managing security and delivering performance in the cloud

Download Managing Security and Delivering Performance in the Cloud

If you can't read please download the document

Upload: software-park-thailand

Post on 08-May-2015

731 views

Category:

Technology


0 download

DESCRIPTION

Managing Security and Delivering Performance in the Cloud by Wimmy Hong

TRANSCRIPT

  • 1.Managing Security andDelivering Performance inthe CloudWimmy Hong7 September 20121

2. 88%Can you keep up EnterpriseCommercialwith business demand Apps Moving tofor innovation? the CloudSources: See addendum30%of IT budgets being allocated to clouddeployments74%73BCompanies Estimated forhave deployedPublic Cloud in hybrid cloud 2015 services1 IDC, Top 10 Predictions, Worldwide CIO Agenda 2012 Top 10 Predictions, David McNally, Meredith Whalen, January 2012. IDC #232816. Volume 1. 3. the New Normal and the shift to innovationBUSINESS DEMANDIT must deliver new services thatFOR INNOVATION ACCELERATE INNOVATION Client Mobility SocialBig Data SaaS Experience IT mustfill this growinggap! While TRANSFORMING delivery ofmainstream ITAgile Cloud StandardizedAutomation Bring YourRationalization Delivery Infrastructure Reengineering Own DeviceIT CAPACITY FOR INNOVATIONShift fromManaging Technology To Delivering Innovation3 4. cloud as key enabler to innovation and its benefitsRapidly iterate new ideas Extend new & old appsto DELIVER INNOVATION to USE SOCIAL MEDIARelease new products fast Reduce cycle times toto INCREASE REVENUE ACCELERATE DELIVERYBetter manage IT CapExDeploy & scale IT service& OpEx to CUT COSTS to EXPAND MARKETSAdd new apps and devicesRun massive analyticsto SUPPORT MOBILITY to Exploit BIG DATA4 5. managing services in a vast heterogeneous IT ecosystemprivate hybrid publicHYBRIDDATA CENTERTRADITIONALDATA CENTER5 6. the shadow of the cloud UNCONTROLLED DISCONNECTED ADOPTION SILOS SLOWDOWNS & MANUAL OUTAGESINTERVENTION LOSS OF CONTROLSECURITY AND COMPLIANCE6 7. the cloud challengeEnable innovationwhile managingcomplexity, contro 1lling cost andmitigating risk7 8. we believeInnovation ispossible in a1 complex andconstantly evolvinghybrid world8 9. roadmap to the cloud BUILD CLOUDPLAN CLOUD RUN CLOUDGOVERNSECURE CLOUDCLOUD ASSURE CLOUD 10. getting started: how do you know?CRITICAL QUESTIONS FOR TODAYS CIO What apps should we move to the cloud? How do I accelerate application Which services do I want to create?development and test cycle times? Do I have enough or too much capacity? Should we buy, build or outsource? Do I have transparency to services What about performance, security, andperformance, cost and its value to the compliance and risks?business? What is the cost of a mistake? IT MUST MANAGE APPS AND SERVICES ACROSS HYBRID DELIVERY MODELSConverged Use Privateinfrastructure SaaS cloudUse IaaSProvide PaaSHybridCloudburstNew orFabricCloud Existingdatacenter10 11. plan cloudcreate decision model for validating cloud services suitabilityBUILD CLOUD plan cloud PLAN CLOUD RUN CLOUDCreate a decision model fordetermining whichapplications and services to move to the cloudGOVERN CLOUDSECURECLOUDASSURECLOUD 12. how to model agile cloud servicesModel capacity requirements allowing for elastic scalingRationalize applicationand burst capacity without portfolio by business value to over provisioningselect and validate services most suitable to cloudHelp EngineRoutingWeb/WAPCollaboration ServiceInterfaceCRM App PortalWebVirtual App ServiceInterfaceExternalPartners Cloud BIToolsContentDevelop and test applicationDatabase EJB SOAP and cloud services behavior in ESB Business Rules simulated productionData WarehouseBPMSInternal environmentInfrastructure Financials MainframeProducts MessagingService File SystemRMI Objects12 13. build cloudreduce AppDev to production cycles and improve qualityBUILD CLOUD PLAN CLOUD build cloud RUN CLOUDVirtualize business services acrossinfrastructure, applicationsand servicesGOVERN CLOUDSECURECLOUDASSURECLOUD 14. Bringing traditional and service centric environments CUSTOMER ROUTE TO CLOUD Do It Yourself ToolsIntegrated Hardware Stacks Cloud WHAT