Diploma Thesis DIP-3538

BibliographySun, Mengjie: Risk assessment-based decision support for the migration of application to the Cloud.
University of Stuttgart, Faculty of Computer Science, Electrical Engineering, and Information Technology, Diploma Thesis No. 3538 (2014).
85 pages, english.
CR-SchemaD.2.1 (Software Engineering Requirements/Specifications)
H.3.3 (Information Search and Retrieval)
K.6.5 (Security and Protection)
Abstract

Abstract

Cloud computing is described by NIST as a model for enabling network access to a shared pool of computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction. With the advantages such as flexibility, scalability and expenditure reduction, cloud computing attract many enterprises to begin to consider the migration of applications into Cloud. However, open issues like cloud reliability, economic requirements, performance goals, compliance enforcement and information safety should be certainly taken into account. In this thesis we focus on identifying and classifying risks with different migration types according to the template defined by IRM, developing a migration support system that supports stakeholders to make decisions before migration applications to the Cloud, implementing the system logic as a set of Web service, and evaluating the system.

Contents 1 Introduction 1 1.1 Motivation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1.2 Problem Definition and Goal . . . . . . . . . . . . . . . . . . . . .2 1.3 Outline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2 Background 5 2.1 Cloud Computing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2.1.1 Service Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . 6 2.1.2 Deployment Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 2.2 Cloud Migration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.2.1 Application Architecture . . . . . . . . . . . . . . . . . . . . . . . . 8 2.2.2 Migration Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2.3 Decision Support Systems for Cloud Migration . . . . . . . 9 2.3.1 Decision Support Systems . . . . . . . . . . . . . . . . . . . . . . . 9 2.3.2 Cloud Adoption Toolkit . . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.4 Risk Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15 2.4.1 External and Internal Factors . . . . . . . . . . . . . . . . . . . . . 15 2.4.2 Risk Management Framework . . . . . . . . . . . . . . . . . . . . . 18 2.4.3 Risk Management Process . . . . . . . . . . . . . . . . . . . . . . . 19 2.5 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 3 Risk Assessment for Cloud Migration 23 3.1 Catalogue Creation Process . . . . . . . . . . . . . . . . . . . . . . 23 3.1.1 Risk Description Standard . . . . . . . . . . . . . . . . . . . . . . . 23 3.1.2 Process of Risk Identification . . . . . . . . . . . . . . . . . . . . . 25 3.2 Risk Catalogue (Cloud Migration) . . . . . . . . . . . . . . . . . . 28 3.2.1 Name of Risk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.2.2 Scope of Risk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.2.3 Nature of Risk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 3.2.4 Stakeholders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.2.5 Quantification of Risk . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.2.6 Risk Tolerance / Appetite . . . . . . . . . . . . . . . . . . . . . . . . . 29 3.2.7 Risk Treatment & Control Mechanisms . . . . . . . . . . . . . .30 3.2.8 Potential Action for Improvement . . . . . . . . . . . . . . . . . . 31 3.2.9 Strategy and Policy Developments . . . . . . . . . . . . . . . . . 31 3.3 Discussion & Summary . . . . . . . . . . . . . . . . . . . . . . . . . . .32 4 Design & Implementation 33 4.1 Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 4.2 Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 4.3 Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 4.3.1 System Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35 4.3.2 Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 4.3.3 User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 4.4 Implementation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 4.4.1 Risk database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 4.4.2 RESTful Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 4.4.3 User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 4.5 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 5 Evaluation 51 6 Conclusions 55 6.1 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 6.2 Future Work . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Appendix 57 A.1 Strategy and Policy Developments . . . . . . . . . . . . . . . . . . .57 A.2 Risk Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 A.3 Use Cases of Cloud Migration with Risks . . . . . . . . . . . . . . 74 Bibliography 79

Full text and
other links
PDF (3275623 Bytes)
Department(s)University of Stuttgart, Institute of Architecture of Application Systems
Superviser(s)Andrikopoulos, Vasilios
Entry dateMarch 11, 2014
   Publ. Computer Science