Microservices Expo Authors: Elizabeth White, John Katrick, Mehdi Daoudi, Pat Romanski, Gordon Haff

Related Topics: @CloudExpo, Containers Expo Blog

@CloudExpo: Article

Unisys & Cloud Computing: Anywhere, Anytime IT Needs Also To Be Secure

Cloud + Security = Unisys

It is increasingly clear that the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models; accordingly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

The size of data sets continues to grow exponentially and once data leaves a client's data centers, the ability of a cloud provider to meet the client's security, privacy and compliance requirements becomes a key issue.

This is where Unisys, with its recently announced four-part cloud computing strategy, comes in.

In an interview this week with SYS-CON's Cloud Computing Journal, Rich Marcello - President, Unisys Systems & Technology - described how the company is delivering on the first two parts this year beginning with its Cloud Transformation Services, announced June 30, followed by the Unisys Secure Cloud Solution which will become available on July 31.

Here's how Marcello summarized what Unisys is doing right now:

"A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage. Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.  Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant. All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves. We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary 'bit splitting'."

That "Stealth technology" Marcello referred to allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, Marcello pointed out, making it an important differentiator.

Dr Michael A. Salsburg, a Unisys Distinguished Engineer who has published and presented over 60 papers internationally in the fields of infrastructure and business service modeling, management and optimization, recently wrote a whitepaper titled "The Perfect Storm for Enterprise-Class Clouds" which also referred to security based on Stealth, as follows:

"For data-in-motion (data that is transmitted through the cloud network), Stealth not only provides a higher level of encryption than the standard approach (which is called Secure Socket Layer or SSL), but it also breaks apart the information into multiple streams. In this way, if another user of the cloud was monitoring the communication, that user would not only have to decrypt the stream but would also have to find the other streams that are part of the original message.

The term “Stealth” refers to the fact that, once a customer is “Stealthed” within its own community of interest, the actual existence of the communication path cannot be discovered by observers outside that community of interest. For data-at-rest, such as data stored on disk, the same techniques apply. The data is split into multiple stripes, and each stripe is encrypted. For both data-in-motion and data-at-rest, Stealth provides a new level of security and isolation that does not require changes to the application or hardware. Its simplified approach to isolation ensures that other communities of interest cannot detect that the data path exists, thus mitigating many of the requirements for network-based isolation through virtual LANs and other current techniques."

Salsburg's current focus within Unisys is the realization of real-time infrastructure management. Marcello noted, in the interview already quoted, that virtualization and automation are fundamental to cloud computing and for Unisys. "Our Real-Time Infrastructure technology powers our cloud," Marcello told Cloud Computing Journal's Jeremy Geelan.

"Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time. Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment," he continued.

The whitepaper written by Salsburg ends with a useful vision statement which is worth quoting in full:

"Over the last 60 years Unisys has had the vision to develop and utilize new technologies and services for the benefit of the industry and our customers. Our mainframe systems have been using virtualization and automation technologies for over 20 years. We have taken the deep engineering capabilities in delivering highly available, high transaction systems with complex workloads and applied them to the evolving and consolidating marketplace.

Our ability to deliver RTEs and RTIs whether in-sourced or outsourced helps us provide the perfect platform for the emerging “cloud computing” environment. Our mission is to provide customers with the most open, cost effective and secure IT service environment by helping them understand, plan, implement and manage their IT infrastructure their way. Unisys is uniquely positioned to provide cloud computing that is secure enough and scalable enough for enterprise-class computing."

Marcello said on June 30 when the Unisys portfolio of solutions was announced that Unisys clients, while seeing great value in moving enterprise applications and data to the cloud, felt they had lacked the comprehensive security to make them confident in actually doing so.

Security, Marcello stressed, is in the DNA of Unisys, just as data center transformation and application modernization are its heritage.

Outsourcing services tailored to the client's specific business needs is a Unisys forté, he noted. "Our cloud computing strategy draws on all those core capabilities to help clients break through the barriers to adoption and gain a full range of options for cloud services while safeguarding their operations and lowering IT costs," Marcello said.

