Production in the Cloud

Transcription

1 2/18/2013 Production in the Cloud Presentation by: Rick Dmytryshyn, Program Manager Ph. (303) , .

2 Presentation Overview DEFINITION: What is the Cloud? SECURITY: Is a Cloud Solution for you and is it secure enough? EXECUTION: Ten (10) potential steps to executing a Cloud-Based Solution! Questions & Discussion

3 What is the Cloud? Terminology, Definitions, Rationale: Simply put, the Cloud means Cloud Computing : According to Business Insider (08/30/2012) - 51% Of People Think Stormy Weather Affects 'Cloud Computing' It is a method of computing that provides capacity in elastic ways to either: expand to meet user needs contract when demand decreases. It is an infrastructure of on-demand capabilities using virtualized resources including pools of storage, network, processing, and other computational resources that can be efficiently allocated when requested and quickly provisioned in a highly automated fashion.

4 Misperceptions & Concerns? Initial Concerns: Ninety-five percent (95%) of those claiming they never use the Cloud, actually do so daily via personal online banking, shopping, social networking, and storing photos and music. As the Cloud can appear to be everything to everyone, logical questions arise: is it appropriate for my industry? is it safe? is it secure in my business application? how does one execute a Cloud Solution? are there aspects to a Cloud Solution that if one does not pay attention upfront, will they later rain down on the desired implementation goals?

5 Cloud Computing (Typical Infrastructure Components) Simplistic Architecture: Applications Instance Instance Instance Instance Instance SaaS Public Network Virtualization Storage/Servers Physical Computer Hardware Hypervisor Physical Computer Hardware PaaS TCP/IP Private Network IaaS Cloud Deployment Model: Public, Private, Hybrid PaaS - Platform as a Service (Build) IaaS - Infrastructure as a Service (Host) SaaS - Software as a Service (Consume) IaaS & PaaS is what we use to create SaaS

6 S 2 aas (Service as a Service) A Step Further: Consultants and Service Companies are now looking at providing S 2 aas solutions, which in the case of Willbros, is term meaning: Service as a Service. These companies don t strive to be Cloud Providers or build PaaS or IaaS environments on their own, in and above themselves. The focus is to provide Consulting Support and a complete Cloud Solution focusing in on both SaaS and S 2 aas Components. As an aside, Willbros is one of these Cloud Solution and Services experts and strives to help it s clients and potential clients with their Cloud Solution & SCADA implementation needs.

7 Cloud Computing (Typical Characteristics) Cloud Computing Approach: Cloud Computing is a business model solution. In this elastic model, you: Lease or rent the computers (PaaS/IaaS) Lease or rent the software (SaaS) Lease or rent the communications medium Five (5) typical benefits of Cloud Solutions: 1. On-demand self-service 2. Ubiquitous network access 3. Location independent resource pooling 4. Rapid elasticity 5. Measured service with Pay-Per-Use

8 Cloud Computing (Reasons for Implementation) Implementation Rationale: Capex to Opex Avoid the IT cue IT Capabilities Extends abilities Business Focused - Not IT but Operations Driven Standardization - Infrastructure (Abstraction) Support - Free of SW/HW Installation (log in/go) Access Ubiquitous (TCP/IP) Elastic - (Expand to meet demand) Service-Based - Get billed for what you use Speed - Deployment and access Cheap(er) - Superior Economics On Demand - No long term contracts Independent Application & OS

9 Cloud Security vs. On-Premise Security IT Information Security considerations are the same for On-Premise versus in the Cloud! The solution must be considered as a risk-based model; in order of importance: Integrity: Keeping information unaltered unless authorized Availability: To have information available, when requested with no data loss Confidentiality: Keeping information confidential

10 Cloud Security is a SHARED Responsibility From our experience, Cloud Providers secure their infrastructure at highest levels based upon Industry Standards: ISO (Government IT Industry Standards, PHMSA & API recommends ISO 27001/2) FISMA (Moderate) (Government Classifications, Encryption Processes, etc.) PCI DSS (Financial Industry, Custody Transfer) SAS 70 Type II (Audit Security (Sox)) Hypervisor (You) are responsible for securing the application layer & you OWN the access to servers & services: Use Private Cloud spaces, Encrypted Data Techniques (in-flight & at-rest), & two (2) Point Authentication (2FA)) Shared: Service Level Agreement (SLA) Shared structure, responsibility and consistency Can jointly implement: SOX, ISO 9000, ISO 27000

11 Cloud Security Organizations / Policies & Government Driven: Critical Infrastructures Act of 2002 Organizations: Cloud Security Council (Alliance Congress) InfraGard (Shared Approach vs. Gov. one-way) Intelligence and Nation Security Alliance Pipeline Cloud\Regulations\Cyber Security In 2011, Federal CIO of the United States required ¼ ($20B) of all Federal IT spending on Cloud implementation.

