API Journal Authors: Ruxit Blog, William Schmarzo, Elizabeth White, Yeshim Deniz, Derek Weeks

Related Topics: @CloudExpo, Containers Expo Blog

@CloudExpo: Article

Unisys & Cloud Computing: Anywhere, Anytime IT Needs Also To Be Secure

Cloud + Security = Unisys

It is increasingly clear that the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models; accordingly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

The size of data sets continues to grow exponentially and once data leaves a client's data centers, the ability of a cloud provider to meet the client's security, privacy and compliance requirements becomes a key issue.

This is where Unisys, with its recently announced four-part cloud computing strategy, comes in.

In an interview this week with SYS-CON's Cloud Computing Journal, Rich Marcello - President, Unisys Systems & Technology - described how the company is delivering on the first two parts this year beginning with its Cloud Transformation Services, announced June 30, followed by the Unisys Secure Cloud Solution which will become available on July 31.

Here's how Marcello summarized what Unisys is doing right now:

"A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage. Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.  Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant. All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves. We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary 'bit splitting'."

That "Stealth technology" Marcello referred to allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, Marcello pointed out, making it an important differentiator.

Dr Michael A. Salsburg, a Unisys Distinguished Engineer who has published and presented over 60 papers internationally in the fields of infrastructure and business service modeling, management and optimization, recently wrote a whitepaper titled "The Perfect Storm for Enterprise-Class Clouds" which also referred to security based on Stealth, as follows:

"For data-in-motion (data that is transmitted through the cloud network), Stealth not only provides a higher level of encryption than the standard approach (which is called Secure Socket Layer or SSL), but it also breaks apart the information into multiple streams. In this way, if another user of the cloud was monitoring the communication, that user would not only have to decrypt the stream but would also have to find the other streams that are part of the original message.

The term “Stealth” refers to the fact that, once a customer is “Stealthed” within its own community of interest, the actual existence of the communication path cannot be discovered by observers outside that community of interest. For data-at-rest, such as data stored on disk, the same techniques apply. The data is split into multiple stripes, and each stripe is encrypted. For both data-in-motion and data-at-rest, Stealth provides a new level of security and isolation that does not require changes to the application or hardware. Its simplified approach to isolation ensures that other communities of interest cannot detect that the data path exists, thus mitigating many of the requirements for network-based isolation through virtual LANs and other current techniques."

Salsburg's current focus within Unisys is the realization of real-time infrastructure management. Marcello noted, in the interview already quoted, that virtualization and automation are fundamental to cloud computing and for Unisys. "Our Real-Time Infrastructure technology powers our cloud," Marcello told Cloud Computing Journal's Jeremy Geelan.

"Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time. Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment," he continued.

The whitepaper written by Salsburg ends with a useful vision statement which is worth quoting in full:

"Over the last 60 years Unisys has had the vision to develop and utilize new technologies and services for the benefit of the industry and our customers. Our mainframe systems have been using virtualization and automation technologies for over 20 years. We have taken the deep engineering capabilities in delivering highly available, high transaction systems with complex workloads and applied them to the evolving and consolidating marketplace.

Our ability to deliver RTEs and RTIs whether in-sourced or outsourced helps us provide the perfect platform for the emerging “cloud computing” environment. Our mission is to provide customers with the most open, cost effective and secure IT service environment by helping them understand, plan, implement and manage their IT infrastructure their way. Unisys is uniquely positioned to provide cloud computing that is secure enough and scalable enough for enterprise-class computing."

Marcello said on June 30 when the Unisys portfolio of solutions was announced that Unisys clients, while seeing great value in moving enterprise applications and data to the cloud, felt they had lacked the comprehensive security to make them confident in actually doing so.

Security, Marcello stressed, is in the DNA of Unisys, just as data center transformation and application modernization are its heritage.

Outsourcing services tailored to the client's specific business needs is a Unisys forté, he noted. "Our cloud computing strategy draws on all those core capabilities to help clients break through the barriers to adoption and gain a full range of options for cloud services while safeguarding their operations and lowering IT costs," Marcello said.

When asked by Cloud Computing Journal how an IT manager should decide if cloud computing is right for their business and which workloads to move, Marcello replied that it is really about understanding what makes the most business sense for the client and what they are trying to accomplish, adding:

"As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals. These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices."

