EMC & VMWARE STRATEGIC FORUM NEW YORK MARCH Tom Heiser President, RSA. Tom Corn SVP & Chief Strategy Officer, RSA

Transcription

1 Copyright 2013 VMware, Inc. All rights reserved. EMC & VMWARE STRATEGIC FORUM NEW YORK MARCH Tom Heiser President, RSA Tom Corn SVP & Chief Strategy Officer, RSA

2 IS WHERE SECURITY MEETS BIG DATA Intelligence-Driven Security SOC GRC Identity Anti-Fraud

3 Security Challenges Are Bigger Than Ever Mobile Cloud Big Data Social/ Collaboration Extended Supply Chain APTs Sophisticated Fraud Infrastructure Transformation Less control over access device and back-end infrastructure Business Transformation More hyper-extended, more digital Threat Landscape Transformation Fundamentally different tactics, more formidable than ever

4 A New Security World It Will Become Increasingly Difficult To Secure Infrastructure We must focus on people, transactions, and the flow of data Static, Perimeter-Centric & Compliance Oriented Risk-based, Agile, & Contextual Visibility

5 ITaaS Management INFRASTRAS TRUCTURE SECURITY OPERATIONS INFO / APP To DC IDENTITY GRC The Security Industry Enterprise CONTROL PLANE MANAGEMENT PLANE Admins Users Data Center Applications CRM ERP BI *** Information Infrastructure Identity AUTH Mgmt MGR & Governance / SECURID Authentication ADAPTIVE & Access AUTH Mgmt SILVER TAIL, Web App FRAUDACTION Security / Fraud Prev Encryption/DLP/IRM DLP, DATA PROTECTION MGR Endpoint Controls Network / Messaging Controls GRC SOLUTIONS: IT/eGRC Data Discovery & Classification, Policy & Compliance ARCHER egrc SUITE DEFINE POLICY MAP POLICY MEASURE POLICY SIEM, Network and Endpoint Forensics & Incident Invest., Advanced Analytics SECURITY ANALYTICS DETECT Potential Threats INVESTIGATE Attacks RESPOND To Attacks

6 Shift In Focus. Shift In Spend. Control Prevention 80% Compliance Monitoring 15% Response 5% IT Risk Prevention 33% Response 33% Business Risk Monitoring 33%

7 ITaaS Management INFRASTRAS TRUCTURE SECURITY OPERATIONS INFO / APP To DC IDENTITY GRC Profit Pool Shift Enterprise CONTROL PLANE MANAGEMENT PLANE Admins Users Data Center Identity Mgmt & Governance Advanced Auth 12.7% Authentication & Access Mgmt GRC SOLUTIONS: IT/eGRC Data Discovery & Classification, Policy & Compliance DEFINE POLICY MAP POLICY Applications Web App Security / Fraud Prev MEASURE POLICY CRM ERP BI *** Information Infrastructure Encryption/DLP/IRM Anti-malware -11.3% Endpoint Controls Firewalls 0% Network / Messaging Controls SIEM 10.7% SIEM, Network and Endpoint Forensics & Incident Invest., Advanced Analytics Forensics DETECT Potential & Incident Threats INVESTIGATE Attacks Investigation 16.9% RESPOND To Attacks Sources: IDC. Projected CAGR for

8 Intelligence-Driven Security Risk-Based, Contextual, & Agile Risk Intelligence Thorough Understanding Of Risk To Prioritize Activity Adaptive Controls adjusted dynamically based on risk and threat level Advanced Analytics provide context and visibility to detect threats Integration Visibility & Mitigation Information Sharing Actionable Intel From Trusted Sources & COIs

9 Intelligence-Driven Security Leveraging Real-Time Analytics & A Richer Set Of Data To Address The SOC, GRC, Identity, & Fraud Big Data Analytics Response Data Sources Data Sources Data Sources Sharing Public & Private Threat Intelligence

