Welcome!

Java Authors: Roger Strukhoff, Esmeralda Swartz, Trevor Parsons, Sandi Mappic, Lori MacVittie

Related Topics: Security, Virtualization, Web 2.0, Cloud Expo, GovIT

Security: Interview

Exclusive Q&A with Rich Marcello - Unisys President, Systems & Technology

Security is a big concern as well as privacy of the data once it leaves a client's data centers

Unisys announced in September a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.

In this Exclusive Q&A with Cloud Computing Journal in the run-up to SYS-CON's 4th International Cloud Computing Conference & Expo (November 2-4, 2009) - Cloud Expo Conference Chair Jeremy Geelan speaks with Rich Marcello - Unisys President, Systems & Technology - about the Unisys Secure Cloud and sets the scene for the upcoming Unisys Cloud-in-a-box.

Cloud Computing Journal: Starting at 35,000 feet, what overall relationships does Unisys see between cloud computing and the increasingly real-time needs of today's enterprise?

Rich Marcello: I believe that  cloud computing will revolutionize the way enterprises obtain IT and business services because of a number of converging factors - 1) the economy has forced enterprises to rethink their traditional cost models and minimize their capital expenditures in favor of pay-as-you-go models, 2) the need for anywhere, anytime IT since data sets continue to grow exponentially, and 3) the  shift in the way IT works with,  for example,  virtualization and automation,  which enable cloud computing.

Cloud Computing Journal: So cloud computing isn't just a buzzword, it's actually a glimpse of the future of enterprise IT so far as you are concerned?

Rich Marcello: Absolutely.  When you think about "IT as a service", ease of delivery, access from anywhere at anytime, the ability to have a totally flexible IT infrastructure, and the cost benefits of a subscription or pay as you go model, you realize very quickly cloud computing, in any of its forms (internal, external, hybrid) is here to stay.

Cloud Computing Journal: I understand, though, there are some concerns with moving to the Cloud.

Marcello: That's right. Security is a big concern as well as privacy of the data once it leaves a client's data centers and the ability of a cloud provider to meet the client's compliance requirements.  Additionally, there's concern about whether or not a client's applications can be moved to the cloud without rewriting them.  Unisys addresses each of these concerns with Unisys Cloud Computing Strategy and solutions portfolio announced June 30, 2009.

Cloud Computing Journal: Tell me more about this new Strategy and what it means to your clients.

Marcello: We announced a four-part cloud computing strategy that will enable clients to move their enterprise application workloads securely to tailored cloud environments and give them confidence in maintaining the integrity of their critical information.  We're delivering on the first two parts this year beginning with our June 30 announcement and the availability of our Cloud Transformation Services, followed by our Unisys Secure Cloud Solution available on July 31.  Our "Cloud-in-a-box" solution planned for later this year is a comprehensive IT infrastructure package that will enable quick and cost-effective implementation of a private cloud.  We also plan to deliver hybrid cloud technologies early next year that will provide the best of managed and dedicated services by combining public and private cloud capabilities.
Our comprehensive Cloud Transformation Services include Advisory and Assessment services that can provide our clients with strategic guidance on how best to move to the cloud.

Cloud Computing Journal: How are you leveraging your breadth of Enterprise IT experience?

Marcello: We believe our strong heritage in Data Center Transformation and Outsourcing is foundational to cloud computing - you can't begin to offer a cloud computing solution unless you understand the data center and are true experts.  We've been helping clients transform their data centers and make the right IT sourcing decisions for a long time by leveraging our services, technology, and outsourcing capabilities so they can achieve maximum return from capital expenditures, reduce operating expenses, and increase business performance.  Our heritage of experience and innovation combined with our independent thinking, innovative infrastructure and sourcing capabilities deliver data center solutions that are secure, productive and reliable.  We see all of this as a key advantage over other cloud providers who are just entering this market.

Cloud Computing Journal: How big an issue is security for enterprises who wish to migrate toward this kind of an infrastructure wholly or in part?

Marcello: As I mentioned earlier, security is the biggest barrier to cloud adoption as cited by organizations and industry analysts, as well as our own clients in a recent survey we conducted.

When it comes to security in a cloud it's really about the workloads and how clients can confidently move them to the cloud.  A lot of vendors talk security in the cloud but we've tackled this issue head-on and believe we have an advantage.  Security is inherent in all Unisys operations and offerings and, like Data Center Transformation and Outsourcing, is one of Unisys four key areas of strength.

We address security by ensuring operational excellence.   Unisys Secure Cloud services teams operate ISO 20000-certified delivery processes that are ITIL V3-compliant.  All of this protection is delivered in independently audited and ISO 270001-certified delivery centers. We utilize security best practices - a layered multi-vendor approach to security with Intrusion Detection and Prevention Services (IDPS), firewall management, 24x7 security monitoring, advanced correlation and analytics, auditable logs, and so forth.

