How Difficult Is Securing Cloud Platforms?

In my dark moments I worry about the security of cloud computing. I used to be pretty upbeat about security, until some servers I was using to run a small specialist java hosting business were hacked. This resulted in the collapse of that business and the loss of several customer sites. Since then I have been painfully aware of the need to keep any public system scrupulously up-to-date with security patches and suchlike.

My security worries give me concerns about launching a business based on Amazon’s EC2, as I cannot see at the moment how the fiddly details of keeping the virtual system images patched an up to date will happen. Please feel free to reassure me!

When I read the title of this article from the Java Developer’s Journal, this was my immediate thought. The article does not address this particular issue, but instead covers some of the problems of protecting data in transit between distributed systems.

Amazon Web Services Developer Community : Example code and libraries

I’ve still not got fully up to speed on using Amazon’s cloud services, but this looks useful. A whole bunch of code examples and libraries for a variety of languages

Amazon Web Services Developer Community : Amazon SimpleDB.

More Cloud platforms: Hadoop, Eucalyptus, 10gen

A lot of the cloud computing hype is grabbed by Amazon and Google, but alongside those giants of the field there are a lot of smaller projects and organisations trying to push and grow cloud concepts. Here are a few which I have bumped into recently.

Cloud platforms of the future: Hadoop and Eucalyptus | Negative Approach – CNET News

10gen

Amazon’s SimpleDB Enters Public Beta

Sometimes I think I am becoming a cracked record with my intention to seriously evaluate the various “cloud computing” offerings, but with the news that Amazon have opened their SimpleDB service to the public I reckon I would be a fool to do anything else.

InfoQ: Amazon’s SimpleDB Enters Public Beta

Experimenting with GigaSpaces

As I was driving home from work yesterday it occurred to me that Sun seemed to somehow have missed a golden opportunity a few years ago. Their motto for ages was/is “The Network is the Computer” but the names everyone thinks of for “cloud” technology do not include Sun. What is most saddening is that several years ago Sun had some incredibly cool technology which, looking back, seems a perfect fit for the new cloud-based world. I’m referring to Jini, Sun’s auto-scaling, auto-provisioning, mobile code, service-discovering network thingamabob.

I loved the idea of Jini when it was first released (I still have half a dozen Jini books around my office), but it had some significant problems. Most important was the general fiddliness of getting anything working. Even a simple “hello world” demonstration required messing with class paths and running several picky and fragile command line scripts. A world of difference from the state of web application deployment at the time. Despite several point releases, this never really got any easier or more comprehensible. Jini certainly helped make the complex possible, but it certainly did not make the simple, simple.

When I got home after this rumination, I looked around a bit to see what had happened to Jini and if it had any relevance in the brave new world of Amazon and Google. I was pleasantly surprised.

One of the key early Jini services was JavaSpaces. Equally fiddly to set up and comprehend, but powerful and scaleable, and very much in the spirit of the grid/cloud approach. Effectively, Jini and JavaSpaces have developed to become GigaSpaces, a commercial product which attempts to solve the problems of Jini and present it as a contender in today’s world. A sure sign that the GigaSpaces folks “get it” is the way they are integrating with Amazon’s cloud offerings.

The extent of my experimentation so far has largely been limited to following their “hello world” tutorial on my local system. There were one or two hitches, such as the parts of the tutorial code which use Eclipse requiring the project directory names to start with “hello-”, but the build/run batch scripts requiring names without the prefix. Other than that, the process was pretty painless, certainly compared to my experiences with early Jini. Next steps are to try creating my own small application, then to deploy it on the “cloud” and see if the ease of use continues.

As it stands I am impressed.

Comparing Amazon’s EC2, Google’s App Engine and Microsoft’s Azure

“Cloud computing” is still very high on my list of things I need to get up to speed on. One trouble is that innovation in this area seems to be coming faster than I have time to experiment. Still, this article seems a useful summary of the current state of play.

InfoQ: Comparing Amazon’s EC2, Google’s App Engine and Microsoft’s Azure

Early Amazon

I’m going to have to read these articles. Jason Yip recommends Geeking with Greg: Early Amazon as a fascinating insight into the inception and growth of Amazon.