THEBuilding on virtualization andAcquiring pre-CUSTOMER automated with best of breedintegrated, convergedIS DOING componentsinfrastructure stacks (e.g. VCE, FlexPod) Out of the box integratedServiceAutomation management solutions on Infrastructuretop: VDI Automation Virtualization ManagementCA Migration CA Capacity for SAP Apps ManagementHeterogeneous Process Automation 15 15. cloud choiceCUSTOMER ROUTE TO CLOUDTurnkey Solutions Cloud Provider Solutions Cloud WHAT THEAcquiring out of the box Leveraging IaaS, SaaS, PaaS, orCUSTOMER turnkey solutions to run onVirtual Private Data CentersIS DOING commodity hardwareApp ACustom DIY toolsVIRTUALMACHINESMB turnkey VIRTUALIZED BUSINESS SERVICE ITMaaS channel CA AppLogic; Security and Assurance tools sold on AppLogic16 16. run cloudautomate and orchestrate provisioning and deliveryBUILD CLOUD run cloud PLAN CLOUDRUN CLOUDAutomate provisioning anddelivery acrossvirtual, physical and hybrid cloudGOVERN CLOUD SECURE CLOUDASSURECLOUD 17. how to build and deploy a private cloud Empower users with self-service Define service metrics Manage servicelevels and costsRequest PortalSLA DashboardRequest Service LevelCharge back Monitoring& show backCustomerMaintainRelationshipstandards &ManagerAutomate and Review &Managercompliance Approverorchestrate processesApprove across Enable self-serviceStandardReview &Reconcile Cost infrastructure, applicatiConfiguration provisioning with Capacity Approveof ServiceManagerons and services Process preconfiguredAutomation workflows, content andPredict current Use service catalog service definitions from& future CA Automationbilling engine to Provision acapacity needs automated catalog ofprovide for Clouds SuiteConfigurationRequestedservices Management Capacity showback/charge back,ResourcesDatabasePortal financial metrics andreporting to thePool & provision businessCaptureconsumption ConfigurationValidationInternal ExternalVirtual PhysicalPool Metering &Performance 18September 12, 2012Copyright 2011 CA Technologies PROPRIETARY & CONFIDENTIAL FOR INTERNAL USE ONLY 18. case study: Logicalis BUSINESS International provider of data center & ICT solutions & services Launching a Unique Cooperative Enterprise Cloud Service ChallengeSolution Benefits Pioneering a managed cloud CA as a front-end for Save CAPEX /OPEX withservice offering automation, provisioning external private clouds and Needed automated solutionand integration: integrated automationacross enterprise & external - CA Auto Suite (Server Fast time-to-value for newcloudAutomation)product revenue Needed to show clear value Cisco UCS Manager Gain flexibility and agility toof cloud for public sector, NetApp Provisioningmove services to and fromcommercial, & enterprise Managerarchitecturesorganizations VMware Solutions 19. secure cloudenable content-aware identity and access controlsBUILD CLOUD PLAN CLOUDsecure cloudRUN CLOUDSecure content aware identityand access controls across virtual, cloud and hybrid environmentsGOVERN CLOUD SECURE CLOUDASSURECLOUD 20. expanding identity silos is a problem! IT Shadow IT creates Shadow Identity Cloud Apps/Platforms& Web ServicesSaaS a big risk to identity andEnterprise enterprise Apps informationOn Premise21 21. use case: securely enable online banking applicationsUser AuthNAdditionalrity Devicesrity Grouprity Method AccessAuthNrity CustomersSingle Sign-On Employees TransactionsRisk Risk-basedAppropriate EvaluationCredentials On PremisePartners and Cloud-based Capabilities Benefits Server side and mobile app user authentication models Appropriate security for different user groupsTransparent, rules-based risk evaluation with device idReduced risk without extra end user steps Two-factor authentication with no change to user experience Better adoption & loyalty due to simplicityRules and model-based risk evaluations to protect transactions Reduced risk of fraud 22. Case Study: DBSEnsures data privacy and secure online access for customersChallengeSolution Quickly secure online Using CA cloudservices near the newsolutions, DBS ensuresmarkets it will serveIAM and web DBS is one of the Safe guard