Posts Tagged SaaS

Cloud Computing and The Rigid Iron Fist of Security Managers

Following on from my last post on the top 10 technologies and trends for 2010 I had a couple of thoughts on 3 of the items in the list, namely;

Point 1 “Cloud Computing”
Point 10 “Mobile Applications”
Point 7 “Security – Activity Monitoring”

My thoughts, or more precisely my questions are, how are IT security folks going to deal with the changing eco-system that increased adoption of both cloud computing and mobile applications present?

Traditionally, corporate IT security relied on building a strong perimeter and only allowing selected traffic in and out via a firewall. Over the years many different threats arose and were dealt with successfully (if not bluntly) by network security managers. For example, when USB thumb drives became popular USB ports on corporate desktops the world over were simply disabled. Likewise many organisations simply imposed blanket bans on any web based mail clients (Hotmail, Yahoo, GMail, etc.) and blocked all social media sites at the firewall.

Many companies also adopted strict policies about what equipment would be allowed and enabled to connect to their networks but invariably, many of these policies were relaxed over time with the increased requirement for inter-organisation collaboration and more mobile workforces.

Mobile workers added a new threat when laptops were either lost or stolen and we are all aware of many high profile cases involving data loss through such incidents. Alarmingly the incidence of lost laptops is far more prevalent than you might think, Dell released a report last year estimating that more than 12,200 laptops per week were lost or stolen in airports in the U.S. alone. The biggest concern with loosing a laptop is not the asset loss itself but the question about what sensitive information its hard-drive might contain.

Roll forward to the Era of Cloud Computing and consider the complexity of managing IT Security in a hybrid environment where many organisations will have a mix of both on-premise and cloud based solutions. Additionally the increased requirement for organisations to collaborate with partners, suppliers and customers and the sudden realisation in board rooms across the world that social media is not the enemy and you can see that the traditional secure perimeter is beginning to look very porous indeed.

My own view is that most reputable cloud computing providers run an environment that is equally as (and probably more) secure than the vast majority of corporate environments, however in order to utilise and benefit from these cloud services we need to resolve the conflict that exists between the cloud computing model and the traditional rigid iron fist of security managers.

A new IT Security model which can enable the adoption of cloud computing services while assuring corporate data protection is urgently required. As always your thoughts and input on this are welcome.

[Post to Twitter] Tweet This Post  [Post to Digg] Digg This Post  [Post to Reddit] Reddit This Post  [Post to StumbleUpon] Stumble This Post 

Tags: , , ,

Google Atmosphere

Last week I was at Google’s Atmosphere event in London. The event was highly informative, entertaining and thought provoking with speakers ranging from Nicholoas Carr (Author: The Big Switch), Nikesh Arora(Google), Dr. Werner Vogels (Amazon), Dave Girouard (Google), Geoffrey Moore (Author: Crossing the Chasm), Marc Benniof (CEO & Founder Salesforce.com), Matthew Glotzbach (Google), Dr. Carsten Sorensen (LSE).


Below are the “Google Atmosphere Videos” from the day which I would recommend watching if you have the time.

Google Atmosphere Highlights

Google Atmosphere Opening Video


Google Atmosphere Opening Session


Nikesh Arora, President of Global Sales and Business Development at Google, and Adrian Joseph, Managing Director Google Enterprise EMEA.

Nicholas Carr on Cloud Computing


Dr. Werner Vogels (CTO Amazon)


The Perfect Storm


On the panel: Dr Werner Vogels - CTO Amazon.com, Nicholas Carr - Author, The Big Switch, Paul Daugherty - Chief Technology Architect, Accenture, Dr. Carsten Sorensen - LSE

Panel - Risk and Reward


Marcello Cordioli - CIO, Permasteelisa, Olivier Carre-Pierrat - Infrastructures & Telecoms Director, Euromaster, Jeremy Vincent - CIO Jaguar Landrover, Claudio Umana - CIO, Fracarro, Jean-Francois Caenen - CTO, Cap Gemini France, Moderated by Guy Clapperton

Making Waves: Google Cloud Innovation


Nelson Mattos - VP EMEA Product & Engineering, Google and Matthew Glotzbach - Director of Product, Google take a look at innovations from the Google Enterprise team.

