Welcome!

Cloud Security Authors: Scott Allen, Jose Diaz, Elizabeth White, Liz McMillan, Pat Romanski

Related Topics: @CloudExpo, Microservices Expo, Containers Expo Blog, Agile Computing, Cloud Security, @BigDataExpo

@CloudExpo: Article

Cloud-Based DevOps

Innovating at the Speed of the Market

I have a confession. I am Shadow IT. I am the guilty party operations and security love to hate because I expense tens of thousands of dollars in cloud services...every month. Truth be told, my team and I couldn't afford to wait in line for IT to provision the resources we needed to begin work. We had goals to meet and objectives to achieve - all of which didn't include waiting in line for IT to give us virtual machines, development platforms or set up sandboxes so we could begin work.

With a lengthy approval process and cost justifications, there was no way I would have been able to secure either the physical infrastructure or cloud vendor approvals I needed to achieve the business unit's goals. And, honestly, the risk of choosing a vendor that would leak our data, or otherwise put the business at risk, seemed a lot lower than the risk of not getting my job done.

So, even though my monthly cloud bill continued to rise, it didn't surprise me too much that I was never questioned about the expense because my team was delivering. And, that is exactly what everyone from the business side of things cares about - is development creating new applications and/or services that can be brought to market before the competition? Can we secure ‘first-mover' status or market leadership because development is firing on all cylinders? These are the questions marketing, business development, and other teams ask. Not, did central IT get you those VMs you needed?

In talking to others, I know I'm not alone. And, yet, I intrinsically know there has to be a better way than to submit an expense report with fingers crossed every month. Which is why I am coming out of the Shadow.

The Real Problem
From my seat, the real problem is that the entire system is caught in a vicious cycle of process, governance and pig throwing. What do I mean?  Limited central IT resources and a focus on infrastructure management limit the ability to allocate development resources and slows development's ability to innovate at the pace needed to match business requirements. Security and audit insert additional approvals and manual steps that need to be followed throughout the application lifecycle that adds drag to the system, and dev is often accused of throwing the proverbial pig over the wall to operations. And, anything and everything that goes wrong from that point forward is blamed on development's "pig".

The problem is exacerbated by pressure from the business - from beating small, nimble competitors to market to ensuring compliance and cutting budgets - that adds stress to the system. Operating in an "application economy" however, this system should run like a well-oiled machine.

Greasing System Dynamics with DevOps

DevOps may just hold the key in the application economy. In case you are unfamiliar with DevOps, it stemmed from Enterprise Systems Management and Agile software development methodologies, with an emphasis on communication, collaboration and integration between dev and IT Operations.  And, most importantly, DevOps focuses on improving reliability and security while speeding development and deployment cycles at each phase of the application lifecycle--from conception and creation, to testing, QA, and product delivery.

DevOps also helps with release management by standardizing development environments, which gives development greater control because they can program to give apps the full knowledge of the supporting infrastructure.  DevOps may well be the cure in the application economy because it automates as much of the operational process as possible, which speeds hand-offs, allows for automatic integration of processes and even governance and security controls.

When the Cloud Helps & When it Doesn't
While DevOps sounds great, when you couple it with some of the promises of cloud computing, it gets even better. For example, one of the core tenets of the cloud is IT-as-a-service, which translates into self-service access for development to the complete development platforms they need, when they need them. Take these resources, begin coding in your tool(s) of choice, and you are off to the races! One thing I learned when contracting with cloud service providers is that this full-service model is much better than renting Infrastructure-as-a-Service (IaaS) because the team was still responsible for managing middleware which is unnecessarily time consuming. If the VM is running, your provider is doing their job. Period.

Some IT organizations think IaaS is the place to start with DevOps. I'm of the mind that spinning up VMs faster is about as exciting as watching grass grow - I'm already getting that from the public cloud providers I've been covertly using. It gets you a fraction of the way there, but doesn't really address the spectrum of how DevOps can help break IT out of its box and create a dynamic system that is the rocket fuel of the company's growth.  Let me break it down a bit. DevOps, supported by a self-service cloud environment, nets development:

  • Standardized Environments: With on-demand access to entire application platforms that are already standardized and pre-configured to resemble IT's production environment, dev can create and deploy apps across the lifecycle without the tedium and bottlenecks that occur at each phase of the software development lifecycle today. Development can occur in any language, regardless of the final platform, and dev can focus on developing high-value, innovative applications. Between a greater focus on code, and access to standardized environments, apps are more likely to excel in quality and be less likely to need rework, or cause production hiccups.

