Cloud Computing By

1. 2. 3. . ". $. %. Kapil Raghav Dande Kirtik Raval Md. Minhajuddin Khuram Mohit !inave !ikhil #ulmali !itin !ikam &rithviraj 'ahu 12029 12030 12031 12032 12033 1203 1203"

MIT SCHOOL OF TELECOM MANAGEMENT

Cloud Computing( 1. )ntrodu*tion(

The India Vision 2020 document by the Planning Commission of India mandates that our vision of Indias future should be both comprehensive and harmonious; it envisages that: !y 2020" the people of India #ill be more numerous" better educated" healthier and more prosperous than any time in our long history$ 1.1 The document also ac%no#ledges that & po#erful set of catalytic forces is accelerating the speed of social change throughout the #orld' They include a rapid rise in levels of education" high rates of technological innovation and application" ever faster and cheaper communication that dissolves physical and social barriers both #ithin countries and internationally" greater availability and easier access to information" and the further opening up of global mar%ets ( Technology" organi)ation" information" education and productive s%ills #ill" therefore" play a critically decisive role in governing the future course of development'$If there is one technological change #hich can have an all encompassing effect on all the above mentioned factors * it is the Cloud' +nabled by Information Technologies and riding on the bac% of telecommunications net#or%" the Cloud can herald a myriad of solutions ranging from enabling tele,medicine" setting up remote,classrooms" creating national citi)en health and s%ills databases and creating a ne# Cloud based services industry for generating employment'-pecifically" Cloud based services can be leveraged by the .overnment to launch ne# e,.overnance initiatives /uic%er and #ith lo#er overhead costs' & common Cloud platform
2

MIT SCHOOL OF TELECOM MANAGEMENT

#ill also enable local .overnments and other public agencies to adopt e, .overnance for better citi)en services" #ithout re/uiring the setting up of significant IT infrastructure' The Cloud also presents an opportunity for Indias Information Technology 0IT1 2 IT +nabled -ervices 0IT+-1 sector by opening up a ne# avenue of providing Cloud based services to global organi)ations ranging from -oft#are as a -ervice

0-aa-1 based application services" providing remote testing and prototyping services in addition to remote application hosting services such as Infrastructure as a -ervice 0Iaa-1 and Platform as a -ervice 0Paa-1'3o#ever" on one hand #here Cloud promises to change the #ay Indian businesses and .overnment leverage technology to their benefit" on the other hand it also presents significant challenges relating to security and privacy of information' & comprehensive policy for adoption of Cloud in India is thus the need of the hour' It is important for all sta%eholders in India to understand the implications of this disruptive technology and harness it for the good of the nation'The 4ational Telecom Policy 2052 04TP,20521 also ac%no#ledges this and aims to ta%e ne# policy initiatives to ensure rapid e6pansion of ne# services and technologies at globally competitive prices by addressing the concerns of Cloud users and other sta%eholders including specific steps that need to be ta%en for lo#ering the cost of service delivery'$ 1.2 ' 7e first see% to understand the importance of Cloud to India' 7e thereafter try to assess the impact of the Cloud on t#o critical developmental areas for India" 3ealthcare and +ducation' 8inally" #e e6amine the role the .overnment should play in enabling a Cloud revolution both as a user and as an enabler of the Cloud and the regulatory frame#or% on #hich a Cloud policy in India should be based'
3

MIT SCHOOL OF TELECOM MANAGEMENT

1.3 Chara*teri+ti*+ o, the Cloud

In order to understand the components and ecosystem #hich are termed as Cloud" it is important to understand Cloud' In simple terms Cloud refers to:

In order for any offering to be termed as a Cloud it should have the follo#ing characteristics: Cloud computing is characteri)ed by its fundamentally fle6ible nature" #hich stands in star% contrast to the rigidity of systems tied to on,site" physical IT infrastructure' This fle6ibility is the source of many of the potential strengths and #ea%nesses of Cloud computing" and as such it merits a fuller discussion' 8rom the perspective of the Clouds architecture" fle6ibility can be seen in three main areas: the potentially dispersed and far,flung geo,location of data servers and storage enabled by virtuali)ation and remote access; the rapid elasticity and scalability enabled by the on,demand nature of Cloud computing resources; and the broad resource pooling in large,scale data centers" #hich allo#s for greater economies of scale and more efficient targeting of resources' -o #hile the technological basis for Cloud computing is not ne#" the capability of the technology is' The features of Cloud computing are ne# dimensions and opportunities of an e6isting technology'

1. -eo.lo*ation
4

MIT SCHOOL OF TELECOM MANAGEMENT

The fundamental economics of Cloud computing depends on the ability of cloud service provider 0C-P1 to operate large and efficient data centers in order to service a large customer base' In order to ma6imi)e on the economic efficiency" many cloud vendors have created a geographically distributed data center strategy' 9ata centers are typically located strategically across the #orld to service a global customer base' The location of data center is dependent on many factors such as geographic pro6imity to customer base" operational cost structures" legal and regulatory environment" political and safety concerns among others' These data centers are typically connected over a net#or% to move data bet#een data centers for bac%up" load balancing and disaster recovery purposes" among others' Cloud service providers can also routinely transfer re/uisite data to international third party subprocessors for functions such as technical support" etc' Cloud computing in its modern form developed out of efforts by large #eb,based companies to capitali)e on the use of their large,scale data center capacities for public as #ell as internal storage and processing' &s such" the initial centers #ere largely concentrated in the :nited -tates; particularly Te6as" California" <regon" 7ashington" and Virginia;in areas #here land" electricity" ta6es and other overhead costs made'

