Cloud and Platform

A multi-cloud approach is based on the combination of the same cloud type (e. g. public) from different providers, whose individual strengths can thus be combined in a targeted manner. In contrast, a hybrid cloud solution consists of different cloud types (e. g. public and private), which means that companies are able to expand the resources of their own data center or those of their IT service providers with the services of private and public clouds. This needs-based combination allows the advantages of both worlds to be combined: While the on-premises infrastructure can be used to store and process sensitive data, for example, infrastructure and platform services from cloud providers offer flexible scalability and reduced or more efficient overall costs of IT operations (currently cited as the main reason for introducing a hybrid cloud). Both approaches, multi and hybrid cloud, place increased demands on data security, which must be met with care to be able to extract the best from the individually designed cloud solutions.

Cloud-native describes a design methodology in which applications are developed and executed using cloud-based technologies. In contrast to a monolithic application infrastructure, this approach is often combined with dividing the application into many small components – so-called microservices. Different development teams can work on these independently of one another using dynamic and agile application development techniques. Following this principle of loosely coupled services, each with a defined scope, you can optimize each service based on the core functionality and choose the framework, language or system that best meets the specific goals. The individual microservices are usually delivered in so-called containers, which supports the flexible combination of complex applications. In this way, certain components can be easily added, removed, or exchanged. For example, a software update or a new function can be delivered as soon as it is fully developed and not with the next release of a new software version. Overall, with a cloud-native architecture, you benefit from the full elasticity, scalability, speed, and cost advantages of the cloud.

Edge computing extends conventional cloud solutions with central servers by a concept in which data is processed decentralized at the edge of the network. This creates proximity to the producers and consumers of the information, which is particularly advantageous for applications in which huge amounts of data are to be transmitted and evaluated (almost) in real time. With the rapidly growing number of IoT devices and the correspondingly increasing volume of data, this is becoming more and more important. Examples of applications include intelligent production, supply or transport systems that require immediate action in the event of certain incidents. The main data center is involved here so that consolidated data from edge devices can be stored and also be further processed in other applications. Those decentralized edge devices need to be monitored and evaluated constantly, if necessary, by human experts. Using edge computing can result in a 10 to 30% reduction in costs and an average operational cost savings of 10 to 20%.

Cloud Security stands for a series of rules and measures for securing cloud services and their surrounding infrastructure, including all applications and data. The topic is of central importance for cloud providers and cloud users alike, as in the event of a security breach both could be held liable. Current developments make it clear how important cloud security is: The increasing distribution of workloads among different cloud providers opens gates for cybercriminals who are only too happy to exploit them if IT security is inadequate. The level of the cloud security solution required is primarily determined by which type of cloud is used – a public or hybrid cloud, for example, demand higher security measures than a purely private solution. The main focus is on protecting data from outside access and from a network failure. Besides, observance of compliance guidelines is also considered.