(upbeat music) >> Hey, everyone, welcome back to Las Vegas, "theCube" is on our fourth day of covering AWS re:Invent, live from the Venetian Expo Center. This week has been amazing. We've created a ton of content, as you know, 'cause you've been watching. But, there's been north of 55,000 people here, hundreds of thousands online. We've had amazing conversations across the AWS ecosystem. Lisa Martin, Paul Gillan. Paul, what's your, kind of, take on day four of the conference? It's still highly packed. >> Oh, there's lots of people here. (laughs) >> Yep. Unusual for the final day of a conference. I think Werner Vogels, if I'm pronouncing it right kicked things off today when he talked about asymmetry and how the world is, you know, asymmetric. We build symmetric software, because it's convenient to do so, but asymmetric software actually scales and evolves much better. And I think that that was a conversation starter for a lot of what people are talking about here today, which is how the cloud changes the way we think about building software. >> Absolutely does. >> Our next guest, Holger Mueller, that's one of his key areas of focus. And Holger, welcome, thanks for joining us on the "theCube". >> Thanks for having me. >> What did you take away from the keynote this morning? >> Well, how do you feel on the final day of the marathon, right? We're like 23, 24 miles. Hit the ball yesterday, right? >> We are going strong Holger. And, of course, >> Yeah. >> you guys, we can either talk about business transformation with cloud or the World Cup. >> Or we can do both. >> The World Cup, hands down. World Cup. (Lisa laughs) Germany's out, I'm unbiased now. They just got eliminated. >> Spain is out now. >> What will the U.S. do against Netherlands tomorrow? >> They're going to win. What's your forecast? U.S. will win? >> They're going to win 2 to 1. >> What do you say, 2:1? >> I'm optimistic, but realistic. >> 3? >> I think Netherlands. >> Netherlands will win? >> 2 to nothing. >> Okay, I'll vote for the U.S.. >> Okay, okay >> 3:1 for the U.S.. >> Be optimistic. >> Root for the U.S.. >> Okay, I like that. >> Hope for the best wherever you work. >> Tomorrow you'll see how much soccer experts we are. >> If your prediction was right. (laughs) >> (laughs) Ja, ja. Or yours was right, right, so. Cool, no, but the event, I think the event is great to have 50,000 people. Biggest event of the year again, right? Not yet the 70,000 we had in 2019. But it's great to have the energy. I've never seen the show floor going all the way down like this, right? >> I haven't either. >> I've never seen that. I think it's a record. Often vendors get the space here and they have the keynote area, and the entertainment area, >> Yeah. >> and the food area, and then there's an exposition, right? This is packed. >> It's packed. >> Maybe it'll pay off. >> You don't see the big empty booths that you often see. >> Oh no. >> Exactly, exactly. You know, the white spaces and so on. >> No. >> Right. >> Which is a good thing. >> There's lots of energy, which is great. And today's, of course, the developer day, like you said before, right now Vogels' a rockstar in the developer community, right. Revered visionary on what has been built, right? And he's becoming a little professorial is my feeling, right. He had these moments before too, when it was justifying how AWS moved off the Oracle database about the importance of data warehouses and structures and why DynamoDB is better and so on. But, he had a large part of this too, and this coming right across the keynotes, right? Adam Selipsky talking about Antarctica, right? Scott against almonds and what went wrong. He didn't tell us, by the way, which often the tech winners forget. Scott banked on technology. He had motorized sleds, which failed after three miles. So, that's not the story to tell the technology. Let everything down. Everybody went back to ponies and horses and dogs. >> Maybe goes back to these asynchronous behavior. >> Yeah. >> The way of nature. >> And, yesterday, Swami talking about the bridges, right? The root bridges, right? >> Right. >> So, how could Werner pick up with his video at the beginning. >> Yeah. >> And then talk about space and other things? So I think it's important to educate about event-based architecture, right? And we see this massive transformation. Modern software has to be event based, right? Because, that's how things work and we didn't think like this before. I see this massive transformation in my other research area in other platforms about the HR space, where payrolls are being rebuilt completely. And payroll used to be one of the three peaks of ERP, right? You would size your ERP machine before the cloud to financial close, to run the payroll, and to do an MRP manufacturing run if you're manufacturing. God forbid you run those three at the same time. Your machine wouldn't be able to do that, right? So it was like start the engine, start the boosters, we are running payroll. And now the modern payroll designs like you see from ADP or from Ceridian, they're taking every payroll relevant event. You check in time wise, right? You go overtime, you take a day of vacation and right away they trigger and run the payroll, so it's up to date for you, up to date for you, which, in this economy, is super important, because we have more gig workers, we have more contractors, we have employees who are leaving suddenly, right? The great resignation, which is happening. So, from that perspective, it's the modern way of building software. So it's great to see Werner showing that. The dirty little secrets though is that is more efficient software for the cloud platform vendor too. Takes less resources, gets less committed things, so it's a much more scalable architecture. You can move the events, you can work asynchronously much better. And the biggest showcase, right? What's the biggest transactional showcase for an eventually consistent asynchronous transactional application? I know it's a mouthful, but we at Amazon, AWS, Amazon, right? You buy something on Amazon they tell you it's going to come tomorrow. >> Yep. >> They don't know it's going to come tomorrow by that time, because it's not transactionally consistent, right? We're just making every ERP vendor, who lives in transactional work, having nightmares of course, (Lisa laughs) but for them it's like, yes we have the delivery to promise, a promise to do that, right? But they come back to you and say, "Sorry, we couldn't make it, delivery didn't work and so on. It's going to be a new date. We are out of the product.", right? So these kind of event base asynchronous things are more and more what's going to scale around the world. It's going to be efficient for everybody, it's going to be better customer experience, better employee experience, ultimately better user experience, it's going to be better for the enterprise to build, but we have to learn to build it. So big announcement was to build our environment to build better eventful applications from today. >> Talk about... This is the first re:Invent... Well, actually, I'm sorry, it's the second re:Invent under Adam Selipsky. >> Right. Adam Selipsky, yep. >> But his first year. >> Right >> We're hearing a lot of momentum. What's your takeaway with what he delivered with the direction Amazon is going, their vision? >> Ja, I think compared to the Jassy times, right, we didn't see the hockey stick slide, right? With a number of innovations and releases. That was done in 2019 too, right? So I think it's a more pedestrian pace, which, ultimately, is good for everybody, because it means that when software vendors go slower, they do less width, but more depth. >> Yeah. >> And depth is what customers need. So Amazon's building more on the depth side, which is good news. I also think, and that's not official, right, but Adam Selipsky came from Tableau, right? >> Yeah. So he is a BI analytics guy. So it's no surprise we have three data lake offerings, right? Security data lake, we have a healthcare data lake and we have a supply chain data lake, right? Where all, again, the epigonos mentioned them I was like, "Oh, my god, Amazon's coming to supply chain.", but it's actually data lakes, which is an interesting part. But, I think it's not a surprise that someone who comes heavily out of the analytics BI world, it's off ringside, if I was pitching internally to him maybe I'd do something which he's is familiar with and I think that's what we see in the major announcement of his keynote on Tuesday. >> I mean, speaking of analytics, one of the big announcements early on was Amazon is trying to bridge the gap between Aurora. >> Yep. >> And Redshift. >> Right. >> And setting up for continuous pipelines, continuous integration. >> Right. >> Seems to be a trend that is common to all database players. I mean, Oracle is doing the same thing. SAP is doing the same thing. MariaDB. Do you see the distinction between transactional and analytical databases going away? >> It's coming together, right? Certainly coming together, from that perspective, but there's a fundamental different starting point, right? And with the big idea part, right? The universal database, which does everything for you in one system, whereas the suite of specialized databases, right? Oracle is in the classic Oracle database in the universal database camp. On the other side you have Amazon, which built a database. This is one of the first few Amazon re:Invents. It's my 10th where there was no new database announced. Right? >> No. >> So it was always add another one specially- >> I think they have enough. >> It's a great approach. They have enough, right? So it's a great approach to build something quick, which Amazon is all about. It's not so great when customers want to leverage things. And, ultimately, which I think with Selipsky, AWS is waking up to the enterprise saying, "I have all this different database and what is in them matters to me." >> Yeah. >> "So how can I get this better?" So no surprise between the two most popular database, Aurora and RDS. They're bring together the data with some out of the box parts. I think it's kind of, like, silly when Swami's saying, "Hey, no ETL.". (chuckles) Right? >> Yeah. >> There shouldn't