Microsoft Australia Security Summit Design for Operations Nigel Watson, Microsoft Australia David Lemphers, TeamForce Nigel Watson, Microsoft Australia David Lemphers, TeamForce

Microsoft Australia Security Summit Agenda Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer

Microsoft Australia Security Summit Team Architect Problem Space Increased Complexity Communication problems Solution Architects, Devs, and Ops Rolling security into the product The business wears the costs… We have the meta-data! But traditionally haven’t used it Need to find new ways to model systems Microsoft’s response Increased Complexity Communication problems Solution Architects, Devs, and Ops Rolling security into the product The business wears the costs… We have the meta-data! But traditionally haven’t used it Need to find new ways to model systems Microsoft’s response

Microsoft Australia Security Summit Source: David M. Anderson, Design for Manufacturability: Optimizing Cost, Quality, and Time-to-Market, Second Edition (2001), CIM Press Lessons from Car Manufacturing

Microsoft Australia Security Summit Agenda Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer

Microsoft Australia Security Summit System Definition Model Layers Applications ApplicationHosting Logical Machines & Network Topology HardwareSystemDefinitionModel

Microsoft Australia Security Summit Team Architect Microsoft’s approach is model-driven Aim is to increase the level of abstraction! But… relies on DSL’s, not generalisations Need ways to precisely model systems UML techniques don’t necessarily provide this Our approach: UML for documentation DSL’s for modeling in a way that promotes automation DSL’s for keeping things synchronised SDM is the schema underlying this effort Microsoft’s approach is model-driven Aim is to increase the level of abstraction! But… relies on DSL’s, not generalisations Need ways to precisely model systems UML techniques don’t necessarily provide this Our approach: UML for documentation DSL’s for modeling in a way that promotes automation DSL’s for keeping things synchronised SDM is the schema underlying this effort

Microsoft Australia Security Summit Agenda Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer

Microsoft Australia Security Summit Application Connection Designer

Microsoft Australia Security Summit Application Connection Designer

Microsoft Australia Security Summit Visual Studio Team Architect System Design ASMX+WSE Applications Modeling support for all application types Full design support for web services

Microsoft Australia Security Summit Agenda Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer

Microsoft Australia Security Summit Network diagrams are not aimed at developers! Network Topology

Microsoft Australia Security Summit Definitions A Logical Server describes the application hosting characteristics of one or more physical servers A Logical Datacenter describes a configured set of logical servers A Zone is a boundary - either physical or security A Deployment Definition describes the deployment of a system to a logical datacenter A Logical Server describes the application hosting characteristics of one or more physical servers A Logical Datacenter describes a configured set of logical servers A Zone is a boundary - either physical or security A Deployment Definition describes the deployment of a system to a logical datacenter

Microsoft Australia Security Summit Logical Data-Center Designer ApplicationHostingLayer

Microsoft Australia Security Summit Logical Datacenter Designer

Microsoft Australia Security Summit Agenda Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer Problem Space System Definition Model Application Connection Designer Logical DataCenter Designer Settings and Constraints Deployment Designer

Microsoft Australia Security Summit Settings and Constraints Settings Application requirements - requirements Host Environment - reality Constraints – allow you to define ‘rules’ Implicit (i.e. script maps) Canned (common settings – i.e. auth required etc) User Defined (i.e. allowable conn strs) Two-way dialog Common mechanism for architects/infrastructure staff to communicate and validate Settings Application requirements - requirements Host Environment - reality Constraints – allow you to define ‘rules’ Implicit (i.e. script maps) Canned (common settings – i.e. auth required etc) User Defined (i.e. allowable conn strs) Two-way dialog Common mechanism for architects/infrastructure staff to communicate and validate

Microsoft Australia Security Summit Deployment Designer

Microsoft Australia Security Summit Visual Studio Team Architect Distributed System Designers Application Connection Designer Application Hosting Applications Deployment Designer System Designer SystemDefinitionModel Logical Datacenter Designer

Microsoft Australia Security Summit SDM in Windows Adapters Management Interfaces Tools SDM Infrastructure SDM Service Management Tools Framework Modeling Tools Framework SDM Compiler & Design-time Tools Model Driven Design Tools Model Driven Management Tools DesignDeployOperate Models

Microsoft Australia Security Summit Summary Reviewed the problems of poor team communication Reviewed the System Definition Model Designed distributed systems Understood design time systems validation Reviewed tight code & model synchronization Learned about customising the designers Reviewed the problems of poor team communication Reviewed the System Definition Model Designed distributed systems Understood design time systems validation Reviewed tight code & model synchronization Learned about customising the designers

Microsoft Australia Security Summit © 2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

Microsoft Australia Security Summit Team Architect Key Scenarios Design connected systems “Design for Operations” Code visualization Documentation and conceptual drawings UML and More UML tools for software documentation DSLs tools for precise software development Key Scenarios Design connected systems “Design for Operations” Code visualization Documentation and conceptual drawings UML and More UML tools for software documentation DSLs tools for precise software development DSL tools Distributed Systems Designers Application connection Designer System Definition Designer Logical Datacenter Designer Class Designer Common Features Multiple artifact generation Continuous synchronization Design-first mode SDM schema underlies Distributed System Designers