Redefining Personal with

Transcription

1 Redefining Personal with Monica S. Lam Stanford University MokaFive, Inc.

2 Trends Personal Shake up ager 25 years of PC dominance

3 Opportunity for a Clean Slate Approach mainframe mini workstation PC laptop phone 10x cheaper, 10x more users

4 Triple Play: Internet Access, TV, Telephone Media Communication Games Computation

5 Emerging Models In your pocket Always on Device independent Central management Rich legacy apps Locality of reference Offline execution

6 Emerging Models In your pocket Always on TV out Device independent Central management VDI Google Gears Native client Rich legacy apps Locality of reference Offline execution

7 Tian Di Ren (天地人) 3 Tier Architecture 天 Tian (Heaven) 人 Ren (Man) 地 Di (Earth) servers data My key, cache, window into my digital cloud: ID, personality, assets, and the internet Personalize the generic PC, borrow the power, display, keyboard, memory, etc PC,TV at home, on the road, in hotels, on the plane

8 How Do We Get There?

9 Laptops Today Ongoing Issues Security Zero day root kit vulnerability Data center security Data leakage Business Management cost Emerging trends Going green Working from home BYOPC Mac vs Windows Cell phones vs. PCs Agent-based management tools on corporate PCs 3/16/09 9

10 Convergence of Personal & Corporate Dilemma: How to empower individuals and provide security? 78% use personal computers for work 43% use work computers for personal use % of workers altering security secngs % of workers downloading personal applica@ons % of workers downloading personal pictures & videos 25% 31% 43%

11 Laptops Today Monolithic system every PC is different hard to manage by IT/users System Stack: HW, OS, apps Principals: HW owner, IT, user Security vs Choice

12 of Concerns of all intelligent thinking Focus on one, knowing that we are only occupying ourselves with one aspect It is being one and track minded simultaneously The only available technique for ordering of one's thoughts. On the Role of Thought, Edsger W. Dijkstra, 1974

13 3 Sets of Concerns User IT Ubiquity

14 SeparaCon of Concerns achieved through Modularity x86 virtualizacon separates Hardware instance: Dynamic binding of VM Hardware and OS: OSes Hardware config: Virtual device drivers Different user roles: Different VMs

15 Tian Di Ren (天地人) 3 Tier Architecture 天 Tian (Heaven) 人 Ren (Man) 地 Di (Earth) servers data My key, cache, window into my digital ID, digital personality, digital assets, and the internet Personalize the generic PC, borrow the power, display, keyboard, memory, etc PC,TV at home, on the road, in hotels, on the plane

16 1 st Approx: Desktop As a Service (DaaS) LivePCs User Data Stanford Collec@ve project, MokaFive LivePCs: managed virtual machines in the cloud PCs: generic compu@ng plalorm Phone: mobile access, write through cache, network accelerator

17 System Design and

18 3 Sets of Concerns Data Personal Apps User IT AAA Guest OS, AV Corporate Apps Ubiquity PCs, devices Host OSes Environment: printers, network Mobility, portability

19 System Anatomy User Data User Apps IT: Managed Apps User Content Services Guest Manager IT: Guest OS + An@ virus IT Services Virtual Machine Monitor LivePC Manager Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices LivePC Services

20 System Anatomy User Data User Apps IT: Managed Apps Guest Manager IT: Guest OS + An@ virus Virtual Machine Monitor LivePC Manager Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices Cross plalorm: Windows, Mac, Linux 3D graphics Printer

21 System Anatomy User Data User Apps IT: Managed Apps Guest Manager IT: Guest OS + An@ virus Virtual Machine Monitor LivePC Manager Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices Dynamic install Flash performance opt. Document access on mobile phones

22 System Anatomy User Data User Apps IT: Managed Apps Guest Manager IT: Guest OS + An@ virus Virtual Machine Monitor LivePC Manager Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices Authen@ca@on: LDAP Authoriza@on: revoca@on, offline access Accoun@ng: logging, dlp Role based customiza@on Encryp@on Storage Virtualiza@on: rejuvena@on, incremental & atomic system update, caching, prefetching, demand paging Mul@ tenancy

23 System Anatomy User Data User Apps IT: Managed Apps Guest Manager IT: Guest OS + An@ virus Virtual Machine Monitor VMware player Virtualbox LivePC Manager Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices

24 System Anatomy User Data User Apps IT: Managed Apps Guest Manager IT: Guest OS + An@ virus Virtual Machine Monitor LivePC Manager Single sign on VPN integra@on Uniquifica@on: Domain join, SID User installed apps Separa@on of system & user data Data & app backup Flash Manager Host Manager Baremetal Windows Mac Linux Client PC + Devices

25 Design Principles of Concerns rule: 90% of the code handles Re install the OS Outside the box management Only to zero day rootkit apacks Bootstrapping from a small trusted code base Baremetal LivePC Player IT managed base image: Windows + AV User apps & data

26 Desktop as a Service (DaaS) In your pocket Always on LivePCs Device independence Central management Rich, legacy apps Locality of reference Offline execution

27 Current Research Tian Di Ren ( ) applica@on infrastructure Users maintain ownership of personal data Distributed social networking applica@ons Part of Stanford POMI 2020 (Programmable Open Mobile Internet) An NSF Expedi@on, 2008

28 LivePCs