building and operating clouds
DESCRIPTION
Building and Operating Clouds: What to Do Once You Hit The On SwitchWebinar presented by:Roy Ritthaler, Sr. Director Product Marketing, BMCRich Plane, Director, Solution Development and Delivery, Harris Corp.Attendees discovered:Building and operating cloud environments is a known scienceThere are commercially viable software and solution provider opportunities in the market today for cloudLeveraging out-of-the-box software, it’s now possible to achieve an enterprise-level, fully operational cloudTRANSCRIPT
What to Do Once You Hit The On Switch
Roy Ritthaler, Sr. Director Product Marketing, BMC
Rich Plane, Director, Solution Development and Delivery, Harris Corp.
Building and Operating Clouds:
© Copyright 04/10/2023 BMC Software, Inc 2© Copyright 04/10/2023 BMC Software, Inc 2
Objectives
Building and operating cloud environments is a known science
There are commercially viable software and solution provider opportunities in the market today for cloud
Leveraging out-of-the-box software, it’s now possible to achieve an enterprise-level, fully operational cloud
You should leave today’s session knowing….
© Copyright 04/10/2023 BMC Software, Inc 3
Agenda
Cloud Operations – Delivering Highly Available Clouds- Roy Ritthaler, Sr. Director, Product Marketing
Trust in the Cloud – From Definition to Delivery- Rich Plane, Director, Solution Development and
Delivery, Harris Corporation
Question & Answers
© Copyright 04/10/2023 BMC Software, Inc 4© Copyright 04/10/2023 BMC Software, Inc 4
Cloud availability is business critical
So far, cloud projects have focused on automated provisioning …but availability and cloud operations are usually an after thought
© Copyright 04/10/2023 BMC Software, Inc 5
Clouds are difficult to manage
…With new cloud complexity:
o Incredible, global scaleo Local and public resourceso Highly movable workloadso Ongoing new/ retired services o End-user expectations
Traditional challenges remain:
o Complex IT infrastructureso End-to-End application monitoringo Multiple data sourceso Security considerations
The result, a loss of business reputation
Frustrated CustomersLong Recovery Times
Cost and Efficiency Overruns
© Copyright 04/10/2023 BMC Software, Inc 6© Copyright 04/10/2023 BMC Software, Inc 6
Cloud Operations use cases
Identify issues with cloud infrastructure to avoid outages
Enforce service levels for services delivered through cloud
Ensure service availability of unpredictable workloads
Improve service quality with hybrid cloud
Ensure quality of transient cloud services
Optimally balance workload distribution in the cloud
© Copyright 04/10/2023 BMC Software, Inc 7© Copyright 04/10/2023 BMC Software, Inc 7
Operations is asking for three key capabilities
Right-size capacity of individual services and the entire cloud
Meet the user’s ongoing expectations for service qualityService Level Enforcement
Proactive Service
Performance Management
Continuous Resource
Optimization
Ensure the performance of services and infrastructure
Cloud Operations SolutionIncorporate all three capabilities into a unified, modular solution
© Copyright 04/10/2023 BMC Software, Inc 8
Meet the user’s ongoing expectations for service qualityBMC End User Experience Management
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 9
Ensuring Infrastructure PerformanceBMC ProactiveNet Performance Management
Predictive analytics and prioritization based on business impactExtend service views into cloud, virtual and physical infrastructureSingle platform to monitor private and public (Harris, AWS, Azure) clouds
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 10
Right-size capacity of cloud services and the entire cloudBMC Capacity Optimization
Cloud Infrastructure Planning Intelligent Placement
Assess overall health and performance of your cloud environmentCross-cloud visibility of resource capacity utilization and efficiency
Provide intelligent placement advisory to Cloud Lifecycle ManagementOptimally allocate workload according to performance and policy constraints
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 11
Cloud Operations – The Critical Capabilities
End User Behavior Monitoring- Real-time business and end user impact analysis
Predictive Service Impact- Proactive identification of service performance problems
Business-Aware Capacity Planning- Continuously alignment of Cloud capacity with business
demand
Open, Heterogeneous Design- Prevention of vendor lock-in and protection of long term
business value
Integrated Operating Model- Integration with existing IT processes to maintain cloud
services
© Copyright 04/10/2023 BMC Software, Inc 12
Harris builds a trusted cloud using BMC Software
Harris Corp.- More than 16,000 employees including nearly
7,000 engineers and scientists- $6 billion annual revenue - Industry leader in mission critical networked
systemsCloud Goals- Delivering secure services in the cloud to their
customersKey Use Cases- Rapidly provision new services for customers- Ensure customer service levels are met- Automated event identification & remediation
Implementation Highlights- Greenfield implementation, building a new
business from the ground up
© Copyright 04/10/2023 BMC Software, Inc 13
Trust in the Cloud – From Definition to Delivery
Trust – The Industry Perspective
Harris Perspectives on Trust
Implementing Trust
You Can Trust the Cloud!