10 Security Operations Addressing Advanced Persistent Threats 1 TARGETED SPECIFIC OBJECTIVE System Attack Intrusion Begins Cover-Up Discovery Leap Frog Attacks 2 INTERACTIVE HUMAN INVOLVEMENT Cover-Up Complete 3 STEALTHY LOW AND SLOW TIME Dwell Time Response Time 1 Decrease Dwell Time Attack Identified 2 Speed Response Time Response

11 The RSA Security Analytics Platform RSA Security Analytics Platform RSA Archer GRC Suite Big Data Analytics Governance Network Packets Alerting & Reporting Compliance & Business Context Log Files IT Assets Big Data Store Investigations Malware Analytics Visualization Incident Management & Workflow Information Assets Data Leakage Active Defense & Remediation RSA Live

12 Identity Ensuring Trusted Interaction Between People, Application, & Data 1 Assess Risk 2 Take Action

13 Next-Generation Identity Auth. Manager 8.0 Adaptive Authentication Cloud Trust Authority Big Data Analytics Action Device Profile User Behavior Profile Geo Location Risk Engine Investigate Change/Block Access Step Up Authentication Two-Factor Out Of Band Txt Challenge Q s Fraud Network Proceed As Normal RSA efraud Network

14 Fraud Prevention and Web Security Separating Customers from Criminals In the Wild Fraud Action Silver Tail Adaptive Authentication Transaction Monitoring Begin Session Login Transaction Logout Web Threat Landscape Advanced Malware (e.g. Trojans) Phishing Rogue Mobile App Site Scraping Vulnerability Probing Layer 7 DDoS Attacks Man in the Middle/Browser Password Cracking/Guessing Parameter Injection New Account Registration Fraud Account Takeover New Account Registration Fraud Promotion Abuse Unauthorized Account Activity Fraudulent Money Movement

15 Next-Generation Anti-Fraud & Web Security SilverTail, Fraud Action, Adaptive Authentication, Transaction Monitoring Big Data Analytics Response Web Traffic Alerting & Reporting Compliance & Business Policy Big Data Store Investigations Fraud Analytics Transaction Monitoring Visualization Adaptive Authentication Active Defense RSA efraud Network + Fraud Action

16 IS WHERE SECURITY MEETS BIG DATA Intelligence-Driven Security SOC GRC Identity Anti-Fraud

17 Copyright 2013 VMware, Inc. All rights reserved. EMC & VMWARE STRATEGIC FORUM NEW YORK MARCH Zahid Hussain

18 3 TAKING ADVANTAGE OF FLASH

19 4 HARDWARE PCIe SERVER FLASH & SSD ARRAY FLASH SLC & MLC FLASH VARIOUS CARD HEIGHTS & LENGTHS FLASH CONTROLLER SOFTWARE CACHING, CLUSTERING, POOLING, HA, DEDUP, THIN PROVISIONING, SNAPSHOTS, REPLICATION, SDK, MEMORY EXTENSIONS, LOW-LATENCY PROTOCOLS

20 6 XtremSF Flash Cards Four PCIe Cards With Industry Leading Performance XtremSW Suite XtremSW Cache Software & Roadmap For Suite XtremIO Array Directed Availability Customer Shipments Server Storage

21 8 The XtremSF Family All Cards Are HHHL Highest Density In The Industry XtremSF TB XtremSF TB XtremSF GB XtremSF GB

22 Latency (ms) Latency (ms) XtremSF : Leading Performance 2x The IOPS With Half The Latency Of Brand F 4KB Random 70/30 Mixed Latency vs. IOPS 8KB Random 70/30 Mixed Latency vs. IOPS IOPS (000s) IOPS (000s) Source: EMC Internal Testing. 9

23 10 XtremSF : 58% Lower TCO Than Brand F 8KB Block Size, Mixed Workload Requiring 1M IOPS Number Of Cards % Cost Of Cards $110K $236K 53% Cost of CPU $3K $12K 75% Cost Of Power $18K $37K 51% Support Cost $18K $74K 76% Total Cost $149K $359K 58% Note: TCO Analysis comparing 10x 1.4TB XtremSF with 1.2TB Brand F PCIe Flash cards; 2 cards installed per server 1 Based on single device, random 70/30 Read/Write IOPS test results 2 Assumes utility rate of $0.15/KWHr & Power Utilization Efficiency of 1.5; each card consumes 25W, each server consumes 600W; Power savings calculated over 3 years