From a cloud perspective, our commitment is to provide a security framework that is as good as or better than any clients could establish for themselves.  We do all of this and more with the addition of our patent-pending Stealth technology that allows private communities of interest based on FIPS 140-2, 256-bit Advanced Encryption Standard (AES) encryption and cloaks the data with proprietary "bit splitting".   Unlike other approaches to security, Unisys Stealth is very simple to deploy and does not require rewriting applications.  We believe this is a key differentiator as Stealth technology allows different groups in a multi-tenant client environment to share the same IT infrastructure without fear of exposing one client's data to another, and there's no need for the client to rewrite the applications it chooses to move to the cloud.

Cloud Computing Journal: What kinds of applications need security that your cloud offers?

Marcello: Clients who have workloads that require application, database or user security will have exposure if they put such workloads onto an unsecured cloud service.  Consequently, today companies are primarily using unsecured cloud services for workloads that have few security needs, such as Application Development and Testing or basic Web services, along with some less secure email workloads.

With Unisys Secure Cloud, you can move conventional business applications that contain patient data, employee, financial, or customer information, or document management or disaster recovery applications to the cloud environment.  In addition to security, most of these applications tend to require quite a bit of IT infrastructure and staff time to manage even though they tend to run in spurts and are quite cyclical or the workloads can dramatically vary in size from one period to the next.  For example, they may only run at the end of day, end of week, month, or year.  Some good examples are: Budgeting and planning; or HR systems like employee self-service, or time reporting.  Retailers have massive swings in system demand from one season to the next and need flexible capacity.  IT also has workloads that are cyclical in nature, including back-up, disaster recovery, and quality assurance, each of which has very high security requirements.   And, most of the time they are not using all of the hardware dedicated to them. This is why the average enterprise server utilization is only 5-10%. Think of the savings in capital and IT operations if these applications could be moved to a cloud service where you only pay for what you use.

Lastly, large OLTP-based workloads, or ERP systems or web store fronts are the most critical applications for your business.  If you are a manufacturer, it could be your order, inventory and supply chain systems; for banks, it's core systems like deposits, transfers, etc;  for airlines it would be the reservation systems. When these go down, the business is all but dead. Therefore, these are the kinds of systems that make sense to continue to invest in traditional, in-house IT infrastructures. Because these kinds of workloads tend to run nearly all the time, it makes good economic sense to buy the infrastructures to support them.

Cloud Computing Journal: How would someone decide if cloud computing is right for their business and which workloads to move?

Marcello: It's really about understanding what makes the most business sense for the client and what they are trying to accomplish.  As part of the June 30th announcement, we have Unisys Cloud Transformation Services, available now, which allow clients to plan and migrate to the type of cloud environment that best meets their business goals.  These services help clients assess what application workloads can be moved to the cloud, how that can be done, and the technology, financial and security implications of their choices.

Cloud Computing Journal: How about virtualization and automation, where do they fit in the big picture?

Marcello: These are fundamental to cloud computing and for Unisys, our Real-Time Infrastructure technology powers our cloud.  Virtualization is an enabler that helps us supply only the needed amount of IT resources based on the workload demand of the business at any given time.  Automation adds elasticity to the environment, reduces the time needed for changes, and eliminates or at least simplifies the manual intervention in a potentially rapidly changing environment.

Cloud Computing Journal: And what kinds of governance and service management tools does the enterprise need?

Marcello: From a service management perspective, many vendors operate as siloed mechanisms.  Unisys, on the other hand, has built into our secure cloudware stack an integration layer that enables us to interface with our clients' service management framework as well.  The virtual data center, regardless of the location of the resources, is managed seamlessly.  Unisys makes it look like one holistic environment. A key point to keep in mind is how hard it is for any IT organization to develop world class governance and service management.  With Unisys Secure Cloud Solution and "Cloud in a Box" we have developed a broad set of ITIL best practices, which are fully automated, and which allow us and our clients to run a very efficient IT infrastructure. With this, a lot of automation occurs, and this can save money by minimizing manual tasks, reducing errors, and getting much higher utilization rates.

Cloud Computing Journal: What verticals among your customers are leading the adoption of the Cloud?

Marcello: We're getting a number of inquiries from a broad range of Unisys clients in telco's, financial institutions, transportation, and the public sector as well as partners who are interested in Unisys hosting their solutions within our Secure Cloud.

Cloud Computing Journal: What does Cloud Computing have to offer to mid-tier enterprises?

Marcello: Cloud computing is compelling for mid-tier enterprises since it minimizes the need for capital expenditures as well as lowers the need for on-going operational support.  They will be interested in our Secure Cloud Solution, especially secure Software as a Service (SaaS).

