In response to a cloud computing question I posted to an online forum discussion a concern was raised about security. Here is the unedited response in full:
“I think cloud computing is extreamly dangerous. There are enough problems with viruses now. IF people were able to exploite holes in componants use din cloud modules or even write systems with back doors in would anyone be sure thyey have a sucure or safe system?”
As I noted in previous posts, security is indeed one of the key drivers of the adoption of cloud computing. And trust will be a crucial ingredient in the “crossing of the chasm” of this technology and use model.
There is always mistrust of new technologies. (Did you know that in the very early days of the motor car some scientists believed that passengers would suffocate at speeds over 20 mph?) Some mistrust is well placed and drives innovative counter measures. Others will need greater familiarity with the technology and leaders to follow.
To address the first aspect of the posters concern though - viruses and their contagion.
For a virus to be communicated three things need to occur.
- Placement of the virus at the source.
- Inadvertent download of the virus by the user.
- Execution of the virus on the local machine.
There are three parties one could imagine placing the virus within the remote hosted application in the cloud: the cloud computing host company, the vendor of the hosted software, and users of the hosted software. For a cloud computing company to go to all of the time and expense in developing sophisticated cloud computing platforms such as Xuropa’s Online Labs just to spread a virus is nonsensical. Like-wise, for the owner of the electronic design software to place a virus within the Online Lab they are using does not make any sense whatsoever. The last suspect, other users, could have the motive, but they will not have the means.
Consider the use model of a Cloud Computing-based EDA tool in the context of a Xuropa Online Lab as an example. Every time the remote tool is accessed through a lab session, the environment is provisioned fresh and new from an image that is created by the tool vendor and Xuropa engineers for the Online Lab. This image is inaccessible to a user.
While the session is active, only users that are explicitly invited into the lab session can have access to the work being carried out by the person who initiated the session. There is no way for someone to sneak in via a “backdoor”.
If the user was malicious and did upload a virus to the Online Lab they would be very disappointed. After every lab session has ended all data is erased, all processes on the lab are terminated and a thorough clean of the remote environment is carried out.
The Online Labs hosted on the Xuropa Platform today are even more secure in that they do not provide any upload or download capabilities by design. No code is executed locally. This talks to the gradual progression to the cloud of a previous post. There are great benefits to be gained by leveraging cloud computing without leaping straight into design and development. Training, demonstrations, workshops, pre-evaluation, and technical support to name just a few.
Which brings me to a follow up observation: mailing of CD’s for evaluation.
Today I opened the EDA Tech Forum magazine and it contained a CD from a nameless EDA vendor. At the bottom of the CD is written “Every effort has been made to ensure that this disk is virus-free. “XYZ Company” is not responsible for any disruption, damage and/or loss to your data or system that may occur while using this CD. As with all software we recommend running a virus scanner before use.”
I’m sure that this CD is fine. The probability of it containing a virus is very, very low. However, the reason why the lawyers of XYZ Company told their marketing department to include that disclaimer is because of control. More specifically, it is because of the lack of control. Once that CD leaves the door of the vendor they don’t know where it could go and through how many hands it will pass. It is highly unlikely that they burned the CD themselves either. They will have used a service provider that stamps out CD’s with the label by the hundreds at low cost. Again, another point of loss of control that keeps the lawyers up at night.
However, with a Xuropa Online Lab you not only have complete control over the environment and who uses it, you also don’t have to go to the wasted expense of sending out hundreds and thousands of CD’s to people that have no interest in the product at all. (Not a very green approach either.)
So in summary, the cloud is extremely secure. It is in everybody’s best interest to make it even more secure. For those malcontents with too much time on their hands life will actually get more limited with a move to the cloud.
You can reduce your overall marketing costs, decrease your “carbon footprint”, and let your lawyers sleep easier by moving to the cloud.
Keep control and keep lawyer fees to a minimum - not a bad thought going into the new year.
Click here to register for the Xuropa Online Electronic Design Community
Posted under Features, Xuropa, business, industry, marketing
Great news from Amazon Web Services (AWS) yesterday - they’ve made it easier to get your data up into the cloud. All you have to do is ship them the raw SATA drive and they’ll plug it in. Easy! And they’re now accepting capacities up to 4TB.