2. Development opportunitie+ pre+ented /y the *loud and *on*eptual ,rame0ork ,or a *loud poli*y in )ndia
1he ,ollo0ing +e*tion+ +pe*i,i*ally e2amine development opportunitie+ pre+ented /y the Cloud ,or the edu*ation and health*are +e*tor+' 2.1 3du*ation The +ducational sector is one of the cornerstones of socioeconomic development' It is #idely accepted that education contributes to poverty reduction and increased economic gro#th" #hich in turn leads to an improved standard of living' It also enables the individual to participate in #ealth generating activities" leads to the creation of employment" and the overall development of society'.ro#th of the Indian economy in the recent past is putting pressure on the educational sector to enhance the /uality of discourse" e6pand the curriculum to include ne# sub=ects" ma%e education affordable and improve its reach' 7hile technology can play a significant role in accelerating the e6pansion of the +ducation sector in India" the digital divide hinders its reach'7hile" both the Indian .overnment and private players are currently investing in the +ducation sector" these efforts are currently limited to adopting and enhancing traditional methods of imparting education' Private players are primarily catering to the needs of the urban segment of the +ducation sector" the .overnment has ta%en several initiatives to upgrade the reach and /uality of education in rural and semiurban areas' 3o#ever" radical thin%ing is needed to e6ploit Cloud for the educational sector so that the challenges facing the sector can be tac%led'
5

MIT SCHOOL OF TELECOM MANAGEMENT

Challenge+ to edu*ational +e*tor &s has been outlined earlier in the #hitepaper" the primary challenges associated #ith the educational sector in India are: > > > > Poor /uality of education ?each of education to remote corners of the country Increasing cost of education @o# engagement of students

&s per the India Vision 2020 document 5 * 7ith the development of modern media that brings sound and video' 4dvantage+ o, Cloud adoption to the 3du*ation 'e*tor -tandardi)ed contents +nvironment of collaboration The modes of providing education &dministrative efficiency :niversal access to educational information

2.2 5ealth*are -eventy percent of the Indian population lives in rural India and most of them lac% access to hospitals" physicians" trained medical personnels" critical medicine supply and medical e/uipments' India has only an elementary net#or% of public hospitals and clinics 0around 2A"000 primary health centers1' Public hospitals are also scarce outside large cities" and their service standard varies and lac% even basic healthcare records management systems' <n the other hand" unli%e the healthcare sector in developed economies" the Indian healthcare ecosystem is at a nascent stage of adopting technology' Currently" the Indian healthcare industry is evaluating technology deployment models for digiti)ation of health records li%e +B?s and remote patient monitoring; futuristic trends such as centrali)ed healthcare record management are not even thought of' This presents us #ith an opportunity to leapfrog technology adoption in the healthcare industry' In developed economies" the governments are struggling to centrali)e the currently federated digital healthcare records' In addition" the legacy of IT applications is no longer scalable to handle large data volumes'
6

MIT SCHOOL OF TELECOM MANAGEMENT

India can s%ip all these challenges by directly moving on to Cloud based centrali)ed healthcare records management" Cloud based healthcare applications and harness the potential of telemedicine' Challenge+ in the )ndian health*are +e*tor *an /e +ummari6ed a+( Cuality of healthcare sector in india ?ich and affordable challenges in health care sector @ac% of digiti)ation of medical records and citi)en data &dvantages of cloud adoption in healthcare sector

3. Con*eptual #rame0ork ,or a Cloud &oli*y in )ndia

-ome of the countries that are leading the #ay in Cloud adoption are the :nited -tates of &merica and the :nited Dingdom' The :- .overnment is ta%ing steps to#ards implementing a ECloud,first policy that #ill no# re/uire federal agencies to default to Cloud based solutions #henever a secure" reliable" cost,effective Cloud option e6ists' 8urther" by adopting the Cloud business model" the 8ederal .overnment plans to consolidate data centers through virtuali)ation' The 8ederal .overnment #ebsite also provides a shopping cart for :- .overnment agencies to purchase applications from a catalogue of over F"000 Cloud,based applications' The .eneral -ervices &dministration of &merica is moving its email service to the Cloud" #hich is provided e6ternally through the use of a rivate Cloud' The .overnment of :nited Dingdom has also underta%en a .overnment #ide Cloud strategy' The !ritish .overnments .,Cloud has a hybrid Cloud structure #ith a public,private architecture catering to multiple Cloud communities' The !ritish .overnment is also building a .overnment &pplication -tore" #hich is e6pected to be the only channel for IT services procurement by the !ritish .overnment' .overnments in &sia are loo%ing at Cloud services to bring in efficiencies in their ICT 0Information and Communications Technology1 usage' They are loo%ing to enhance their o#n ICT infrastructure and reduce ICT spending #hile doing so' &ccording to a recent 8rost 2 -ullivan study" 2055 in the &sia Pacific region" 25 percent of the respondents in the
7