24 14 HARDWARE PCIe SERVER FLASH & SSD ARRAY FLASH SLC & MLC FLASH VARIOUS CARD HEIGHTS & LENGTHS FLASH CONTROLLER SOFTWARE CACHING, CLUSTERING, POOLING, HA, DEDUP, THIN PROVISIONING, SNAPSHOTS, REPLICATION, SDK, MEMORY EXTENSIONS, LOW-LATENCY PROTOCOLS

25 15 XtremSW Cache 1.5 SERVER FLASH DAS BECOMES CACHE Write-Through Cache De-Duplication VMAX Management Integration Works On All XtremSF Cards

26 16 XtremSW Suite Future Direction Low-Latency Data Services For Flash As Cache, DAS Or Memory Caching Clustering, Pooling, VMWare, VMAX/VNX Integration Direct Attached Storage (DAS) High Availability Pooling, Dedup, Snaps

27 18 XtremIO RETHINKING CORE DESIGN CRITERIA Software-Defined Commercial Off The Shelf Hardware Inherently Balanced Linear Scale-Out Architecture Flash-Optimized Always On Data Services

28 19 XtremIO Features Flash-Optimized Data Services INLINE DATA REDUCTION THIN PROVISIONING DATA PROTECTION WRITABLE SNAPSHOTS Never Write Duplicate Data 4KB Allocations Optimal Utilization Flash-Optimized Zero Configuration Instant Copies Full Performance

29 IOPS IOPS 20 XtremIO Scale-Out Architecture Delivers Unparalleled Functional IOPS 4K Random Read Performance 1,250,000 4 X-Bricks 1,000, ,000 4K Random Write Performance 4 X-Bricks 750, , ,000 1 X-Brick 2 X-Bricks 300, , ,000 1 X-Brick 2 X-Bricks 0 0 Sub-Millisecond Response Time With All Data Services Operating

30 22 How It All Fits Together Server Storage Hot Edge Hybrid Arrays Make The Hot Edge Hotter! UNIFIED FLASH SOFTWARE ARCHITECTURE SNAPS, REPLICATION XtremSW XtremIO XtremSW Suite XtremSW Suite XtremSW Suite XtremSW Suite DAS Or Memory XtremSF Or XtremSF 3 rd Party Or XtremSF 3 rd Party Or 3 rd Party DAS Or Memory XtremSF Or 3 rd Party DAS Or Memory DAS Or Memory XtremIO DEDUPE, THIN, XtremIO DEDUPE, THIN, SNAPS, XtremIO REPLICATION DEDUPE, THIN, XtremIO SNAPS, REPLICATION DEDUPE, THIN, SNAPS, REPLICATION SAN SAN SAN SAN SSD FC SATA Fully Automated Storage Tiering (FAST)

31 23 How It All Fits Together Server Storage Hot Edge Hybrid Arrays Make The Cold Core Cooler! Cold Core UNIFIED FLASH SOFTWARE ARCHITECTURE SNAPS, REPLICATION XtremSW XtremIO XtremSW Suite XtremSW Suite XtremSW Suite XtremSW Suite DAS Or Memory XtremSF Or XtremSF 3 rd Party Or XtremSF 3 rd Party Or 3 rd Party DAS Or Memory XtremSF Or 3 rd Party DAS Or Memory DAS Or Memory XtremIO DEDUPE, THIN, XtremIO DEDUPE, THIN, SNAPS, XtremIO REPLICATION DEDUPE, THIN, XtremIO SNAPS, REPLICATION DEDUPE, THIN, SNAPS, REPLICATION SAN SAN SAN SAN CAPACITY OPTIMIZED STORAGE POOL SSD FC SATA Fully Automated Storage Tiering (FAST)

