/http://www.rackspace.com/cloud/blog/2009/03/05/cloud-hosting-is-secure-for-take-off-mosso-enables-the-spreadsheet-store-an-online-merchant-to-become-pci-compliant/ \|title=Cloud Hosting is Secure for Take-off: Mosso Enables The Spreadsheet Store, an Online Merchant, to become PCI Compliant \|author=Bartels, Angela \|publisher=Rackspace \|date=05 March 2009 \|archivedate=23 February 2011 \|accessdate=21 August 2014}}</ref>

	Many providers also obtain SAS 70 Type II certification, but this has been criticized on the grounds that the hand-picked set of goals and standards determined by the auditor and the auditee are often not disclosed and can vary widely.<ref name="BrooksAmazon">{{cite web \|url=https://searchcloudcomputing.techtarget.com/news/1374629/Amazon-gets-SAS-70-Type-II-audit-stamp-but-analysts-not-satisfied \|archiveurl=https://web.archive.org/web/20181022113325/https://searchcloudcomputing.techtarget.com/news/1374629/Amazon-gets-SAS-70-Type-II-audit-stamp-but-analysts-not-satisfied \|title=Amazon gets SAS 70 Type II audit stamp, but analysts not satisfied \|author=Brooks, C. \|work=SearchCloudComputing \|publisher=TechTarget \|date=17 November 2009 \|archivedate=22 October 2018 \|accessdate=07 January 2022}}</ref> Providers typically make this information available on request, under non-disclosure agreement.<ref>{{cite web \|url=http://wtnnews.com/articles/6954/ \|archiveurl=https://web.archive.org/web/20150403061012/http://wtnnews.com/articles/6954/ \|title=Assessing Cloud Computing Agreements and Controls \|author=Norton, Jerry \|work=WTN News \|publisher=WTN Media \|date=31 December 2009 \|archivedate=03 April 2015 \|accessdate=07 January 2022}</ref>		Many providers also obtain SAS 70 Type II certification, but this has been criticized on the grounds that the hand-picked set of goals and standards determined by the auditor and the auditee are often not disclosed and can vary widely.<ref name="BrooksAmazon">{{cite web \|url=https://searchcloudcomputing.techtarget.com/news/1374629/Amazon-gets-SAS-70-Type-II-audit-stamp-but-analysts-not-satisfied \|archiveurl=https://web.archive.org/web/20181022113325/https://searchcloudcomputing.techtarget.com/news/1374629/Amazon-gets-SAS-70-Type-II-audit-stamp-but-analysts-not-satisfied \|title=Amazon gets SAS 70 Type II audit stamp, but analysts not satisfied \|author=Brooks, C. \|work=SearchCloudComputing \|publisher=TechTarget \|date=17 November 2009 \|archivedate=22 October 2018 \|accessdate=07 January 2022}}</ref> Providers typically make this information available on request, under non-disclosure agreement.<ref>{{cite web \|url=http://wtnnews.com/articles/6954/ \|archiveurl=https://web.archive.org/web/20150403061012/http://wtnnews.com/articles/6954/ \|title=Assessing Cloud Computing Agreements and Controls \|author=Norton, Jerry \|work=WTN News \|publisher=WTN Media \|date=31 December 2009 \|archivedate=03 April 2015 \|accessdate=07 January 2022}}</ref>

	Customers in the European Union contracting with cloud providers established outside the area have to adhere to the European Union's regulations on export of personal data.<ref>{{Cite web \|url=https://www.thomashelbing.com/en/blog/how-new-eu-rules-data-export-affect-companies-and-outside-eu \|title=How the New EU Rules on Data Export Affect Companies in and Outside the EU \|author=Helbing, T. \|publisher=Dr. Thomas Helbing \|date=29 August 2012 \|accessdate=14 April 2020}}</ref>		Customers in the European Union contracting with cloud providers established outside the area have to adhere to the European Union's regulations on export of personal data.<ref>{{Cite web \|url=https://www.thomashelbing.com/en/blog/how-new-eu-rules-data-export-affect-companies-and-outside-eu \|title=How the New EU Rules on Data Export Affect Companies in and Outside the EU \|author=Helbing, T. \|publisher=Dr. Thomas Helbing \|date=29 August 2012 \|accessdate=14 April 2020}}</ref>