12 Risk Management Framework Executive Summary Steps Typical Security Solution Implementation Steps: OCTAVE (Baseline Solution Functional Requirements) Phase 1: Build Asset-Based Threat profiles Phase 2: Identify Infrastructure Vulnerabilities Phase 3: Develop Security strategies NIST RMF (Security Solution Execution Details) Step 3: Implement Security Controls Step 4: Assess Security Controls Step 5: Authorize Security System Step 6: Monitor Security Controls Note: NIST RMF steps 1 & 2 are omitted due to repetitive steps required within OCTAVE. OCTAVE phases provide a more systematic, context-driven and self-directed risk evaluation. NIST RMF steps are used for implementation and continued monitoring of security system.

13 Cloud Solution Approach What do you want to accomplish? Greenfield Operation: Start from the overall business goals down to the plant floor objectives. Existing Operation: Assess existing data, quality and integrity. Assess future data needs for business goals. Retrofit Operation: Cloud Solution is the toolset to allow accomplishment of business goals. Willbros recently implemented a Virtualized SCADA Host (Control Center) which was Client based and Cloud-Based. Ten (10) execution steps were used.

14 Cloud Solution Steps & Order Ten (10) Logical Steps to a Cloud Solution! 1. Existing Data Validation, Integrity and Quality Validate and verify the Integrity of your existing data. Solution success depends on solid data Quality and process understanding. Project FEED Documents will ensure structure & modularity in execution. 2. Communications Media & Architecture Status Document existing Network and Comms. Ensure understanding of data (source to host) Document and understand interdependencies. Understand SHARED security for complete data validate in solution.

15 Cloud Solution Steps & Order Ten (10) Logical Steps to a Cloud Solution! 3. Centralized SCADA (Host) & Advanced Apps Advanced Host Application Interfaces, Interdependencies & Requirements for validated & historical data must be determined & prioritized to understand minimal performance characteristics. 4. Reconfiguration Requirements Business goals, data characteristics / requirements, and desired solution configuration and performance are understood and documented. Implementation decisions can be finalized for operational platforms and 3 rd party suppliers. SLA agreements are finalized.

16 Case Study: Communications Architecture Example

17 Case Study: Oil Pipeline SCADA Notes Assisted Client in determined system overall performance required. Coordination of Communications (Cellular 3G, VSAT) systems, Data Center and Cloud provider. Generated SCADA & LDS RFIs and response evaluation to ensure client s needs are met. Virtualized Cloud Solution evaluation results: At existing sites, existing PLCs were adequate but required a Protocol Converter & Data Concentrator DNP3 Communication Protocol required for Store & Forward / Report-by-Exception (RBE) Schneider Electric SCADAPack RTUs & ClearSCADA chosen for native DNP3 Protocols, integrated Historian & prior Cloud-based experience. 3G/VSAT Cellular provider issues: Critical Infrastructure Tier Levels and shared data modeling! NO DATA LOSS!!!!

18 Cloud Solution Steps & Order Ten (10) Logical Steps to a Cloud Solution! 5. Pilot Testing for Performance Validation Verify the real world performance meets with business performance goals. Crucial to Pilot Test Cloud-Based Solution performance from Source to Host. Communications performance can verify continuous data flow and high uptime rates. 6. Performance Validation = Revisited Goals Revisit Business Goals against real world pilot performance adjust goals as necessary. Performance limitations will help further define design details and project expectations. Make decisions and/or compromises for solution against known risks and documented issues.

19 Cloud Solution Steps & Order Ten (10) Logical Steps to a Cloud Solution! 7. Implement Structured & Modular Solution Detailed Engineering Design Documents are created and utilized. In-House Testing crucial prior to witnessed Factory Acceptance Test (FAT). Detailed Deployment Commissioning Plan essential. 8. Deployment / Commissioning & SAT Interdependencies must be determined and addressed upfront. All data must be physically verified; allowing proper Management of Change (MOC) A Performance Oriented Site Acceptance Test (SAT) validates Cloud Solution.

20 Cloud Solution Steps & Order Ten (10) Logical Steps to a Cloud Solution! 9. Training & Responsibility Transfer To ensure acceptance, involved operators, technicians and managers in FEED design and all witness testing to ensure successful transfer of ownership and responsibility. All training based upon native engineering supporting documents on the project. Is a very crucial to ensure success. 10.Manage / Maintain Cloud Solution Do not implement a solution & forget about it. Reduced lifecycle and significant costs to upgrade vs. incremental advancements. Manage Cloud Solution to realize full benefits. Successful Cloud Solution allows for improvements in system performance

21 BONUS: MIS/MES Performance Enhancement / Process Improvement Real-Time information provides tools for business improvements. Cloud Solutions ensure data integrity & availability, while maintaining confidentiality. MIS/MES systems provide information when needed. Cloud technologies allow Continuous enhancement and improvement to Quality and Production. Meaningful KPIs can be generated & adherent to! Biggest issue with MIS/MES vendor providers is lack of real world process knowledge to generate meaningful business rules. Not all data is discrete

22 Summary Cloud Solutions are not an IT or Legal decision. They are Business-Focused Opex. Cloud Solutions are inherently safe when looked at as a shared security responsibility from Data Source all the way through Hosted Applications. Understand the overall Business Goals upfront with a System-Wide Cloud Solution. Flexibility may be required due to physical limitations! The ten (10) suggested execution steps outlined herein can assist in goals that are defined, understood, realized and attainable with a Cloud- Based Solution.

23 Thank you Google Cloud Presentation Link Thank you.