32 24 Key Takeaways Different Workloads Leverage Flash Differently Performance, Data Services, Efficiency EMC Will Lead In Ever Category Of Flash Server Flash, All-Flash Arrays, Hybrid Arrays EMC Will Continue To Add Value Through Software XtremSW Suite, XtremIO, FAST

33

34 EMC SOFTWARE- DEFINED STORAGE Amitabh Srivastava President, Advanced Storage Division VIRTUALIZE EVERYTHING COMPROMISE NOTHING

35 Exponential Data Growth New Access Methods High Demands for Availability & Agility RETHINK Storage Is At The Digital Center Universe: Of An IT Transformation 40 ZB by 2020 Massive Growth drives Massive Complexity How Storage Is Delivered And Managed

36 THE CUSTOMER S VIEW Dramatically reduce management costs in an increasingly complex environment Faster time-to-market for new geo-scale apps Deliver choice on how and where to store data Protect and extend existing investments I Want Simple, Scalable Storage Management

37 The Storage Industry NEEDS TO PROVIDE Storage pools and management decoupled from hardware An open software platform that spans geo-distributed heterogeneous storage arrays New data services can be built in software Leverage and advantage the capabilities of the underlying hardware platforms What Storage Virtualization Was Meant To Be

38 Virtualization Changes Everything Hardware Isolation Virtual Data Center Software Defined Data Center Virtual Data Center Virtual Data Center Virtual Data Center Virtual Data Center Policy-Driven Management Reduced Data Center Footprint Software-Defined Data Center Services Revitalize Existing Applications Automated Services Network Storage Server Security Resource Flexibility

39 The Software-Defined Data Center Needs VIRTUALIZED COMPUTE, NETWORK AND STORAGE

40 COMPUTE NETWORK STORAGE

41 EMC Software-Defined Storage Virtual Storage Pool VMAX Storage VNX Storage Isilon Storage Third-Party Commodity

42 Add Support For New Arrays Enable third-party development of adapters for non-emc arrays Publish all APIs and open source necessary code

43 EMC Software-Defined Storage AUTOMATED STORAGE MANAGEMENT Tenants API Self-Service Portal Metering Provisioning CONTROL PATH VIRTUAL STORAGE ARRAYS VMAX Storage VNX Storage Isilon Storage Third-Party Commodity

44 EMC Software-Defined Storage API GLOBAL DATA SERVICES Object Store HDFS Other Svcs VIRTUAL STORAGE ARRAYS DATA PATH VMAX Storage VNX Storage Isilon Storage Third-Party Commodity

45 Build New Data Services Write Once, Run Everywhere data services model Open APIs enable anyone to build rich data services New capabilities like Object on File delivered through Object Data Services Allow Analytics on all data stored in heterogeneous infrastructure

46 EMC Software-Defined Storage API AUTOMATED STORAGE MANAGEMENT Tenants Self-Service Portal Metering Provisioning Object Store GLOBAL DATA SERVICES HDFS Other Svcs CONTROL PATH DATA PATH VIRTUAL STORAGE ARRAYS VMAX Storage VNX Storage Isilon Storage Third-Party Commodity

47 COMPUTE NETWORK STORAGE

48 Hyper-Scale Metered Secure Accessible Open Available Efficient Adaptable Multi-tenant On-demand Infinite Always-on Dynamic Elastic Self-Service Ubiquitous Designed For Service Providers READY FOR THE ENTERPRISE

49 OPEN DEVELOPMENT COMMUNITY Extensible, API-Driven Storage Global Data Services Global Automation Services

50 Open Architecture Provides Choice Software-Defined Storage Integrates With VMware, Hyper-V, & OpenStack The Software-Defined Data Center VMAX VNX Isilon Atmos Data Domain Information Infrastructure

51 Integrating With VMware Stack vcloud Automation Center vcenter Operations Manager vsphere Infrastructure Management Service Assurance Suite Storage Resource Mgmt Suite EMC Software-Defined Storage Third-Party Commodity VMAX VNX Isilon

52 VIRTUALIZE EVERYTHING COMPROMISE NOTHING

53 EMC Software-Defined Storage Disruptive Innovation Scale Beyond EMC Open Development Community

54