Results

VMware embraces AWS as its public cloud IaaS

VMware embraces AWS as its public cloud IaaS

Today – consistent to announcements hinted at earlier at VMworld, VMware has embarked in its new public cloud strategy, embracing IaaS vendors and partnering with them, while helping customer to migrate, monitor and operate loads across their on premises and IaaS based datacenters.
 
 
The press release on the AWS side can be found here, let’s dissect the news in our customary form:

 
SAN FRANCISCO--(BUSINESS WIRE)--Oct. 13, 2016-- VMware (NYSE:VMW) and Amazon Web Services, Inc. (AWS), an Amazon.com company (NASDAQ:AMZN), today announced a strategic alliance to build and deliver a seamlessly integrated hybrid offering that will give customers the full software-defined data center (SDDC) experience from the leader in the private cloud, running on the world’s most popular, trusted, and robust public cloud. VMware Cloud™ on AWS will enable customers to run applications across VMware vSphere®-based private, public, and hybrid cloud environments. Delivered, sold, and supported by VMware as an on-demand, elastically scalable service, VMware Cloud on AWS will allow VMware customers to use their existing VMware software and tools to leverage AWS’s global footprint and breadth of services, including storage, databases, analytics, and more. For more information on VMware Cloud on AWS, visit VMware Cloud on AWS.

MyPOV -Describes well what the partnership is about – keep VM formats, images, tools, practices and seamlessly gain an outlet to the public cloud, in this case AWS. Similar to the IBM partnership announced earlier this year (see our analysis here) both VMware and AWS will work together to provide this seamless services. Effectively VMware on AWS creates what VMware promised a long time with vCloudAir - only the hardware comes from AWS this time.

 
Most enterprises rely on VMware to run applications in their vSphere-based private clouds, and often these same customers are also running applications on AWS. Increasingly, these customers have asked both companies to make it easier to run their existing on-premises environments alongside AWS using the VMware software and tools they’ve come to rely on.

MyPOV – Always good to listen to customers and be customer driven. It’s nice for customers to have the opportunity to use their VMware loads and now be able to combine them with AWS offerings. But these offerings are mostly AWS cloud bound, so its likely for joint customers to pick up dependencies on AWS, and with that remain on the public cloud side.

 
VMware Cloud on AWS is a jointly architected solution that will integrate the world’s leading private cloud and the world’s leading public cloud. VMware Cloud on AWS is powered by VMware Cloud Foundation™, a unified SDDC platform that integrates VMware vSphere, VMware Virtual SAN™ and NSX™ virtualization technologies, and will provide access to the full range of AWS services, together with the functionality, elasticity, and security customers have come to expect from the AWS Cloud. This new service represents a significant investment in engineering, operations, support, and sales resources from both companies. It will run on next-generation, elastic, bare metal AWS infrastructure. Customers will have the ability to purchase services through their existing VMware commercial agreement and use their existing VMware software investments to secure additional loyalty discounts for their VMware Cloud on AWS hybrid environment.

MyPOV – So effectively VMware is re-platforming its SDDC architecture on top of AWS machines, referred to as next generation, elastic, bare metal AWS infrastructure. Not any converged hardware that VMware used to sell and is still selling. One wonders why AWS would not run the VMware converged servers, designed for nothing else than running VMware loads? The answer to that will be interesting and risks to leave some challenging thoughts with VMware converged infrastructure customers. Buying through the VMware commercial agreement should make things easier.

 
“VMware Cloud on AWS offers our customers the best of both worlds,” said Pat Gelsinger, CEO, VMware. “This new service will make it easier for customers to preserve their investment in existing applications and processes while taking advantage of the global footprint, advanced capabilities, and scale of the AWS public cloud.”

MyPOV – Good quote from Gelsinger, but by conceding to AWS for infrastructure, he implicitly states (at least here) that the VMware (and EMC and maybe future Dell offerings) for infrastructure will not play (for now) on the public cloud side.
 