be an ETL from the same vendor, right? There should be data pipes from that perspective anyway. So it looks like, on the overall value proposition database side, AWS is moving closer to the universal database on the Oracle side, right? Because, if you lift, of course, the universal database, under the hood, you see, well, there's different database there, different part there, you do something there, you have to configure stuff, which is also the case but it's one part of it, right, so. >> With that shift, talk about the value that's going to be in it for customers regardless of industry. >> Well, the value for customers is great, because when software vendors, or platform vendors, go in depth, you get more functionality, you get more maturity you get easier ways of setting up the whole things. You get ways of maintaining things. And you, ultimately, get lower TCO to build them, which is super important for enterprise. Because, here, this is the developer cloud, right? Developers love AWS. Developers are scarce, expensive. Might not be want to work for you, right? So developer velocity getting more done with same amount of developers, getting less done, less developers getting more done, is super crucial, super important. So this is all good news for enterprise banking on AWS and then providing them more efficiency, more automation, out of the box. >> Some of your customer conversations this week, talk to us about some of the feedback. What's the common denominator amongst customers right now? >> Customers are excited. First of all, like, first event, again in person, large, right? >> Yeah. >> People can travel, people meet each other, meet in person. They have a good handle around the complexity, which used to be a huge challenge in the past, because people say, "Do I do this?" I know so many CXOs saying, "Yeah, I want to build, say, something in IoT with AWS. The first reference built it like this, the next reference built it completely different. The third one built it completely different again. So now I'm doubting if my team has the skills to build things successfully, because will they be smart enough, like your teams, because there's no repetitiveness and that repetitiveness is going to be very important for AWS to come up with some higher packaging and version numbers.", right? But customers like that message. They like that things are working better together. They're not missing the big announcement, right? One of the traditional things of AWS would be, and they made it even proud, as a system, Jassy was saying, "If we look at the IT spend and we see something which is, like, high margin for us and not served well and we announced something there, right?" So Quick Start, Workspaces, where all liaisons where AWS went after traditional IT spend and had an offering. We haven't had this in 2019, we don't have them in 2020. Last year and didn't have it now. So something is changing on the AWS side. It's a little bit too early to figure out what, but they're not chewing off as many big things as they used in the past. >> Right. >> Yep. >> Did you get the sense that... Keith Townsend, from "The CTO Advisor", was on earlier. >> Yep. >> And he said he's been to many re:Invents, as you have, and he said that he got the sense that this is Amazon's chance to do a victory lap, as he called it. That this is a way for Amazon to reinforce the leadership cloud. >> Ja. >> And really, kind of, establish that nobody can come close to them, nobody can compete with them. >> You don't think that- >> I don't think that's at all... I mean, love Keith, he's a great guy, but I don't think that's the mindset at all, right? So, I mean, Jassy was always saying, "It's still the morning of the day in the cloud.", right? They're far away from being done. They're obsessed over being right. They do more work with the analysts. We think we got something right. And I like the passion, from that perspective. So I think Amazon's far from being complacent and the area, which is the biggest bit, right, the biggest. The only thing where Amazon truly has floundered, always floundered, is the AI space, right? So, 2018, Werner Vogels was doing more technical stuff that "Oh, this is all about linear regression.", right? And Amazon didn't start to put algorithms on silicon, right? And they have a three four trail and they didn't announce anything new here, behind Google who's been doing this for much, much longer than TPU platform, so. >> But they have now. >> They're keen aware. >> Yep. >> They now have three, or they own two of their own hardware platforms for AI. >> Right. >> They support the Intel platform. They seem to be catching up in that area. >> It's very hard to catch up on hardware, right? Because, there's release cycles, right? And just the volume that, just talking about the largest models that we have right now, to do with the language models, and Google is just doing a side note of saying, "Oh, we supported 50 less or 30 less, not little spoken languages, which I've never even heard of, because they're under banked and under supported and here's the language model, right? And I think it's all about little bit the organizational DNA of a company. I'm a strong believer in that. And, you have to remember AWS comes from the retail side, right? >> Yeah. >> Their roll out of data centers follows their retail strategy. Open secret, right? But, the same thing as the scale of the AI is very very different than if you take a look over at Google where it makes sense of the internet, right? The scale right away >> Right. >> is a solution, which is a good solution for some of the DNA of AWS. Also, Microsoft Azure is good. There has no chance to even get off the ship of that at Google, right? And these leaders with Google and it's not getting smaller, right? We didn't hear anything. I mean so much focused on data. Why do they focus so much on data? Because, data is the first step for AI. If AWS was doing a victory lap, data would've been done. They would own data, right? They would have a competitor to BigQuery Omni from the Google side to get data from the different clouds. There's crickets on that topic, right? So I think they know that they're catching up on the AI side, but it's really, really hard. It's not like in software where you can't acquire someone they could acquire in video. >> Not at Core Donovan. >> Might play a game, but that's not a good idea, right? So you can't, there's no shortcuts on the hardware side. As much as I'm a software guy and love software and don't like hardware, it's always a pain, right? There's no shortcuts there and there's nothing, which I think, has a new Artanium instance, of course, certainly, but they're not catching up. The distance is the same, yep. >> One of the things is funny, one of our guests, I think it was Tuesday, it was, it was right after Adam's keynote. >> Sure. >> Said that Adam Selipsky stood up on stage and talked about data for 52 minutes. >> Yeah. Right. >> It was timed, 52 minutes. >> Right. >> Huge emphasis on that. One of the things that Adam said to John Furrier when they were able to sit down >> Yeah >> a week or so ago at an event preview, was that CIOs and CEOs are not coming to Adam to talk about technology. They want to talk about transformation. They want to talk about business transformation. >> Sure, yes, yes. >> Talk to me in our last couple of minutes about what CEOs and CIOs are coming to you saying, "Holger, help us figure this out. We have to transform the business." >> Right. So we advise, I'm going quote our friends at Gartner, once the type A company. So we'll use technology aggressively, right? So take everything in the audience with a grain of salt, followers are the laggards, and so on. So for them, it's really the cusp of doing AI, right? Getting that data together. It has to be in the cloud. We live in the air of infinite computing. The cloud makes computing infinite, both from a storage, from a compute perspective, from an AI perspective, and then define new business models and create new best practices on top of that. Because, in the past, everything was fine out on premise, right? We talked about the (indistinct) size. Now in the cloud, it's just the business model to say, "Do I want to have a little more AI? Do I want a to run a little more? Will it give me the insight in the business?". So, that's the transformation that is happening, really. So, bringing your data together, this live conversation data, but not for bringing the data together. There's often the big win for the business for the first time to see the data. AWS is banking on that. The supply chain product, as an example. So many disparate systems, bring them them together. Big win for the business. But, the win for the business, ultimately, is when you change the paradigm from the user showing up to do something, to software doing stuff for us, right? >> Right. >> We have too much in this operator paradigm. If the user doesn't show up, doesn't find the click, doesn't find where to go, nothing happens. It can't be done in the 21st century, right? Software has to look over your shoulder. >> Good point. >> Understand one for you, autonomous self-driving systems. That's what CXOs, who're future looking, will be talked to come to AWS and all the other cloud vendors. >> Got it, last question for you. We're making a sizzle reel on Instagram. >> Yeah. >> If you had, like, a phrase, like, or a 30 second pitch that would describe re:Invent 2022 in the direction the company's going. What would that elevator pitch say? >> 30 second pitch? >> Yeah. >> All right, just timing. AWS is doing well. It's providing more depth, less breadth. Making things work together. It's catching up in some areas, has some interesting offerings, like the healthcare offering, the security data lake offering, which might change some things in the industry. It's staying the course and it's going strong. >> Ah, beautifully said, Holger. Thank you so much for joining Paul and me. >> Might have been too short. I don't know. (laughs) >> About 10 seconds left over. >> It was perfect, absolutely perfect. >> Thanks for having me. >> Perfect sizzle reel. >> Appreciate it. >> We appreciate your insights, what you're seeing this week, and the direction the company is going. We can't wait to see what happens in the next year. And, yeah. >> Thanks for having me. >> And of course, we've been on so many times. We know we're going to have you back. (laughs) >> Looking forward to it, thank you. >> All right, for Holger Mueller and Paul Gillan, I'm Lisa Martin. You're watching "theCube", the leader in live enterprise and emerging tech coverage. (upbeat music)

