The Next Generation Data Centers: SPECS and The 3 rd Platform. Dr. Silvio La Porta Senior Research Scientist EMC Research Europe Dr. Said Tabet Senior Technology Strategist Corporate CTO Office, EMC 1
Agenda Cloud Computing Trends and Adoption Cloud Threat landscape EMC s Next Generation Data Center SPECS Project Introducing SPECS into EMC s ViPR Summary 2
Cloud Computing Trends and Adoption Accelerated pace of adoption in recent years Pressure from business and public agencies Rise of the Hybrid Cloud New Business Requirements More Agility Automated SLAs Quality of Service Transparency, Data protection and Security (secsla) 3
BILLIONS OF USERS MILLIONS OF APPS Mobile Cloud Big Data Social Mobile Devices HUNDREDS OF MILLIONS OF USERS TENS OF THOUSANDS OF APPS LAN/Internet PC Client/Server MILLIONS OF USERS THOUSANDS OF APPS Mainframe, Mini Computer Terminals 4
Today Tomorrow Everything has an URL Over 50% of cloud connection are THINGS 2011: 15+ Billion Permanent, 50+ Billion beaconing 2020: 30+ Billion Permanent, > 200 Billion beaconing Audio WNS Display Building Man. systems Security Cams IoT QR Code NFC LTE Flash GPRS WiFi 5
Challenges Fast growing need for analytics in all public and private sectors Big Data, advanced analytics new data centers Internet of Things Real time/streaming data Distributed storage Smart analytics, adaptive intelligence 6
Cloud Threat landscape The Fappening 2014- August 31, 2014 A collection of almost 500 private pictures of various celebrities were posted on the image board 4chan The images have been obtained via a breach of Apple s cloud services suite icloud The hackers responsible for the leak had obtained the images using a "very targeted attack" on account information, such as passwords, rather than any specific security vulnerability in the icloud service itself. ibrute and Elcomsoft's "forensic" software 7
Cloud Threat landscape Amazon used to spread malwares Until now there are not yet malware or attack directly to Cloud BUT cloud is used to attack user Cloud is an attack vector The proportion of malware-hosting websites served from Amazon infrastructure more than doubled from 16 per cent in Q4 2013 to 41 per cent in Q2 2014. Amazon AWS hosted Zeus Game Over and SpyEye Command and control infrastructure 8
EMC s Next Generation Data Center A 100% software-defined solution, unlike competitors, there are NO hidden hardware requirements, customers use it with the storage they have today Separated control & data plane (manage storage vs. store data) - Simplicity without compromise gain more capability, with none of the risk Extends beyond EMC to plug into 3 rd party storage and cloud stacks, so customers have the freedom to make the choice that's right for their business Unique Global Data Services get more from what you already have. Standard APIs and Global Data Services to free data and applications from storage dependencies and enable simple data and application migration in and out of public clouds End-to-end visibility to monitor, meter and charge back storage across the infrastructure, fully integrated SRM, VMware and software-defined data center 9
Traditional View Of The Data Center MESSAGING ERP/CRM DATABASE MISSION CRITICAL BIG DATA HPC 10
Management The Software-Defined Data Center MESSAGING ERP/CRM DATABASE MISSION CRITICAL BIG DATA HPC VIRTUAL DATA CENTER VIRTUAL DATA CENTER Server Storage VIRTUAL DATA CENTER VIRTUAL DATA CENTER VIRTUAL DATA CENTER SOFTWARE-DEFINED DATA CENTER Network SERVICES ABSTRACT. POOL. AUTOMATE. 11
SIMPLE New Access Methods Exponential Data Growth High Demands for Availability & Agility EXTENSIBLE OPEN Copyright 2015 2013 EMC Corporation. All rights reserved. 12
EMC ViPR Software-Defined Storage Virtualize Everything. Compromise Nothing. EMC ViPR Platform ViPR Data Services ViPR Controller Provisioning Self-Service Reporting Automation VMAX VNX Isilon 3 rd Party Commodity 13
Automate Storage Provisioning Define Virtual Arrays & Configure Policy-based Virtual Storage Pools Automatically Discovers and Registers Arrays VDI EXCHANGE DATABASE HADOOP HOME DIRECTORY ARCHIVE VIRTUAL STORAGE POOLS VIRTUAL STORAGE ARRAY VIRTUAL STORAGE ARRAY VMAX 40K VNX 7500 3 rd Party VNX 5500 Isilon 3 rd Party 14
Centralize Management ViPR Monitoring & Reporting Across Physical & Virtual Environments EMC ViPR Controller Virtual Storage Isilon VNX VMAX 3 rd Party EMC SRM Suite Physical Storage 15
