رایانش ابري در بانکداري

Transcription

1 رایانش ابري در بانکداري فرامرز خالقی شرکت داده پردازي ایران 1

2 NIST :The provision of computational resources on demand via a computer network IT Resources and Services that are abstracted from the underlying infrastructure and provided On Demand and At Scale in elastic environment Anywhere, Anyone, Any Service 2

3 Why We Need Cloud Services? Traditional IT Because We NeedGreen IT (Pay-as-you-Go) Modern IT 3

4 Gartner : Top 10 Strategic Technology Trends Mobile Device Battles Mobile Devices Diversity and Management (BYOD) Mobile Applications Mobile Applications Personal Cloud The Internet of Things Enterprise App Stores Hybrid Cloud and IT as Service Broker The Internet of Things Cloud/Client Architecture Hybrid Cloud Computing The Era of Personal Cloud Strategic Big Data Software Defined Anything Actionable Analytics Web Scale IT in Memory Computing Smart Machines Integrated Ecosystems 3-D Printing 4

5 140 Cloud Services s Market Explosive Growth Source: IDC 120 $Billions >$50 Billion by ٢٠٠٨ ٢٠٠٩ ٢٠١٠ ٢٠١١ ٢٠١٢ ٢٠١٣ ٢٠١۴ ٢٠١۵ ٢٠١۶ ٢٠١٧ ٢٠١٨ ٢٠١٩ ٢٠٢٠-9- The Evolution of Cloud Computing Service Provider (Dynamic IT) Business Value Consolidate Virtualized Automate > > >.requires an integrated and orchestrated approach. Optimize Cloud Computing Reduced Consolidation Virtualization Automation Cost Increased Flexibility + + = 5

6 Dynamic IT Standardize and automate Consolidate Reduce infrastructure complexity Reduce staffing requirements Manage fewer things better Lower operational costs Standardize services Virtualized Reduce deployment cycles Enable scalability Remove physical resource Flexible delivery boundaries Increase hardware utilization Reduce hardware costs Simplify deployments 11 SOA and SOI Next To Each Other This is SOA Focus on Efficiency in Application Development and Reuse tied to Business Process This is SOI & Cloud Focus on Dynamic/Resilient Infrastructure You can have each without the other, but they are better together! 6

7 Together, SOA and SOI (Cloud) Result in Truly Dynamic IT SOA Framework Applications are: Reused as appropriate Decoupled Easily composed Conform to standards for interoperability Cloud Service Components: SaaS PaaS IaaS SOI/Cloud Framework The Cloud Infrastructure is: Completely Virtualized Continuously Optimized Dynamically Responsive Heterogeneous to Support Differing Workloads 13 Without cloud computing With cloud computing Virtualized resources Automated service management Standardized services Location independent Rapid scalability Self-service Software Hardware Storage Networking Software Hardware Storage Networking Software Hardware Storage Networking 14 7

8 Types of Cloud Services Cloud Software as a Service (SaaS) (Ex: Microsoft Office 365, Google Docs) Online Use provider s applications over Cloud Cloud Platform as a Service (PaaS) (Ex: Windows Azure, Google App Engine) Online environment for building software over Cloud Cloud Infrastructure as a Service (IaaS) (Ex: Amazon (EC2 & S3)) Online Rent processing, storage, network capacity, Security, Cloud Service Providers Salesforce.com e-science Central Google Docs IBM Smart Cloud Docs Software (SaaS) Amazon -Elastic Map Reduce -Simple DB -Simple Queue Service Google App Engine Windows Azure - Sharepoint - SQL Services -.Net services Amazon EC2 & S3 IBM EC12 Cloud Base Mainframe simultaneously manage thousands of virtualized workloads Platform (PaaS) Infrastructure (IaaS) 8