(upbeat music) >> Welcome back to theCUBE's live coverage of AWS re:Invent. Friends, it's good to see you. Lisa Martin here with Dave Vellante. This is our fourth day of CUBE wall-to-wall coverage, Dave. I can't believe it. And the expo hall is still going incredibly strong. >> Yeah, it is. It feels like the biggest re:Invent ever. I'm told it's almost as big as 2019. I don't know, maybe I was half asleep at 2019. That's very possible. But I'm excited because in 2017 Andy Jassy came on theCUBE and he said if Amazon had to do it all over again, if it knew then what it had now, we would've done the whole thing in containers or using Lambda, using serverless and using containers. Didn't have that opportunity back then. And I'm excited 'cause Rafay Systems is someone we've worked with a lot as an innovator in this space. >> Yep, and we're going to be talking with Rafay again. I think it's your 10th time Haseeb on the show >> Like once or twice. >> And a great customer who's going to talk about their serverless journey. Haseeb Budhani joins us once again, the CEO of Rafay. Great to see you. Rakesh Singh is here as well, the Head of Cloud and DevOps at Regeneron. Guys, it's great to have you on the program. How you feeling on day four of re:Invent? >> Excitement is as high as ever basically. >> Isn't it amazing? >> Rakesh: That's true. >> Haseeb: I just need some sleep. >> I'm with you on that. Caffeine and sleep. >> So many parties. So many meetings, oh my God. >> But the great thing is, Haseeb, that people want to engage with you. They're loving what Rafay is doing. You guys are a great testament to that, which we're going to uncover on the show. What are some of the things that you're hearing in the booth from customers? What's been some of the feedback? >> So firstly, as I said, it feels like the biggest one ever. I've been coming to re:Invent a long time and I mean, I know the numbers say it's not, but oh my God, this is a lot of people. Every time we've spoken over the last year and the point I always make to you, and we've spoken enough time about this is that enterprises are truly adopting this idea of Kubernetes containers, serverless, et cetera. And they're all trying to figure out what is the enterprise strategy for these things? They're thinking beyond technology and thinking operationalization of these technologies. And that's not the same thing. There's a toy and then there's the real thing. And that's not the same thing. And that's the gap that every enterprise customer I talked to and the booth traffic has been just amazing. I mean, but coming here I was thinking, my God, this is really expensive. And I'm thinking, wow, this is a great investment. Because we met such amazing companies who all essentially are saying exactly the same thing, which is as we go and productize and bring our high value applications to the modern infrastructure space, like Kubernetes, Lambda, et cetera, solving for the automation governance is really, really hard because, well, at one point, I guess when the economy was doing crazy well, I could keep hiring people, but I can't do that anymore either. So they're out looking for automation strategies that allow them to do more with the teams they have. And that's exactly what Rafay is here for. >> Yeah. Lisa, Adam Selipsky in his keynote, I love the, he said, "If you want to save money, the cloud is the place to do it." >> Exactly. Yep. Let's talk about Regeneron. Everyone knows it's a household word especially over the last couple of years, but talk about, Rakesh, Regeneron as a technology company that delivers life-saving pharmaceuticals. And where does cloud and Rafay fit into your strategy? >> So cloud has been a backbone of our compute strategy within Regeneron for a very long time now. The evolution from a traditional compute structure to more serverless compute has been growing at a rapid pace. And I would say like we are seeing exponential growth within the adaption of the compute within containers and Kubernetes world. So we've been on this journey for a long time and I think it's not stopping anytime soon. So we have more and more workload, which is running on Kubernetes containers and we are looking forward to our partnership with Rafay to further enhance it, as Haseeb mentioned, the efficiency is the key. We need to do more with less. Resourcing is critical and cloud is evolved from that journey that do more things in a more efficient manner. >> That was the original catalyst as we got to help our development team, be more productive. >> That's correct. >> Eliminate the heavy lifting. And then you started presumably doing some of the less heavy, but still heavy lifting and we talked off camera and then you're increasingly moving toward serverless. >> Rakesh: That's correct. >> Can you describe that journey? What that's like? >> So I think like with the whole adoption that things are taking a much faster pace. Basically we are putting more compute onto containers and the DevOps journey is increasingly getting more, more faster. >> Go ahead. 'Cause I want to understand where Rafay sits in this whole equation. I was talking about, I'm not a developer, but I was talking to developer yesterday trying to really understand the benefits of containers and serverless and I said, take me through what you have to do when you're using containers. He said, I got to build the container image then I got to deploy an EC2 instance where I got to choose and I got to allocate memory of the fence the app in a VM then I got to run the computing instance against the app. And then, oh by the way, I got to pay 'cause all that EC2 that whole time. Depending on how you approach serverless you're going to eliminate a lot of those steps. >> That is correct. So what we do is basically like in a traditional sense, the computer is sitting idle at quite a lot basically. >> But you're paying. >> And you're still paying for that. Serverless technologies allows us to use the compute as needed basis. So whenever you need it, it is available. You run your workload on that and after that it shuts down or goes to minimal state and you don't need to pay as much as your paying. >> And then where do you guys fit in that whole equation? >> Look, serverless has a paradigm. If you step back from the idea of containers versus Lambda or whatever functions. The idea should be that the list you just read out of what developers have to do. Here's what they really should do. They should write their code, they should check it in, and they never have to think about it again. That should be the case. If they want to debug their application, there should be a nice front end where they go and they interact with their application and that's it. What is Kubernetes? I don't care. That's the right answer. And we did not start this journey as an industry there because usually the initial adopters are developers who do the heavy lifting. Developers want to learn, they want to solve these problems. But then eventually the expectation is that the platform organization and an enterprise is going to own this platform for me so I can go back to doing my job, which is writing code. And that's where Rakesh's team comes in. So Rakesh team is building the standard at Regeneron. Whether you're writing a long-lasting app, which is going to run in a container or you're going to write an event-driven application, which is going to be a function, whatever. You write your app, we will give you the necessary tooling and plumbing to take care of all these things. And this is my problem. My being Rakesh. Rakesh is my customer. He has his customers. We as Rafay, A, we have to make Rakesh's system successful because we have to give them right automation to do all these things so that he can service hundred, or in his case, thousands and thousands of different individuals. But then collectively, we have to make sure that the developer experience is optimal so that truly they just write their code and EC2, they don't want to deal with this. In fact, on Monday evening, in the Kubernetes keynote by Barry Cooks, one of the things he said was that in a CIO sort of survey they did, CIO said, 80% of the time of developers is wasted on infrastructure stuff and not on innovation. We need to bring that 80% back so that a hundred percent of the work is on innovation and today it's not. >> And that's what you do. >> That's what we do. >> In your world as a developer, I only have to worry about my writing my code and what functions I'm going to call. >> That is correct. And it is important because the efficiencies of a developer need to be focused on doing the things which business is asking for. The 80% of the work like to make sure the things are secure, they're done the right way, the standards are followed, scanning part of it, that work if we can offload to a platform, for example, Rafay, saves a lot of works, a lot of work cycles from the developers perspective. >> Thank you for that. It was nice little tutorial on the benefits. >> Absolutely. So you transform the developer experience. >> That's correct. >> How does that impact Regeneron overall business? We uplevel that. Give me that view. >> So with that, like what happens, the key thing is the developers productivity increases. We are able to do more with less. And that is the key thing to our strategy that like with the increase in business demand, with the increase in lot of compute things, which we are doing, we need to do and hiring resources is getting more difficult than ever. And we need to make sure that we are leveraging platforms and tools basically to do, enable our developers to focus on key business activity rather than doing redundant things and things which we can leverage some other tooling and platform for that business. >> Is this something in terms of improving the developer