access andauthentication with single largest financialsecurity of online corporate sign-on services groups in banking platforms Administer user profiles Asia with operations Comply with industry and track distribution of in 16 markets. regulations security hardware tokens Headquartered in Singapore, DBSBenefits provides banking Achieved compliance with new regulations across Asia and the Middle East. Reduce risk and cost of fraud and data security Gained competitive advantage with advanced technology Increased customer satisfaction with improved end-user experience23 23. assure cloudenable continuous service delivery and performanceBUILD CLOUD PLAN CLOUDassure cloudRUN CLOUDEnsure continuous servicedelivery across hybridenvironmentsGOVERN CLOUD SECURE CLOUDASSURECLOUD 24. deliver proactive performance management across on-premise and the cloudBACK ENDSAP PSFT USERNETWORKFRONT ENDSiebel MIDDLEWAREMainframe DatabaseWAN/ Router Firewall SwitchLoad Web PortalWWW Balancer ServerAppServerEndWebUserServices DatabaseEnd User Experience:Application Tier:3rd Party Who is impacted?What is it happening? Applications2011 Gartner Magic Quadrant Leader for Application Performance ManagementGartner Inc., Magic Quadrant for Application Performance Monitoring, September 2011 25. case study: Qantas improves the online experience formillions of customers Objectives Guarantee website availability and customer access Protect revenue streams from 34 international websites Offer quality customer experience from increasingly complex application infrastructure Solution Handle spikes in traffic of up to 20 million page views a week without any availability problems Reduce website outages, safeguarding a critical revenue stream Increase competitive advantage by deploying new online applications 26. govern cloud: manage IT as a business BUILD CLOUD PLAN CLOUDgovern cloud RUN CLOUD Ensure business service, vendor and financialperformance of agile cloud servicesGOVERN CLOUDSECURECLOUD ASSURE CLOUD 27. Case Study: Telstra Validated ROI that led to Successful Public Cloud OfferingChallengeSolution Needed to implement solution Implemented CA PPMto better manage service solutions for project andperformance, priorities andportfolio managementbudget expenditure Employed Real-time Needed to find new revenue project planning andthe largest streams and customerstrategies service level analysis totelecommunications Needed to build business case inform decision making processROI for new public IaaS offeringprovider in Australiawith over $4B ofBenefitsCAPEX under Identified strategic business opportunity for Public IaaS solutionmanagement. Received approvals and associated budget to build cloud service New Cloud Service and revenue stream delivered on time and on budget Realized business transformation through planning and governance The end to end lifecycle of this project, from inception to successful market launch was managed in CA Clarity. 28 28. crossing the cloud services lifecycle BUILD CLOUDPLAN CLOUD RUN CLOUD GOVERNCLOUD SECURECLOUD ASSURE CLOUD 29. accelerating, transforming and securing IT for businessservice innovation Deliver innovation and value of cloud with service virtualization and virtual business services Accelerate hybrid cloud delivery with heterogeneous automation and service orchestration across any kind of platform More safely leverage public clouds with the industrys leading security and assurance solutions for continuous service delivery30CA Enterprise Cloud Solutions Copyright 2011 CA 30. Why CA Technologies for Cloud Solutions? Unified cloud service delivery providing choice across:- heterogeneous environments, and- IAAS, Applications/SAAS and Services Fast time to value Highly open, extensible and flexible Full Cloud Service Lifecycle Management1 CA Technologies was named one of the top two market share leaders in the worldwide cloud systems management software market by IDC, a leading provider of global IT research and advice.IDC, Worldwide Cloud Systems Management Software 20112015 ForecastUpdate and 2010 Vendor Shares | Doc # 231493 | Nov 2011 31. Thank you