120 likes | 225 Views
How I learnt to trust the GRID. Brian Collins Visiting Professor IAM, University of Southampton Vice President, IEE Ex Global CIO Clifford Chance Ex Director of Technology and Chief Scientist, GCHQ. IT and Commerce - parameters. Global businesses Driven by competition
E N D
How I learnt to trust the GRID Brian Collins Visiting Professor IAM, University of Southampton Vice President, IEE Ex Global CIO Clifford Chance Ex Director of Technology and Chief Scientist, GCHQ
IT and Commerce - parameters • Global businesses • Driven by competition • Agility and adaptability are key issues • Trusted self, market and customer knowledge and processes are key differentiators • Time is money • Cultural differences can be strengths and weaknesses
Challenges for the GRID • Latency and Responsiveness • Business process alignment • Supply side governance • Globalisation of solutions • Trustworthiness of services
Latency and Responsiveness • Commerce works on interlinked business processes that are time driven – time is money so.. • Predictability of performance is very important • Short response times in some scenarios are vital • Changes in these parameters with workload must be small to negligible – a potential advantage of the GRID • Failure modes need to be well explored
Supply-side governance • Who owns the GRID? • What are the ‘global standards’ for it and the services derived from it? • If I use it who do I form a relationship with, who takes liability via a contract, and do I have a choice of supplier? • What are the International issues in using it (legal, technical, process, language etc)? • What body reviews and regulates its national effectiveness in commercial terms – OFGRID?
Globalisation of solutions • Large commercial problems are almost certainly global – legal and linguistic issues arise • Global resilience implies global service provision and possibly ownership and we have yet to do that with telcos! But the Internet… and ICANN and DNS? • One of the key technical factors is the product: • data source - processor speed – bandwidth- size of random accessmemory • This is difficult to predictably maximise on campus – globally? • Success could be the key to attacking real global problems of environment and poverty
Trustworthiness of services • Trust comes from large number of factors - see this years Reith lectures by Baroness O’Neill • Factors such as: • Security • Credentials • Contracts • Regulation and Audit • Experience • Brand value • Offsetting natural scepticism to outsourcing the crown jewels to a shared service will be essential for the GRID to succeed.
Security Policy Framework • User identification and authentication • User registration and authorisation • Access control • Access management • Non-repudiation • Evidence of receipt • Trusted commitment • Integrity • Privacy and Confidentiality • Service availability • Information availability • Audit and Accounting • Service protection • Each applied to…………
Enterprise Architecture – a framework The Zachman Framework In the context of…
In the context of…. • Requirements definition • Systems analysis • Application development • Testing and Integration • Rollout • Operations • Disaster Recovery
GRID Specific security issues • Complex, dynamic heterogeneous user base • Lack of control of heritage of applications • Separation of services and duties • Data and information integrity from shared distributed platforms • Complexity of “Insider” threat • Service metadata security e.g directories, data replication processes, DR and incident management plans…. • How do third parties demonstrate ‘sufficient’ trustworthiness
Conclusions • GRID could have huge impact on big commercial problems – but big commercial problems are not even identified because of the absence of or lack of understanding of and trust in GRID – so more Outreach is needed. • Commercial service and security parameters must be systemic in architecture, conceptual design and implementation of GRID and GRID services or it will fail in the commercial world • Global co-ordination (GGF and FP6 to begin with?) is essential. • More commercial involvement now will make more probable any commercial exploitation in the future and hence make it affordable for e-science