experience and their productivity faster time to market? Is this accelerating? >> That's correct. >> Is this even like accelerating drug discovery in some cases? >> So COVID is like a great example for that. Like we were able to fast track our drug discovery and like we were able to turn it into an experience where we were able to discover new drugs and get it to the market in a much faster pace. That whole process was expedited using these tools and processes basically. So we are very proud of that. >> So my understanding is you're running Rafay with EKS. A lot of choices out there. Why? Why did you choose to go in that direction? >> So Regeneron has heavily invested in cloud recently, over the years basically. And then we are focusing on hybrid cloud now that we we are like, again, these multiple cloud providers of platforms which are coming in are strategies to focus on hybrid cloud and Rafay is big leader in that particular space where we felt that we need to engage or partner with Rafay to enable those capabilities, not just on AWS, but across the board. One single tool, one single process, one single knowledge base helps us achieve more efficiencies. >> Less chaos, less complexity. >> That's correct. Let's say when you're in customer conversations, which I know you've had many this week, but you probably do that all the time. Regeneron is a great use case for Rafay. It's so tangible, life sciences. We all get that, especially coming out of the pandemic. What do you say to customers are the top three differentiators of Rafay and why they should go Rafay on top of EKS? >> What's really interesting about these conversations is that, look, we have some pretty cool features in our product. Obviously we must have something interesting otherwise nobody would buy our product. And we have access management and zero trust models and cluster provisioning, all these very nice things. But it always comes down to exactly the same thing, which is every large enterprise that started a journey, independent or Rafay because they didn't know who we were, it's fine. Last year we were a young company, now we are a larger company and they all are basically building towards a roadmap which Rafay truly understands. And in my opinion, and I'm confident when I say this, we understand their life, their journey better than any other company in the market. The reason why we have the flurry of customers we have, the reason why the product has the capacity that it does is because for whatever reason, look, it's scale lock. That's for the history books. But we have complete clarity on what a pharmaceutical company or financial customers company or a high tech company the journey they will take to the cloud and automation for modern infrastructure, we get it. And what I'm selling them is the is the why, not the what. There's a lot of great answers for the what? What do we do? Rakesh doesn't care. I mean, he's trying to solve a bigger problem. He's trying to get his researchers to go faster. So then when they want to run a model, they should be able to do it right now. That's what he cares about. Then he looks for a tool to solve the business problem. And we figured out how to have that conversation and explain why Rafay helps him, essentially multiply the bandwidth that he has in his organization. And of course to that end we have some great technology/ But that's a secondary issue, the first, to me the why is more important than the what. And then we talk about how, which he has to pay us money. That's the how. But yeah, we get there too. But look, this is the important thing. Every enterprise is on exactly the same journey, Lisa. And that if you think about it from just purely economic efficiencies perspective that is not a good investment for our industry. If everybody's solving the same problem that's a waste of resources. Let's find a way to do, what is the point of the cloud? We used to all build data centers. That was not efficient. We all went to the cloud because it's more efficient to have somebody else, AWS, solve this problem for us so we can now focus on the next level problem. And then Rafay solving that problem so that he can focus on his drug discovery, not on Kubernetes. >> That's correct. It's all about efficiencies. Like doing things, learn from each other's experience and build upon it. So the things have been solved. One way you need to leverage that, reuse it. So the principles are the same. >> So then what's next? You had done an amazing job transforming the company. You're facilitating drug discovery faster than ever before. From an infrastructure perspective, what's next on your journey? >> So right now the roadmap what we have is basically talking about making sure that the workload are running more efficient, they're more secure. As we go into these expandable serverless technology, there are more challenging opportunities for us to solve. Those challenges are coming up. We need to make sure that with the new, the world we are living in, we are more securely doing stuff what we were doing previously. More efficiencies is also the key and more distributed. Like if we can leverage the power of cloud in doing more things on demand is on our roadmap. And I think that is where we are all driving. >> And when you said hybrid, you're talking about connecting to your on-prem tools and data? How about cross cloud? >> We are invested in multiple cloud platform itself and we are looking forward to leveraging a technology, which is truly cloud native and we can leverage things together on that. >> And I presume you're helping with that, obviously. >> Last question for both of you. We're making an Instagram reel. Think of this as a sizzle reel, like a 32nd elevator pitch. Question, first one goes to you, Rakesh. If you had a bumper sticker, you put it on, I don't know, say a DeLorean, I hear those are coming back. What would it say about Regeneron as a technology company that's delivering therapeutics? >> It's a tough question, but I would try my best. The bumper sticker would say, discover drug more faster, more efficient. >> Perfect. Haseeb, question about Rafay. What's the bumper sticker? If you had a billboard in on Highway 101 in Redwood City about Rafay and what it's enabling organizations enterprises across the globe to achieve, what would it say? >> I'll tell you what our customers say. So our customers call us the vCenter for Kubernetes and we all know what a vCenter is. We all know why vCenter's so amazingly successful because it takes IT engineers and gives them superpowers. You can run a data center. What is the vCenter for this new world? It us. So vCenter is obviously a trademark with our friends at VMware, so that's why I'm, but our customers truly call us the vCenter for Kubernetes. And I think that's an incredible moniker because that truly codifies our roadmap. It codifies what we are selling today. >> There's nothing more powerful and potent in the voice of the customer. Thank you both for coming on. Thank you for sharing the Regeneron story. Great to have you back on, Haseeb. You need a pin for the number of times you've been on theCUBE. >> At least a gold star. >> We'll work on that. Guys, thank you. We appreciate your time. >> Haseeb: Thank you very much. >> For our guests and for Dave Vellante, I'm Lisa Martin. You're watching theCUBE, the leader in live enterprise and emerging tech coverage. (upbeat music)

>>Hey everyone, it's Vegas. Welcome back. We know you've been watching all day. We appreciate that. We always love being able to bring you some great content on the Cube Live from AWS Reinvented 22. Lisa Martin here with Paul Gill. And Paul, we've had such a great event. We've, I think we've done nearly 70 interviews since we started on the Cube on >>Monday night. I believe we just hit 70. Yeah, we just hit 70. You must feel like you've done half of >>Them. I really do. But we've been having great conversations. There's so much innovation going on at aws. Nothing slowed them down during the pandemic. We love also talking about the innovation, the flywheel that is their partner ecosystem. We're gonna have a great conversation about that >>Next. And as we've said, going back to day one, the energy of the show is remarkable. And here we are, we're getting late in the afternoon on day two, and there's just as much activity, just as much energy out there as, as the beginning of the first day. I have no doubt day three will be the >>Same. I agree. There's been no slowdown. We've got two guests here. We're gonna have a great conversation. Chuck Kubota joins us, senior Director of Cloud Services, GTM at Red Hat. Great to have you on the program. And Ted Stanton, global head of Sales, red Hat at IBM at aws. Welcome. >>Thanks for having us. >>How's the show going so far for you guys? >>It's a blur. Is it? Oh my gosh. >>Don't they all >>Blur? Well, yes, yes. I actually like last year a bit better. It was half the size. Yeah. And a lot easier to get around, but this is back to normal, so >>It is back to normal. Yeah. And and Ted, we're hearing north of 50,000 in-person attendees. I heard a, something I think was published. I heard the second hand over like 300,000 online attendees. This is maybe the biggest one we ever had. >>Yeah, yeah, I would agree. And frankly, it's my first time here, so I am massively impressed with the overall show, the meeting with partners, the meeting with customers, the announcements that were made, just fantastic. And >>If you remember back to two years ago, there were a lot of questions about whether in-person conferences would ever return and the volume that we used to see them. And that appears to be >>The case. I think we, I think we've answered, I think AWS has answered that for us, which I'm very pleased to see. Talk about some of those announcements. Ted. There's been so much that that's always one of the things we know and love about re men is there's slew of announcements. You were saying this morning, Paul, and then keynote, you lost, you stopped counting after I >>Lost 15, I lost count for 15. I think it was over 30 announcements this morning alone >>Where IBM and Red Hat are concern. What are some of the things that you are excited about in terms of some of the news, the