Panel - Collaboration in the Workplace


Paul Cheesbrough - CIO, Telegraph Media Group, Francois Blanc - CIO, Valeo, Todd Pierce - SVP & CIO, Genentech, Andy Beale - CIO, Guardian Media Group

Marc Benniof (Salesforce.com) on Cloud Computing


Focus on the Core by Geoffrey Moore


IT can help a business focusing on your core and increase innovation - After 3 decades of delivering systems of record, IT must focus on collaboration.

Fireside chat with Dave Girouard and Alan Eustace


An open forum with Alan Eustace - SVP, Engineering & Research and Dave Girouard - President, Google Enterprise. Chaired by Adrian Joseph - Managing Director, Google Enterprise, EMEA.

[Post to Twitter] Tweet This Post  [Post to Digg] Digg This Post  [Post to Reddit] Reddit This Post  [Post to StumbleUpon] Stumble This Post 

Tags: , , , , , , , , , , , , ,

Has Cloud Computing Killed The Operating System?

The Operating System originated as a common set of platform management abstractions, to free software developers from the complexity of managing hardware. To many of us that concept has become somewhat distant and when we think OS we usually think in terms of UI or GUI (Graphical User Interface). Most of the current generation of operating systems have become exceedingly bloated primarily because, their creators have been pushing the notion of the OS as a competitive differentiator for many years.

In the early days computers had a single CPU and the obvious thing to do was to build an Operating System that could run many different applications, preferably at once. This created the need for more functionality to manage resources and also manage the applications themselves. Added to this, many OS vendors started to bundle even more widgets, gadgets and applications to their offerings and hey presto - it takes me several minutes to wait for my computer to start-up anytime I want to do anything, this despite the fact that all I want to do is get at Firefox.

My gut-feeling is that Cloud Computing is about to kill the operating system as we know it. The fatal blow has in-fact already been dealt but the demise will not likely be recognised for some time yet.

Desktop Operating Systems

With increasing adoption of Cloud Computing and SaaS it seems to me that, increasingly the tasks I want to complete on a computer are presented to me in a browser. My browser runs on top of my operating system which has a bunch of features and complexity that I would rather forget about. In order to run my operating system with all its bells and whistles the hardware I have is, no doubt vastly over-specked - yet it still takes a number of minutes for me to get going every-time I start-up (Windows Vista in this case is shamefully bloated and slow).

Google recognised this frustration and in July of this year came out and announced its Google Chrome OS. My understanding of Chrome OS is that, in essence it will be a stripped out and hardened Linux Kernel with the ability to run a browser and little or no extra functionality. Google claim they will have users up and running in seconds and promise an end to security vulnerabilities, viruses and malware. This sounds like a good proposition to me - and it will be free, better again.

Meanwhile Microsoft came out and told the world about its research on Gazelle. Gazelle is a research program Microsoft are running under the title “The Multi-Principal OS Construction of the Gazelle Web Browser”. Its interesting that Microsoft’s approach is still underpinned by Windows 7, which I admit I haven’t seen or tested yet, but I have my concerns about its bloat-factor having observed many new Microsoft OSes over many years.

I am not aware of significant research efforts by other companies into offerings that will compete head-on with Goggle’s Chrome OS or Gazelle, however many Linux OSes are very nicely placed to jump into this changing eco-system and capture significant market share. In my view there are three primary reasons that have, thus far stopped Linux from taking a much more significant desktop market share;

  • The Ugly Factor
  • The inability to install and support mainstream applications
  • The lack of branding and consumer awareness


  • Breaking this down a little bit, most Linux OSes are extremely robust and efficient platforms, the GUI in most instances runs as an added application but in my view is pug ugly. So simply by removing the GUI app and running your choice of browser directly on the OS possibly provides a realistic alternative. As mentioned previously, most of what today’s and tomorrows users require is presented to them in a browser, so why bother with the rest of the OS? I guess this is what Google are doing with Chrome OS - but with independent Linux offerings users are not necessarily tied to a specific browser. The problem of installing mainstream applications is quickly disappearing with browser delivered SaaS models, and finally the branding issue? Perhaps there is room here for Firefox, who have a very significant browser market share compared to the resources available to them to jump in and disrupt the market?

    So in conclusion, perhaps the Desktop Operating System isnt whats under threat here, maybe we will see the OS going all the way back to its roots again becoming a set of platform management abstractions. Maybe then its the GUI that is at stake? This could explain why Steve Balmer (Microsoft CEO) recently went on the offensive talking trash about the Google Chrome OS and Apples Safari browser, calling them “rounding errors”. In the same breath he also noted that Mozilla’s Firefox was (in the browser market) the most successful so-far. Evidently what is really upsetting Balmer is Google’s recent announcement of its “Internet Explorer Chrome Frame Plug-in”, this according to Balmer is Google replacing Microsoft’s browser rendering engine without telling you, and he calls it an “unanticipated competitive attack factor”.