Shawndouglas: Spacing

2022-01-18T20:22:06Z

Spacing

← Older revision		Revision as of 20:22, 18 January 2022
Line 133:		Line 133:
	* {{cite book \|url=https://books.google.com/books?id=GjsH0HJ2PmYC&pg=PT10&lpg=PT10 \|title=Auditing Cloud Computing: A Security and Privacy Guide \|author=Halpert, Ben \|publisher=John Wiley & Sons \|pages=206 \|year=2011 \|isbn=9780470874745}}		* {{cite book \|url=https://books.google.com/books?id=GjsH0HJ2PmYC&pg=PT10&lpg=PT10 \|title=Auditing Cloud Computing: A Security and Privacy Guide \|author=Halpert, Ben \|publisher=John Wiley & Sons \|pages=206 \|year=2011 \|isbn=9780470874745}}
	* {{cite book \|url=https://www.amazon.com/Architecting-Cloud-Decisions-Computing-Service/dp/1118617614 \|title=Architecting the Cloud: Design Decisions for Cloud Computing Service Models (SaaS, PaaS, and IaaS) \|author=Kavis, Michael J \|publisher=John Wiley & Sons \|year=2014 \|pages=224 \|isbn=9781118617618}}		* {{cite book \|url=https://www.amazon.com/Architecting-Cloud-Decisions-Computing-Service/dp/1118617614 \|title=Architecting the Cloud: Design Decisions for Cloud Computing Service Models (SaaS, PaaS, and IaaS) \|author=Kavis, Michael J \|publisher=John Wiley & Sons \|year=2014 \|pages=224 \|isbn=9781118617618}}

	==Notes==		==Notes==

Shawndouglas: Updated URLs for 2022

2022-01-07T20:55:46Z

Updated URLs for 2022

Show changes

Shawndouglas: Fixed citation issue

2021-09-19T18:12:10Z

Fixed citation issue

← Older revision		Revision as of 18:12, 19 September 2021
Line 123:		Line 123:
	As cloud computing increases in popularity, concerns are being raised about the security issues introduced through the adoption of this new model. The effectiveness and efficiency of traditional protection mechanisms are being reconsidered as the characteristics of this innovative deployment model differ widely from those of traditional architectures.<ref name="Zissis10">{{cite journal \|title=Addressing cloud computing security issues \|journal=Future Generation Computer Systems \|author=Zissis, D.; Lekkas, D. \|volume=28 \|issue=3 \|pages=583–92 \|year=2012 \|doi=10.1016/j.future.2010.12.006}}</ref>		As cloud computing increases in popularity, concerns are being raised about the security issues introduced through the adoption of this new model. The effectiveness and efficiency of traditional protection mechanisms are being reconsidered as the characteristics of this innovative deployment model differ widely from those of traditional architectures.<ref name="Zissis10">{{cite journal \|title=Addressing cloud computing security issues \|journal=Future Generation Computer Systems \|author=Zissis, D.; Lekkas, D. \|volume=28 \|issue=3 \|pages=583–92 \|year=2012 \|doi=10.1016/j.future.2010.12.006}}</ref>