Integrate Third-Party Storage Open Architecture Provides Choice Build storage adaptors to easily integrate additional storage Use & extend unique physical array features VMAX VNX Isilon 3 rd Party Commodity 16
Integrated with VMware & SDDC & external app vcloud Automation Center vcenter Ops Manager vsphere vsan / vvol ViPR Data Services ViPR Controller VMAX VNX Isilon 3 rd Party Commodity 17
New Applications, New Architecture The Basics Native Amazon S3 API Globally Distributed Architecture Self-Provisioning & Managing Built For Service Providers Enterprise Ready Commodity Compute Commodity Storage 18
Global Data Services objects and HDFS Scale Hadoop Analytics Beyond Appliances EMC ViPR Platform ViPR Data Services ViPR Controller Provisioning Self-Service Reporting Automation VMAX VNX Isilon 3 rd Party Commodity 19
What is a SecSLA??? Service Level Agreement (SLA) Contract which describes the Service, the associated quality levels and specifies the responsibilities (typically soft formal obligations!) of both the Provider and the Customer. Effectively granted as QoS! Services (behind the SLA s) Functionality Performance Price Reputation -> SecSLA???? 20
SPECS Project Quantification as the Basis for SecSLA Monitoring, Negotiation and Enforcement SPECS : Secure Provisioning of Cloud Services Based on SLA Management 1. Evaluate and/or enrich CSPs security features -> SecSLA Negotiation and Enforcement components 2. Guarantee agreed Sec Levels within CSP -> SecSLA Monitoring components 21
SPECS Positioning SPECS supports both cloud customers and CSP to respectively access and provide a target service. SPECS Security Services provide security guarantees to cloud customers, by using specific services to negotiate, enforce and continuously monitor the security parameters included in the SLA (SLA-based approach). 22
SPECS Resource Broker Scenario I/II Offer (Security) Services granted by SecSLA to End Users CSP with SPECS Platform buys resources from external CSP Act as cloud resource broker for end user 23
SPECS Resource Broker Scenario II/II SPECS Approach Negotiation: translate high level user requirement into concrete SecSLA, close negotiation process with digital signed SLA Enforcement: plan, implement and deploy the agreed SecSLA Monitoring: continuous monitor parameters associate with SecSLA metric 24
We're SPECS Platform leveraging international Example Scenario: Storing Confidential Data standards Problem: Single A User wants access to store data point on remote - User Cloud accesses providers, and SPECS with data confidentiality requirements Metrics (how do you measure it? How services do you guarantee and utilized it? Crypto Algo, it to key negotiate, length,...). SPECS solution: State of the Art: The requirements. User chooses a Cloud provider with storage features. Manually checks their SLA, verify the kind of security features offered. Studies different offerings, and chooses. Limitations: implementation and monitoring of security SPECS helps to: Specify needed requirements Enforce adapted secured service Guarantee sec by continuous monitor Manual evaluation of security, ad-hoc security solution, small adaptation, no continuous monitoring and guarantee sec Level. 25
ViPR + SPECS = ViPR++ ViPR with negotiation capabilities to automated management of Security Standard metrics (example crypto metric: key length, algorithm) Dynamic security SLA ViPR with enforcing security controls in order to grant a Security SLA Incident Response automation Automate resource provisioning and orchestration ViPR with monitoring controls extension in order to guarantee Security SLA Continuous monitoring On demand assessment 26
Introducing SPECS into EMC s ViPR SPECS components: - Enforcement - Negotiation - Monitoring ViPR Data Services ViPR Controller VMAX VNX Isilon 3 rd Party Commodity 27
SPECS + ViPR Positioning = checkmate + Continuous monitoring of agreed SLA I would have a crypto cloud partition Find a service with Crypto capability Negotiate the SLA with crypto metric (algorithm, key,...) Allocate SLA with crypto metric Customer Enable End Users to negotiate Cloud SLA effectively with a set of CSP, by understanding the resulting trade-offs SPECS Framework Open APIs Enable Anyone To Build Rich Data Services CSP with ViPR New Capabilities Delivered Through Object Data Services Target Services Write Once, Run Everywhere Data Services Model 28
Thanks for the attention Any questions? Please answer to the survey to have free drinks and participate to 2 EMC gadgets raffle