“Our customers continue to ask us to make it easier for them to run their existing data center investments alongside AWS,” said Andy Jassy, CEO, AWS. “Most enterprises are already virtualized using VMware, and now with VMware Cloud on AWS, for the first time, it will be easy for customers to operate a consistent and seamless hybrid IT environment using their existing VMware tools on AWS, and without having to purchase custom hardware, rewrite their applications, or modify their operating model.”

MyPOV -Good quote from Jassy, describing what happens from the AWS side. Could not be much better, VMware is bringing load to AWS, while keeping it familiar for them to operate it. And the chance of tying that load together with AWS products, with the possible consequence of becoming ‘sticky’ to AWS infrastructure. There is almost nothing not to like her, if you are AWS. 
Availability

Available in mid-2017, VMware Cloud on AWS will be delivered, sold, and supported by VMware as an on-demand, elastically scalable service. Pricing will be made available closer to the general availability date.

MyPOV – Good to know when this will be available, and it’s a little far out for cloud speed with 9-10 months. But important to know early – as this may stop customers from extending their on premises data center investments and moving to a hybrid model, using AWS infrastructure.

 

Overall MyPOV

Always good to see when vendors listen to customers, and customers win. In this case it is the VMware centric enterprise, that does not want to invest into on premises resources, or as AWS evangelist Jeff Barr points out in his blog here, wants to combine existing loads with next generation capabilities that AWS offers. The potential dependency on AWS for these solutions is something all enterprises need to make ‘wide eyes open’ decisions on.

AWS wins a lot here. First of all, a former adversary – VMware – is now a key partner. Loads that were stuck and holding out in VMware centric landscapes, possible waiting for vCloudAir to materialize – and out of reach – are now available for AWS. And all of that with no re-imaging, re-testing, re-anything – it cannot get much better for any public cloud IaaS. And longer term the option to upsell more AWS services, so ponying up the CAPEX for these machines, investing resources to build the common solution is a small price to pay. AWS is in this business anyway, the more uniform load it can address, the better.

VMware certainly wins in the short term, too – it keeps customers on VMware, monetizes the moving and administration of the hybrid load and extends all that on VMware paper, effectively OEMing AWS. Effectively AWS is providing the infrastructure to an offering that VMware wanted to offer with vCloudAIr but never managed to have take off. VMware fans may say it was the lack of other tools and products to complement moving the VMware load there, but to me this is the end of the 3+ year riddle why VMware cloud not move loads to public cloud: The inability or non readiness to invest the large amounts of CAPEX to invest into the public cloud infrastructure to run VMware. Effectively it will have taken 4 years – holding both vendors to the above dates – and a complete change in strategy. It begs the question – had VMware done this deal with AWS 3 or even 4 years ago – would VMware (and its customers) bebetter of today? The answer is really related how fast enterprises will move to the public cloud, if hybrid is only a transition, and how long that transition will last. No matter how you spin this, VMware is loosing load on premises for a variety of reasons already (that’s a whole blog post by itself), at the same time it will not be able to command the same pricing levels when running e.g. on AWS than when running VMware on premises. It’s different times and with that I see a longer term loosing hand for VMware. But short term we know this works, as the success of the IBM and VMware partnership has shown. The difference of AWS and VMware is – it will be sold and operated by VMware. The pipelines of VMware sales people may be better filled well for this to work, future quarters will tell. We know that man VMware customers have been holding out hoping for a solution from VMware with vCloudAir – them forgetting and forgiving quickly will be key for the success of the partnership.

The other takeaway is that AWS is quickly becoming the IT department of very large software vendors. We saw that with SAP BW/4HANA (see our take here) and now we see it with VMware on AWS. It is puzzling as the margins of these vendors are greater than the margins of AWS, but at the same time lack of success, fortune, know-how, etc. on their own public cloud offerings has driven giants like SAP and VMware in the arms of AWS. The cloud of the ‘book retailer’ as some observers will remember. Good for AWS, who is willing to keep investing, when other enterprise software giants have stumbled, slowed down, shied away etc. you name it.

Finally VMware is now part of Dell Technology. One can only assume that VMware has telegraphed in all this with HQ in Texas. Maybe the hope is that customers will stay on VMware and move loads back to a super attractive (but still to be announced) Dell Technology SDDC offering. We can only speculate. But effectively VMware has given an effective outlet to its customer from any – not only Dell’s and its own converged offerings – to the public cloud. With VMware founder Diane Greene at Google, anyone would be surprised if a similar partnership with Google Cloud Platform is not in the making. Azure next. Exciting times for sure.