Salsburg summarized those services in his whitepaper as follows:

"The services start with an assessment where the target data center is evaluated to discover workloads that could benefit from cloud computing. Once they are discovered, the software and storage requirements are evaluated regarding a shift into the cloud. Unisys does not require that applications be re-factored or rewritten.

The assessment services produce deliverables that lay out a low-risk plan to transform from the current state to a future state where the workload can take advantage of the key cloud attributes. Because no changes are required to the workload, there are no unique APIs to lock in the workload. With the Unisys Secure Cloud, you can receive customized services where your unique requirements and computing approach are retained."

Over the next several months, Unisys intends to launch additional solutions that give clients enhanced options in implementing cloud services.

Unisys plans a "cloud-in-a-box" solution as a comprehensive IT infrastructure package, aimed at enabling what it calls "quick and cost-effective implementation of a private cloud." This solution will include virtualization capabilities, automation of ITIL best practices for service management, and Unisys Converged Remote Infrastructure Management capabilities, with Unisys Stealth solution ("as an option for extreme security," the company says).

Unisys also plans to deliver "hybrid" cloud technologies that provide what it believes is the best of managed and dedicated services by combining public and private cloud capabilities.

Download the Unisys White Paper "The Perfect Storm for Enterprise-Class Clouds"

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.

@ThingsExpo Stories
What happens when the different parts of a vehicle become smarter than the vehicle itself? As we move toward the era of smart everything, hundreds of entities in a vehicle that communicate with each other, the vehicle and external systems create a need for identity orchestration so that all entities work as a conglomerate. Much like an orchestra without a conductor, without the ability to secure, control, and connect the link between a vehicle’s head unit, devices, and systems and to manage the ...
Virgil consists of an open-source encryption library, which implements Cryptographic Message Syntax (CMS) and Elliptic Curve Integrated Encryption Scheme (ECIES) (including RSA schema), a Key Management API, and a cloud-based Key Management Service (Virgil Keys). The Virgil Keys Service consists of a public key service and a private key escrow service. 

