Welcome!

Cloud Security Authors: Yeshim Deniz, Elizabeth White, Peter Silva, Pat Romanski, Scott Millis

Related Topics: @CloudExpo, Microservices Expo, Cloud Security, @BigDataExpo, SDN Journal

@CloudExpo: Article

PaaS, Present, and Future

Platform as a Service is more than just the buzzword of the day – it’s the development & deployment approach of our dreams

Recently large numbers of consumers in the US were understandably upset and angry when online purchases that they made in the days just prior to Christmas were not delivered in time. Yet it was not so long ago that online (and traditional mail order) purchases almost always took a very long time, often weeks, to arrive. Order-to-delivery times of a few days, now considered normal, were unheard of and overnight was almost impossible to achieve.

This is just one more example of the many ways in which instant gratification has become the norm rather than the exception. People expect answers and results immediately, whether they are online or operating in the physical world. In information technology, Platform-as-a-Service (PaaS) is another evolution toward faster, "instant" gratification. PaaS offers a new way to support and deliver applications, leveraging cloud technology. It is still enabling the same activities involved with development and deployment that we have always practiced in IT, but with the cost, agility and scalability benefits of the cloud.

However, PaaS is faster - getting ideas to market quicker and opening new, cloud-based delivery options for existing applications. Because of the power it provides, it is clearly the "next big thing" for the developer community.

Understanding PaaS
Service is the key word in the PaaS acronym. Empowered by cloud computing service options, a PaaS computing platform can deliver a solution stack of services. PaaS service providers, in turn, offer up tools and libraries that support development, testing and instant deployment. It sounds simple and it is. To use an automotive analogy, it's like the development of electric starters... early Model Ts and other silent-film-era vehicles needed to be started by hand - like giant lawnmowers. At best it was unpleasant. At its worst, it could be dangerous.

But good engineering and new technology made electric starting systems affordable for everyone. No one missed the old way of doing things - people could concentrate on the task of driving and getting some place rather than the tricky art of simply starting the car.

PaaS is similar. It takes the familiar design-develop-deploy process and eliminates a lot of the cost and unpleasantness so you can concentrate on innovating, getting to market, and making money.

While there are many flavors of PaaS vendors, the common thread of offering application hosting services and deployment options is pretty much universal.

To make those concepts more understandable, I like to put PaaS into a visual structure that contrasts traditional on-premise practices with Infrastructure-a-a-Service (IaaS) and Software-as-a-Service (SaaS). In my simplified schematic (see illustration), the orange color denotes the functions that you need to worry about yourself. In the on-premises world, storage, server, networking, virtualization, the operating system, middleware, data, and applications all "belong" to you. It's a craft industry model where almost everything is procured, operated, managed, and customized by you and your organization. There are broad similarities from organization to organization, but there is always a lot of "reinventing the wheel."

For example, if performance is suffering due to storage limits (or even backups that are getting out of hand), you need to think about acquiring more hardware, refining tiering schemas, data management policies, retention goals, and more. Or if you need to bring remote users into the mix, it's up to you to provide the infrastructure.

For some organizations, that's fine. Maybe you are big enough that you can afford to be expert in every aspect and every layer of the stack. But for most organizations, simplifying the picture and focusing more on areas where they can better add value makes sense. Thus, IaaS - typified by services like Rackspace and AWS - has become a hugely popular option for deploying new or supplemental capacity and capability, and even providing a total replacement for on-premise investments.

The cloud-based IaaS providers offer physical or virtual machines and storage and the ability to scale services up and down according to customers' varying requirements (a so-called utility model).

PaaS Is the Next Step
PaaS takes the proven approach of IaaS and adds value - the expertise and the specific technology of the operating system and middleware layers - so that you can focus on your data and your key applications. While IaaS provides the elements of cloud computing to those with the capabilities to build their own platforms, PaaS goes a step further, delivering complex and highly labor-intensive middleware technology patterns.

PaaS is flexible and powerful - allowing self-service and self-provisioning of resources to support cloud architectures.

With PaaS, you bring your application, and the PaaS provider takes care of everything else, including:

  • Internet connectivity
  • Power
  • hardware
  • Operating systems
  • Databases
  • Web servers
  • Application servers
  • Monitoring
  • Backup
  • Restore
  • Failover
  • Scaling

Choices and the Market
Although PaaS is new, it's rapidly gaining momentum, with growth projected at 48 percent annually by Technavio, the research firm, and topping $6 billion in value by 2016.

As with any new technology or approach to doing business PaaS will appeal to different groups for different reasons. For example, PaaS can help ISVs extend the availability of a traditional software product or enable organizations to add new capabilities to their existing IT spectrum. It's also helpful to anyone wishing to achieve productivity gains, speed time to results, or reduce their capex costs.

Productivity PaaS offerings are often a model-driven approach to development and deployment that invoke high level programming languages, or even template-based software to help users, including those with little or no coding background, to create functioning business applications. Deployment is greatly simplified through PaaS because developers don't have to think about architecting, managing, or scaling the virtual machines that support the application.