© Copyright 04/10/2023 BMC Software, Inc 14
About the TechAmerica CLOUD2 Commission
Formed to provide recommendations to Obama Administration - Government deployment of cloud
technologies- Public policies that will help drive US
innovation in the cloud
Participation from 71 experts across industry and academiaCommissioned in April 2011 and final recommendations presented July 26, 2011Deliverables- Final Report of recommendations- Cloud Buyer’s Guide
© Copyright 04/10/2023 BMC Software, Inc 15
Summary of CLOUD2 Recommendations
Committee activities were structured around the four T’s
Trust Transparency
Transnational Data Flows Transformation
Require vendors to share relevant
information about their capabilities,
offerings and service levels
Recommendations in policy, infrastructure, and training to help
facilitate broader adoption of the cloud
Need for collaboration & standardization of
data access across national borders
Ensuring the combination of factors that allows consumers of cloud services to be
confident that the services are meeting
their computing needs
© Copyright 04/10/2023 BMC Software, Inc 16
CLOUD2 Recommendations on Trust
Ensuring that the cloud is meeting consumer’s needs for security, privacy, availability
Factors Contributing to Trust
• Transparency of practices
• Accountability
• Resiliency
• Redundancy
• Access and Connectivity
• Supply chain provenance
• Life cycle integrity
• Governance
Specific Recommendations
• International standards for security and assurance Frameworks
• Accelerate the development of an identity management ecosystem
• Enact and improve legislation related to data breaches
• Develop a joint research agenda for cloud technology
© Copyright 04/10/2023 BMC Software, Inc 17
Contents
Trust – The Industry Perspective
Harris Perspectives on Trust
Implementing Trust
You Can Trust the Cloud!
© Copyright 04/10/2023 BMC Software, Inc 18
The Pillars of Trust
© Copyright 04/10/2023 BMC Software, Inc 19
Barriers to the Cloud are RealTr
ust
Cost
& C
ontr
ol
© Copyright 04/10/2023 BMC Software, Inc 20
Defining Cyber Trust
Assumed Trust:- Perimeter-Centric, Heuristic and/or Blacklist-based, used for both Data in
Motion and Data at Rest
Explicit Trust:- Infrastructure and Information-Centric with a focus on specific positive
image and software reference measurement and attestation
Intrinsic Trust:- Building explicit, positive and immutable trust methods into the hardware
and software systems, for example Root of Trust for Measurement (RTM) and Trusted Platform Modules (TPM’s), along with supply chain-anchored hardware and software provenance and attestation
© Copyright 04/10/2023 BMC Software, Inc 21
Contents
Trust – The Industry Perspective
Harris Perspectives on Trust
Implementing Trust
You Can Trust the Cloud!