Additionally for those clients who want to build an internal cloud, the Unisys Cloud-in-a-box that we'll deliver later this year will be a cost-effective, simplified cloud deployment alternative.

More Stories By Jeremy Geelan

Jeremy Geelan is Chairman & CEO of the 21st Century Internet Group, Inc. and an Executive Academy Member of the International Academy of Digital Arts & Sciences. Formerly he was President & COO at Cloud Expo, Inc. and Conference Chair of the worldwide Cloud Expo series. He appears regularly at conferences and trade shows, speaking to technology audiences across six continents. You can follow him on twitter: @jg21.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
The Internet of Things will greatly expand the opportunities for data collection and new business models driven off of that data. In her session at Internet of @ThingsExpo, Esmeralda Swartz, CMO of MetraTech, will discuss how for this to be effective you not only need to have infrastructure and operational models capable of utilizing this new phenomenon, but increasingly service providers will need to convince a skeptical public to participate. Get ready to show them the money! Speaker Bio: Esmeralda Swartz, CMO of MetraTech, has spent 16 years as a marketing, product management, and busin...
Samsung VP Jacopo Lenzi, who headed the company's recent SmartThings acquisition under the auspices of Samsung's Open Innovaction Center (OIC), answered a few questions we had about the deal. This interview was in conjunction with our interview with SmartThings CEO Alex Hawkinson. IoT Journal: SmartThings was developed in an open, standards-agnostic platform, and will now be part of Samsung's Open Innovation Center. Can you elaborate on your commitment to keep the platform open? Jacopo Lenzi: Samsung recognizes that true, accelerated innovation cannot be driven from one source, but requires a...
SYS-CON Events announced today that Red Hat, the world's leading provider of open source solutions, will exhibit at Internet of @ThingsExpo, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Red Hat is the world's leading provider of open source software solutions, using a community-powered approach to reliable and high-performing cloud, Linux, middleware, storage and virtualization technologies. Red Hat also offers award-winning support, training, and consulting services. As the connective hub in a global network of enterprises, partners, a...
P2P RTC will impact the landscape of communications, shifting from traditional telephony style communications models to OTT (Over-The-Top) cloud assisted & PaaS (Platform as a Service) communication services. The P2P shift will impact many areas of our lives, from mobile communication, human interactive web services, RTC and telephony infrastructure, user federation, security and privacy implications, business costs, and scalability. In his session at Internet of @ThingsExpo, Robin Raymond, Chief Architect at Hookflash Inc., will walk through the shifting landscape of traditional telephone a...
SYS-CON Events announced today that Matrix.org has been named “Silver Sponsor” of Internet of @ThingsExpo, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Matrix is an ambitious new open standard for open, distributed, real-time communication over IP. It defines a new approach for interoperable Instant Messaging and VoIP based on pragmatic HTTP APIs and WebRTC, and provides open source reference implementations to showcase and bootstrap the new standard. Our focus is on simplicity, security, and supporting the fullest feature set.
BSQUARE is a global leader of embedded software solutions. We enable smart connected systems at the device level and beyond that millions use every day and provide actionable data solutions for the growing Internet of Things (IoT) market. We empower our world-class customers with our products, services and solutions to achieve innovation and success. For more information, visit www.bsquare.com.
How do APIs and IoT relate? The answer is not as simple as merely adding an API on top of a dumb device, but rather about understanding the architectural patterns for implementing an IoT fabric. There are typically two or three trends: Exposing the device to a management framework Exposing that management framework to a business centric logic • Exposing that business layer and data to end users. This last trend is the IoT stack, which involves a new shift in the separation of what stuff happens, where data lives and where the interface lies. For instance, it’s a mix of architectural style...
SYS-CON Events announced today that SOA Software, an API management leader, will exhibit at SYS-CON's 15th International Cloud Expo®, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. SOA Software is a leading provider of API Management and SOA Governance products that equip business to deliver APIs and SOA together to drive their company to meet its business strategy quickly and effectively. SOA Software’s technology helps businesses to accelerate their digital channels with APIs, drive partner adoption, monetize their assets, and achieve a...
From a software development perspective IoT is about programming "things," about connecting them with each other or integrating them with existing applications. In his session at @ThingsExpo, Yakov Fain, co-founder of Farata Systems and SuranceBay, will show you how small IoT-enabled devices from multiple manufacturers can be integrated into the workflow of an enterprise application. This is a practical demo of building a framework and components in HTML/Java/Mobile technologies to serve as a platform that can integrate new devices as they become available on the market.
SYS-CON Events announced today that Utimaco will exhibit at SYS-CON's 15th International Cloud Expo®, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Utimaco is a leading manufacturer of hardware based security solutions that provide the root of trust to keep cryptographic keys safe, secure critical digital infrastructures and protect high value data assets. Only Utimaco delivers a general-purpose hardware security module (HSM) as a customizable platform to easily integrate into existing software solutions, embed business logic and build s...
Connected devices are changing the way we go about our everyday life, from wearables to driverless cars, to smart grids and entire industries revolutionizing business opportunities through smart objects, capable of two-way communication. But what happens when objects are given an IP-address, and we rely on that connection, sometimes with our lives? How do we secure those vast data infrastructures and safe-keep the privacy of sensitive information? This session will outline how each and every connected device can uphold a core root of trust via a unique cryptographic signature – a “bir...
Internet of @ThingsExpo Silicon Valley announced on Thursday its first 12 all-star speakers and sessions for its upcoming event, which will take place November 4-6, 2014, at the Santa Clara Convention Center in California. @ThingsExpo, the first and largest IoT event in the world, debuted at the Javits Center in New York City in June 10-12, 2014 with over 6,000 delegates attending the conference. Among the first 12 announced world class speakers, IBM will present two highly popular IoT sessions, which will take place November 4-6, 2014 at the Santa Clara Convention Center in Santa Clara, Calif...
Almost everyone sees the potential of Internet of Things but how can businesses truly unlock that potential. The key will be in the ability to discover business insight in the midst of an ocean of Big Data generated from billions of embedded devices via Systems of Discover. Businesses will also need to ensure that they can sustain that insight by leveraging the cloud for global reach, scale and elasticity.
WebRTC defines no default signaling protocol, causing fragmentation between WebRTC silos. SIP and XMPP provide possibilities, but come with considerable complexity and are not designed for use in a web environment. In his session at Internet of @ThingsExpo, Matthew Hodgson, technical co-founder of the Matrix.org, will discuss how Matrix is a new non-profit Open Source Project that defines both a new HTTP-based standard for VoIP & IM signaling and provides reference implementations.