PaaS offers a rapid route to SaaS if you want to be able to offer your application as a service and reach customers wherever they are. Likewise, if you are developing a new application, you want to eliminate boundaries. By choosing the right PaaS provider you can avoid concerns about development language or database technology. The PaaS provider can abstract those things in a way that allows you to focus on delivering functionality and value.

In the past, building an application required a commitment to a language or a database technology. With PaaS you don't need to be concerned about those issues. You only need to worry about your business domain expertise and usability.

Likewise, if you are aiming to modernize or use code you already have, PaaS will help expedite the trip to the cloud. It obviates the need to think about middleware and infrastructure and makes use of wizards and templates to update your application and even deliver new features quickly.

There are both public and private deployment options for PaaS. Many organizations love the idea of PaaS but, for a variety of reason, still balk at putting their mission-critical capabilities into a shared, public, environment. If that is the case for you, choose a PaaS that can be deployed in your own cloud environment where you can maintain some control, such as security and where data gets stored. This affords you the simplicity of PaaS and ensures future portability while providing the sense of security and ownership that many organizations still prefer.

Understanding some more about PaaS is the first step to selecting a provider. In addition, you should consider factors such:

  • Programming languages,
  • Database servers
  • Availability
  • Support
  • Ease of deployment and options
  • Portability
  • Security
  • Pricing

PaaS Now
PaaS technologies are so compelling because they have the potential to accelerate software development while recasting the way IT supports application development.

As you adopt PaaS, be sure to maintain a balance between the desire for speed and the necessity of planning and control. Tooling can help, but people are crucial too. As with any technological shift, PaaS adoption requires changes in how people work and demands collaboration if it is to be as successful as possible.

Last, but not least, PaaS should be viewed and acted upon as a substantial strategic opportunity - a chance to align agendas across IT and across the business. Development, operations, security, and infrastructure choices are all part of the mix with PaaS, providing a "once in a generation" opportunity to clarify, improve, and strengthen everything you do.

More Stories By Karen Tegan Padir

Karen Tegan Padir joined Progress Software in 2012 as senior vice president and business line executive for application development and subsequently moved into the CTO role. Among her previous experiences, she was a member of the Java Platform, Enterprise Edition team at Sun, helping to create one of most important “next big things” for developers.