9 Cloud Standards : 1 Cloud Standards Customer Council 2 Distributed Management Task Force (DMTF) 2.1 Open Virtualization Format (OVF) 2.2 Open Cloud Standards Incubator Interoperable Clouds White Paper Architecture for Managing Clouds White Paper Use Cases and Interactions for Managing Clouds White Paper 2.3 Cloud Management Working Group (CMWG) Cloud Infrastructure Management Interface (CIMI) Cloud Infrastructure Management Interface (CIMI) Primer Cloud Infrastructure Management Interface XML Schema Cloud Infrastructure Management Interface CIM (CIMI-CIM) 2.4 Cloud Auditing Data Federation Working Group (CADF) 3 The European Telecommunications Standards Institute (ETSI) 3.1 TC CLOUD 3.2 Cloud Standards Coordination (CSC) ETSI Terms and Diagrams 4 Global Inter-Cloud Technology Forum (GICTF) 5 ISO/IEC JTC SC38 Distributed Application Platforms and Services (DAPS) 6 International Telecommunications Union (ITU) 6.1 ITU-T SG13: Future networks including cloud computing, mobile and next-generation networks 6.2 Joint Coordination Activity on Cloud Computing (JCA-Cloud) Cloud Standards 7 National Institute of Standards and Technology (NIST) 7.1 NIST Working Definition of Cloud Computing 7.2 Standards Acceleration to Jumpstart Adoption of Cloud Computing (SAJACC) Cloud Computing Use Cases 8 Open Grid Forum (OGF) 8.1 Open Cloud Computing Interface (OCCI) Working Group Open Cloud Computing Interface Core Specification Open Cloud Computing Interface Infrastructure Specification Open Cloud Computing Interface HTTP Rendering Specification Other OCCI-related Documents 9 Object Management Group (OMG) 10 Open Cloud Consortium (OCC) 11 Organization for the Advancement of Structured Information Standards (OASIS) 11.1 OASIS Cloud-Specific or Extended Technical Committees (TC) OASIS Cloud Application Management for Platforms (CAMP) TC OASIS Identity in the Cloud (IDCloud) TC OASIS Symptoms Automation Framework (SAF) TC OASIS Topology and Orchestration Specification for Cloud Applications (TOSCA) TC OASIS Cloud Authorization (CloudAuthZ) TC OASIS Public Administration Cloud Requirements (PACR) TC 12 Storage Networking Industry Association (SNIA) 12.1 SNIA Cloud Data Management Interface (CDMI) 13 The Open Group 13.1 Cloud Work Group Cloud Computing Business Scenario Building Return on Investment from Cloud Computing 9

10 NIST Cloud Computing Conceptual Reference Model Special Publication NIST Cloud Computing Connectivity Reference Model Special Publication

11 Separation of Responsibilities Cloud Delivery Models Hybrid Cloud 11

12 Ex: VCE Company (Vmware,Cisco,EMC) Solution: Vblock Ex: Cisco Company Solution: UCS (Unified Computing Systems) Cloud benefits are compelling Rapid transformation of business processes (Business agility) Environmentally friendly Minimal administration Scalable and flexible Disaster recovery Cloud risks are real Loss of control of sensitive information Maintaining privacy and compliance Reliance on cloud provider security Array of data privacy and disclosure laws 85% of business managers believe cloud computing will transform their business #1 Cloud concern: unauthorized access to or leaks of sensitive information - InformationWeek -6-12

13 Benefits of Cloud Computing Security Scalability Availability Performance Cost-effective Acquire resources on demand Release resources when no longer needed Pay for what you use Turn fixed cost into variable cost Benefits of Cloud Computing Increasing speed and flexibility Test provisioning Weeks Minutes Change management Months Days/hours Release management Weeks Minutes Service access Administered Self-service Standardization Complex Reuse/share Metering/billing Fixed cost Variable cost Reducing costs Server/storage utilization 10 20% 70 90% Payback period Years Months 26 SOURCE: Based on IBM and client experience. 13

14 Not all workloads may be suited for Cloud Analytics Infrastructure Storage Ready for cloud Sensitive Data Banking & Financial Markets Solutions Collaboration Highly customized Workplace, Mobile, Desktop & Devices Not yet virtualized 3 rd party SW Business Processes Disaster Recovery Evaluate: May...or may not... be ready for Cloud based on their attributes Complex processes & transactions Development & Test Infrastructure Compute Regulation sensitive 14

15 (Cloud changes all the rules in banking) Why Cloud Computing for Banks? 1- Cost Savings and Usage-based Billing (pay-as-you-go) 2- Business Continuity (higher level of data protection, fault tolerance, disaster recover, high level of redundancy and back-up at lower price than traditional managed) 3- Business Agility and Flexibility (supports a faster and more efficient response to the needs of banking customers) 4- Green IT (reduces the energy consumption with more efficient utilization of computing power and less idle time) (Cloud changes all the rules in banking) Not all Banking Activities Will Move onto the Cloud in the Next five years Banks should use a road map to best manage cloud services delivery programs. Banks can start small with less critical applications (horizontal and backoffice process) such as CRM, , office/workforce productivity, internal collaboration, knowledge-sharing, HR, and then move on to core business applications. For banks, those enterprise processes that are best suited to public cloud include procurement Metro Bank in the UK, SofolTepeyac in Mexico and Some leading US banks are using core banking system that runs in the cloud. 15