What’s your take on VMware on AWS?

 

 

 

Tech Optimization Innovation & Product-led Growth Chief Information Officer

Dreamforce 2016: Einstein to Power the Next Wave of Salesforce Sales and Marketing Advancements

Dreamforce 2016: Einstein to Power the Next Wave of Salesforce Sales and Marketing Advancements

The Constellation Team spent last week in San Francisco for Dreamforce, also known as the largest technology conference with a reported 171,000 attendees this year. The buzz leading up to Dreamforce was a series of acquisitions including Quip, Krux, and of course, the star attraction - Salesforce Einstein, the Artificial Intelligence (AI) platform service that took center stage. 
 
The Salesforce Einstein equation: Smart CRM = Customer Data + AI + Salesforce  - With the tagline of “AI for Everyone”, Salesforce’s goal is to democratize AI for the business user, and they don’t need to be a data scientist to configure and utilize Einstein. The initial set of capabilities are squarely in the Marketing and Sales capabilities with an initial emphasis on lead scoring (more on that below). Salesforce's Director of Data Science, Subha Nabar, demonstrated how to configure Einstein via Salesforce's Lightning process interface and from the demo I saw, it appears to be straightforward enough for business users to manage on their own.
 
Image Credit: Salesforce Einstein Configuration Panel
 
Einstein for B2C Marketers - Einstein's Marketing capabilities include an intelligent grouping of audience segments (likely to make a purchase vs. likely to unsubscribe, etc.) that can be pushed into Journey Builder where Einstein will make recommendations on distribution channel mixtures, such as email, mobile messaging, or ads to Facebook with send-time optimization. Salesforce demonstrated how their customer Fanatics, an online retailer of licensed sports apparel, uses Einstein's image processing capabilities to drive product recommendations. In the demonstration, Fanatics's customers were encouraged to upload selfies for a contest. These images were then processed via Einstein’s Predictive Vision Service to sort, classify, and label key attributes such as the customer's hair color and length, to recommend complementary products such as a light-colored headband. This product is particularly powerful for marketers and based on the technology from Salesforce's MetaMind acquisition.
 
Einstein Predictive Vision
Image Credit: Salesforce Einstein Predictive Vision Service
 
Einstein + Pardot for B2B Marketers - Pardot’s Engagement Studio went live over the summer providing B2B Marketers a way to visually design nurture tracks. The differentiator for Salesforce in this area goes back again to Einstein. In the past, Marketers fly blind when it comes to journey design.  Sometimes the best intentions designing “if” and “then” process steps can go awry and lead to over-emailing or entire segments of customers missing from a campaign. Marketers often don’t even realize the issues until weeks later when the performance reports are generated. The insights on the Einstein panel of Pardot Engagement Studio helps guide Marketers during the design process and alert them to which campaign steps may run into problems or predict low performance. It can also provide suggestions on content that may perform better.
 
Image Credit: Salesforce Einstein Insights embedded in Pardot Engagement Studio
 
The potential of leveraging Einstein to manage the entire customer lifecycle from Journey Design to the Marketing offer, through to Commerce (the purchase) then back to Sales Cloud (track the entire journey) can enable the "one-to-one marketing” that is often discussed, but few can actually implement.
 
How Einstein Can Help Sales Representatives -  The initial use cases of Einstein revolve around intelligent deal insight such as cross-referencing data to uncover who the competitor in the deal might be, and lead scoring for sales representatives to better sort their lead queue. Now, lead scoring isn’t new, Marketing Automation solutions have been able to provide demographic and behavior scoring for well over 12 years. What is interesting with Einstein is its' ability to aggregate custom objects and images into the scoring mix, then layer on social data and sentiment analysis to generate recommended next steps.  In the demonstration, a pre-configured email can be populated and sent from Sales Cloud reducing the rep’s time to format a new message.
 