© Copyright 04/10/2023 BMC Software, Inc 22
ReferenceConfigurations
Application Data and Signature Database Global Trust Repository
(GTR)
Enterprise Trust Server
Reporting
Inventory Reports
Change Reports
Compliance Reports
Notifications
IT Infrastructure• Ecommerce Service• Trading Service• Virtual Infrastructure• Web Servers• Database Servers• File Servers
• Directory Servers
Compliance Assessment
+2000 other vendors
Trusted Reference Technology
> 2.8B code component signatures as deployed directly from the source
Firmware and software on all active network (switches, routers, firewalls) and computing components continuously monitored
Beyond Security – Explicit Trust
Control over your IT
Compliance posture delivered on demand
Software supply chain integrity
© Copyright 04/10/2023 BMC Software, Inc 23
Proof that the code was actually built by the named supplier is a crucial element of software and device validation or attestation
Trust and Supply Chain
Do I know that the software elements that I am loading and running on my platform ARE what they say they are?
What proof do I have that the code I am using was actually built by the named vendor?
Is an increasing concern for software & hardware vendors and users in all sectors
© Copyright 04/10/2023 BMC Software, Inc 24
Delivering Cyber Assurance Through Continuous Monitoring and Control
© Copyright 04/10/2023 BMC Software, Inc 25
Contents
Trust – The Industry Perspective
Harris Perspectives on Trust
Implementing Trust
You Can Trust the Cloud!
© Copyright 04/10/2023 BMC Software, Inc 26
The Trusted Enterprise Cloud
World-class and purpose-built infrastructure – the Cyber Integration Center and Harris’ network of cyber facilities and operations centers
Best-of-breed systems and processes – focused on virtualization, automation, a unique end-to-end service model, and customized control through the client portal
Trust Enablement Technology – continuous monitoring and assessment of the device and software supply chain using our Global Trust Repository of industry standard reference images and external vulnerability feeds
The industry’s first enterprise-grade, high-assurance cloud computing solution
ReferenceConfigurations
Application Data and Signature Database Global Trust Repository
(GTR)
Enterprise Trust Server
Reporting
Inventory Reports
Change Reports
Compliance Reports
Notifications
IT Infrastructure• Ecommerce Service• Trading Service• Virtual Infrastructure• Web Servers• Database Servers
• File Servers• Directory Servers
Compliance Assessment
+2000 other vendors
© Copyright 04/10/2023 BMC Software, Inc 27
Trust In The Cloud
The industry’s first enterprise-grade, high-assurance cloud computing solution
World class partners providing best of breed technology
Cyber integration expertise to cost effectively meet the unique needs of your business
Trust enablement technology that goes beyond security to unprecedented visibility and control of your infrastructure
www.cyber.harris.com
© Copyright 04/10/2023 BMC Software, Inc 28
Q & A
To ask a question, - Follow Operator Instructions- Or use the webex chat window
© Copyright 04/10/2023 BMC Software, Inc 29
Learn more at www.bmc.com
© Copyright 04/10/2023 BMC Software, Inc 30
Security ≠ Trust
© Copyright 04/10/2023 BMC Software, Inc 31
Delivering Explicit Trust: Positive Assurance Methods
Trust is established at the hardware level via Trusted Computing Group (TCG) defined standard methodologies (TPM, Integrity Management Model)
When the system needs to prove its integrity, it sends the collected measurements in a process called attestation.
Before each subsequent level of the stack is loaded, it is measured by the preceding level and the result is stored in trusted hardware.