innovation, and where the partnership is going? >>Well, definitely where the partnership is going, and I think even as we're speaking right now, is a keynote going on with Aruba, talking about some of the partners and the way in which we support partners and the new technologies and the new abilities for partners to take advantage of these technologies to frankly delight our customers is really what most excites me. >>Chuck, what about you? What's going on with Red Hat? You've been there a long time. Sales, everything, picking up customers, massively transforming. What are some of the things that you're seeing and that you're excited >>About? Yeah, I mean, first of all, you know, as customers have, you know, years ago discovered it's not competitively advantageous to manage their own data centers in most cases. So they would like to, you know, give that responsibility to Amazon. We're seeing them move further up the stack, right? So that would be more beyond the operating system, the application platforms like OpenShift. And now we have a managed application platform built on OpenShift called Red Out OpenShift service on AWS or Rosa. And then we're even further going up the stack with that with, we just announced this week that red out OpenShift data science is available in the AWS marketplace, runs on Rosa, helps break the land speed record to getting those data models out there that are so important to make, you know, help organizations become more, much more data driven to remain competitive themselves. >>So talk about Rosa and how it differs from previous iterations of, of OpenShift. I mean, you had, you had an online version of OpenShift several years ago. What's different about Rosa? >>Yeah, so the old OpenShift online that was several years old, right? For one thing, wasn't a joint partnership between Amazon and Red Hat. So we work together, right? Very closely on this, which is great. Also, the awesome thing about Rosa, you know, if you think about like OpenShift for, for, as a matter of fact, Amazon is the number one cloud that OpenShift runs on, right? So a lot of those customers want to take advantage of their committed spins, their EDPs, they want one bill. And so Rosa comes through the one bill comes through the marketplace, right? Which is, which is totally awesome. Not only that or financially backing OpenShift with a 99.95% financially backed sla, right? We didn't have that before either, right? >>When you say financially backed sla, >>What do you mean? That means that if we drop below 99.95% of availability, we're gonna give you some money back, right? So we're really, you know, for lack of better words, putting our money where our mouth is. Absolutely right. >>And, and some of the key reasons that we even work together to build Rosa was frankly we've had a mirror of customers and virtually every single region, every single industry been using OpenShift on AWS for years, right? And we listened to them, they wanted a more managed version of it and we worked very closely together. And what's really great about Rosa too is we built some really fantastic integrations with some of the AWS native services like API gateway, Amazon rds, private link, right? To make it very simple and easy for customers to get started. We talked a little bit about the marketplace, but it's also available just on the AWS console, right? So customers can get started in a pay as you go fashion start to use it. And if they wanna move into a more commitment, more of a set schedule of payments, they can move into a marketplace private offer. >>Chuck, talk about, how about Rosen? How is unlocking the power of technology like containers Kubernetes for customers while dialing down some of the complexity that's >>There? Yeah, I mean if you think about, you know, kind of what we did, you know, earlier on, right? If you think about like virtualization, how it dialed down the complexity of having to get something rack, get a blade rack, stack cable and cooled every time you wanted to deploy new application, right? So what we do is we, our message is this, we want developers to focus on what matters most. And that's build, deploy, and running applications. Most of our customers are not in the business of building app platforms. They're not in the business of building platforms like banks, I, you know, financials, right? Government, et cetera. Right? So what we do is we allow those developers that are, enable those developers that know Java and Node and springing and what have you, just to keep writing what they know. And then, you know, I don't wanna get too technical here, but get pushed through way and, and OpenShift takes care of the rest, builds it for them, runs it through a pipeline, a CICD pipeline, goes through all the testing and quality gates and things like that, deploys it, auto wires it up, you know, to monitoring which is what you need. >>And we have all kinds of other, you know, higher order services and an ecosystem around that. And oh, by the way, also plugging into and taking advantage of the services like rds, right? If you're gonna write an application, a tradition, a cloud native application on Amazon, you're probably going to wanna run it in Rosa and consuming one of those databases, right? Like RDS or Aurora, what have you. >>And I, and I would say it's not even just the customers. We have a variety of ecosystem partners, both of our partners leveraging it as well. We have solos built their executive management system that they go ahead and turn and sell to their customers, streamlines data and collects data from a variety of different sources. They decided, you know, it's better to run that on top of Rosa than manage OpenShift themselves. We've seen IBM restack a lot of their software, you know, to run on top of Rose, take advantage of that capabilities. So lots of partners as well as customers are taking advantage of fully managed stack of that OpenShift that that turnkey capabilities that it provides >>For, for OpenShift customers who wanna move to Rose, is that gonna be a one button migration? Is that gonna be, can they run both environments simultaneously and migrate over time? What kind of tools are you giving them? >>We have quite, we have quite a few migration tools such as conveyor, right? That's one of our projects, part of our migration application toolkit, right? And you know, with those, there's also partners like Trilio, right? Who can help move, you know, applications back 'em up. In fact, we're working on a pretty cool joint go to market with that right now. But generally speaking, the OpenShift experience that the customers that we have know and love and those who have never used OpenShift either are coming to it as well via Rosa, right? The experience is primarily the same. You don't have to really retrain your people, right? If anything, there's a reduction in operational cost. We increase developer productivity cuz we manage so much of the stack for you. We have SRE site reliability engineers that are backing the platform that proactively get ahead of anything that may go wrong. So maybe you don't even notice if something went wrong, wrong. And then also reactively fixing it if it comes to that, right? So, you know, all those kind of things that your customers are having to do on their own or hire a contractor, a consultant, what have to do Now we benefit from a managed offering in the cloud, right? In Amazon, right? And your developers still have that great experience too, like to say, you know, again, break the land speed record to prod. >>I >>Like that. And, and I would actually say migrations from OpenShift are on premise. OpenShift to Rosa maybe only represents about a third of the customers we have. About another third of the customers is frankly existing AWS customers. Maybe they're doing Kubernetes, do it, the, you know, do it themselves. We're struggling with some of the management of that. And so actually started to lean on top of using Rosa as a better platform to actually build upon their applications. And another third, we have quite a few customers that were frankly new OpenShift customers, new Red Hat customers and new AWS customers that were looking to build that next cloud native application. Lots of in the startup space that I've actually chosen to go with Rosa. >>It's funny you mention that because the largest Rosa consumer is new to OpenShift. Oh wow. Right. That's pretty, that's pretty powerful, right? It's not just for existing OpenShift customers, existing OpenShift. If you're running OpenShift, you know, on EC two, right. Self-managed, there's really no better way to run it than Rosa. You know, I think about whether this is the 10th year, 10 year anniversary of re right? Right. Yep. This is also the 10 year anniversary of OpenShift. Yeah, right. I think it one oh came out about sometime around a week, 10 years ago, right? When I came over to Red Hat in 2015. You know, if you, if you know your Kubernetes history was at July 25th, I think was when Kubernetes ga, July 25th, 2015 is when it g you have >>A good >>Memory. Well I remember those days back then, right? Those were fun, right? The, we had a, a large customer roll out on OpenShift three, which is our OpenShift RE based on Kubernetes. And where do you think they ran Amazon, right? Naturally. So, you know, as you move forward and, and, and OpenShift V four came out, the, reduces the operational complexity and becomes even more powerful through our operator framework and things like that. Now they revolved up to Rosa, right? And again, to help those customers focus on what matters most. And that's the applications, not the containers, not those underlying implementation and technical details while critically important, are not necessarily core to the business to most of our customers. >>Tremendous amount of innovation in OpenShift in a decade, >>Pardon me? >>Tremendous amount of innovation in OpenShift in the >>Last decade. Oh absolutely. And, and and tons more to come like every day. Right. I think what you're gonna see more of is, you know, as Kubernetes becomes more, more and more of the plumbing, you know, I call 'em productive abstractions on top of it, as you mentioned earlier, unlocking the power of these technologies while