Image Credit: Salesforce Einstein Insights embedded in Sales Cloud
 
One point to consider, Einstein needs to ingest quality data in order to make accurate predictions. Companies looking to their own CRM data to fuel the scoring, segmentation, etc. need to pay particular attention to data quality. Suggest Salesforce customers look at data augmentation and cleansing solutions to get the house in order first.  
 
Krux Acquisition + BeyondCore to power the Salesforce Data Management Platform (DMP) - Salesforce’s 11th acquisition this year announced the day before Dreamforce was Krux, a cross-device data management platform in the ad tech space. Krux combined with BeyondCore (machine-learning, data discovery engine) will be the basis of Salesforce’s Data Management Platform (DMP). For Einstein to offer the correct predictive actions the data has to be there and that’s where Krux comes into play.  Krux will provide Salesforce Marketing Cloud customers the ability to perform audience segmentation and management. Salesforce needed to boost their DMP offering to better compete with competitors that have been building out their DMP offering for years and further along. 
 
Quip - Quip is an exciting recent Salesforce acquisition and also announced a few weeks prior to Dreamforce. My colleague Alan Lepofsky was an early fan of Quip and covered them often. I saw the Quip demo and was impressed by how Salesforce fields can be pulled  directly into the documents and spreadsheets, and when the field are updated in Salesforce, it will auto update in the document as well. Does the future include a Quip panel in Sales Cloud for teams to collaborate on let’s say, RFPs and RFI responses? 
 
The Bottom Line: Customers are passionate about Salesforce as evidenced by the ever-growing number of Dreamforce attendees. Customers that I personally spoke with, including the co-founder of B-Lab, a Sales Cloud, Pardot, and Heroku customer, had nothing but praise for Salesforce. They’ve done a great job building the community of certified administrators, MVPs, the “trailblazers” that have encouraged each other through the Trailhead program for learning. The challenges that I heard from customers are on overall pricing and concerns about how long many of the previously promised enhancements, such as the Lightning UI, is taking. One new Salesforce enterprise customer I spoke with indicated that their integrator was reluctant to start them off with Lightning as it is “buggy”. With that said, the majority of the customers I spoke with are excited by the possibilities with Einstein, but remain cautiously optimistic on timing and pricing. If it’s a key value proposition for the next gen of Salesforce, is it included in the current subscription pricing? As the Constellation team has further conversations, we will update our clients on the pricing models. 
 
As a marketer, I’ve always appreciated how Salesforce manages their brand and the colorful “Trailblazer” theme made for some fun imagery at Dreamforce. The plush Einstein mascot made an appearance at the Analyst reception and yes, even analysts wanted a selfie.  
 
View a Storify collection of my tweets from Dreamforce #DF16 below:
 
 
 
Marketing Transformation Chief Marketing Officer Chief Digital Officer Chief Revenue Officer

CEN Member Chat: Industry Sector Transformation is Smart Business

CEN Member Chat: Industry Sector Transformation is Smart Business

Andy Mulholland, Constellation VP & Principal Analyst, shares lesson learned and tips for success in tackling industry sector transformation. He covers John Deere, Honeywell, Uber, and GM. Our Constellation Insights editor also shares what's hot. 

If you are not a Constellation Executive Network member yet, join our analysts in this private community to talk shop and solve business problems in real time. 

Tech Optimization Chief Information Officer On <iframe src="https://player.vimeo.com/video/187089298" width="640" height="480" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>
Media Name: cen-member-chatindtransform.png

Constellation ShortList for B2B and B2C Marketing Automation Published

Constellation ShortList for B2B and B2C Marketing Automation Published

Last week marked the launch of The Constellation ShortList™, an open research initiative by our team of analysts to help guide organizations on their technology stack selections.  My first ShortList on Configure Price Quote (CPQ) technologies was released last week, and today marks the launch of my Business to Business (B2B) and Business to Consumer (B2C) Marketing Automation ShortLists.
 