When asked by Cloud Computing Journal how an IT manager should decide if cloud computing is right for their business and which workloads to move, Marcello replied that it is really about understanding what makes the most business sense for the client and what they are trying to accomplish, adding:

"As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals. These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices."

Salsburg summarized those services in his whitepaper as follows:

"The services start with an assessment where the target data center is evaluated to discover workloads that could benefit from cloud computing. Once they are discovered, the software and storage requirements are evaluated regarding a shift into the cloud. Unisys does not require that applications be re-factored or rewritten.

The assessment services produce deliverables that lay out a low-risk plan to transform from the current state to a future state where the workload can take advantage of the key cloud attributes. Because no changes are required to the workload, there are no unique APIs to lock in the workload. With the Unisys Secure Cloud, you can receive customized services where your unique requirements and computing approach are retained."

Over the next several months, Unisys intends to launch additional solutions that give clients enhanced options in implementing cloud services.

Unisys plans a "cloud-in-a-box" solution as a comprehensive IT infrastructure package, aimed at enabling what it calls "quick and cost-effective implementation of a private cloud." This solution will include virtualization capabilities, automation of ITIL best practices for service management, and Unisys Converged Remote Infrastructure Management capabilities, with Unisys Stealth solution ("as an option for extreme security," the company says).

Unisys also plans to deliver "hybrid" cloud technologies that provide what it believes is the best of managed and dedicated services by combining public and private cloud capabilities.

Download the Unisys White Paper "The Perfect Storm for Enterprise-Class Clouds"

