Vulnerabilities / Threats // Insider Threats
10/4/2010
11:53 AM
Connect Directly
RSS
E-Mail
50%
50%

KT Launches Large Scale Private Cloud

Leading Korean telecom partners with Cloudscaling to develop platform for data-intensive mobile services.




Slideshow: Amazon's Case For Enterprise Cloud Computing
(click for larger image and for full photo gallery)
KT, Korea's largest fixed-line operator and its second largest mobile carrier, has launched the nation's first large-scale, private cloud. It will serve as a platform for data-intensive services to devices such as smartphones and tablet PCs, as well as to deliver computing infrastructure to its internal enterprise.

"Telcos should focus on the explosion of data from smartphones, the Internet, and multimedia. We should prepare for continued data growth in the future. There will be many opportunities to provide applications supporting this data explosion. We think cloud is the right technology solution to accomplish this," said Jung-sik Suh, senior VP, cloud services business unit, at KT.

Telecommunications provider KT elected to partner with San Francisco-based Cloudscaling, in part because of the service provider's use of commodity hardware, open source software, and automation, said Suh.

"The leaders in cloud technology are Internet companies, not telcos or enterprise IT companies," he said. "We wanted a cloud computing partner that understood our vision for cloud services, which is a cost-competitive offering at a high quality of service."

By using a private cloud, KT can eliminate systems that require the manual management of virtual servers, moving instead to automated management -- a more cost-effective and efficient approach, according to the company. In fact, the first phase will consolidate 9,800 servers onto the new cloud infrastructure, KT said.

"KT's approach to cloud computing is bold," said Randy Bias, CEO and founder of Cloudscaling. "Modeling their cloud computing architecture after the most efficient and lowest-cost public cloud providers should allow them to leapfrog regional competitors who are building clouds based on enterprise architectures."

Other partners include Intel, Citrix, Nexenta, Cloud.com, and SP Korea, according to Cloudscaling.

"We used commodity hardware to keep the up-front and ongoing [capital expenditure] costs down. The software stack is based heavily on free and/or open source software to lower the license costs. The system was designed for failure," said Bias. "Cloud infrastructure must be highly available, which means hardware and software failure should not interrupt the service. These loosely coupled services should be automatically provisioned, deployed, and managed."

The Cloudscaling team brings together experience building and managing cloud infrastructures at companies such as Amazon, GoGrid, Yahoo, Engine Yard, and Puppet Labs, and has teleco and service provider clients around the world.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3341
Published: 2014-08-19
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remote attackers to enumerate VLANs via a series of requests, aka Bug ID CSCup85616.

CVE-2014-3464
Published: 2014-08-19
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) 6.2.0 and 6.3.0, does not properly enforce the method level restrictions for outbound messages, which allows remote authenticated users to access otherwise restricted JAX-WS handlers ...

CVE-2014-3472
Published: 2014-08-19
The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.3.0, does not properly check caller roles, which allows remote authenticated users to bypass access restrictions via unspecified vectors.

CVE-2014-3490
Published: 2014-08-19
RESTEasy 2.3.1 before 2.3.8.SP2 and 3.x before 3.0.9, as used in Red Hat JBoss Enterprise Application Platform (EAP) 6.3.0, does not disable external entities when the resteasy.document.expand.entity.references parameter is set to false, which allows remote attackers to read arbitrary files and have...

CVE-2014-3504
Published: 2014-08-19
The (1) serf_ssl_cert_issuer, (2) serf_ssl_cert_subject, and (3) serf_ssl_cert_certificate functions in Serf 0.2.0 through 1.3.x before 1.3.7 does not properly handle a NUL byte in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Dark Reading continuing coverage of the Black Hat 2014 conference brings interviews and commentary to Dark Reading listeners.