Download as PDF, PPTX
![MATCH (app:WebApp)
-[:CONSISTS_OF_JAVA_CLASS]->(class:JavaClass)
-[:IMPORTS]->(dependency:JavaClass)
WHERE dependency.name =~ '.*security.*'
OPTIONAL MATCH (dependency) -[:PROVIDED_BY_JAR]-> (jar:JarOrModule)
RETURN app, dependency, jar class LIMIT 50;
11
Graph Search & Analysis (neo4j)
Which security packages are used?
Interactive exploration
Refactoring automation with Spoon](https://image.slidesharecdn.com/intothecloudyoubetterflybysight1-210427082254/85/Into-the-cloud-you-better-fly-by-sight-11-320.jpg)
Uploaded byJosef Adersberger
Into the cloud, you better fly by sight
This document discusses the importance of visibility during cloud native migrations. It describes how one company successfully migrated over 600 web applications to the public cloud within 4 years on budget and with all applications security-hardened. The key lesson learned was to not do a "blind flight" into the cloud. Visibility is achieved through establishing a single source of truth using various tools to analyze applications, dependencies, technologies, costs, and compliance. Rich data analysis and visualization is then provided through business intelligence, graph search and analysis, and dashboards. This allows interactive exploration of the software landscape and issues.
More Related Content
Similar to Into the cloud, you better fly by sight
Into the cloud, you better fly by sight
- 1. Cloud Native Migration INTOTHE CLOUD, YOU BETTER FLY BY SIGHT Dr. Josef Adersberger
- 2. 1. Overrun ofcosts, efforts, timelines 2. Unexpected severe portability issues 3. Wrong technology decisions 4. Lack of security, privacy & compliance 5. ... Things can go terribly wrong on a cloud native journey
- 3. 3 A successful cloud migration ❏In time: All 600+ web applications migrated to public cloud and in production within 4 years ❏ In budget: no overrun & strong business case generated ❏ Full advantage: All applications security-hardened and modernized to containerized 12-factor-apps, higher availability, more agile teams
- 4. 4 #1 LESSON LEARNED: Noblind flight into the cloud
- 5.
- 6. It’s all about visibility SourceApplication Landscape Migration Process Target Application Landscape Cloud Native Readiness Check Effort Estimation Cartography (Applications, Dependencies, Technologies) Cloud Cost Optimization Compliance Sign-off Hypercare Observation Migration Controlling Production Readiness Monitoring
- 7. Migration Data Warehouse SONARQUBE EAM TOOL OWASP Scanner jQAssistant Establisha single source of truth QUESTIONNAIRES STATIC ANALYSIS DYNAMIC ANALYSIS LEANIX Iteraplan XLS JEE Migration Tool Monitoring Tools Inventory Infrastructure 1
- 8. 8 Provide rich dataanalysis and visualization capabilities 2 Migration Data Warehouse Business Intelligence Graph Search & Analysis Dashboards & Reports Issue Tracking
- 9. 9 Business Intelligence (Tableau) ❏What technologies are used? ❏ What libraries are integrated in which version? ❏ What protocols are used? ❏ How much code? ❏ How much over-complex code? ❏ How many code anomalies per LOC? ❏ ...
- 10. 10 Graph Search &Analysis (neo4j) ❏ Which deployment units contain a specific class? ❏ What deployment units have a transitive dependency to a specific class or library? ❏ What are all code-level dependencies between our applications? ❏ ...
- 11. MATCH (app:WebApp) -[:CONSISTS_OF_JAVA_CLASS]->(class:JavaClass) -[:IMPORTS]->(dependency:JavaClass) WHERE dependency.name=~ '.*security.*' OPTIONAL MATCH (dependency) -[:PROVIDED_BY_JAR]-> (jar:JarOrModule) RETURN app, dependency, jar class LIMIT 50; 11 Graph Search & Analysis (neo4j) Which security packages are used? Interactive exploration Refactoring automation with Spoon
- 12. 12 Dashboards & Reports Migrationstatus Health status Quality status Information radiator Incentives :-)
- 13.
- 14. INTO THE CLOUD,YOU BETTER FLY BY SIGHT INSTRUMENTS Dr. Josef Adersberger
- 15. 15 HOLOWARE: Collaborative visualization, exploration, andanalysis of software landscapes in XR Research project by QAware and University of Erlangen-Nuremberg funded by BMWi / ZIM
- 16.
- 17.
- 18.
- 19. QAware GmbH Aschauer Straße32 81549 München Tel.: +49 89 232315-0 E-Mail: info@qaware.de | sales@qaware.de qaware.de twitter.com/qaware linkedin.com/company/qaware-gmbh xing.com/companies/qawaregmbh github.com/qaware slideshare.net/qaware
- 20.
- 21. 21 Slicing & dicingmulti-dimensional time series data with the Software ECG ❏ Nodes: Compute nodes ❏ Namespaces: Application namespaces ❏ Pods & Services: Containerized Applications ❏ Processes: Application processes ❏ Metrics: e.g. runtime metrics, cloud costs Dimensions: ❏ Tool for analyzing multi-dimensional time series as collected from system behaviour monitoring ❏ Capable of analyzing trillions of data points in seconds ❏ Internally used in QAware projects at BMW, Deutsche Telekom, Allianz etc,