  • Streamlined Release to Production: A cloud-based DevOps model allows teams to automate release management, using an organization's existing approval processes supported by automatic provisioning of application deployment environments. By streamlining across the development-to-operations lifecycle, teams are able to keep pace with faster change by automating and standardizing tasks that are manually configured today, creating less room for ‘fat finger' errors and the resultant problem resolution.

  • Built-In Business Policy: Cut the vicious cycle by working with IT and security to provision policies as part and parcel of the standardized environment. By integrating policy early, you increase confidence in the process across the board, eradicating operations' ability to label your new baby nothing but a pig with lipstick.

By working with IT across the software development lifecycle via cloud-based DevOps, development teams can decrease software bottlenecks, increase code output and be seen as drivers of the business. And, who doesn't want a well-oiled machine that drives the company forward? It's much better than holding your breath for a call from accounting about that $20,000 AWS expense.

More Stories By Shawn Douglass

Shawn Douglass has been a cloud visionary and key contributor to the emerging enterprise cloud operating model for over a decade. Mr. Douglass is responsible for the strategy and vision of the Agility Platform and contributing to IT transformation at Global 2000 enterprises.

Prior to ServiceMesh he was managing director at EMC Ventures where he drove strategic investments in cloud, security, big data/analytics, and disruptive technology and business models.

He has served on the Board of Directors and as Chairman of the Technical Steering Committee for the Enterprise Grid Alliance (EGA), and on the Board of Directors at Joyent, a high-performance cloud infrastructure provider. He is also a winner of the Always On 2012 Power Players in the Cloud award. Mr. Douglass is a graduate of Harvard Business School.