MIT SCHOOL OF TELECOM MANAGEMENT

.overnment vertical have adopted Cloud computing in one form or the other'5In order to reap benefits of the Cloud" the .overnment needs plan its Cloud adoption efforts' 7e recommend the follo#ing aspects be considered to ensure that Cloud adoption leads to the desired benefits #hile minimi)ing the ris%s' The 4TP recogni)es the need to To promote ?esearch and 9evelopment" 9esign in cutting edge ICT+ technologies" products and services for meeting the infrastructure needs of domestic and global mar%ets #ith focus on security and green technologies'$The primary step to#ards enabling Cloud computing in .overnment is the formulation of a Cloud Policy' & Cloud policy #ill lay a foundation for a large scale adoption of the Cloud by various .overnment entities' &s highlighted earlier in this #hitepaper the :- has come up #ith the Cloud 8irst policy #hich re/uires .overnment agencies to evaluate Cloud computing options before ma%ing any ne# investments' The :- .overnment has also set up the 4ational Institute of -tandards and Technology * a federal technology agency that #or%s #ith industry to develop and apply technology" measurements" and standards to be used by industry as #ell as .overnment agencies' -imilar to this initiative by the :- .overnment" the Indian .overnment should come up #ith a policy giving direction to .overnment agencies to adopt Cloud as #ell as to the Cloud service providers inclined to#ards providing services to .overnment' The .overnment also needs to establish a nodal agency #hich shall define the standards for procurement and usage of Cloud technologies by .overnment agencies' The follo#ing section details on the aspects #hich need to be considered for laying of guidelines on adoption of the Cloud by the .overnment as a Cloud user'

. )mplementation o, Cloud Computing 1e*hnology in )ndian Rail0ay

The Indian rail#ay is the #orlds fourth largest rail#ay net#or% #hich carries near about F0 million passengers daily and near about 2'G million tons of freight daily' !ut in spite of that the rail#ays usually goes under loss and main reason behind this is a large number of passengers travelled #ithout tic%et every day' &lso there is problem from passengers side that un#anted and unauthori)ed peoples #ith or #ithout a confirm tic%et %eep roaming in reserved category compartments' ?obary in the trains" overloading of the trains" blac% mar%eting of tic%ets by tte are the some problems #hich more or less #e all #itness in our life' Thus by implementing cloud computing in Indian rail#ays #e can develop a system #hich not only improves the passengers facilities #hile travelling but also increased the rail#ays revenues' 3o# total number of persons
8

MIT SCHOOL OF TELECOM MANAGEMENT

in a train at any time can be calculate" ho# e6act location of train and e6act arrival time can be %no#n" ho# throughout availability of the internet services in the train and most important ho# fair distribution of seats can be done are the ma=or points and ho# cloud computing technology helps us to attains it are covered in this paper'

". '*ope o, *loud *omputing ,or 'M3+ in )ndia

Cloud computing is a set of services that provide infrastructure resources using internet media and data storage on a third party server' -B+s are said to be the lifeblood of any vibrant economy' They are %no#n to be the silent drivers of a nations economy' -B+s of India are one of the most aggressive adopters of +?P Pac%ages' Bost of the Indian -B+s have adopted the traditional +?P -ystems and have incurred a heavy cost #hile implementing these systems' This paper presents the cost savings and reduction in the level of difficulty I adopting a cloud computing -ervice 0CC-1 enabled +?P system' 8or the study" IT people from F0 4orth Indian -B+s #ere intervie#ed' In the cloud computing environment the -B+s #ill not have to o#n the infrastructure so they can abstain from any capital e6penditure and instead they can utili)e the resources as service and pay as per their usage'

$. 1he *hallenge+ and o,,ering+ o, Cloud Computing 0ith the need+ o, )ndian 3*onomi* 'y+tem
Cloud Computing is in e6istence from /uite some time no#" but in India the concept is fairly ne#' Therefore there are a lot of problem to be faced' & ma=or one being the concept of centrali)e your data $ There is a sense of panic #hen a company surrenders its data to a third party' These %ind of challenges India and tried to provide some perspective to the same' &long #ith it the mar%et of cloud$ has been discussed in global as #ell as Indian conte6t' & comparative study has been carried out to sum up the pros and cons of cloud computing' Cloud computing is IT industries dream of bringing all the basic idea is to do a#ay #ith bul%y hard#are and huge soft#are" replacing them #ith services those are hosted on clouds$ and can be accessed #hen they are re/uired' Ba=or ob=ective of a business remains to be generating profits thereby ma6imi)ing the value generated for the customer' It
9

MIT SCHOOL OF TELECOM MANAGEMENT

can be achieved through integrated and streamlined processes" enhanced productivity and offering a better solution to the customer' Concept of cloud has emerged as a saviour for the retailers therefore restructuring the basic IT configuration #hich remained unaltered for last many years' Cloud computing offers business dimensions of fle6ibility" interoperability and fast turnaround time to the retailers'

