Subra Kumaraswamy has more than 18 years of engineering and management experience in information security, Internet, and e-commerce technologies. In his current leadership role at Sun, he is responsible for securing Sun infrastructure services for employees and customers. Subra has held leadership positions at various Internet-based companies, including Netscape, WhoWhere, Lycos, and Knowledge Networks. He was the cofounder of two Internet-based startups, CoolSync and Zingdata. He also worked at Accenture and the University of Notre Dame in security consulting and software engineering roles.
In his spare time, Subra researches emerging technologies including cloud computing, social networks to understand the security and privacy implications for users and enterprises. Subra is one of the authors of Cloud Security and Privacy, which addresses issues that affect any organization preparing to use cloud computing as an option. He's a founding member of the Cloud Security Alliance as well as cochair of the Identity & Access Management and Encryption & Key Management workgroups. Subra
has a master's degree in computer engineering and is CISSP certified.
Last week was an exciting week for the Virtualization and Cloud customers and potential adopters. During VMWorld 2009, a handful of announcements by the cloud computing "picks" and "shovel" providers marked the beginning of the "Cloud API War" -... read more
Webcast - Cloud Security Deep Dive January 20, 2010
In this 90 minute webcast, the three coauthors of "Cloud Security and Privacy" (recently published by O'Reilly) will take a deep dive into cloud security issues and focus on three specific aspects: (1) data security; (2) identity management...
Webcast - Cloud Security & Privacy January 20, 2010
This 75–minute webcast will discuss current issues in cloud computing with regard to security and privacy. The presenters are the three coauthors of a recently published O'Reilly book, "Cloud Security and Privacy." In this webcast, ...
Webcast: Cloud Security & Privacy September 24, 2009
In this webcast, the authors of Cloud Security and Privacy will discuss cloud computing's SPI delivery model, and its impact on various aspects of enterprise information security (e.g., infrastructure, data, identity and access management, security...
"This book can be a good resource for people who are planning on cloud computing solutions. "
--Andy Zhang, Amazon.com
"The authors successfully manage to provide a very helpful overview of the topic...the book will help readers understand cloud security concepts and ideas, as well as expectations for the future.
--Kate Barr, Computing Reviews
"Overall this is a surprisingly good book tackling a difficult topic..."
--Sue Gee, I Programmer
"The book is indeed a comprehensive treatise on everything cloud, and everything cloud security...One of the most important things I picked from the book was a very structured view on separation of security responsibilities between the cloud provider and the customer for all of the SPI scenarios. This alone probably justifies getting your own copy. "
--Dr. Anton Chuvakin, Amazon.com
"...this is a great source of information on a very hot topic du-jour, and the combined experience and expertise of the authors does a lot to bring credibility and added value to this work. It is highly recommended for those that are either currently using, or considering, cloud services for their enterprise in the immediate or very near future."
--Jude Umeh, FBCS, CITP, BCS
"There are no other books that I know of that attempt to deal with this subject as completely and as comprehensively as does Cloud Security and Privacy. You really do owe it to your organization to read this first in order to be able to ask the right questions. Anything less would be highly negligent on your part. "
--Thomas Duff, Duffbert's Random Musings