Comments (1)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
Extracting business value from Internet of Things (IoT) data doesn’t happen overnight. There are several requirements that must be satisfied, including IoT device enablement, data analysis, real-time detection of complex events and automated orchestration of actions. Unfortunately, too many companies fall short in achieving their business goals by implementing incomplete solutions or not focusing on tangible use cases. In his general session at @ThingsExpo, Dave McCarthy, Director of Products...
The many IoT deployments around the world are busy integrating smart devices and sensors into their enterprise IT infrastructures. Yet all of this technology – and there are an amazing number of choices – is of no use without the software to gather, communicate, and analyze the new data flows. Without software, there is no IT. In this power panel at @ThingsExpo, moderated by Conference Chair Roger Strukhoff, Dave McCarthy, Director of Products at Bsquare Corporation; Alan Williamson, Principal...
Internet of @ThingsExpo has announced today that Chris Matthieu has been named tech chair of Internet of @ThingsExpo 2017 New York The 7th Internet of @ThingsExpo will take place on June 6-8, 2017, at the Javits Center in New York City, New York. Chris Matthieu is the co-founder and CTO of Octoblu, a revolutionary real-time IoT platform recently acquired by Citrix. Octoblu connects things, systems, people and clouds to a global mesh network allowing users to automate and control design flo...
Unsecured IoT devices were used to launch crippling DDOS attacks in October 2016, targeting services such as Twitter, Spotify, and GitHub. Subsequent testimony to Congress about potential attacks on office buildings, schools, and hospitals raised the possibility for the IoT to harm and even kill people. What should be done? Does the government need to intervene? This panel at @ThingExpo New York brings together leading IoT and security experts to discuss this very serious topic.
Businesses and business units of all sizes can benefit from cloud computing, but many don't want the cost, performance and security concerns of public cloud nor the complexity of building their own private clouds. Today, some cloud vendors are using artificial intelligence (AI) to simplify cloud deployment and management. In his session at 20th Cloud Expo, Ajay Gulati, Co-founder and CEO of ZeroStack, will discuss how AI can simplify cloud operations. He will cover the following topics: why clou...
In this strange new world where more and more power is drawn from business technology, companies are effectively straddling two paths on the road to innovation and transformation into digital enterprises. The first path is the heritage trail – with “legacy” technology forming the background. Here, extant technologies are transformed by core IT teams to provide more API-driven approaches. Legacy systems can restrict companies that are transitioning into digital enterprises. To truly become a lead...
Internet-of-Things discussions can end up either going down the consumer gadget rabbit hole or focused on the sort of data logging that industrial manufacturers have been doing forever. However, in fact, companies today are already using IoT data both to optimize their operational technology and to improve the experience of customer interactions in novel ways. In his session at @ThingsExpo, Gordon Haff, Red Hat Technology Evangelist, will share examples from a wide range of industries – includin...
The WebRTC Summit New York, to be held June 6-8, 2017, at the Javits Center in New York City, NY, announces that its Call for Papers is now open. Topics include all aspects of improving IT delivery by eliminating waste through automated business models leveraging cloud technologies. WebRTC Summit is co-located with 20th International Cloud Expo and @ThingsExpo. WebRTC is the future of browser-to-browser communications, and continues to make inroads into the traditional, difficult, plug-in web co...
"We build IoT infrastructure products - when you have to integrate different devices, different systems and cloud you have to build an application to do that but we eliminate the need to build an application. Our products can integrate any device, any system, any cloud regardless of protocol," explained Peter Jung, Chief Product Officer at Pulzze Systems, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
According to Forrester Research, every business will become either a digital predator or digital prey by 2020. To avoid demise, organizations must rapidly create new sources of value in their end-to-end customer experiences. True digital predators also must break down information and process silos and extend digital transformation initiatives to empower employees with the digital resources needed to win, serve, and retain customers.
Amazon has gradually rolled out parts of its IoT offerings in the last year, but these are just the tip of the iceberg. In addition to optimizing their back-end AWS offerings, Amazon is laying the ground work to be a major force in IoT – especially in the connected home and office. Amazon is extending its reach by building on its dominant Cloud IoT platform, its Dash Button strategy, recently announced Replenishment Services, the Echo/Alexa voice recognition control platform, the 6-7 strategic...
We're entering the post-smartphone era, where wearable gadgets from watches and fitness bands to glasses and health aids will power the next technological revolution. With mass adoption of wearable devices comes a new data ecosystem that must be protected. Wearables open new pathways that facilitate the tracking, sharing and storing of consumers’ personal health, location and daily activity data. Consumers have some idea of the data these devices capture, but most don’t realize how revealing and...
IoT solutions exploit operational data generated by Internet-connected smart “things” for the purpose of gaining operational insight and producing “better outcomes” (for example, create new business models, eliminate unscheduled maintenance, etc.). The explosive proliferation of IoT solutions will result in an exponential growth in the volume of IoT data, precipitating significant Information Governance issues: who owns the IoT data, what are the rights/duties of IoT solutions adopters towards t...
Whether your IoT service is connecting cars, homes, appliances, wearable, cameras or other devices, one question hangs in the balance – how do you actually make money from this service? The ability to turn your IoT service into profit requires the ability to create a monetization strategy that is flexible, scalable and working for you in real-time. It must be a transparent, smoothly implemented strategy that all stakeholders – from customers to the board – will be able to understand and comprehe...
Complete Internet of Things (IoT) embedded device security is not just about the device but involves the entire product’s identity, data and control integrity, and services traversing the cloud. A device can no longer be looked at as an island; it is a part of a system. In fact, given the cross-domain interactions enabled by IoT it could be a part of many systems. Also, depending on where the device is deployed, for example, in the office building versus a factory floor or oil field, security ha...
An IoT product’s log files speak volumes about what’s happening with your products in the field, pinpointing current and potential issues, and enabling you to predict failures and save millions of dollars in inventory. But until recently, no one knew how to listen. In his session at @ThingsExpo, Dan Gettens, Chief Research Officer at OnProcess, discussed recent research by Massachusetts Institute of Technology and OnProcess Technology, where MIT created a new, breakthrough analytics model for s...
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, discussed how Dice leverages data insights and tools to help both tech professionals and recruiters better understand how skills relate to each other and which skills are in high demand using interactive visualizations and salary indicator tools to maximize earning potential. Manish Dixit is VP of Product and Engineering at Dice. As the leader of the Product, Engineering and Data Sciences team at D...
"We're a cybersecurity firm that specializes in engineering security solutions both at the software and hardware level. Security cannot be an after-the-fact afterthought, which is what it's become," stated Richard Blech, Chief Executive Officer at Secure Channels, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Video experiences should be unique and exciting! But that doesn’t mean you need to patch all the pieces yourself. Users demand rich and engaging experiences and new ways to connect with you. But creating robust video applications at scale can be complicated, time-consuming and expensive. In his session at @ThingsExpo, Zohar Babin, Vice President of Platform, Ecosystem and Community at Kaltura, discussed how VPaaS enables you to move fast, creating scalable video experiences that reach your aud...
"Once customers get a year into their IoT deployments, they start to realize that they may have been shortsighted in the ways they built out their deployment and the key thing I see a lot of people looking at is - how can I take equipment data, pull it back in an IoT solution and show it in a dashboard," stated Dave McCarthy, Director of Products at Bsquare Corporation, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.