Today’s customer is facing more noise in this digital age than ever before and marketers have the tough job of competing for their time and attention.  Buzzwords like “One-to-One Marketing”, “Account Based Marketing”, “Personalize the Journey” are created every day as potential initiatives for the Marketing team to consider.  At the same time, there’s never been more science required by the CMO to justify campaign spend, prove ROI, measure the conversion-to-close from lead-to-customer. More CMOs are held to revenue targets and data analytics skills are a key criteria for today’s marketing hires. Marketing Automation facilitates the process required to effectively engage, track, and measure each step along the customer life cycle beginning from campaign execution to post-sale reporting. 
 
One distinction I wanted to make was to separate my B2B, B2C Marketing and upcoming Sales Force Automation (SFA) ShortList, by solutions suitable for Enterprises and Small/Medium Businesses.  Not every organization has the marketing and sales administrative staff or budget to afford some of the more well-known solutions in the market, so I have made the distinction to help organizations with more limited resources find a solution that works for them.
 
You can read both ShortLists by accessing the links below:
Read the Configure Price Quote (CPQ) ShortList released last week, here
 
For more information on The Constellation ShortList™, visit https://www.constellationr.com/shortlist
 
Note: The goal of the ShortList is to provide busy executives a quick run-through of the top solutions by category.  The companies and solutions included were determined through the following criteria:
  • Client inquiries
  • Customer references
  • Vendor selection projects
  • Technology evaluation
  • Market share 
  • Internal research
Marketing Transformation Chief Marketing Officer

Constellation ShortList™ for Customer Experience (CX) Services: Global

Constellation ShortList™ for Customer Experience (CX) Services: Global

The Customer Experience (CX) Services Global List acknowledges leaders in driving customer experience excellence in organizations. The Constellation ShortList presents vendors in different categories of the market relevant to early adopters. In addition, products included in this document meet the threshold criteria for this category as determined by Constellation Research. This Constellation ShortList of vendors for a market category is compiled through conversations with early adopter clients, independent analysis, and briefings with vendors and partners.

A systems integrator (SI) or customer experience (CX) service provider brings together solutions into an overall customer experience hub. They work with all functional departments, such as marketing, sales, customer service, supply chain, ecommerce, IT, digital performance management (DPM) and back-office systems. With SaaS solutions, the SI’s role is changing to focus on strategy, tactics and choosing technology. Customer experience SIs guide brands’ CX journeys on all channels (e.g., email, chat, text, websites, phone, social networks) and devices (e.g., phones, tablets, desktops), and optimize each to make the experience flawless.

With options to order on a website and pick up in a store or ship to an address, front-end experiences need to be great, along with top-notch supply chain/ERP so inventory is current. In addition to customer journey mapping and choosing omnichannel technology, they focus on DPM to ensure websites load quickly and shopping carts don’t get hung up or abandoned, while mitigating lost revenue. 

CX SIs have a set of best practices, strategy design, optimal delivery, and testing methodology to guide clients to obtain an optimal CX from a customer’s point-of-view. These firms often perform a gap analysis (comparing the current and future state of the customer experience to find gaps). SIs use gaps to create a long- and short-term road map, emphasizing low-hanging fruit and large ROI. SIs often incorporate organizational change management.

Constellation considers the following criteria for these solutions: 

Best practices methodology 

An assessment tool  

Create strategy and technology roadmap  

Customer references  

Differentiated IP 

Customer success management  

Operating in three continents

Constellation evaluates over 100 solutions categorized in this market. This Constellation ShortList is determined by client inquiries, partner conversations, customer references, vendor selection projects, market share, and internal research.

 
Enterprise Service Providers / System Integrators / Management Consultants:  

  • Accenture
  • Bain
  • Boston Consulting Group 
  • Capgemini 
  • Deloitte  
  • Ernst & Young  
  • IBM Global Business Services 
  • Infosys  
  • McKinsey 
  • SapientNitro  
  • Wipro

For more information about this short list, please see the Constellation Research website.

@DrNatalie Petouhoff, VP and Principal Analyst, Covering Customer-facing Applications

Share

Next-Generation Customer Experience Chief Customer Officer

Constellation ShortList™ for Digital Performance Management

Constellation ShortList™ for Digital Performance Management

Digital Performance Management provides companies with the analytics to determine if their customer experience is optimized. The Constellation ShortList™? presents vendors in different categories of the market relevant to early adopters. In addition, products included in this document meet the threshold criteria for this category as determined by Constellation Research. This Constellation ShortList of vendors for a market category is compiled through conversations with early adopter clients, independent analysis, and briefings with vendors and partners.

