Paul Watson Digital Institute & School of Computing Science, Newcastle University, UK

1. Cloud Computing for Social Inclusion Paul Watson Digital Institute & School of Computing Science, Newcastle University, UK Funders: RCUK Digital Economy Programme (SiDE), Microsoft, Red Hat, EU (Venus-C)

2. Social Exclusion The result of related factors that prevent individuals or groups from participating fully in the economic, social & political life of society

3. €15M Digital Economy Research “Hub” • Funded by the UK Research Councils • 2009-2014 • based at Newcastle & Dundee Universities

4. Plan • How can Digital Technologies transform the lives of excluded people? • How can Cloud Computing transform Science?

7. Accelerometer Video http://www.youtube.com/watch?v=hlmsrJOheS8&list=UUiYv8UGLm8KEIM0J4G-lbIw&index=5&feature=plcp

8. Analysis Sleep Activity Stability Grip … … Information for Users Clinician’s Report Methodology section for papers

9. Analysis Sleep Activity Stability Grip … … Cloud Information for Users Clinician’s Report Methodology section for papers

10. Cloud Computing • Opportunity to revolutionise IT (and Science) • On-demand resources • Pay-as-you–go

11. Cloud Computing • Opportunity to revolutionise IT (and Science) • On-demand resources • Pay-as-you–go • But Major Barriers • Building Cloud-based systems • Security

12. Cloud Computing • Opportunity to revolutionise IT (and Science) • On-demand resources • Pay-as-you–go • But Major Barriers • Building Cloud-based systems • Security • Our work to address this:

13. Building on Cloud Infrastructure App 1 App n .... Cloud Infrastructure: Storage & Compute

14. Problems Science requires apps to be: scalable, reliable, secure App 1 App n .... This requires: expertise time, money, Cloud Infrastructure: Storage & Compute

16. Cloud Catch 22 Most Projects & Organisations that could benefit most from the cloud lack the IT skills to do so

17.  App 1 App n .... Cloud Platform App 1 App n .... Cloud Infrastructure: Storage & Compute Cloud Infrastructure: Storage & Compute

18. .... App App Analysis Services API Security Provenance/ Audit Social Networking Workflow Enactment Metadata <expt>9127</expt> <smiles>CHC3</smiles> Processing Cloud Infrastructure: Amazon, Azure, Private Clouds Storage

19. e-Science Central Video http://www.youtube.com/watch?v=3rW2-W3cL0U

26. applications • UK National X-ray photoelectron spectroscopy service • speech to text applications • Supporting computer games for rehabilitating stroke victims • machine learning • neuroscience

27. Scaling Response Time: 460K workflow executions 4.4M service calls 200 Nodes 5yrs  10 hours

28. Cloud Security Challenges Patient Data Accelerometer Data Results Smith 378456729 Anonymize Analyze p = 30% q = 27.4 r = 34 d0 s1 d2 s3 d4

29. Public XOR Private Clouds Application Secure Other e-Science Central e-Science Central e-Science Central Amazon Azure Private Cloud

30. Problem Patient Data Accelerometer Data • Can’t exploit multiple clouds in one workflow Results Smith 378456729 Anonymize Analyze p = 30% q = 27.4 r = 34 d0 s1 d2 s3 d4

31. Method(P. Watson, A Multi-Level Security Model for Partitioning Workflows over Federated Clouds IEEE CloudCom 2011) • Assign Security Level to each Workflow Block • Check conforms to Bell-LaPadula • Assign Security Level to each Cloud • Determine possible allocations of blocks to clouds • Determine candidate workflow partitioning • Add inter-cloud data transfers • Filter • Apply Cost Model to Rank candidate solutions http://www.cs.ncl.ac.uk/publications/trs/papers/1271.pdf

32. Bell LaPadula for Workflows d2 d0 s1 No Read Up No Write Down

33. 1. Assign Security Level to each Workflow Block Patient Data Heart Rate Data Results Smith 378456729 Anonymize Analyze p = 30% q = 27.4 r = 34 d0 s1 d2 s3 d4 Location:10000 Clearance:10

34. 3. Assign Security Level to each Cloud Public Private C1 C0 Location: 1 0

35. Extend Bell-LaPadula so a block cannot be deployed on a cloud with a lower security level d2 d0 s1 pa pb pc

36. 5. Determine candidate workflow allocations

37. 6. Add Inter-Cloud Transfers

38. 6. Add Inter-Cloud Transfers

39. 7. Filter copy d2 onto pb copy d0 onto pa

40. Valid Workflows

41. 8. Apply Cost Model to Rank candidate solutions Data Costs

42. 8. Apply Cost Model to Rank candidate solutions CPU Costs

43. 8. Apply Cost Model to Rank candidate solutions Transfer Costs

44. 8. Apply Cost Model to Rank candidate solutions

45. 8. Apply Cost Model to Rank candidate solutions: Example 1

46. Workflow Costs #1 1 4 5 3 6 2

47. 8. Apply Cost Model to Rank candidate solutions: Example 2.

48. Workflow Costs #2 1 2 6 5 3 4

49. A Systematic Approach to Cloud Federation Security, Dependability, Performance Requirements Application Policy Manager e-Science Central e-Science Central e-Science Central Amazon Azure Private Cloud

50. How can people remain healthy and in their own homes for longer? Professor Patrick Olivier