Web Real-Time Communication APIs have quickly revolutionized what browsers are capable of. In addition to video and audio streams, we can now bi-directionally send arbitrary data over WebRTC's PeerConnection Data Channels. With the advent of Progressive Web Apps and new hardware APIs such as WebBluetooh and WebUSB, we can finally enable users to stitch together the Internet of Things directly from their browsers while communicating privately and securely in a decentralized way.
Amazon has gradually rolled out parts of its IoT offerings, but these are just the tip of the iceberg. In addition to optimizing their backend AWS offerings, Amazon is laying the ground work to be a major force in IoT - especially in the connected home and office. In his session at @ThingsExpo, Chris Kocher, founder and managing director of Grey Heron, explained how Amazon is extending its reach to become a major force in IoT by building on its dominant cloud IoT platform, its Dash Button strat...
Two weeks ago (November 3-5), I attended the Cloud Expo Silicon Valley as a speaker, where I presented on the security and privacy due diligence requirements for cloud solutions. Cloud security is a topical issue for every CIO, CISO, and technology buyer. Decision-makers are always looking for insights on how to mitigate the security risks of implementing and using cloud solutions. Based on the presentation topics covered at the conference, as well as the general discussions heard between sessi...
For basic one-to-one voice or video calling solutions, WebRTC has proven to be a very powerful technology. Although WebRTC’s core functionality is to provide secure, real-time p2p media streaming, leveraging native platform features and server-side components brings up new communication capabilities for web and native mobile applications, allowing for advanced multi-user use cases such as video broadcasting, conferencing, and media recording.
Fifty billion connected devices and still no winning protocols standards. HTTP, WebSockets, MQTT, and CoAP seem to be leading in the IoT protocol race at the moment but many more protocols are getting introduced on a regular basis. Each protocol has its pros and cons depending on the nature of the communications. Does there really need to be only one protocol to rule them all? Of course not. In his session at @ThingsExpo, Chris Matthieu, co-founder and CTO of Octoblu, walk you through how Oct...
Major trends and emerging technologies – from virtual reality and IoT, to Big Data and algorithms – are helping organizations innovate in the digital era. However, to create real business value, IT must think beyond the ‘what’ of digital transformation to the ‘how’ to harness emerging trends, innovation and disruption. Architecture is the key that underpins and ties all these efforts together. In the digital age, it’s important to invest in architecture, extend the enterprise footprint to the cl...
Almost everyone sees the potential of Internet of Things but how can businesses truly unlock that potential. The key will be in the ability to discover business insight in the midst of an ocean of Big Data generated from billions of embedded devices via Systems of Discover. Businesses will also need to ensure that they can sustain that insight by leveraging the cloud for global reach, scale and elasticity.
A critical component of any IoT project is what to do with all the data being generated. This data needs to be captured, processed, structured, and stored in a way to facilitate different kinds of queries. Traditional data warehouse and analytical systems are mature technologies that can be used to handle certain kinds of queries, but they are not always well suited to many problems, particularly when there is a need for real-time insights.
One of biggest questions about Big Data is “How do we harness all that information for business use quickly and effectively?” Geographic Information Systems (GIS) or spatial technology is about more than making maps, but adding critical context and meaning to data of all types, coming from all different channels – even sensors. In his session at @ThingsExpo, William (Bill) Meehan, director of utility solutions for Esri, will take a closer look at the current state of spatial technology and ar...
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at @ThingsExpo, James Kirkland, Red Hat's Chief Arch...
The IoT industry is now at a crossroads, between the fast-paced innovation of technologies and the pending mass adoption by global enterprises. The complexity of combining rapidly evolving technologies and the need to establish practices for market acceleration pose a strong challenge to global enterprises as well as IoT vendors. In his session at @ThingsExpo, Clark Smith, senior product manager for Numerex, will discuss how Numerex, as an experienced, established IoT provider, has embraced a ...
Everyone knows that truly innovative companies learn as they go along, pushing boundaries in response to market changes and demands. What's more of a mystery is how to balance innovation on a fresh platform built from scratch with the legacy tech stack, product suite and customers that continue to serve as the business' foundation. In his General Session at 19th Cloud Expo, Michael Chambliss, Head of Engineering at ReadyTalk, will discuss why and how ReadyTalk diverted from healthy revenue an...
SYS-CON Events announced today that Hitrons Solutions will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Hitrons Solutions Inc. is distributor in the North American market for unique products and services of small and medium-size businesses, including cloud services and solutions, SEO marketing platforms, and mobile applications.
SYS-CON Media announced today that @WebRTCSummit Blog, the largest WebRTC resource in the world, has been launched. @WebRTCSummit Blog offers top articles, news stories, and blog posts from the world's well-known experts and guarantees better exposure for its authors than any other publication. @WebRTCSummit Blog can be bookmarked ▸ Here @WebRTCSummit conference site can be bookmarked ▸ Here
SYS-CON Events announced today that Super Micro Computer, Inc., a global leader in Embedded and IoT solutions, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 7-9, 2017, at the Javits Center in New York City, NY. Supermicro (NASDAQ: SMCI), the leading innovator in high-performance, high-efficiency server technology, is a premier provider of advanced server Building Block Solutions® for Data Center, Cloud Computing, Enterprise IT, Hadoop/Big Data, HPC and ...
SYS-CON Events announced today that Streamlyzer will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Streamlyzer is a powerful analytics for video streaming service that enables video streaming providers to monitor and analyze QoE (Quality-of-Experience) from end-user devices in real time.
You have great SaaS business app ideas. You want to turn your idea quickly into a functional and engaging proof of concept. You need to be able to modify it to meet customers' needs, and you need to deliver a complete and secure SaaS application. How could you achieve all the above and yet avoid unforeseen IT requirements that add unnecessary cost and complexity? You also want your app to be responsive in any device at any time. In his session at 19th Cloud Expo, Mark Allen, General Manager of...
SYS-CON Events announced today that LeaseWeb USA, a cloud Infrastructure-as-a-Service (IaaS) provider, will exhibit at the 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. LeaseWeb is one of the world's largest hosting brands. The company helps customers define, develop and deploy IT infrastructure tailored to their exact business needs, by combining various kinds cloud solutions.