Mastering digital performance management (DPM) is one of the leading challenges of the digital economy. Often referred to as application performance management (APM), it requires a joint effort between many functional departments, such as marketing, sales, customer service, ecommerce and IT. It is no longer just about IT looking at the performance of the technology stack or the management of the infrastructure or cloud that delivers customer experience. 

Today, it’s about the collaboration between the lines of business and IT to measure and manage the end-to-end transaction delivery and translate it into actionable information that a brand can use to optimize customer experience, as well as the performance of the technologies used to deliver it. When DPM is optimized, companies can deliver an engaging digital experience, maximize revenue and improve brand loyalty. DPM vendors help both the business and engineering teams to not only define conversion and revenue goals but also make sure they are reached.

They make sure the application’s performance doesn’t become a roadblock to optimal customer experiences and reaching business metrics, including conversion rates, high availability and high user experience indexes. The goal is to monitor and measure to eliminate all revenue barriers with a strong focus on digital performance to ensure that the road to conversion is quick and easy; the customer experience is smooth; and customers remain loyal as a result.

Constellation considers the following criteria for these solutions: 
  • Monitoring of each customer’s journey and business transactions, using intelligent analytics
  • Proactive application monitoring for quick problem resolution and maximum availability 
  • Full insights into each customer’s journey to make better business decisions
  • Connect the dots between customer experience, application performance and business outcomes 
  • Full technology stack monitoring with deep operational insights into the user’s application environment 
  • Big data monitoring and data visualization 
  • Mobile application monitoring  
  • Cloud, server and mainframe monitoring 
  • Load testing, virtualization and network monitoring 
  • Customer behavior analytics.

Constellation evaluates over 25 solutions categorized in this market. This Constellation ShortList is determined by client inquiries, partner conversations, customer references, vendor selection projects, market share and internal research. 
These are the best-of-breed vendors that provide applications and services without bundling into another platform: 

  • APM+  
  • AppDynamics  
  • Dynatrace  
  • NeoSense 
  • Oracle  
  • SAP  
  • SOASTA.

For more information, please see the Constellation Research website.

@drNatalie Petouhoff, VP and Principal Analyst, Covering Customer Facing Applications

Share

Next-Generation Customer Experience Chief Customer Officer

B2B Marketing Automation Makes Its Debut in the Constellation ShortList Program

B2B Marketing Automation Makes Its Debut in the Constellation ShortList Program

In the digital era, companies are competing for buyer time and attention. The multitude of campaign channels - ranging from social media, Web programs, content marketing, advertising and events - requires companies to consider systems that can orchestrate across channels to ensure quality buyer engagement. Marketing automation provides B2B companies with an efficient way to attract, capture, engage and nurture customers, enabling marketers to deliver qualified, sales-ready leads and provide post-sale nurture for upsell and cross-sell opportunities.

Today, Constellation published a Constellation ShortList™ for B2B Marketing Automation. This Constellation ShortList helps companies choose the B2B Marketing Automation tools that will help them achieve their digital transformation goals. Here are the companies that made the Constellation ShortList:

Enterprise Solutions

  • Adobe Campaign
  • Oracle Marketing Cloud
  • Marketo
  • Salesforce Pardot

SMB Solutions

  • Act-On
  • eTrigue
  • Hubspot
  • Salesforce Pardot

Constellation advises early adopters using disruptive technologies on how to achieve business model transformation. Products and services named to this Constellation ShortList meet the threshold criteria for each category as determined by Constellation Research through client inquiries, partner conversations, customer references, vendor selection projects, market share and internal research.

Additional lists released today include:

This is the second set of lists we’ve released for this program. If you missed last week’s update, check it out here. We will be rolling out nearly 40 Constellation ShortLists authored by our analysts across a range of technologies over the next few weeks.

For more information, visit https://www.constellationr.com/shortlist, or inquire directly by contacting [email protected].

