Cloud Usability Framework National Institute of Standards and Technology US Department of Commerce Cloud Usability Framework Brian Stanton (NIST) Mary Theofanos (NIST)

What is the Cloud? “Cloud computing is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction.” The NIST definition of cloud computing NIST Definition of Cloud Computing (Special Publication 800-145)

NIST Cloud Computing Reference Architecture (November 2011 Release 1 NIST Cloud Computing Reference Architecture (November 2011 Release 1.0 draft) Cloud Consumer Cloud Provider Cloud Broker Service Orchestration Cloud Service Management Security Privacy Service Layer Service Intermediation SaaS Cloud Auditor PaaS Business Support Service Aggregation IaaS Security Audit Resource Abstraction and Control Layer Provisioning Configuration Service Arbitrage Privacy Impact Audit Physical Resource Layer Portability Interoperability Hardware Performance Audit Facility Cloud Carrier

NIST Cloud Computing Reference Architecture (November 2011 Release 1 NIST Cloud Computing Reference Architecture (November 2011 Release 1.0 draft) Cloud Consumer Cloud Provider Cloud Broker A composition of system components to support the cloud provider activities in arrangement, coordination, and management of computing resources in order to provide cloud services to cloud consumers. Service Orchestration Cloud Service Management Security Privacy Service Layer Service Intermediation SaaS Cloud Auditor PaaS Business Support Service Aggregation IaaS Security Audit Resource Abstraction and Control Layer Provisioning Configuration Service Arbitrage Privacy Impact Audit Physical Resource Layer Portability Interoperability Hardware Performance Audit Facility Cloud Carrier

Cloud Service Models SaaS Software as a service PaaS Provides consumers the use of applications in the cloud PaaS Platform as a service Provides consumers who have software the tools, programming languages, and services IaaS Infrastructure as a service Provides consumers with the ability to provision, processing, storage, and resources (including OS)

Cloud User Experience The end user experiences the cloud and the cloud based services through the applications. These applications in turn are effected by the cloud infrastructure End User User Experience Cloud Application Service

What is Usability? Extent to which a system, product, or service can be used by specified users to achieve specified goals with effectiveness, efficiency, and satisfaction in a specified context of use. Effectiveness, Efficiency, Satisfaction primary drivers for Cloud Usability Cloud Consumers = Organization + End Users

What is Usability? efficiency effectiveness satisfaction accuracy and completeness with which users achieve specified goals resources expended in relation to the accuracy and completeness with which users achieve goals effectiveness freedom from discomfort and positive attitudes towards the use of the product satisfaction

Cloud Usability Framework Our Framework provides a structure to evaluate the key attributes of the cloud user experience. Divided into five attributes and 20 elements Capable Personal Reliable Secure Valuable

Cloud Usability Framework Capable Current Device Independence Platform Independence Functions Personal Accessibility Personalization/ Customization Data Ownership Identity Management (access) Control Reliable Available Responsive Consistent Transparency Secure Security Privacy Identity Management (authorization) Trust Valuable Savings User satisfaction Utility Cloud Consumer

Elements of Capable Attribute Current: Based on the latest technology. Platform Independence: Consumers want the cloud service to be independent of the cloud hardware, Operating System, etc. so that the service can function correctly on any device hardware and software setup. Device Independence: Consumers should be able to access the cloud service using any device type – fixed or mobile. Cloud Functionality: provide functionality better than other platforms.

Elements of Personal Attribute Accessibility: The cloud users expect the cloud to be accessible to consumers with a variety of needs. Customization: The cloud should allow consumers to change their user interface to suit their needs. Control: The consumer should have a sense of control over the functionality of the cloud service. Data Ownership: Consumers should have ownership over the data they store in the cloud services they use. Identity Management (access): To ensure ease of use, multiple access authentications will have to be implemented in a seamless manner

Elements of Reliable Attribute Available: Cloud users should expect high service availability. Responsive: cloud consumers should want the cloud services to have high degree of performance. Consistent: A cloud service should exhibit the same functionality under every situation. Transparency: The cloud service provider’s service policies and technology should be transparent to the cloud consumer organization. Organizational users should have virtual access, as needed, to the cloud datacenter and have details about the cloud platform’s capabilities and planned changes.

Elements of Secure Attribute Security: Cloud users expect the cloud be resistant to attacks from unauthorized users, other cloud services, malicious software and attacks on cloud hardware and Internet network. Also the users expect to be protected from threats coming from the cloud Privacy: Cloud users expect the cloud service can prevent leakage of data that compromises end user’s private data like personal information, financial accounts, geo-location (if not desired by the user) etc. Identity Management (authorization): The cloud service shouldn’t allow unauthorized users to access user data or execute any process Trust: The user must have confidence in the cloud system

Elements of Valuable Attribute Savings: cost savings, resource savings. User satisfaction: The user satisfaction measure should be high. Utility: provide new features that are better than with any other IT setup. Distributed computing with large datasets (Big Data) Mobile / pervasive computing.

Thank You Brian.stanton@nist.gov Mary.theofanos@nist.gov