	Issues barring the adoption of cloud computing are due in large part to the private and public sectors' unease surrounding the external management of security based services. It is the very nature of cloud computing based services, private or public, that promote external management of provided services. This delivers great incentive among cloud computing service providers in producing a priority in building and maintaining strong management of secure services.<ref name="MessmerSecurity10">{{cite web \|url=https://www.networkworld.com/article/2244954/security-of-virtualization--cloud-computing-divides-it-and-security-pros.html \|title=Security of virtualization, cloud computing divides IT and security pros \|author=Messmer, E. \|publisher=Network World \|date=22 February 2010 \|accessdate=14 April 2020}}</ref> Security issues have been categorized into sensitive data access, data segregation, privacy, bug exploitation, recovery, accountability, malicious insiders, management console security, account control, and multi-tenancy issues. Solutions to various cloud security issues vary from cryptography (particularly public key infrastructure), use of multiple cloud providers, standardization of APIs, improving virtual machine support, and legal support.<ref name="Zissis10" /><ref name="Armbrust10">{{cite journal \|title=A view of cloud computing \|journal=Communications of the ACM \|author=Armbrust, M.; Fox, A.; Griffith, R. et al. \|volume=53 \|issue=4 \|pages=50–58 \|year=2010 \|doi=10.1145/1721654.1721672}}</ref><ref name="~~Armbrust10~~">{{cite journal \|title=Security in the cloud \|journal=Communications of the ACM \|author=Anthes, G. \|volume=53 \|issue=11 \|pages=16–18 \|year=2010 \|doi=10.1145/1839676.1839683}}</ref>		Issues barring the adoption of cloud computing are due in large part to the private and public sectors' unease surrounding the external management of security based services. It is the very nature of cloud computing based services, private or public, that promote external management of provided services. This delivers great incentive among cloud computing service providers in producing a priority in building and maintaining strong management of secure services.<ref name="MessmerSecurity10">{{cite web \|url=https://www.networkworld.com/article/2244954/security-of-virtualization--cloud-computing-divides-it-and-security-pros.html \|title=Security of virtualization, cloud computing divides IT and security pros \|author=Messmer, E. \|publisher=Network World \|date=22 February 2010 \|accessdate=14 April 2020}}</ref> Security issues have been categorized into sensitive data access, data segregation, privacy, bug exploitation, recovery, accountability, malicious insiders, management console security, account control, and multi-tenancy issues. Solutions to various cloud security issues vary from cryptography (particularly public key infrastructure), use of multiple cloud providers, standardization of APIs, improving virtual machine support, and legal support.<ref name="Zissis10" /><ref name="Armbrust10">{{cite journal \|title=A view of cloud computing \|journal=Communications of the ACM \|author=Armbrust, M.; Fox, A.; Griffith, R. et al. \|volume=53 \|issue=4 \|pages=50–58 \|year=2010 \|doi=10.1145/1721654.1721672}}</ref><ref name="AnthesSecurity10">{{cite journal \|title=Security in the cloud \|journal=Communications of the ACM \|author=Anthes, G. \|volume=53 \|issue=11 \|pages=16–18 \|year=2010 \|doi=10.1145/1839676.1839683}}</ref>

	The complexity of security is further increased when data is distributed over a wider area or greater number of devices and in multi-tenant systems that are being shared by unrelated users. In addition, user access to security audit logs may be difficult or impossible. The move to private cloud installations are in part motivated by users' desire to retain control over the infrastructure and avoid losing control of information security.		The complexity of security is further increased when data is distributed over a wider area or greater number of devices and in multi-tenant systems that are being shared by unrelated users. In addition, user access to security audit logs may be difficult or impossible. The move to private cloud installations are in part motivated by users' desire to retain control over the infrastructure and avoid losing control of information security.

Shawndouglas: /* History */ Added more

2020-04-14T23:12:59Z

History: Added more

← Older revision		Revision as of 23:12, 14 April 2020
Line 87:		Line 87:

	By 2013, Gartner was reporting the public cloud services market was forecast to grow 18.5 percent in 2013, totalling $131 billion worldwide, up from $111 billion in 2012. Infrastructure as a service (IaaS) made up the fastest-growing segment of the market, growing 42.4 percent in 2012 to $6.1 billion, with expectations of it growing 47.3 percent in 2013 to $9 billion.<ref name="GartnerCloudSpend">{{cite web \|url=http://www.gartner.com/newsroom/id/2352816 \|archiveurl=https://web.archive.org/web/20170218030806/http://www.gartner.com/newsroom/id/2352816 \|title=Gartner Says Worldwide Public Cloud Services Market to Total $131 Billion \|publisher=Gartner, Inc \|date=28 February 2013 \|archivedate=18 February 2017 \|accessdate=14 April 2020}}</ref>		By 2013, Gartner was reporting the public cloud services market was forecast to grow 18.5 percent in 2013, totalling $131 billion worldwide, up from $111 billion in 2012. Infrastructure as a service (IaaS) made up the fastest-growing segment of the market, growing 42.4 percent in 2012 to $6.1 billion, with expectations of it growing 47.3 percent in 2013 to $9 billion.<ref name="GartnerCloudSpend">{{cite web \|url=http://www.gartner.com/newsroom/id/2352816 \|archiveurl=https://web.archive.org/web/20170218030806/http://www.gartner.com/newsroom/id/2352816 \|title=Gartner Says Worldwide Public Cloud Services Market to Total $131 Billion \|publisher=Gartner, Inc \|date=28 February 2013 \|archivedate=18 February 2017 \|accessdate=14 April 2020}}</ref>