New Research: How Blockchain Security is Evolving

New Research: How Blockchain Security is Evolving

Security for blockchains and more advanced Distributed Ledger Technologies (DLTs) is evolving rapidly.  As soon as interest in the original blockchain grew past crypto-currency into mainstream business applications, it became apparent that the core ledger would need to augmented in several ways.  

The naked blockchain by nature has to be open to all participants, to achieve the scale needed to keep out corruption of Bitcoin, but in real world business, account holders need to be subject to entry rules, and the "miners" that support the network need a governance, system.  These considerations lead to with permissioned blockchains with access controls.  Another enterprise requirement is confidentiality; most businesses need their records generally kept out of the public domain, and that means encryption or blockchain entries before they are lodged.

Access controls and encryption might be regarded as conventional security layers, but what few people appreciate is that these measures conflict with the rationale of the original blockchain algorithm, which was expressly meant to dispel administration.  

My new Constellation Research paper looks at these tensions, what they mean for public and private blockchain systems, and provides some detailed guidance for blockchain technology security: 

  • Permissioned blockchains and private DLTs must implement access controls to determine who has the appropriate privileges to write to the ledger.
  • Remember that any administrative agencts operating off-chain dilute the benefits of Proof of Work algorithms.
  • If confidentiality is required for sensitive data written to a public blockchain, then additional key distribution and management is needed, but these can create single points of failure needing mitigation.
  • Private DLTs become much more concentrated compared with pure blockchains, and need administration to protect against insider threats and to prevent fraud.  
  • The quality of cryptography in all customised DLTs is critical. Algorithms must be correctly programmed and must execute without interference.
  • Hardware Security Modules (HSMs) are increasingly practical, thanks to dedicated cloud HSM options emerging at cloud providers and should be considered. HSMs should be certified to Common Criteria EAL4+, or FIPS 140 level 3+.
  • Software quality in general must not be overlooked. Bugs in “smart contracts” and novel blockchain cases like the “Distributed Autonomous Organization” (The DAO) have made the headlines. DLT projects must take care of the software development lifecycles. 

 A snapshot of "How to Secure Blockchain Technologies" can be downloaded here

Tech Optimization Digital Safety, Privacy & Cybersecurity Innovation & Product-led Growth Distillation Aftershots AI Blockchain Security Zero Trust Chief Executive Officer Chief Information Officer Chief Technology Officer Chief AI Officer Chief Data Officer Chief Analytics Officer Chief Information Security Officer Chief Product Officer Chief Privacy Officer

New Research: Guidance on Blockchain Technology R&D

New Research: Guidance on Blockchain Technology R&D

Over September 26-27 I was a guest speaker at the US Department of Health & Human Services blockchain for healthcare workshop.  It was a fascinating and worthwhile exercise, as I reported in more detail here.  However, I have to say most of the presentations confirmed my view that blockchain application development leaves a lot to be desired.

Too often, blockchain-based solutions fall short of good design practice.  They typically fail to set out the problem they're really trying to solve, and instead start with the working assumption that blockchain is an inherently valuable part of the end solution.  In the current craze, people tend to treat blockchain is the end and not the means. 

There were three noticable problems with the blockchain for healthcare proposals, taken as a whole: 

  1. They tended to misunderstand what blockchain does.  As I've canvassed elsewhere, the original Bitcoin blockchain only does one thing: it reaches consensus on the order of entries in a ledger.  It does not and cannot decide anything else about the entries.  And so it does not have a lot to contribute to the health IT problem of interoperability. 
  2. They tended to overestimate blockchain as a database.  Several papers submitted to the workshop claimed blockchain could help federate the many disparate and siloed health information repositories, improving on the probematic Health Information Exchange (HIE) model.  However, as the workshop progressed, all parties agreed that the blockchain should not be used to hold significant health data, because it's public by nature, and limited in capacity. So if blockchain isnt going to store health data, it cannot help shift health data from its current silos. 
  3. And none of the blockchain papers tackled the challenge of key management. When permissions and confidentiality need to be layered on top of the core blockchain, and the necessary key management arrangements are inplace, the distributed ledger technology actuallt becomes inconsequential.  