@ThingsExpo Stories
In his session at @ThingsExpo, Chris Klein, CEO and Co-founder of Rachio, will discuss next generation communities that are using IoT to create more sustainable, intelligent communities. One example is Sterling Ranch, a 10,000 home development that – with the help of Siemens – will integrate IoT technology into the community to provide residents with energy and water savings as well as intelligent security. Everything from stop lights to sprinkler systems to building infrastructures will run ef...
We’ve worked with dozens of early adopters across numerous industries and will debunk common misperceptions, which starts with understanding that many of the connected products we’ll use over the next 5 years are already products, they’re just not yet connected. With an IoT product, time-in-market provides much more essential feedback than ever before. Innovation comes from what you do with the data that the connected product provides in order to enhance the customer experience and optimize busi...
Manufacturers are embracing the Industrial Internet the same way consumers are leveraging Fitbits – to improve overall health and wellness. Both can provide consistent measurement, visibility, and suggest performance improvements customized to help reach goals. Fitbit users can view real-time data and make adjustments to increase their activity. In his session at @ThingsExpo, Mark Bernardo Professional Services Leader, Americas, at GE Digital, will discuss how leveraging the Industrial Interne...
The increasing popularity of the Internet of Things necessitates that our physical and cognitive relationship with wearable technology will change rapidly in the near future. This advent means logging has become a thing of the past. Before, it was on us to track our own data, but now that data is automatically available. What does this mean for mHealth and the "connected" body? In her session at @ThingsExpo, Lisa Calkins, CEO and co-founder of Amadeus Consulting, will discuss the impact of wea...
Increasing IoT connectivity is forcing enterprises to find elegant solutions to organize and visualize all incoming data from these connected devices with re-configurable dashboard widgets to effectively allow rapid decision-making for everything from immediate actions in tactical situations to strategic analysis and reporting. In his session at 18th Cloud Expo, Shikhir Singh, Senior Developer Relations Manager at Sencha, will discuss how to create HTML5 dashboards that interact with IoT devic...
Whether your IoT service is connecting cars, homes, appliances, wearable, cameras or other devices, one question hangs in the balance – how do you actually make money from this service? The ability to turn your IoT service into profit requires the ability to create a monetization strategy that is flexible, scalable and working for you in real-time. It must be a transparent, smoothly implemented strategy that all stakeholders – from customers to the board – will be able to understand and comprehe...
Artificial Intelligence has the potential to massively disrupt IoT. In his session at 18th Cloud Expo, AJ Abdallat, CEO of Beyond AI, will discuss what the five main drivers are in Artificial Intelligence that could shape the future of the Internet of Things. AJ Abdallat is CEO of Beyond AI. He has over 20 years of management experience in the fields of artificial intelligence, sensors, instruments, devices and software for telecommunications, life sciences, environmental monitoring, process...
The IoTs will challenge the status quo of how IT and development organizations operate. Or will it? Certainly the fog layer of IoT requires special insights about data ontology, security and transactional integrity. But the developmental challenges are the same: People, Process and Platform. In his session at @ThingsExpo, Craig Sproule, CEO of Metavine, will demonstrate how to move beyond today's coding paradigm and share the must-have mindsets for removing complexity from the development proc...
A critical component of any IoT project is the back-end systems that capture data from remote IoT devices and structure it in a way to answer useful questions. Traditional data warehouse and analytical systems are mature technologies that can be used to handle large data sets, but they are not well suited to many IoT-scale products and the need for real-time insights. At Fuze, we have developed a backend platform as part of our mobility-oriented cloud service that uses Big Data-based approache...
trust and privacy in their ecosystem. Assurance and protection of device identity, secure data encryption and authentication are the key security challenges organizations are trying to address when integrating IoT devices. This holds true for IoT applications in a wide range of industries, for example, healthcare, consumer devices, and manufacturing. In his session at @ThingsExpo, Lancen LaChance, vice president of product management, IoT solutions at GlobalSign, will teach IoT developers how t...
Digital payments using wearable devices such as smart watches, fitness trackers, and payment wristbands are an increasing area of focus for industry participants, and consumer acceptance from early trials and deployments has encouraged some of the biggest names in technology and banking to continue their push to drive growth in this nascent market. Wearable payment systems may utilize near field communication (NFC), radio frequency identification (RFID), or quick response (QR) codes and barcodes...
SYS-CON Events announced today that Peak 10, Inc., a national IT infrastructure and cloud services provider, will exhibit at SYS-CON's 18th International Cloud Expo®, which will take place on June 7-9, 2016, at the Javits Center in New York City, NY. Peak 10 provides reliable, tailored data center and network services, cloud and managed services. Its solutions are designed to scale and adapt to customers’ changing business needs, enabling them to lower costs, improve performance and focus inter...
We're entering the post-smartphone era, where wearable gadgets from watches and fitness bands to glasses and health aids will power the next technological revolution. With mass adoption of wearable devices comes a new data ecosystem that must be protected. Wearables open new pathways that facilitate the tracking, sharing and storing of consumers’ personal health, location and daily activity data. Consumers have some idea of the data these devices capture, but most don’t realize how revealing and...
The demand for organizations to expand their infrastructure to multiple IT environments like the cloud, on-premise, mobile, bring your own device (BYOD) and the Internet of Things (IoT) continues to grow. As this hybrid infrastructure increases, the challenge to monitor the security of these systems increases in volume and complexity. In his session at 18th Cloud Expo, Stephen Coty, Chief Security Evangelist at Alert Logic, will show how properly configured and managed security architecture can...
There is an ever-growing explosion of new devices that are connected to the Internet using “cloud” solutions. This rapid growth is creating a massive new demand for efficient access to data. And it’s not just about connecting to that data anymore. This new demand is bringing new issues and challenges and it is important for companies to scale for the coming growth. And with that scaling comes the need for greater security, gathering and data analysis, storage, connectivity and, of course, the...
The IETF draft standard for M2M certificates is a security solution specifically designed for the demanding needs of IoT/M2M applications. In his session at @ThingsExpo, Brian Romansky, VP of Strategic Technology at TrustPoint Innovation, will explain how M2M certificates can efficiently enable confidentiality, integrity, and authenticity on highly constrained devices.
So, you bought into the current machine learning craze and went on to collect millions/billions of records from this promising new data source. Now, what do you do with them? Too often, the abundance of data quickly turns into an abundance of problems. How do you extract that "magic essence" from your data without falling into the common pitfalls? In her session at @ThingsExpo, Natalia Ponomareva, Software Engineer at Google, will provide tips on how to be successful in large scale machine lear...
You think you know what’s in your data. But do you? Most organizations are now aware of the business intelligence represented by their data. Data science stands to take this to a level you never thought of – literally. The techniques of data science, when used with the capabilities of Big Data technologies, can make connections you had not yet imagined, helping you discover new insights and ask new questions of your data. In his session at @ThingsExpo, Sarbjit Sarkaria, data science team lead ...
SYS-CON Events announced today that Ericsson has been named “Gold Sponsor” of SYS-CON's @ThingsExpo, which will take place on June 7-9, 2016, at the Javits Center in New York, New York. Ericsson is a world leader in the rapidly changing environment of communications technology – providing equipment, software and services to enable transformation through mobility. Some 40 percent of global mobile traffic runs through networks we have supplied. More than 1 billion subscribers around the world re...
You deployed your app with the Bluemix PaaS and it's gaining some serious traction, so it's time to make some tweaks. Did you design your application in a way that it can scale in the cloud? Were you even thinking about the cloud when you built the app? If not, chances are your app is going to break. Check out this webcast to learn various techniques for designing applications that will scale successfully in Bluemix, for the confidence you need to take your apps to the next level and beyond.