    Microsoft after-all has reason to be concerned, there is a lot at stake here, in their fiscal year 2009 they had revenues of almost $15 Billion from selling their Operating Systems. 80% of which was received from OEM’s (computer manufacturers who bundle windows on their products). If there were to be any significant shift in this pattern it would have an immediate impact on what appears to be Microsoft’s most profitable business line. Additionally the broad market penetration of Windows Desktops eases the way for many of Microsoft’s other products.

    Server Operating Systems

    Over on the server OS front there is likely to be an even more interesting evolution over time. While many IT Departments and Hosting Companies have for the past couple of years put significant investment of time and resources into virtualising their server infrastructure, little has changed because most of this virtualisation still uses the principle of running a single Server OS on a single virtual machine (basically swapping bare-metal for VM’s).

    On the Cloud Computing front Amazon offers an excellent alternative to in-house virtualisation with its EC2 offering and recent analysis by Guy Rosen estimates the number of Amazon EC2 instances launched daily in their us-east-1 region at 50,000 (bear in mind that this is only one of a handful of regions for Amazon EC2).

    However many commentators are predicting that Virtual Machines and even Amazons EC2 are only a stop-gap measure on our way to something completely different. The argument is that the Operating System as the owner of a single servers hardware (either bare-metal or virtualised) will lose dominance over time as the the abstractions of computing, storage and networking that enable resource pooling, multi-tenancy, high availability, dynamic workload balancing and the other benefits that arise from a virtualised infrastructure become a reality.

    This concept is already taking root with a number of vendors. Noteably Microsoft’s Azure platform decouples the infrastructure completely from the application layer providing flexible virtualised compute, storage and networking capabilities for developers. Currently Azure only supports .NET but as I understand it, support for Ruby-on-Rails, Python and PHP will be added in the near future. Over at Amazon there are 2 services in this category that are also gaining traction, Amazon SimpleDB and Amazon S3, SimpleDB is a virtualised database service and S3 is a storage service.

    With all these compute, networking database and storage resources being presented to us as virtual layers and the availability of other major cloud computing offerings such as Google Apps, SalesForce.com, etc., etc., it is becoming increasingly difficult for me to see where the traditional server operating system fits into the IT puzzle of the future.

    As always, your comments are welcome.

    [Post to Twitter] Tweet This Post  [Post to Digg] Digg This Post  [Post to Reddit] Reddit This Post  [Post to StumbleUpon] Stumble This Post 

    Tags: , , , , , , , , , , , ,

    The Case for Google Apps (gmail) V’s Microsoft Exchange

    Many IT departments and companies are either currently unaware of, or adopting a “wait and see” approach to cloud computing. Unfortunately the cloud computing concept still seems to be somewhat abstract for some IT professionals who are running flat-out to maintain existing systems. Additionally, current budget and resource constraints at many organisations are preventing network and IT managers the time to adequately explore the benefits that cloud computing could bring to their organisations. In light of this I thought it might be beneficial to bring forward a very specific solution to a very common problem.

    Despite the economic slowdown, demands for enterprise messaging, collaboration and storage space continue to grow at a phenomenal pace. IT departments (like everyone else) have had to make do with tighter budgets and this has resulted in reduced capital spending on servers and systems. Paradoxically the reduced spend has caused the total cost of ownership for systems like Microsoft Exchange to grow higher because IT engineers are now spending significantly more time trying to free up storage space and keep older systems running smoothly.

    The age old solution to this problem would be to ride out the recession and once the economy gets back on track look at freeing up some budget to get back on the hardware and software upgrade treadmill. However there is another, I believe better solution.

    Move your enterprise to Google Apps (Gmail, Google Docs, Etc.)!

    I can already hear the screams of heresy coming from the hallways, but before you tie me to a stake, hear me out. I accept that Microsoft Exchange has been the de facto standard for enterprise messaging for many years. When Microsoft Exchange came to prominence it offered a much better solution than pretty much anything else on the market. However, since then the requirement has grown for a myriad of add-ons and extensions to Exchange to scan for viruses, block spam, archive emails, add legal disclaimers, add signatures, filter content, compress attachments, etc. Depending on your environment, the list is pretty staggering. The simple truth is that the add-ons can cost your organisation as much as 50% of the cost of the Exchange environment itself. Indicated T.C.O. figures for Microsoft Exchange vary wildly from $24 to $72 per user / month (median $36), this does not include the listed add-ons which can typically cost $8-$12 extra per user / month.