			By 2017, "edge computing" began to emerge as a viable option. Edge computing is a distributed computing paradigm that brings computation and storage closer to the location where is needed, thus improving response times and saving bandwidth. This in part has been driven by increasing use of mobile applications, and sensor-based [[internet of things]] devices.<ref name="SatyanarayananTheEmerg17">{{cite journal \|title=The Emergence of Edge Computing \|journal=Computer \|author=Satyanarayanan, M. \|volume=50 \|issue=1 \|pages=30–39 \|year=2017 \|doi=10.1109/MC.2017.9}}</ref> More broadly, by the late 2010s, a distinct trend in cloud computing was emerging, as noted by Varghese and Buyya: "The general trend seems to be towards making use of infrastructure from multiple providers and decentralising computing away from resources currently concentrated in data centers. This is in contrast to traditional cloud offerings from single providers. Consequently, new computing models to suit the demands of the market are emerging."<ref name="VargheseNextGen18">{{cite journal \|title=Next generation cloud computing: New trends and research directions \|journal=Future Generation Computer Systems \|author=Varghese, B.; Buyya, R. \|volume=79 \|issue=Part 3 \|pages=849–61 \|year=2018 \|doi=10.1016/j.future.2017.09.020}}</ref>

	==Issues and concerns==		==Issues and concerns==

Shawndouglas: /* Deployment models */ Added more

2020-04-14T22:47:05Z

Deployment models: Added more

← Older revision		Revision as of 22:47, 14 April 2020
Line 75:		Line 75:
	''Hybrid cloud'': a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together, offering the benefits of multiple deployment models		''Hybrid cloud'': a composition of two or more clouds (private, community, or public) that remain unique entities but are bound together, offering the benefits of multiple deployment models

	~~A fifth~~ deployment ~~option~~ (potentially classifiable as "hybrid") that has become more notable is [[carrier cloud]], cloud computing services integrated into a communications service provider's network infrastructure.<ref name="KontronWP">{{cite web \|url=https://www.kontron.com/resources/collateral/white_papers/kontroncarriercloudwp.pdf \|format=PDF \|title=Cloud Evolution: The Carrier Cloud \|publisher=Kontron \|date=2013 \|accesssdate=14 April 2020}}</ref><ref name="NarcisiCC">{{cite web \|url=https://searchnetworking.techtarget.com/feature/Carrier-cloud-services-Do-customers-care-if-you-own-the-network \|title=Carrier cloud services: Do customers care if you own the network? \|author=Narcisi, G. \|work=SearchNetworking \|publisher=TechTarget \|date=November 2013 \|accessdate=14 April 2020}}</ref>		Other deployment options have arisen as well. Another (potentially classifiable as "hybrid") that has become more notable is [[carrier cloud]], cloud computing services integrated into a communications service provider's network infrastructure.<ref name="KontronWP">{{cite web \|url=https://www.kontron.com/resources/collateral/white_papers/kontroncarriercloudwp.pdf \|format=PDF \|title=Cloud Evolution: The Carrier Cloud \|publisher=Kontron \|date=2013 \|accesssdate=14 April 2020}}</ref><ref name="NarcisiCC">{{cite web \|url=https://searchnetworking.techtarget.com/feature/Carrier-cloud-services-Do-customers-care-if-you-own-the-network \|title=Carrier cloud services: Do customers care if you own the network? \|author=Narcisi, G. \|work=SearchNetworking \|publisher=TechTarget \|date=November 2013 \|accessdate=14 April 2020}}</ref> Others include distributed cloud (a distributed set of machines in different locations)<ref name="CunsoloVolunteer09">{{cite journal \|title=Volunteer Computing and Desktop Cloud: The Cloud@Home Paradigm \|journal=2009 Eighth IEEE International Symposium on Network Computing and Applications \|author=Cunsolo, V.D.; Distefano, S.; Puliafito, A. et al. \|pages=134–9 \|year=2009 \|doi=10.1109/NCA.2009.41}}</ref>, high-performance computing cloud (able to handle [[high-performance computing]] applications)<ref name="NettoHPC18">{{cite journal \|title=HPC Cloud for Scientific and Business Applications: Taxonomy, Vision, and Research Challenges \|journal=AMC Computing Surveys \|author=Netto, M.A.S.; Calheiros, R.N.; Rodrigues, E.R. et al. \|volume=51 \|issue=1 \|at=8 \|year=2018 \|doi=10.1145/3150224}}</ref>, and polycloud (use of multiple public clouds from different providers, levaraging specific services each offers).<ref name="GallPoly18">{{cite web \|url=https://hub.packtpub.com/polycloud-a-better-alternative-to-cloud-agnosticism/ \|title=Polycloud: A better alternative to cloud agnosticism \|author=Gall, R. \|work=Cloud and Networking News \|publisher=Packt Publishing \|date=16 May 2018 \|accessdate=14 April 2020}}</ref>