SUNNYVALE, Calif., Oct. 20, 2014 /PRNewswire/ -- Spansion Inc. (NYSE: CODE), a global leader in embedded systems, today added 96 new products to the Spansion® FM4 Family of flexible microcontrollers (MCUs). Based on the ARM® Cortex®-M4F core, the new MCUs boast a 200 MHz operating frequency and support a diverse set of on-chip peripherals for enhanced human machine interfaces (HMIs) and machine-to-machine (M2M) communications. The rich set of periphera...

SYS-CON Events announced today that Aria Systems, the recurring revenue expert, has been named "Bronze Sponsor" of SYS-CON's 15th International Cloud Expo®, which will take place on November 4-6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Aria Systems helps leading businesses connect their customers with the products and services they love. Industry leaders like Pitney Bowes, Experian, AAA NCNU, VMware, HootSuite and many others choose Aria to power their recurring revenue business and deliver exceptional experiences to their customers.
The Internet of Things (IoT) is going to require a new way of thinking and of developing software for speed, security and innovation. This requires IT leaders to balance business as usual while anticipating for the next market and technology trends. Cloud provides the right IT asset portfolio to help today’s IT leaders manage the old and prepare for the new. Today the cloud conversation is evolving from private and public to hybrid. This session will provide use cases and insights to reinforce the value of the network in helping organizations to maximize their company’s cloud experience.
The Internet of Things (IoT) is making everything it touches smarter – smart devices, smart cars and smart cities. And lucky us, we’re just beginning to reap the benefits as we work toward a networked society. However, this technology-driven innovation is impacting more than just individuals. The IoT has an environmental impact as well, which brings us to the theme of this month’s #IoTuesday Twitter chat. The ability to remove inefficiencies through connected objects is driving change throughout every sector, including waste management. BigBelly Solar, located just outside of Boston, is trans...
SYS-CON Events announced today that Matrix.org has been named “Silver Sponsor” of Internet of @ThingsExpo, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Matrix is an ambitious new open standard for open, distributed, real-time communication over IP. It defines a new approach for interoperable Instant Messaging and VoIP based on pragmatic HTTP APIs and WebRTC, and provides open source reference implementations to showcase and bootstrap the new standard. Our focus is on simplicity, security, and supporting the fullest feature set.
Predicted by Gartner to add $1.9 trillion to the global economy by 2020, the Internet of Everything (IoE) is based on the idea that devices, systems and services will connect in simple, transparent ways, enabling seamless interactions among devices across brands and sectors. As this vision unfolds, it is clear that no single company can accomplish the level of interoperability required to support the horizontal aspects of the IoE. The AllSeen Alliance, announced in December 2013, was formed with the goal to advance IoE adoption and innovation in the connected home, healthcare, education, aut...