%. 7a0 en,or*ement and inve+tigative aid+

@a# enforcement agencies ability to collect and analy)e personal and electronic data has previously been relatively limited to traditional #iretapping of telecommunications lines or efforts to bug or confiscate personal computers or business net#or% servers'3o#ever" the simultaneous centrali)ation and fragmentation of data represented by Cloud computing represents a ne# set of opportunities and challenges for la# enforcement' <n the one hand" Cloud,based communications technology allo#ed the 8!I to install soft#are onto mafia members phones that turned on the microphone and essentially converted the phone into a Eroving bug even #hen it appeared to be turned off' -ome Cloud communications providers have also allegedly given the :'-' 4ational -ecurity &dministration 04-&1 permanent access to their bac%bone infrastructure" #hich allo#s the 4-& to ma%e internal decisions about #hen and #hom to #iretap #ithout see%ing the providers specific consent or cooperation'5 <n the other hand" =urisdictional difficulties" recalcitrance on the part of some C-Ps" and other logistical or forensic difficulties comprise continuing obstacles to investigative and regulatory efforts'
7.1 7o*u+

and en,or*ement
The geo,location of data storage and processing has important

implications for end,user security as #ell as data sovereignty and =urisdiction" and the same is true for la# enforcement efforts' &lthough efforts have been made to impose disclosure re/uirements on C-Ps" lac% of control over physical information stored outside the =urisdiction has illustrated the limits of the coercive authority the state is able to #ield over 10

MIT SCHOOL OF TELECOM MANAGEMENT

8oreign -ervice providers' This has resulted in a push to re/uire providers to operate out of local data centers" to #hich the domestic police force #ould have physical access that

access to a given physical server does not necessarily lead to usable information for la# enforcement" and confiscation also has spill over and chilling effects on co, tenants' 8irst" the fragmented nature of data storage means that information may be physically spread out and must be reassembled at a different level of abstraction in the Cloud before it can be usable' This therefore re/uires the cooperation of the Cloud provider in the reassembly and delivery of the usable data' -econd" data may be encrypted" #hich can re/uire the consent of the encryption %ey holder 0often the information provider1 or further cooperation #ith the Cloud provider in order to crac% the %ey and gain access' 8inally" confiscation and analysis of physical hard#are also harms innocent co,tenants #hose information is stored on the net#or%'
7.2 80ner+hip

o, data

Bost -@&s continue to be from contracts" many of #hich contain provisions about the right of service providers to disclose and use information and impose limitations on users ability to bring proprietary,based claims against the Cloud provider' The standards attached to o#nership also depend in part on the type of information being handled' &greements often do not differentiate or sufficiently define non, personal" personal" sensitive" and proprietary information" although o#nership standards could and should apply differently to these different types' This" in turn" has important implications for the level of official action necessary to induce third party service providers to disclose information' Instead of an official" =udge,approved #arrant" a simple subpoena often suffices'2 This has led to a push to reinterpret or re#rite data o#nership and privacy la#s to reflect the ne# realities of modern computing" but so far data in the Cloud remains relatively detached from the protections normally offered to Eo#ners of information'

11

MIT SCHOOL OF TELECOM MANAGEMENT

The uncertainties surrounding o#nership highlight the need for government leadership in terms of regulation in the medium and long term" and for vigilant scrutiny and crafting of standard contractual provisions for the industry in the short term'
7.3

Data retention
Particularly for companies and users moving sensitive

information to the Cloud" data o#nership and security concerns during the life of the contract #ith the Cloud provider are only part of the issue' This issue is compounded #ith the peculiarities of the nature of the activities underta%en by an enterprise' Typically" data retention obligations of an enterprise are based on the nature of activity underta%en by it' Thus" it may not al#ays be a feasible approach to ma%e regulations around data retention applicable on cloud providers' 8or eg" data retention obligations of a ban% are very different from retention obligations of a courier agency' &lso" customers may #ant to be and indeed must be reassured that their information is completely erased from the providers servers' In other respects" ho#ever" Cloud computing allo#s users to capitali)e on the greater storage capacity by providing more robust" built,in redundancies in the architecture' This insulates the data and services from mechanical failure" sei)ure" or other problems associated #ith a single piece of physical hard#are' This redundancy can even be built into the design of entire data center locations" such as a pair of Cisco facilities in Te6as #hich serve as active,active$ mirrors of each other" automatically updating a given server in one #henever its pair in the other facility changes'

