Question

How NIST defined Cloud Computing? What are its five Essential Characteristics, Three service models and four deployment models? Explain each one in detail with example.

Answer 1

Answer:-

How NIST defined Cloud Computing?

NIST is credited with having the most succinct and accurate definition of Cloud Computing, the term itself was first coined nearly 15 years prior when Netscapes Web browser was big news. In 2011, NIST defined cloud computing as a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This short description is intended to serve as a means for broad comparisons of cloud services and deployment strategies while providing a baseline for discussion on the overall best uses for cloud computing.

NISTs definition identified self-service, accessibility from desktops, laptops, and mobile phones, resources that are pooled among multiple users and applications, elastic resources that can be rapidly reapportioned as needed, and measured service as the five essential characteristics of cloud computing. When these characteristics are combined, they create cloud computing infrastructure that contains both a physical layer and an abstraction layer. The physical layer consists of hardware resources that support the cloud services (i.e. servers, storage and network components). The abstraction layer consists of the software deployed across the physical layer, thereby expressing the essential characteristics of the cloud per NISTs definition.

five Essential Characteristics:-

NIST five essential characteristics of Cloud Computing

1. On demand self-service
2. Broad network access
3. Resource pooling
4. Rapid Elasticity
5. Measured service

Three service models:-

Service Models

The many paradigms of cloud computing can be broken down into three unique service model classifications: Software as a Service (SaaS), Platform as a Service (PaaS), and Infrastructure as a Service (IaaS). NIST defines each of these three service models in a highly technical sense that we will deconstruct into layman’s terms for you to easily digest in the below subheadings.

Software As A Service (SaaS)

NIST defines SaaS as a service model where a consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings. SaaS applications offer extensive configuration options and development environments that enable customers to code their own modifications and additions. Users access the service via a web browser or app buying the service on a per-seat or per-user basis. The beauty of SaaS is in its simplicity as local installation of SaaS software is unnecessary. It is for this reason that most consumers gravitate towards using this service model over other service models.

Platform As A Service (PaaS)

NIST defines PaaS as a service model that allows consumers to deploy onto the consumer-created cloud infrastructure or acquired applications created using shared programming tools, processes, and APIs to accelerate the development, test, and deployment of applications. This service model provides users with application platforms and databases that is similar in function to middleware services. PaaS can automatically configure infrastructure resources across consumer-created environments, making them a platform for hybrid cloud. Due to its complexity and need for consumers to be technically proficient in software development technologies, such as Ruby on Rails, .NET, Python, or Java, it is the smallest part of the Cloud Computing market to date. Once the consumers final code is complete, the cloud service provider will begin to host the application, thus making it available to other internet users.

Infrastructure As A Service (IaaS)

NIST tells us that IaaS gives the consumer [the ability to] provision processing, storage, networks, and other fundamental computing resources where the consumer deploys and runs arbitrary software which can include operating systems and applications. IaaS provides consumers with rented physical or virtual servers and networking along with storage in a cloud environment on a pay per usage basis. In essence, IaaS is the most basic service model tech companies use to access raw computing power without the responsibilities of installation or maintenance.

Four Deployment Models:-

A cloud deployment models represent a specific type of cloud environment that are distinguished by ownership, size, and access. NIST offers guidance via their definitions of each of the four deployment cloud models (Private, Community, Public, and Hybrid). Although a one-size-fits all cloud solution does not exist, each model offers to fill a specific niche for a client based on its inherent features and abilities. In the following prompts, well aim to make sense of NISTs technical definitions of these deployment models to help you better understand which solutions fits the needs of your firm best.

Private Cloud

Private cloud computing is a deployment model that is purchased and dedicated to a single client or company in a single-tenant environment where the hardware, storage and network assume the highest levels of security. Data that is stored in the private clouds data center cannot be accessed by anyone other than the client that owns it. This is a great solution for organizations that feel as though their data is too sensitive or valuable to put on a public, community or hybrid cloud.

The private cloud also gives administrators the ability to automate their data center thereby minimizing manual provisioning and management which is incredibly important for safe and secure day-to-day operations to flourish. Better yet, the private cloud is a great solution for firms wishing to stay PCI and HIPAA compliant as this model allows sensitive data to be delivered through a fully private cloud deployment within the network configurations that only they own.

Community Cloud

NIST defines a community cloud deployment model as one that is used exclusively by a specific community of consumers from organizations that have shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises. This multi-tenant platform allows several companies work on the same platform if they share similar needs and concerns. Community clouds allows companies to collaborate on joint projects, applications, or research in a secure setting. This is deployment model is great for organizations that need to test-drive their high-end security products that are driven by compliance and regulatory measures.

Public Cloud

A public cloud is a deployment model that is owned by cloud service providers and made available to the public. Customers can gain new capabilities on demand without investing in new hardware or software by tapping into the public cloud. Customers simply pay their cloud provider a subscription fee or pay for only for the resources they wish to use. The vendor is then responsible for all the administration, maintenance, capacity planning, backups, and troubleshooting. Each public cloud can simultaneously handle massive amounts of storage that allows businesses the ability to handle multiple projects and become more available to their users at a moments notice.

Many companies from Facebook to Google and mobile app developers use public clouds to effectively manage the flow of user data. With more users signing up for these services, companies have been pooling more of their resources into public clouds as of late. Analysts are projecting massive growth in worldwide public cloud spending as is evident by the below forecast:

Table 1. Worldwide Public Cloud Spending Forecast (Millions of Dollars)
Type of Public Cloud	2016	2017	2018	2019	2020	5-year Growth Trend %
Cloud Business Process Services (BPaaS)	40,812	43,772	47,556	51,652	56,176	37.65%
Cloud Application Infrastructure Services (PaaS)	7,169	8,851	10,616	12,580	14,798	106.42%
Cloud Application Services (SaaS)	38,567	46,331	55,143	64,870	75,734	96.37%
Cloud Management and Security Services	7,150	8,768	10,427	12,159	14,004	95.86%
Cloud System Infrastructure Services (IaaS)	25,290	34,603	45,559	57,897	71,552	182.93%
Cloud Advertising	90,257	104,516	118,520	133,566	151,091	67.40%
Total Market	209,245	246,841	287,821	332,724	383,355	83.21

Hybrid Cloud

Hybrid cloud deployment models are a collaboration of private and public cloud models in a single environment. Hybrid clouds are comprised of parallel environments where applications can easily move between private and public clouds. Hybrid clouds are bound together by proprietary technology that enables data and application portability. Hybrid clouds offers more IT teams more flexibility, portability, and scalability than other deployment models which is the main reason why 58% of global enterprises have integrated a hybrid cloud architecture in their IT infrastructure. Companies that are constantly transitioning between managing public cloud projects and building applications of a sensitive nature on their private cloud is likely to seek out a hybrid cloud solution.