	==History==		==History==

Shawndouglas: /* =PaaS */

2020-04-14T22:33:44Z

=PaaS

← Older revision		Revision as of 22:33, 14 April 2020
Line 51:		Line 51:
	Proponents of this model claim that SaaS has the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This enables the business to reallocate IT operations costs away from hardware/software spending and from personnel expenses, towards meeting other goals. In addition, with applications hosted centrally, updates can be released without the need for users to install new software.<ref name="GriffinInternet18">{{cite book \|url=https://books.google.com/books?id=OuTEDwAAQBAJ&pg=PA111 \|title=Internet Governance \|author=Griffin, R. \|publisher=ED-Tech Press \|pages=111–13 \|year=2018 \|isbn=9781839473951 \|accessdate=14 April 2020}}</ref>		Proponents of this model claim that SaaS has the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This enables the business to reallocate IT operations costs away from hardware/software spending and from personnel expenses, towards meeting other goals. In addition, with applications hosted centrally, updates can be released without the need for users to install new software.<ref name="GriffinInternet18">{{cite book \|url=https://books.google.com/books?id=OuTEDwAAQBAJ&pg=PA111 \|title=Internet Governance \|author=Griffin, R. \|publisher=ED-Tech Press \|pages=111–13 \|year=2018 \|isbn=9781839473951 \|accessdate=14 April 2020}}</ref>

	====PaaS===		====PaaS====
	NIST's definition of cloud computing defines PaaS as<ref name="NISTCloudDef" />:		NIST's definition of cloud computing defines PaaS as<ref name="NISTCloudDef" />:

Shawndouglas: /* Service models */

2020-04-14T22:33:30Z

Service models

← Older revision		Revision as of 22:33, 14 April 2020
Line 42:		Line 42:
	The NIST definition also details the service models, which include [[software as a service]] (SaaS; provider's application runs on their infrastructure), platform as a service (PaaS; consumer-created or -acquired application runs on provider's infrastructure), and infrastructure as a service (IaaS; customer deploys operating systems and applications over fundamental computing resources provisioned by the provider).<ref name="NISTCloudDef" />		The NIST definition also details the service models, which include [[software as a service]] (SaaS; provider's application runs on their infrastructure), platform as a service (PaaS; consumer-created or -acquired application runs on provider's infrastructure), and infrastructure as a service (IaaS; customer deploys operating systems and applications over fundamental computing resources provisioned by the provider).<ref name="NISTCloudDef" />

			====SaaS====
	NIST's definition of cloud computing defines SaaS as<ref name="NISTCloudDef" />:		NIST's definition of cloud computing defines SaaS as<ref name="NISTCloudDef" />:

Line 48:		Line 49:
	By not needing to manage the cloud infrastructure and platform where the application runs, the need to install and run the application on the cloud user's own computers is eliminated, simplifying maintenance and support. The pricing model for SaaS applications is typically a monthly or yearly flat fee per user, and as such prices become scalable and adjustable if users are added or removed at any point.		By not needing to manage the cloud infrastructure and platform where the application runs, the need to install and run the application on the cloud user's own computers is eliminated, simplifying maintenance and support. The pricing model for SaaS applications is typically a monthly or yearly flat fee per user, and as such prices become scalable and adjustable if users are added or removed at any point.