7.4

)n,ormation re9ue+t+

12

MIT SCHOOL OF TELECOM MANAGEMENT

In other respects" ho#ever" Cloud computing allo#s users to capitali)e on the greater storage capacity by providing more robust" built,in redundancies in the architecture' This insulates the data and services from mechanical failure" sei)ure" or other problems associated #ith a single piece of physical hard#are' This redundancy can even be built into the design of entire data center locations" such as a pair of Cisco facilities in Te6as #hich serve as active,active$ mirrors of each other" automatically updating a given server in one #henever its pair in the other facility changes' In other respects" ho#ever" Cloud computing allo#s users to capitali)e on the greater storage capacity by providing more robust" built,in redundancies in the architecture' This insulates the data and services from mechanical failure" sei)ure" or other problems associated #ith a single piece of physical hard#are' This redundancy can even be built into the design of entire data center locations" such as a pair of Cisco facilities in Te6as #hich serve as active,active$ mirrors of each other" automatically updating a given server in one #henever its pair in the other facility changes' other sources of ra# data may not be useful due to the #idespread use of encryption technologies for certain types of services' These controls are mandated in certain sectors" such as ban%ing and e,commerce" and are becoming more common in others' .overnments have underta%en t#o main responses to this problem' The first is to obtain the encryption %ey" #hich is sometimes held by the Cloud provider as #ell as the user as per the terms of service' This can also be done #ith the %ey holders consent or;in the case of criminal operations;#ith more traditional methods aimed at e6tracting the information from the suspects %eystro%es or hard drive logs' The second possible response is to force C-Ps to build in vulnerability in their programming code 0%no#n as a Ebac% door1 that allo#s government authorities to access the information;regardless of encryption;on demand' In theory" this #ould then be utili)ed only after obtaining proper legal authority" although privacy advocates critici)e the policys potential for abuse by government agencies and vulnerability to e6ploitation by hac%ers' 9espite these concerns" the :'-' proposed a la# #hich #ould have re/uired communications services to maintain a #ay to unscramble encrypted messages" ensured that foreign based providers %eep an office in the :nited -tates capable of performing
13

MIT SCHOOL OF TELECOM MANAGEMENT

intercepts" and forced peer,to,peer soft#are developers to redesign their service to allo# interception'
7.5

Content regulation

&ll governments" albeit to varying degrees" attempt to regulate the content of the internet to some e6tent and hold violators of those regulations liable' In the conte6t of Cloud computing" several challenges emerge in terms of regulating and bloc%ing the content itself as #ell as holding individuals and companies liable for the offending material' To begin #ith" content regulation is #arranted only for those medium carrying mass communication" such as the internet' Cloud computing infrastructure on the other hand is not meant to be an instrument for mass communication" it is a tool that may be used for internal operations of an organi)ation' Therefore" content regulation" strictly spea%ing should be administered on any specific enterprise depending upon the nature of activity underta%en by it and not by the mere fact that it uses cloud computing infrastructure' 3o#ever" the challenge posed by the Cloud relates to the dispersion of data and the possibility that a regulator may ta%e the vie# that content regulation may be applicable to Cloud,hosted VP4 clients" #hich can hide the location of the computer and ma%e enforcement more difficult' 7ith respect to liability" the /uestion is the e6tent to #hich the Cloud provider" client and end user are individually responsible for data transferred to and from the Cloud' &s a corollary" deciding ho# to classify Cloud service providers is also important' @ast year" for e6ample" an Italian court found e6ecutives of a leading service provider liable for a video uploaded to their #ebsite based on a decision to classify them as content providers" rather than simple service providers;despite the fact that the company in /uestion removed the video once alerted' 7hile the case is on appeal" it nonetheless highlights the importance of clear and consistent regulations of content and all the %ey players in the Cloud'F This effort is made more difficult #hen C-Ps do not conduct significant business operations #ithin the country" ma%ing =urisdictional claims more difficult'

14

MIT SCHOOL OF TELECOM MANAGEMENT

:. '3C;R)1< )! C78;D C8M&;1)!:.1 3n*ryption and data +e*urity

<ne of the most fundamental problems facing organi)ations #ho #ant to migrate to theCloud is ho# to protect their data from theft and unauthori)ed access in an environmentin #hich it is fre/uently in transit and;in the case of multi,tenant environments;storedon physical hard#are that is shared #ith other users' +ncryption is one of the %ey tools usedby organi)ations to protect this information' Boreover" ne# technologies strengthenthe controls around data even #hile it is in use: reverse pro6ies" for e6ample" can allo#authenticated" individual access to data on a Cloud server #hile maintaining its encrypted status tothe rest of the #orld' 9espite the gains in encryption security" vulnerabilities still e6ists' <ne is the presence ofgovernment,mandated bac% doors" discussed in the previous section' 7hile they can serve a la#ful purpose" their presence does represent a vulnerability that may be e6ploited by hac%ers searching for a #ea% lin% in the encryption code' Bore commonly" ho#ever" encryption is overcome by more traditional means" namely by obtaining the encryption %ey' This is the case because despite all the advances made in encryptiontechnology" %eys still generally rest in the hands ofindividuals and are open to theft by vulnerabilitiesin #eb bro#sers" personal computers" etc' This e6ample also highlights the general vulnerabilities of the Cloud' 7hile reliance on a net#or% allo#s for greater fle6ibility and scalability" it also creates a single point of attac% for hac%ers #ishing to gain access to data' Boreover" the fle6ibility offered to end users allo#s them to access Cloud services from personal devices as #ell" #hich may have #ea%er security controls' If this potential vulnerability is not addressed" the entire net#or% may be open to attac%' 8inally" the nature of data storage and transfer in the Cloud simply offers more opportunities for hac%ers and other cyber criminals to attempt to gain access' & summary of Cloud computing challenges by +4I-& notes that multi,tenant storage in hybrid or public Cloud
15

MIT SCHOOL OF TELECOM MANAGEMENT

creates a ris% of unauthori)ed access by co,tenants' The report also notes that the increased rate of data transit;both bet#een the Cloud provider and the user and #ithin the Cloud itself;opens data to the ris% of interception' 8inally" the report cautions that 0at least #ith the current state of technology1 users often end up dependent on a single Cloud provider 0%no#n as loc%,in1'5 This not only ma%es users particularly vulnerable to attac%s on that provider" but it also increases the ris% and potential damage done by an inside =ob" i'e'" unauthori)ed access or theft by a disgruntled or dishonest Cloud provider employee'