minimizing, even hiding the complexity of them so that you can just move fast Yeah. And safely move fast. >>I wanna be sure we get to, to marketplaces because you have been, red Hat has made, has really stepped up as commitment to the AWS marketplace. Why are you doing that now and how are, how are the marketplaces evolving as a channel for you? >>Well, cuz our customers want us to be there, right? I mean we, we, we are customer centric, customer first approach. Our customers want to buy through the marketplace. If you're an Amazon, if you're an Amazon customer, it's really easy for you to go procure software through the marketplace and have, instead of having to call up Red Hat and get on paper and write a second check, right? One stop shop one bill. Right? That is very, very attractive to our customers. Not only that, it opens up other ways to buy, you know, Ted mentioned earlier, you know, pay as you go buy the drink pricing using exactly what you need right now. Right? You know, AWS pioneered that, right? That provides that elasticity, you know, one of the core tenants at aws, AWS cloud, right? And we weren't able to get that with the traditional self-managed on Red Hat paper subscriptions. >>Talk a little bit about the go to market, what's, you talked about Ted, the kind of the three tenants of, of customer types. But talk a little bit about the gtm, the joint go to market, the joint engineering, so we get an understanding of how customers engage multiple options. >>Yeah, I mean, so if you think about go to market, you know, and the way I think of it is it's the intersection of a few areas, right? So the product and the product experience that we work together has to be so good that a customer or user, actually many start talk, talking about users now cuz it's self-service has a more than likely chance of getting their application to prod without ever talking to a person. Which is historically not what a lot of enterprise software companies are able to do, right? So that's one of those biggest things we do. We want customers to just be successful, turn it on, get going, be productive, right? At the same time we wanna to position the product in such a way that's differentiating that you can't get that experience anywhere else. And then part of that is ensuring that the education and enablement of our customers and our partners as such that they use the platform the right way to get as much value out of as possible. >>All backed by, you know, a very smart field that ensures that the customer get is making the right decision. A customer success org, this is attached to my org now that we can go on site and team with our customers to make sure that they get their first workloads up as quickly as possible, by the way, on our date, our, our dime. And then SRE and CEA backing that up with support and operational integrity to ensure that the service is always up and available so you can sleep, sleep, sleep well at night. Right? Right. One of our PMs of, of of Rosa, he says, what does he say? He says, Rosa allows organizations, enables organizations to go from 24 7 operations to nine to five innovation. Right? And that's powerful. That's how our customers remain more competitive running on Rosa with aws, >>When you're in customer conversations and you have 30 seconds, what are the key differentiators of the solution that you go boom, boom, boom, and they just go, I get it. >>Well, I mean, my 32nd elevator pitch, I think I've already said, I'll say it again. And that is OpenShift allows you to focus on your applications, build, deploy, and run applications while unlocking the power of the technologies like containers and Kubernetes and hiding or minimizing those complexities. So you can do as fast as possible. >>Mic drop Ted, question for you? Sure. Here we are at the, this is the, I leave the 11th reinvent, 10th anniversary, 11th event. You've been in the industry a long time. What is your biggest takeaway from what's been announced and discussed so far at Reinvent 22, where the AWS and and its partner ecosystem is concerned? If you had 30 seconds or if you had a bumper sticker to put on your DeLorean, what would you say? >>I would say we're continuing to innovate on behalf of our customers, but making sure we bring all of our partners and ecosystems along in that innovation. >>Yeah. I love the customer obsession on both sides there. Great work guides. Congrats on the 10th anniversary of OpenShift and so much evolution, the customer obsession is really clear for both of you guys. We appreciate your time. You're gonna have to come back now. Absolutely. Absolutely. Thank you. All right. Thank you so much for joining us. For our guests and for Paul Gillin. I'm Lisa Martin. You're watching The Cube, the leader in live enterprise and emerging tech coverage.

>>Hello everyone. I'm John furry with the cube. We're here, live on the ground in Seattle, Washington at the Bellevue Hilton for thes marketplace seller conference. It's kind of like the one and a half inaugural event. They have their first event in 2019, and now with the pandemic, they're re rebooting it, but it's really all about AWS's marketplace and partner network coming together, creating an experience for how people will be buying software and how people will be selling through with their ecosystem. I'm Jennifer, the cube we're here with Megan. Fontain, who's the VP of cloud seek. Who's a seller and partner of AWS making great to see you. Thanks for coming on the cube. >>Thank you so much. It's, it's nice to be back in person and it's great to be with you. >>So watching the progression of how Amazon web services is evolving the marketplace and the partner network, you're starting to see some patterns. One is, I'll say they have their own stuff, and they're addressing that in the room, but they're really letting the thousand flowers bloom in the ecosystem. You hear that every year reinvent, even when Andy Jesse who's now the CEO of Amazon would say, no, we want the best of breed. Best product wins. Adam. Celeste's the same view, new leadership here, the combination of APN partner network with the marketplace now partner organization, APO is the big news. They're open. They're building an API service layer between their old marketplace to create this new model here. What's your, what's your, what's your take? What's your seller view? >>Yeah, so our marketplace and APN journey started with AWS about three years ago. And I think something that was the most profound to me out of the keynote this morning was that Chris Gus, who runs the API organization for ISVs talked about marketplace as the automation layer for how AWS will partner going forward. So an independent software vendor likes, we see that as opening up the door for two things. One, we get to leverage the great global scale and platform of AWS, but then secondly, it really brings together this idea that we will sell together to the end customer through the marketplace. And we will also sell as partners through co-sell and APM. >>You know, I love these kind of new, new development models around channel partners, ISVs at the end of the day, buyers are buying software. Yes. And they're cloud they're on a cloud journey. You're the VP of cloud at the company, your company seek take a minute to explain what your company's known for, what you guys do, your relationship with the market. You're an ISV. Yeah. Where are you guys? Cuz you guys ha have a good thing going on here. What do you guys do? What are you known for >>Sure. So seek is market leading software for advanced analytics for the manufacturing industry. So we're squarely in that industry. ISV, we sell SAS solutions to business buyers who want two things. One is they want technology that they can deploy quickly in their organizations drive that great business value ROI that drives the next level of investment in technology seeks unique offering in marketplace is that we've solved a lot of the challenges around that operational data in manufacturing. So manufacturing the industry, it's going through massive transformation, supply chain, disruption, or coming out of that, the globalization of manufacturing. And yet they have data that they've stored for 20, 30 years, that they're still in the first generation of trying to gain insights from. So that's why seek exists. It's really to bring the insights outta that data and then help the manufacturing customers we work with. Get to the cloud. >>What's interesting. I like your perspective and I want to follow up on that because data analytics used to be this thing. Well, I got a database. Yeah. You hosted on some storage and you got structured data, unstructured data. Okay. You got scale. But now you've got data platforms. You've got data mesh. I think Gardner actually has a different term, but gets a whole nother conversation. Data platforms are diverse. Yeah. They're pervasive. They're part of core infrastructure in cloud. It's not like a point solution anymore. It's gotta be integrated and customers are trying to work on, this is one of the hardest problems today. Yeah. In cloud transformation is the data layer, the relationship to other services. Yeah. >>So the Dataverse common data models. How APIs will interact with data. The trend there though is something that it is the ecosystem that will bring value to customers because no database is gonna serve every need. Right. And you think about the data layer. It really has to solve the problems whereby any application, any user, any insight can be generated almost seamlessly. And we're really on the first wave of that journey. But I think a, an element for seek that we certainly understand with our customers is that data alone is not an end objective, right? If it doesn't lead to a decision and an action and a workflow that humans can take to go drive and improvement in their business process, then you haven't tapped into the, you know, value of that technology >>When a buyer comes to the marketplace. Yeah. And they see your listing and solutions. Yes. What are they getting? What are they, what, what are they buying? >>So for seek, we've radically simplified that we, we really embrace this idea of simplification. We just sell, seek. So we have one seat listing