If distributed ledgers hold some promise in e-health, there needs to be a clear problem statement and a stronger R&D pathway, to take us from the first generation prototype blockchain, to second and third generation DLTs and beyond. 

I have published a new research report seeking to improve how blockchain-related R&D is conducted

The ad hoc way in which permissions and encryption is added to blockchain is just one example of overly hasty "innovation". In the rush to apply blockchain to mainstream applications, few entrepreneurs have been clear about the problems they think they’re solving.  If DLT R&D is not properly grounded, then the resulting solutions will be weak and will ultimately fail in the market.  The original blockchain was truly only a prototype; greater care is needed to reliably adapt the first generation algorithms to enterprise requirements. 

The report examines four strong research organisations in this space: the Hyperledger Foundation, Microsoft's Azure Blockchain as a Service, the banking industry joint vernture R3, and Ping Identity with its investment in the startup Swirlds. 

If your organisation needs to conduct its own R&D then the following checklist can help you stay on track: 

  • Do you have the equivalent of a Double Spend problem? If the order of transactions is not critical or if it’s not really possible for assets such as physical objects to be exercised twice, then the original blockchain is probably not a natural for your use case.
  • Are your assets purely digital or do you have physical assets that need mapping onto the ledger? Any mapping or translation of physical assets onto ledger entries logically needs to be done off-ledgewith authority structures that erode the pure blockchain architecture.  
  • Do you need immutability? The degree of permanence provided by the public blockchains is rarely needed in conventional business, and may not be worth the cost. 
  • Does your environment have administrators? Blockchain was expressly designed for a special case where central admin is banished.  Conventional business lines of command and authority structures can be at odds with the blockchain consensus algorithm. 

For more information, a snapshot of the report is available here.  

 

Tech Optimization Digital Safety, Privacy & Cybersecurity Innovation & Product-led Growth Matrix Commerce Distillation Aftershots Microsoft Blockchain AI Chief Information Officer Chief Digital Officer Chief Executive Officer Chief Technology Officer Chief AI Officer Chief Data Officer Chief Analytics Officer Chief Information Security Officer Chief Product Officer

Introducing Constellation's Latest Product

Introducing Constellation's Latest Product

One of the things I love about Constellation Research is how the firm practices what it preaches.  Everything we talk about of course relates to innovation, but we are ourselves innovating all the time. For example, internally, our production process is constantly trying new ways to streamline how research gets converted into high grade publications.  

Externally in the past twelve months we opened up the Constellation Executive Network which provides new ways to access or research and analysts.  And last week we launched the latest Constellation Research product: the Constellation ShortList™

The Constellation ShortList program provides technology buyers a curated list of solution providers to consider in their pursuit of digital transformation in a wide range of categories.  Products and services named in each Constellation ShortList meet particular threshold criteria in each category, as determined by Constellation Research through ongoing client and partner conversations, customer references, market share, mind share, publications, and our continuous internal research.  Each list is updated by its responsible analyst on a short cycle -- typically every three months -- so our clients always have an up-to-date guide to help them save time in competitive technology evaluation.  

My first Constellation ShortLists were published last week. 

Cloud Identity Management (CIM)  

CIM is a natural evolution of hosted identity management services, and has boomed over the past three years.  At this stage I have short-listed (in alphabetical order) CA Technologies, ForgeRock, IBM,   Microsoft, Okta, OneLogin, Ping Identity, Salesforce, and VMware.  This is a particularly dynamic category, so watch this space for new entries and exits! 

Distributed Ledger Labs (DLTs) 

DLTs are the natural progression of blockchain, expanding the vision of this decentralised secure data structure from cryptcurrency to mainstream applications.  They are highly complex, and until commoditised, buyers should stick to the large research consortia or laboratories. For now I have short-listed (in alphabetical order): R3, Hyperledger Foundation, Microsoft Azure Blockchain as a Service, and Ping Identity / Swirlds. 

 

Media Name: Constellation ShortList Logo Oct 2016.png
Digital Safety, Privacy & Cybersecurity Data to Decisions Future of Work Innovation & Product-led Growth New C-Suite Tech Optimization Distillation Aftershots Security Zero Trust Chief Information Security Officer Chief Privacy Officer