:.2 4ddre++ing vulnera/ilitie+

The challenges posed above necessitate a coordinated response from both users and providers' Indeed" this is one of the greatest challenges posed by Cloud computing: by outsourcing some services" users necessarily outsource some security as #ell' The response to the vulnerabilities inherent in Cloud computing therefore encompasses purely security,focused controls as #ell as transparency" management and coordination efforts #ith C-Ps to ensurethat security controls remain ade/uate' Central to any attempt to address vulnerabilities in the Cloud are the ne# technologies and innovations in security controls' In this respect" the Cloud can be an asset as #ell as a liability' Bany technologies no# use the greater" scalable computing potential offered by the Cloud to offer more po#erful filtration services and protections against attac%s' Bany #eb content bloc%ing systems use Cloud,based filtration technologies' <ne such use of the Cloud" for e6ample" allo#s it to do realtime analysis of un%no#n #ebsites to determine #hether they pass the filtration settings' The result is that organi)ations can finely calibrate net#or% access to the internet" decreasing the ris% of attac%s from malicious #ebsites' The 200H &ssociation for Computing Bachinery 7or%shop on Cloud Computing presciently noted another danger for #hich the Cloud poses both a uni/ue problem and a solution: &vailability also needs to be considered in the conte6t of an adversary #hose goals are simply to sabotage activities' Increasingly" such adversaries are becoming realistic as political conflict is ta%en onto the #eb" and as the recent cyber attac%s on @ithuania confirm' The damages are not only related to the losses of productivity" but e6tend to losses due to the degraded trust in the nfrastructure" and
16

MIT SCHOOL OF TELECOM MANAGEMENT

potentially costly bac%up measures' The Cloud computing model encourages single points of failure' It is therefore important to develop methods for sustained availability 0in the conte6t of attac%1" and for recovery from attac%' The latter could operate on the basis of minimi)ation of losses" re/uired service levels" or similar measures'$ The most common threat of this nature is a distributed denial of service 099o-1 attac%" #hich operates to disrupt services by overloading servers #ith re/uests' 7hile C-Ps are =ust as open to these attac%s as more traditional net#or%s" the scalability provided by Cloud architecture provides an opportunity;especially for larger providers;to dynamically absorb 99o- attac%s #ithout a loss of service'The ris% of 99o- attac%s underscores the importance of security in the Cloud as #ell as #ithin the organi)ation'

:.3 Data priva*y

The issue of data privacy is closely lin%ed to the problems of data security" data o#nership" and la# enforcement access discussed in previous sections' <n the one hand" vulnerabilities in and the essential fluidity of the Clouds IT architecture open users data up to the ris% of access by third parties" #hether hac%ers" co,tenants in data centers" or trespassing employees' <n the other hand" providerdominated -@&s often contain provisions that #ea%en or outright eliminate users e6clusive control over their sensitive information in certain circumstances' These issues are compounded by mismatches in the privacy la#s of different countries the potential for access by government authorities" both of #hich loom large due to the potentially dispersed locations of Cloud services'Customers 0particularly individual end users1 often tend to be ignorant of these issues and are simply una#are of the privacy ris%s inherent in Cloud,based services' +ven for those #ho are a#are" C-Ps are often reluctant to disclose details about their policies and the routes data ta%e" meaning that customers simply may not %no# #hen their data is stored or transferred through a =urisdiction that poses a higher ris% of interception or interference' 8urthermore" the history of privacy policies for larger Cloud,based companies indicate that companies #hose revenue is based largely on the data mining and aggregation necessary for targeted advertising may not have sufficient incentive to unilaterally protect users information" particularly in the face of relative ignorance andIor apathy in the consumer mar%et' It is #orth noting that the prevalence of form contracts 0and the concomitant privacy concerns1 in the Cloud computing #orld ta%es on special significance in the Indian conte6t due to the language of the IT &ct and subse/uent ?ules regarding personal and sensitive information' -ection JF & imposes liability for a failure to maintain reasonable security practices and procedures" but the #ording of the e6planation of
17

MIT SCHOOL OF TELECOM MANAGEMENT

that section indicates that an agreement bet#een the parties$ might ta%e precedence over the current ?ules" #hich ta%e effect in the absence of such agreement or la#'$ -imilarly" the provisions of the ?ules relating to collection" transfer and disclosure fre/uently refer to the purposes for #hich the information #as collected and the prior consent of the information provider'

:. Remedial mea+ure+ and re*our+e

& predicate consideration to the different #ays to combat privacy concerns in the Cloud is to carefully analy)e and plan the migration itself' -ome organi)ations; particularly those dealing #ith highly sensitive data" simply find that the benefits out#eigh the ris%s' It is also important to note that the ris%s and benefits differ according to #hich Cloud service is being utili)ed'