in the AWS marketplace, all applications of seek they're all available there. We really leaned into the enterprise procurement models. So private offers are how we do the most of our business on marketplace. And it really went from a stage of experimentation where couple of customers, you know, what is this marketplace? Maybe we'll buy a few of our business applications there all the way through to now we're starting to see the demand side come through for customers where it's not just their security software or their DevOps or infrastructure software. They wanna buy solutions like seek including line of business buyers through a common catalog in the marketplace. >>Great. So I wanna ask you, cuz I want to give you the opportunity to give the pitch, the customer watching right now. Yeah. What's the pitch. Why seek, why this listing? Why should they hit the purchase button? I wish it was that easy. Why should they, why should they what's the pitch? Sure. >>So the first thing is seek through marketplace is a five clicks on three screens procurement experience. So compare that to months and months of back and forth with contracts and purchase orders and vendor set up, this is five less than five minutes, few screens, couple of clicks. And you can buy a multi-year subscription of seek to cover your entire enterprise. The second pitch is that it's a SaaS application that now can be deployed within hours. And then your users, your insights, your value is starting within the first couple hours. This is not a heavy lift it project. That's gonna take months. And then lastly seek specifically. So seek, because we're validated in the marketplace has been well architected for AWS cloud. We have that, you know, stamp of credibility. And we are leading in this space for manufacturing organizations who want cloud native secure software for analytics on their operational data. >>That's awesome. And customers have the challenge when they think about data, the use case security, yes governance, there's a variety of different use cases. What are you seeing as the top three use cases for C? >>So on the there's two lines of that question. The first is really the line of business use cases. And those are all about what outcome are we gonna drive? Are we gonna approve efficiency in your factory? Are we gonna reduce greenhouse gas emissions? Those are the kinds of use cases on the business side that that seek works with our customers on, on the it side. They wanna know that we can access data securely, that we can be part of an ecosystem where they can bring in aerations and algorithms and machine learning and new applications. And they also wanna know that we are sustainable. So meaning that we're driving constant innovation that is easy for them to consume and to gain access, to, to drive the next level of >>Improvement. My final AWS marketplace seller question is, yeah. How does the procurement process through marketplace help you and your customers what's in it for them? What value do the, does the customer get going through AWS procuring? >>So there's really really three. The first is you get a validated set of a catalog of solutions, right? That AWS says, you know, we undergo a rigorous process technically and commercially to be in the marketplace. The second thing for procurement effect of for procurement professionals is that they can leverage their cloud committed spend with AWS. So as they commit more expense and spend with AWS, now these marketplace purchases can be credited to that committed expense. We found that brings it and the business together with procurement to really work more collectively on that. And then the third piece is, imagine buying software where you don't need legal, you know, back and forth, back and forth because we're using a standard doula that thousands of other software companies are using in the marketplace today. >>I thought the keynote had a great line. We are not just a website of a catalog. We are a API service layer. Yes. With automation, more like a C I C D pipe lining. Yes. Of software. Yeah. And we are hearing more and more about software supply chain, more about scaling. This is kind of the future of procurement. Why wouldn't you buy direct, pick a few buttons and assemble your solutions at scale. >>There's some amount of tenant consequences that we've really learned as well. It brings it and the business closer together. So the it person wants to know, well, what is this seek, you know, piece of my AWS invoice. And so they get more engaged earlier in the process with procurement, with the business. And we've actually found that it brings internally for our customers, more people to the seat at the table around what are the applications and how will they govern them across the enterprise. >>Megan, I really appreciate you taking the time to speak with me here at the, at the conference, the seller S marketplace. I have to ask you, we were talking before we came on camera, you made a comment. I'd like you to share this comment with some commentary. You said I'm the VP of cloud transformation. And in the future that might title might not exist. Explain what you mean there, cuz I think this is kind of a telling moment about where we are at this point in the industry. >>Sure. So maybe it's, maybe it's funny to sort of envision a future where your role doesn't exist. But I think, you know, it's a to innovators do that, right? And for us we're a software company. That's going through the transition on-prem to SAS, you know, cloud native sets of applications, but in the pretty near term fore, really the next two years, all of our business will be SaaS and cloud. And so we won't need a separate VP or a separate team or separate function. It will just be how the business operates. >>Megan, thanks for running cue, Meghan bine, who is SI, she's a cloud VP of cloud transformation, VP of cloud, and she's successful. The title will go away and she'll move on to some other great valuable things like running the business. Thanks for coming on. Thank you so much. Okay. This is a cube here in Seattle. We're covering the eights marketplace seller conference. Part of APN merging with Amazon marketplace now called the APO Amazon partner organization. I'm John ER, with the cube. Thanks for watching.

>>Hey, welcome to the cubes coverage of splunk.com 21. I'm licensed Lisa Martin here. I've got some in Demis with me, a VP in APAC at Splunk Simon. Welcome to the program. >>So here we are, unfortunately at another virtual conference, but there has been a tremendous amount of there's an understatement, right? That we've seen in the last 18 months. We've seen this massive distribution of the workforce. We've seen huge increases in the threat landscape. We've seen things like solar winds, ransomware, increasing significantly acceleration and digital transformation. As companies tried to do whatever they could to enable digital workspaces. I wanted to unpack with you, uh, this 20, 21 state of security report that Splunk has. What are some of the key findings? And then we'll dig into some of the things that you're seeing in the APAC region. >>Yeah, look, we're excited about the report. It really highlighted, I think what a lot of organizations are going through. Um, one of the statistics that stood out for me was, um, 75% of infrastructure users are multi-cloud, but expecting to get that these expecting to increase to 87% of customers will be using multicloud environments. So the reason why that's important is the complexity that creates, uh, for cyber professionals in terms of trying to protect and defend, um, becomes exponentially harder with every new iteration or generation of infrastructure that companies consume. Um, most interesting. Um, we actually saw about a third of users or already using three cloud providers, but that is going to grow to 50% of, of customers will grow to being using three cloud providers or more within the next two years. So again, just that, that trend is going to continue. Uh, the leveraging of cloud infrastructures is a core way of businesses digitizing and modernizing. Um, and as cyber professionals, we have to think about how we're going to address that. >>Definitely. One of the things that I've been seeing and hearing in the last 18 months from a security perspective is that organizations say, you know, it's, it's really not a matter of if we get hit with ransomware, it's when, and I was really surprised to see the, that the state of security report found that 70% of security and it leaders worry they're going to be hit by a solar winds style attack. So the security landscape changing dramatically in the last 18 months. >>Yeah, absolutely. I think the, the, the research is feeding back what we were already hearing from the customers, um, around how this is a critical, uh, motion. And I think the one thing that we've seen as well as the board level agenda now, the risk and cyber has, and, uh, an organization's ability to react or recover. Um, when you have an, an event, um, is now becoming a high priority for organizations, we're seeing a lot of increased spending in cybersecurity as this becomes more and more, um, pretty for organizations for breasts. So yeah, the, the, on the ground experiences certainly matching what we're seeing in the research there. Um, and all of that is a data problem, right? Security is a data problem when something happens, how do I, how do I know? Where, how do I know when, how do I know what, and then how do I know what actions to take based upon the data that we need to get? >>So security being a data problem talked about the complexity of the multi-cloud environments, that percentages of organizations that are adopting that now what that trend is moving towards. Also complexity, I can imagine with data volumes only increasing, what are some of the key challenges that APAC organizations specifically are seeing as they are accelerating digital transformation and doing what they can to enable this distributed workforce? >>Yeah. So, so the hybrid multicloud environment you use, I guess, an indicator of increased complexity, I think we often overlook the fact that I think the hybrid world is here to stay as well. So nobody is a hundred percent cloud and nobody's