© Copyright 04/10/2023 BMC Software, Inc 32
Proving Trust: Active & Continuous Transparency
© Copyright 04/10/2023 BMC Software, Inc 33
Key Features & Benefits
Features Benefits
Global Trust Repository• Explicit trust that goes beyond security• Software supply chain traceable directly to vendor
Enterprise Trust Server
• High fidelity change identification & control– What is on your system– Where it came from– How it is configured
• Control platform drift and increase platform stability
Built to industry's highest security standards
• Security controls in place to host compliant applications for HIPAA, PCI, FISMA, SOX and others
S-CAP Standardized Automation
• Real time vulnerability identification and security adjustments• See your compliance posture on demand• Lower your certification costs
Control via the client portal• Robust self service capability• Appears as extension of your infrastructure
© Copyright 04/10/2023 BMC Software, Inc 34
BMC Cloud Lifecycle ManagementDelivers the foundation of Cloud Operations
Deliver business services with end-to-end cloud managementAutomatically installs, deploys and configures monitoringGuided monitoring configuration in CLM PlannerIntelligent policy-based placement and ongoing operations with the industry’s first Service GovernorSupport for heterogeneityIntegrated with key operational processes, performance and capacity management
© Copyright 04/10/2023 BMC Software, Inc 35
Organizations are waking up to the problemThey are asking for three Cloud Management capabilities ….
Right-size capacity of individual services and the entire cloudOptimize the cloud infrastructure capacity for maximum business impact and utilization
Meet the user’s ongoing expectations for service quality End-user experience is managed according to business priorities, user identity, workload, location and impact
Service Level Enforcement
Proactive Service
Performance Management
Continuous Resource
Optimization
Ensure the performance of services and infrastructureDynamically monitor the cloud by analyzing known behaviors against established KPI’s to anticipate and automate management action
Cloud Operations SolutionIncorporate all three capabilities into a unified, modular solution
© Copyright 04/10/2023 BMC Software, Inc 36
DB TierCDN
Web TierApp Tier
BMC End User Experience Mgmt Deep Diagnostics
From the data-center perspectiveService Level Enforcement
Service Level Enforcement End to end visibility for cloud and enterprise services
End to End
From the end-user perspective
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 37
Service Level EnforcementTurn Visibility into Action
Manage horizontally – by site, by location, by customer, by delivery networkManage vertically – by application, business priority, audience, high value user, web page
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 38
Proactive Service Performance ManagementExtend monitoring to public cloud resources
Single platform to monitor hybrid (public and private) IT servicesPublic Cloud monitoring OOTB – Amazon Web Services and Microsoft Azure Remote public cloud deployment of agents
Enterprise Data Center
BMC ProactiveNet Performance Management
Real-Time Predictive Analytics
Predictive Root Cause
Predictive Service Impact
Behavior Learning
Predictive Correlation
Public Cloud KM
Clo
ud P
ublic
A
PI
BPPM Agent
Secure Connection
BPPM Agent
Public Cloud Resources In-house Resources
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 39
Continuous Resource OptimizationMaintaining the Right Infrastructure
IT INFRASTRUCTURE
Risk Tolerance
Business Volume
TIME
Budgets
SLAs
Optimize Physical Server UtilizationOptimize Virtual Machine DensitySupport multi-platform, multi-vendor physical, virtual cloud resources
vs.
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 40
Current Challenges
Availability - Reactive management processes
struggling in an elastic environment
Service Performance- Unmet service expectations
Risk- High decision latency caused by
information silos
Operational Efficiency- Service delivered by underutilized
infrastructure and over burdened human resources
© Copyright 04/10/2023 BMC Software, Inc 41
Meet the user’s ongoing expectations for service qualityBMC End User Experience Management
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 42
Ensuring Infrastructure PerformanceBMC ProactiveNet Performance Management
Predictive analytics and prioritization based on business impactExtend service views into cloud, virtual and physical infrastructureSingle platform to monitor private and public (AmazonWS, Azure) clouds
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization
© Copyright 04/10/2023 BMC Software, Inc 43
Right-size capacity of cloud services and the entire cloudBMC Capacity Optimization
Cloud Infrastructure Planning Intelligent Placement
Assess overall health and performance of your cloud environmentCross-cloud visibility of resource capacity utilization and efficiencySupport for VMWare and Citrix XenServer environments
Provide intelligent placement advisory to CLMOptimally allocate workload according to performance and policy constraintsIncrease the efficiency and utilization level of the entire cloud infrastructure
Cloud Operations
Service Level Enforcement
Proactive Service Performance Management
Continuous Resource
Optimization