9. C78;D C8M&;1)!- 4!D -8=3R!M3!1

The challenges facing governance in India are #ell suited in many respects to solutions offered by Cloud,based services' This is particularly true #ith regard to e, governance initiatives aimed at engaging the public;both receiving input and administering regulations;and the delivery of social #elfare programs'<ne of the strategies of 4TP 2052 is To promote synergies bet#een roll,out of broadband and various .overnment programs vi) e, governance" e,panchayat" B4?+.&" 4D4" &&93&?" &&D&-3 tablet etc'$ It further emphasi)es that Cloud computing #ill significantly speed up design and roll out of services" enable social net#or%ing and participative governance and e,Commerce on a scale #hich #as not possible #ith traditional technology solutions'$ Bany of these e,.overnance initiatives or plans re/uire a large amount of information about population etc' 9ue to limited centrali)ation andIor interconnected IT systems" this
18

MIT SCHOOL OF TELECOM MANAGEMENT

information and the e6ercise of collecting such information is often duplicated' .overnment bodies across India including central and state .overnment" -PVs" local .overnments" usually operate #ith moderate to lo# level of IT involvement * many departments having underta%en computeri)ation in the past decade' These difficulties can be overcome by the opportunities provided by virtuali)ed processes and net#or%,dependent services' ?esponsiveness" information sharing and coordination bet#een different areas and levels of government can also be augmented by the potential for scalable and shared resources in the Cloud' 4ot only #ill this result in a significant reduction in capital e6penditure" it #ill also enable building transparent systems and robust reporting and information records systems #hich #ill ultimately help in improved governance and bring efficiency to citi)en services' The India Vision 2020 document states that Indias economic and technological transition #ill be accompanied by a multifaceted political transformation that #ill have profound impact on the functioning of .overnment' This transformation #ill foster decentrali)ation and devolution of po#er to local bodies" including financial devolution and financial responsibility; increasing direct participation of people in setting grass root priorities for distribution of resources" and building and managing local pro=ects; and greater efficiency" transparency" and accountability in .overnment agencies at all levels' +,governance has the potential" if fully harnessed and rightly utili)ed" to radically improve the speed" convenience" /uality and transparency of public administrative services" #hile enhancing the ability of individual citi)ens to e6press and e6ercise their democratic rights'$The 4TP,2052 also supports the above by stating" -trengthen the institutional" legal" and regulatory frame#or% and re,engineer processes to bring in more efficiency" timely decision ma%ing and transparency'$ The Cloud provides public agencies #ith distinct advantages to meet ne# Eopen .overnment re/uirements' Cloud services ma%e available an environment that provides .overnment agencies #ith access to a shared pool of easily usable computing resources 0such as hard#are and soft#are1' &s these benefits directly impact the effectiveness of governance" by allo#ing .overnments to /uic%ly deploy IT resources for ne# e.overnmentinitiatives.overnment bodies across India including central and state
19

MIT SCHOOL OF TELECOM MANAGEMENT

.overnment" -PVs" local .overnments" currently operate #ith moderate to lo# level of IT involvement * many departments having underta%en computeri)ation in the past decade' The Cloud promises to be a panacea for the challenges being faced by the .overnment in the IT space' It presents an opportunity for .overnment bodies to leapfrog the IT enablement #hich developed countries under#ent and set up infrastructure for the ne6t #ave of e.overnance in India' The Cloud can help fulfill the above promise by migrating and adopting appropriate Cloud infrastructure for #idespread implementation of e,.overnance services by .overnment agencies' The Cloud promises to be a panacea for the challenges being faced by the .overnment in the IT space and presents an opportunity for leapfrogging and set up infrastructure for the ne6t #ave of e,.overnance in India'

The Cloud presents the follo#ing advantages to .overnment: > > > The fle6ibility provided by the Cloud infrastructure #ill be leveraged by the .overnment to provide e,.overnance services in a more time,efficient manner' <ne of the tenets of the Cloud is ubi/uitous access* #herein services offered through the Cloud can be accessed by general public from remote locations' Cloud should also be used to enable centrali)ed storage of data across .overnment bodies' Bany current governance related re/uirements revolve around sharing of information among .overnments; +fficiency levels #ill increase #hen Cloud #ill be used for this sharing'

10.

Cloud Computing ,or 4*ademi* 3nvironment

In traditional computing" #e install soft#are programs on system 0computer1

update the hard#are as per our re/uirements' 9ocuments #e create or save are stored in our computer' 9ocuments are accessible on our o#n net#or%" but they cant be accessed by computers outside the net#or%' :sing of cloud computing" the soft#are programs arent run
20

MIT SCHOOL OF TELECOM MANAGEMENT

from ones personal computer" but are rather stored on servers accessed via the Internet' Cloud Computing provides resources and capabilities of Information Technology Cloud computing in academic environment #ill be benefitted by every student and staff #here lots of collaboration and safety of data is needed in academic' &cademic has various departments and many semesters #here lots of students need to access the computing a need for highly available up,to,date soft#are and hard#are is must' Cloud computing has the capacity of scaling and elasticity #hich is perfect for such an environment' +ducation has been gradually e6panded" and the education ob=ect has slo#ly turned to social staff' The teaching method from blac% board to online is gro#ing fast than ever' &n online tutor #hich helps has to ta%e class in any hour is an advance of learning using technology' +,learning and online solution is #hat #e re/uired in education environment' Cloud computing has entirely changes #hat the internet means' Po#erful of des%top application is available on net and storage is available online #herever #e go from any device' +,@earning and #eb 2'0 learning totally changes of education system' Teacher and student #or% together in online pro=ect not in school or colleges but from home also' Teaching has never been easy #ithout cloud computing

10.1 &R)=413 C78;D #8R ;!)=3R')1)3'

Private cloud 0also called internal cloud or corporate cloud1 is a mar%eting term for a proprietary computing architecture that provides hosted services to a limited number of people behind a fire#all'

11.