16 Which Areas Are Best Suited for the Cloud in Banking Solutions? Estimated Spending on Private Cloud by Financial Services Companies Worldwide 16

17 The future of cloud computing in banking Competition Collaboration convergence Cloud computing will have impact on the Banking Industry (PRODUCTS, SERVICES and TECHNOLOGIES) in the following ways Customer relationships will be redefined. Cloud computing will steadily progress at all levels the stack. Non-banking cloud-based competitors will keep up the pressure. Emerging market banks will lead cloud-based innovation. Collaborative cloud-based shared services will emerge between banks. Cloud-enabled collaborative bundling will expand across and beyond financial services. Payments in the cloud will be a key focus. 17

18 Cloud s Impact of Banking Industry? Value Chain Improve Transform Create Disruptors Innovators Optimizers Enhance Extend Invent Customer Value Proposition 1. Disruptors create radically different value propositions 2. Innovators significantly extend customer value proposition 3. Optimizers use the cloud to improve organizational efficiency. Ex : ROI Cloud Computing Banking & Financial Markets Solutions: Cloud & Payments Cloud & Retail Banking Cloud & Financial Markets Cloud & Mobile Banking Cloud & Risk Management (Basel III, Solvency II) Bank s expectations from Cloud solutions: Dynamic and flexible technology model Highly optimized and virtualized Infrastructure enabling scale and cost Efficiency Fully Automated Service Provision, Monitoring and Management Shared Services delivered across trusted domains delivering security of data,transaction& operations Internet or Intranet based access model using high capacity bandwidth Rapid innovation in services, features and operating models 18

19 Future directions for cloud computing in financial services: Mobile Banking: Banks are now offering mobile applications to online banking customers and partners New service R&D: Financial services organizations are also increasingly leveraging the computing power that cloud services offer for research and development and testing of new services prior to any attempt at going into production Micro banking: Another trend emerging is the adoption in developing countries of cloud whereby micro banking are running their entire business on cloud computing Cloud is a journey and not a destination The important thing for banks to remember is that cloud computing is a journey, not a destination, and that it alone does not render sustainable competitive advantage 19

20 Cloud Computing Security in Banking Solutions 1- Risk Management (Basel III, Solvency II, ISO27005) o Risk Analysis o Risk Assessments o Vulnerability Assessments o Incident Reporting and Response 2- Business Continuity (ISO/IEC 24762:2008, BS25999) o Disaster recovery plans o Restoration plan incorporating and quantifying the Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for services 3- Physical Security (CIA Triangle) o Physical and Logical Security Policy o Contingency Plan o Emergency Response Plan o Security of Infrastructure o Human Resources o Environmental Security 20

21 NIST Cloud Computing Security Conceptual Reference Model Special Publication :2013 Cloud Computing Physical Security Cloud Computing Service Provider Physical Security Identity Management (AAA,SSO) Secure Access Control Data Encryption Web Security Security UTM (Unified threat Management) SIEM Endpoint Security (Server Side) Cloud Computing Consumer Physical Security Web Security (Browser, SSL) Endpoint Security (Client side) 21

22 Cloud Information Protection Gateways CRM Collaboratio n Custom Apps Other Clouds Encryption keys never leave the enterprise Real-time encryption Near-zero latency Malware detection Data loss prevention IBM Cloud Solution Rethink IT Rapidly deliver services Integrate services across cloud environments Increase efficiency SmartCloud is the IBM vision for cloud computing. Accelerate business transformation with capabilities from IBM cloud offerings: Architecture for private and hybrid cloud (IBM SmartCloud Foundation) Cloud computing as a service for IT (IBM SmartCloud Services) Software as a service (SaaS) business solutions (IBM SmartCloud Solutions) 22

23 IBM zenterprise EC12 (Enterprise Class),BC12 (Business Class) IBM zenterprise is designed to create a centrally managed and controlled set of IT resources that provide an ideal private secure enterprise cloud for the rapid and flexible delivery of high value services. 23

24 IBM Smarter City Solutions on Cloud References : k k Recommendation ITU-T X.1600 Security framework for cloud computing

25 همواره در پس ابرها نورانی باشید! 25

26 26