Re: [id-cloud] Gap Analysis Note: Use Case 1: Application and Virtualization Security in the Cloud

[Daniel Turissini <turissd@orc.com>]

However, the challenge is how the UUID is managed/ governed.

On 10/20/11 4:29 PM, Peter F Brown wrote:

Hyper-V also uses UUID's for VMs... one issue is (or at least was, some time back) whether a new UUID is generated or not when a VM is moved to another host.

-Peter

-----Original Message-----
From: id-cloud@lists.oasis-open.org [mailto:id-cloud@lists.oasis-open.org] On Behalf Of Anil Saldhana
Sent: 20 October 2011 15:04
To: id-cloud@lists.oasis-open.org
Subject: Re: [id-cloud] Gap Analysis Note: Use Case 1: Application and Virtualization Security in the Cloud

During the last meeting, I had asked the question about whether VMs had unique identifiers.  I was able to get some information on this from the Red Hat Virtualization folks.

They have listed the various identifiers for VMs here: 
https://github.com/matahari/matahari/wiki/UUIDs

 From what I see, there is no real standard for VM IDs.  All of them use UUIDs which is fine. But I am unsure if there is any standard in virtualization that specifies how and what constitutes the VM identifiers.

On 10/17/2011 12:49 PM, Anil Saldhana wrote:

Hi All,
  here is a note that is useful during the gap analysis discussion for 
use case 1.

The attached diagram is a pictorial representation of the use case.

The applications may use federated identity or a local identity that 
is proofed against a local cloud security service.

The virtual machines (VMs) represented as guest operating system 
running on a server (with a host operating system) can have a VMID.

There can be multiple adminstrators:  Server,  Host OS, VM and 
Application.


Specifications that may be applicable are:
1) Federated Identity Standards:  SAML, WS-Trust, OpenID, oAuth.
2) Virtual Machine Standards.
3) Directory Standards.
* Cloud Directory services that may be used by the cloud provider.
4) VPN Standards.
* For secure connections into enterprise LAN for enterprise directory 
access.

Regards,
Anil

---------------------------------------------------------------------
To unsubscribe, e-mail: id-cloud-unsubscribe@lists.oasis-open.org
For additional commands, e-mail: id-cloud-help@lists.oasis-open.org




---------------------------------------------------------------------
To unsubscribe, e-mail: id-cloud-unsubscribe@lists.oasis-open.org
For additional commands, e-mail: id-cloud-help@lists.oasis-open.org

--

Daniel E. Turissini,

CEO, Operational Research Consultants, Inc. 

 

11250 Waples Mill Road, South Tower, Suite 210, Fairfax, Virginia 22030

 

703-246-8550

 

:: View the ORC/ FiXs Presentation [http://tinyurl.com/p6rs52] from AFCEA LandWarNet 2009 ::

 

The information transmitted in this e-mail is for the exclusive use of the person or entity to which it is addressed and may contain legally privileged or confidential information. If you are not the intended recipient of this e-mail, you are prohibited from reading, printing, duplicating, disseminating or otherwise using or acting in reliance upon this information. If you have received this information in error, please notify the sender at Operational Research Consultants, Inc. immediately, delete this information from your computer and destroy all copies of the information.