Cloud Delivery and Hosting Models - Deploying and Managing a Cloud Infrastructure - page 169

pass despite software-level restrictions and security measures, then the NIC manufacturer
can be held accountable for releasing an inherently vulnerable product. The same goes for
software, and that is why software is being patched periodically after various exploits and
vulnerabilities are discovered by the developers themselves through extended testing or are
found because of an attack. Whatever the case, the blame will initially be placed on the one
running the show.
Individual hardware and software distributors for different parts used in
the system assume responsibility and accountability by releasing regular
software maintenance and updates because, technically, customers are
still regularly paying licensing fees in some cases.
Public Cloud Accountability
Various entities are working to clarify and standardize many things about the cloud, and
determining who is responsible when something goes wrong is one of them. But those stan-
dards are not in place yet, so we turn to the old-fashioned way, which is to dig a bit and try
to evenly spread the blame. In a public cloud offering, data owners are ultimately account-
able for maintaining control and security over their own information. However, the cloud
introduces a shared level of responsibility between the data owner and the cloud service
provider together with all other players in the system.
To understand better the complexity of the cloud, we must each look at the key roles of
the players in the arena:
Infrastructure Suppliers They develop the equipment and software used for IP networking
in all cloud service and delivery models. They develop the hardware (such as the processors
and memory), the servers themselves, NICs, storage devices, networking equipment, server
software, hypervisors , and other essential parts of the system. Example players would be
HP and Dell for full servers, Intel for some processors and storage devices as well, and
Microsoft for operating systems such as Windows Server 2012.
IP Network Providers These provide the networking infrastructure in and out of the
cloud system and include most telecommunications companies and ISPs. They provide
networking services to service providers and end users alike. You will know who they
are depending on your region because they will be the ones providing you with telephone
lines, cellular services, and Internet access (for example, AT&T in the United States and
Vodafone in Europe). They need infrastructure suppliers to create their vast networks.
Cloud Service Providers These entities own the computing equipment and infrastructure
where cloud environments are set up. They buy equipment and services from the infrastruc-
ture suppliers and IP network providers. Notable ones are Amazon Web Services (AWS),
Google Cloud, Microsoft Cloud, and Rackspace.