    Enter Google Apps, the price? $50 per user / year ($4.16 per month). For your 50 bucks you get a brand-able solution with, email, calendar, project & team site creation, document and video collaboration & sharing and Google Talk (instant messaging, voice over IP and video conferencing). The solution works with your own domain name(s) and has all the extra features built-in (virus scanning, spam filtering, content filtering, archiving, disclaimers etc, etc.) There are a host of other benefits such as 25 GB email accounts for everyone and best of all it will work through the familiar web client, your outlook client, your iPhone, windows mobile device or your blackberry enterprise server.

    Setup of this service is also extremely easy and can be done for a small organisation in a matter of hours or a large organisation in a couple of days. Beyond setting up users initially there is virtually no maintenance with the exception of additions/deletions or other routine changes.

    The move from Microsoft Exchange to Google Apps could potentially save your organisation $502 / User / Year.

    When I started looking at Google Apps I immediately thought it would be ideal for S.M.E. but I soon found case studies on very significant corporate users (Genentech & G.E.) and Local Governments such as The District of Columbia which has 28,000 employees on the system.

    Here is a video on the D.C. Government implementation.

    In conclusion, I appreciate that moving your enterprise messaging and collaboration solutions onto the cloud is likely to be an emotive issue but I am finding it difficult to find any significant reason to keep it in-house. I would like to hear your thoughts on this topic (whether you agree or disagree).

    [Post to Twitter] Tweet This Post  [Post to Digg] Digg This Post  [Post to Reddit] Reddit This Post  [Post to StumbleUpon] Stumble This Post 

    Tags: , , , , , , ,

    The Future of Cloud Computing

    I have seen a good deal of commentary lately on cloud computing where people (who should be “in the know”) have put forward opinions that cloud computing is hosting by another name.

    To put the record straight, yes you can use cloud computing as an alternative means of traditional server or website hosting, but it is so much more than that.  Unlike traditional hosting arrangements cloud computing offers many different layers and opportunities right now, and many new layers and opportunities are either just unfolding or yet to be discovered.

    We are all familiar with SaaS (Software as a Service).  Well Cloud Computing readily provides the ability to use the cloud as PaaS (Platform as a Service).  One of the massive benefits of Cloud Computing is the flexible infrastructural platform it provides and the ability to change computing resource from a capital intensive / skills intensive investment into a utility.  Just like your electricity or gas supply, plug in and pay for as much or little as you use.

    There are a number of industry heavy-weights investing heavily right now in cloud computing, including Amazon, IBM, Google, HP, Dell, Microsoft & Others.  All of these providers currently have their efforts concentrated on providing standalone public clouds.  Meanwhile VM Ware, and Red Hat are currently offering customers the ability to build private cloud computing platforms.

    My view is that cloud computing platforms will soon reach a tipping point where it will no longer be at the cutting edge but instead will be the de-facto mechanism used for providing computing resources.  However, in order for this to happen there is one significant hurdle overcome first, that is, the ability for all the public and private clouds to interconnect seamlessly.  Consider it the “Inter-Cloud”.  For a comparison consider the growth of the internet, firstly there were a bunch of private networks that were not connected to each other, then with the emergence of the internet private networks began to connect to the internet using gateways.  Before too long the emergence and broad adoption of standard protocols (TCP/IP) eliminated the requirement for gateways and everything became connected to everything.  Something similar is inevitable for cloud computing and it is probably going to happen sooner than you think.

    One technology to watch here is Red Hats MRG.  MRG stands for Messaging Real-Time Grid and is really a wolf in sheep’s clothing.  With technologies like MRG, Cloud Computing Consultants can now offer clients incredible computing power from existing server and desktop inventory by enabling scheduling to local and remote grids, rented cloud capacity and cycle-stealing from desktop PCs.

    This is the start of something big, next time I post I will outline some very specific ideas I have on how these changes not only affect the IT industry but are also going to have a dramatic affect on how the world works.

    [Post to Twitter] Tweet This Post  [Post to Digg] Digg This Post  [Post to Reddit] Reddit This Post  [Post to StumbleUpon] Stumble This Post 

    Tags: , , , , , , , , , , , ,