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@MicroservicesExpo Stories
The dynamic nature of the cloud means that change is a constant when it comes to modern cloud-based infrastructure. Delivering modern applications to end users, therefore, is a constantly shifting challenge. Delivery automation helps IT Ops teams ensure that apps are providing an optimal end user experience over hybrid-cloud and multi-cloud environments, no matter what the current state of the infrastructure is. To employ a delivery automation strategy that reflects your business rules, making r...
"We started a Master of Science in business analytics - that's the hot topic. We serve the business community around San Francisco so we educate the working professionals and this is where they all want to be," explained Judy Lee, Associate Professor and Department Chair at Golden Gate University, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
Cloud Governance means many things to many people. Heck, just the word cloud means different things depending on who you are talking to. While definitions can vary, controlling access to cloud resources is invariably a central piece of any governance program. Enterprise cloud computing has transformed IT. Cloud computing decreases time-to-market, improves agility by allowing businesses to adapt quickly to changing market demands, and, ultimately, drives down costs.
For over a decade, Application Programming Interface or APIs have been used to exchange data between multiple platforms. From social media to news and media sites, most websites depend on APIs to provide a dynamic and real-time digital experience. APIs have made its way into almost every device and service available today and it continues to spur innovations in every field of technology. There are multiple programming languages used to build and run applications in the online world. And just li...
There is a huge demand for responsive, real-time mobile and web experiences, but current architectural patterns do not easily accommodate applications that respond to events in real time. Common solutions using message queues or HTTP long-polling quickly lead to resiliency, scalability and development velocity challenges. In his session at 21st Cloud Expo, Ryland Degnan, a Senior Software Engineer on the Netflix Edge Platform team, will discuss how by leveraging a reactive stream-based protocol,...
We call it DevOps but much of the time there’s a lot more discussion about the needs and concerns of developers than there is about other groups. There’s a focus on improved and less isolated developer workflows. There are many discussions around collaboration, continuous integration and delivery, issue tracking, source code control, code review, IDEs, and xPaaS – and all the tools that enable those things. Changes in developer practices may come up – such as developers taking ownership of code ...
The general concepts of DevOps have played a central role advancing the modern software delivery industry. With the library of DevOps best practices, tips and guides expanding quickly, it can be difficult to track down the best and most accurate resources and information. In order to help the software development community, and to further our own learning, we reached out to leading industry analysts and asked them about an increasingly popular tenet of a DevOps transformation: collaboration.
Modern software design has fundamentally changed how we manage applications, causing many to turn to containers as the new virtual machine for resource management. As container adoption grows beyond stateless applications to stateful workloads, the need for persistent storage is foundational - something customers routinely cite as a top pain point. In his session at @DevOpsSummit at 21st Cloud Expo, Bill Borsari, Head of Systems Engineering at Datera, explored how organizations can reap the bene...
How is DevOps going within your organization? If you need some help measuring just how well it is going, we have prepared a list of some key DevOps metrics to track. These metrics can help you understand how your team is doing over time. The word DevOps means different things to different people. Some say it a culture and every vendor in the industry claims that their tools help with DevOps. Depending on how you define DevOps, some of these metrics may matter more or less to you and your team.
"CA has been doing a lot of things in the area of DevOps. Now we have a complete set of tool sets in order to enable customers to go all the way from planning to development to testing down to release into the operations," explained Aruna Ravichandran, Vice President of Global Marketing and Strategy at CA Technologies, in this SYS-CON.tv interview at DevOps Summit at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
"We are an integrator of carrier ethernet and bandwidth to get people to connect to the cloud, to the SaaS providers, and the IaaS providers all on ethernet," explained Paul Mako, CEO & CTO of Massive Networks, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
"Grape Up leverages Cloud Native technologies and helps companies build software using microservices, and work the DevOps agile way. We've been doing digital innovation for the last 12 years," explained Daniel Heckman, of Grape Up in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
"NetApp's vision is how we help organizations manage data - delivering the right data in the right place, in the right time, to the people who need it, and doing it agnostic to what the platform is," explained Josh Atwell, Developer Advocate for NetApp, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"Outscale was founded in 2010, is based in France, is a strategic partner to Dassault Systémes and has done quite a bit of work with divisions of Dassault," explained Jackie Funk, Digital Marketing exec at Outscale, in this SYS-CON.tv interview at 20th Cloud Expo, held June 6-8, 2017, at the Javits Center in New York City, NY.
"I focus on what we are calling CAST Highlight, which is our SaaS application portfolio analysis tool. It is an extremely lightweight tool that can integrate with pretty much any build process right now," explained Andrew Siegmund, Application Migration Specialist for CAST, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
Let's do a visualization exercise. Imagine it's December 31, 2018, and you're ringing in the New Year with your friends and family. You think back on everything that you accomplished in the last year: your company's revenue is through the roof thanks to the success of your product, and you were promoted to Lead Developer. 2019 is poised to be an even bigger year for your company because you have the tools and insight to scale as quickly as demand requires. You're a happy human, and it's not just...
The enterprise data storage marketplace is poised to become a battlefield. No longer the quiet backwater of cloud computing services, the focus of this global transition is now going from compute to storage. An overview of recent storage market history is needed to understand why this transition is important. Before 2007 and the birth of the cloud computing market we are witnessing today, the on-premise model hosted in large local data centers dominated enterprise storage. Key marketplace play...
Cavirin Systems has just announced C2, a SaaS offering designed to bring continuous security assessment and remediation to hybrid environments, containers, and data centers. Cavirin C2 is deployed within Amazon Web Services (AWS) and features a flexible licensing model for easy scalability and clear pay-as-you-go pricing. Although native to AWS, it also supports assessment and remediation of virtual or container instances within Microsoft Azure, Google Cloud Platform (GCP), or on-premise. By dr...
With continuous delivery (CD) almost always in the spotlight, continuous integration (CI) is often left out in the cold. Indeed, it's been in use for so long and so widely, we often take the model for granted. So what is CI and how can you make the most of it? This blog is intended to answer those questions. Before we step into examining CI, we need to look back. Software developers often work in small teams and modularity, and need to integrate their changes with the rest of the project code b...
Kubernetes is an open source system for automating deployment, scaling, and management of containerized applications. Kubernetes was originally built by Google, leveraging years of experience with managing container workloads, and is now a Cloud Native Compute Foundation (CNCF) project. Kubernetes has been widely adopted by the community, supported on all major public and private cloud providers, and is gaining rapid adoption in enterprises. However, Kubernetes may seem intimidating and complex ...