Cloud Computing )nnovation Coun*il ,or )ndia

21

MIT SCHOOL OF TELECOM MANAGEMENT

55'5 Ba*kground
&t the successful conclusion of the first )333 )nternational Con,eren*e on Cloud Computing in 3merging Market+ >CC3M 2012? at!angalore in 2052" a group of professionals from industry" academia" ?29 labs and government came together to develop a vision for enabling Cloud Computing Innovation in India' -eeing ho# the Cloud Computing paradigm is fast transforming industries and governments around the #orld and the tremendous opportunity for India to lead in this area" haveestablished the follo#ing agenda: &chieve global leadership for India in Cloud Computing :sage" -ervices" <fferings" and Innovation &ccelerate national adoption of Cloud technologies" driven by local e6pertise 9evelopan innovation frame#or% and ecosystem to enable ne# and relevant Cloud Computing initiatives in the country for both national and global impact Contribute to the development of relevant standards at the national and international level0e'g' interoperability" privacy and security 1 and 8oster an environment for multi,sta%eholder partnership and =oint progress There is significant e6pertise in India across industry ?29 @abs" academia" government labs" and startup companies in the technology areas associated #ith cloud computing' Indeed" a significant part of the global development of cloud computing technologies and solutions is happening from India' 3o#ever these efforts have been primarily operating in isolation'.iven thatCloud Computing is a fast emerging and potentially disruptive topic that India cannot afford to ignore" the CCICI group has organi)ed itself as a collaborative thin%,tan% of motivated volunteers focused on promoting innovation and technology driven solutions for and from India' this volunteer group of technologists" forming the Cloud Computing Innovation Council for India 0CCICI1"

22

MIT SCHOOL OF TELECOM MANAGEMENT

11.2 Key Driver+

5' Cloud Computing0CC1"a ne# paradigm in Information Technology 0IT1 and IT +nabled -ervices 0IT+-1" is defining the future of computing' 7hile India has the potential to leap,frog into this paradigm" the adoption and deployment of CC poses a uni/ue set of technological" business and regulatory challenges' Current estimates pro=ect an e6ponential gro#th in the CC mar%et in India from K 0'H ! in 2055 to K J'A ! by 205A' 8ocus on innovation can ma%e CC the dominant IT model and enable a 50L bigger mar%et opportunity' 2' There is significant opportunity for stimulating Indian mar%ets for accelerated adoption of CC" attraction of investments for infrastructure and innovation driven by Indian needs' 8or e6ample" adoption of CC can change the comple6ion of current painful and slo# adoption of e,.overnance in the country' F' ?apid adoption of cloud in the global mar%et and the prolific innovation for the cloud$ and on the cloud$ represents a disruptive play in the ITIIT+- industry' This is a great opportunity as #ell as threat for Indias ITIIT+- industry' <nly a proper strategy and focus on innovation #ill enable Indian industry to ride this #ave and emerge as a global leader" as #as done in EH0s #ith respect to soft#are services e6port or outsourcing' <pportunities to tap the Edisruptive technology based on innovative products" technologies" IPs" standards" business models and early mar%ets both in India and around the #orld

11.3 =i+ion
To provide a collaborative platform to accelerate cloud computing adoption and innovation in India and enable Indias emergence as a Global Leader in Cloud Computing (CC)

23

MIT SCHOOL OF TELECOM MANAGEMENT

11. Mi++ion
1he mi++ion o, the CC)C) i+ to e2e*ute on it+ vi+ion /y promoting a num/er o, *olla/orative initiative+ in )ndia 0ith 0ell.de,ined out*ome+ .

)!)1)41)=3 Provide thought leadership in CC Promote early adoption of CC 9evelopCC solutions to address Indias uni/ue challenges * scale" diversity etc' Creating a globally competitive Innovation +cosystem in India Promote sustained multi,sta%eholder partnership +stablish #orld class technical e6pertise

8;1C8M3' 7hite papers" ?eference &rchitectures Interoperability 2-tandards 8rame#or%" Pilot Pro=ects 0&pps store" prototypes etc'1 Innovation -andbo6" ?esearch pro=ects Incubation of Innovation Clusters" Venture Capital funding" academia driven research partnership" mentoring start,ups etc' Innovation proposals leading to PPPCollaborations Conferences" #or%shops" e@earning" challenges" a#ards" participation in global forums

11." '*ope@ 8rgani6ation@ and &rogre++ till date

&fter starting as an informal group" the CCICI has no# been registered as a formal entity under the I+++ -tandards &ssociation * Industry Connections program' This provides an incubation umbrella and accessto collaboration tools and other best practices for governance' CCICI today is operating #ith an +6ecutive Committee" various 7or%ing .roups 07.1 and sub,groups addressing different topics identified from time to time'

24

MIT SCHOOL OF TELECOM MANAGEMENT