	Proponents of this model claim that SaaS has the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This enables the business to reallocate IT operations costs away from hardware/software spending and from personnel expenses, towards meeting other goals. In addition, with applications hosted centrally, updates can be released without the need for users to install new software.		Proponents of this model claim that SaaS has the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This enables the business to reallocate IT operations costs away from hardware/software spending and from personnel expenses, towards meeting other goals. In addition, with applications hosted centrally, updates can be released without the need for users to install new software.<ref name="GriffinInternet18">{{cite book \|url=https://books.google.com/books?id=OuTEDwAAQBAJ&pg=PA111 \|title=Internet Governance \|author=Griffin, R. \|publisher=ED-Tech Press \|pages=111–13 \|year=2018 \|isbn=9781839473951 \|accessdate=14 April 2020}}</ref>

			====PaaS===
			NIST's definition of cloud computing defines PaaS as<ref name="NISTCloudDef" />:

			<blockquote>The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.</blockquote>

			As such, PaaS users do not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage. Rather, they have control over the deployed applications, and in some cases the configuration settings for the application-hosting environment.<ref name="GriffinInternet18" />

			====IaaS====
			NIST's definition of cloud computing describes IaaS as a platform "where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications, and possibly limited control of select networking components (e.g., host firewalls)."<ref name="NISTCloudDef" />

			IaaS-cloud providers supply these resources on-demand from their large pools of equipment installed in data centers. For wide area network connectivity, customers can use either the internet or carrier clouds (dedicated virtual private networks). To deploy their applications, cloud users install operating-system images and their application software on the cloud infrastructure. The cloud user patches and maintains the operating systems and the application software on the infrastructure. Cloud providers typically bill IaaS services on a utility computing basis: cost reflects the amount of resources allocated and consumed.<ref name="GriffinInternet18" />

	===Deployment models===		===Deployment models===

Shawndouglas: /* Service models */

2020-04-14T22:21:20Z

Service models

← Older revision		Revision as of 22:21, 14 April 2020
Line 41:		Line 41:
	===Service models===		===Service models===
	The NIST definition also details the service models, which include [[software as a service]] (SaaS; provider's application runs on their infrastructure), platform as a service (PaaS; consumer-created or -acquired application runs on provider's infrastructure), and infrastructure as a service (IaaS; customer deploys operating systems and applications over fundamental computing resources provisioned by the provider).<ref name="NISTCloudDef" />		The NIST definition also details the service models, which include [[software as a service]] (SaaS; provider's application runs on their infrastructure), platform as a service (PaaS; consumer-created or -acquired application runs on provider's infrastructure), and infrastructure as a service (IaaS; customer deploys operating systems and applications over fundamental computing resources provisioned by the provider).<ref name="NISTCloudDef" />

			NIST's definition of cloud computing defines SaaS as<ref name="NISTCloudDef" />:

			<blockquote>The capability provided to the consumer is to use the provider's applications running on a cloud infrastructure. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.</blockquote>

			By not needing to manage the cloud infrastructure and platform where the application runs, the need to install and run the application on the cloud user's own computers is eliminated, simplifying maintenance and support. The pricing model for SaaS applications is typically a monthly or yearly flat fee per user, and as such prices become scalable and adjustable if users are added or removed at any point.

			Proponents of this model claim that SaaS has the potential to reduce IT operational costs by outsourcing hardware and software maintenance and support to the cloud provider. This enables the business to reallocate IT operations costs away from hardware/software spending and from personnel expenses, towards meeting other goals. In addition, with applications hosted centrally, updates can be released without the need for users to install new software.

	===Deployment models===		===Deployment models===