a hundred percent on prem anymore. It's very much an environment now where I need to, um, I need to protect and defend across that entire surface area and increasingly with edge computing. Um, and as we're looking at, uh, organizations pushing, processing out to the edge of their, um, their operations and whether that's a distributed workforce or sensor-based environments, um, that becomes critical as well. We've got organizations like Intel, uh, that use us to basically monitor not only the cyber infrastructure, but the entire customer infrastructure that they're providing the fabric by census of course, environments, where you can imagine that the security becomes even more important. >>So I think that complexity and the data sources that are now being generated and the explosion of that is, is kind of critical. Um, for apex specifically, we saw some interesting trends we saw about 37% of organizations are using data to now support the compliance environments. Um, about 36% are bringing in non-security data. Um, and about 36%, it really started to use AI or machine learning tools to help them in that, that large scale data volume processing, um, that they weren't able to do before. And then lastly, security analytics really is starting to become, uh, a critical tool in the arsenal of cyber professionals with 34% of organizations saying they're already using some form of security analytics to help them address the threat actors. >>Is there a silver lining in terms of the it folks and the security folks becoming better collaborating better? Anything that you've seen in this report? >>Uh, well in the report, but also in the way that we're seeing SOC organizations use tools. Um, so, uh, the orchestration remediation and automation is a big industry trend, particularly when you look at things like implementing zero trust and how you would use that for, um, putting that additional layer of protection around an organization. Um, and that's where the ability to identify using machine learning or AI, uh, trends or events, understand the actions that need to be taken, understand the data sources that help address and remediate those and be able to automate that frees up the time and cyber security professionals. Um, and that's a critical step we're seeing because there's a shortage of skills and that's been an ongoing challenge, not only in Asia Pacific, but I think worldwide, >>Right. It has been a challenge worldwide. I was actually doing some cyber security work in the last month or so. And I read that this is the fifth consecutive year of that cybersecurity skills gap. So definitely a challenge there, but also if you flip the coin and opportunity. So in terms of some of those challenges that you mentioned, what are some of the key things that organizations and APAC can do to confront and combat those security challenges that are no doubt just only going to grow? >>Yeah, so I think, I think it's about, um, visibility, uh, and getting control, uh, and that's where again, data becomes key to that. So making sure you're capturing the right data, making sure that data is available, um, to your professionals, or if you're using a service provider, making sure that data is captured and available to the service providers, because that is increasingly what we see as the critical step to be able to, when something happens, how do you recover what your meantime to remediation, um, as, as the kind of critical motion. And so that's, again, what we could coming back to is security is a data problem. >>Security is a data problem. Got it. I do want to, uh, unpack a little bit some of the visibility challenges. That is one of the things that was identified. You mentioned that with so much complexity, multi-cloud being, uh, as, as hybrid work, something that's going to stay, what are some of the things that organizations can do and how can Splunk help to remove and mitigate those visibility challenges? >>So we've we just another interesting piece of research, um, it's called the state of data innovation report. Um, that really looked at the way organizations that categorize that data and organizations that actually build a data strategy, um, are actually much more prepared to react, uh, to engage and then to leverage that data for competitive differentiation in their markets. Um, and interestingly 33% of APAC organizations particularly rated their usage of data as better, uh, than, um, the industry average. Um, and 54% of APAC organizations already said they're using technologies like observability, which really helps them innovate around the data. Thinking about that next generation of service they're trying to provide. >>Did you see those are great numbers? It's about a third, um, are, are working on implementing technologies 54% were focused on that observability. Did you see any industries in particular that really leading edge there? Of course, every industry being affected by the pandemic, but I'm just curious if there were any, any ones that stood out >>So many great customer examples that we've got, uh, where we see organizations thinking differently about the way they engage their customers as a result of the digital transformation. Um, for me, one of the ones that stands out is Lenovo, um, you know, 50 billion plus multinational company servicing 180 markets around the world, um, when they looked at their observability approach and tried to understand how they were going to approach troubleshooting, um, when they had issues, if you think about the e-commerce experience for their consumers, um, they were able to reduce the, uh, reduce the downtime, um, and improve, um, the remediation time when there were incidents, uh, even though they had a 300% increase in traffic. And so for the ability for an organization to handle that kind of surge in digital, uh, interactions with their customers and do that to have clear visibility, using metrics, traces, and logs, to understanding exactly what's going on across complex, siloed multi, uh, services, uh, environments was, was critical to the Novo success. And, um, you know, not only from a cybersecurity point of view, but also having real time visibility into their infrastructure became critical as they service their customers. >>Right? One of the things I think we learned Simon during the pandemic, one of the many things is that access to real-time data real-time visibility real time, rather than visibility is no longer a nice to have it's. It was something that in the beginning was sort of organizations needing it to survive. Now organizations needing it to thrive it's that, that real-time visibility is really table stakes for organizations in any industry. >>W we, we kind of saw organizations go through three phases. There was the react phase. Then there was the adapt phase. So, you know, reacting was, first of all, kind of keep my people safe. The adapt phase was how am I going to work? And now we're seeing that next generation, which is really the evolve phase, right? Given the pandemic is still well COVID is still with us. Um, whether it's your, most of the countries, which are treating it more as an endemic or whether you're on the number of the countries still on that journey. And you're in Asia Pacific, we see different levels of, of vaccination status, different levels of, uh, companies starting to open up or countries starting to open up their borders and, um, life getting back to the, what is the new normal, um, all of that is still gonna evolve with a different way of working, moving forward, a different way of engaging our customers and our, our, uh, constituents, if you're a public sector, organization and data is underlying all of that. And for that, where we're kind of excited to be helping some of the largest organizations with that across, across the region, >>Did it is absolutely critical. You know, one of the things that we've also, I think observed in the last year and a half is the, the patients or the fuses of people getting smaller and smaller. So for organizations to have that visibility into data so that they can service their customers, whether it be healthcare or financial services or the tech sector for, for example, the access to that data is critical for brand reputation, reducing churn. And of course, ensuring that the customers are getting what they need to from that data. >>Yeah. A hundred percent. Um, gosh, so many examples across the region. One of the ones that jumps to mind is Flinders university, right? When, when they had to go remote, they had to go virtual, um, 25,000 students overnight, um, suddenly needing to be interacting by digital channels. How do you keep them secure? How do you keep them safe? How do you get insights, uh, in terms of the services that they need to, to protect that student population? >>So if you, if you kind of distill this down into data opportunities for organizations, we'll start with APAC, what do you think the top three data opportunities are of security as a data problem? What are the opportunities to combat that for an organization to be really successful? >>So I think, I think visibility is the first one. So making sure we're capturing the data, making sure we're capturing the right data. Um, and so the ability, uh, not only to capture the data, but to time sequence the data so I can actually understand what's happened. And when, um, the second then is, is, uh, control. Um, so ensuring that the right people have access to the right data, but we, we control that in a way that is specific to our organization. Um, and then lastly compliance. Um, and I think we're seeing a lot of new legislation starts coming around critical infrastructure, um, recognizing the importance of the digital infrastructure to the broader economy, um, and making sure that you're compliant with that critical infrastructure kind of requirements and environments as well as then the traditional regulated industries such as healthcare and financial services, um, become critical in that approach. So thinking about those three elements, and then thinking about how do I then use tools like automation and security analytics to really accelerate, um, the capabilities that we have as an organization. >>So observability control compliance, give me the 32nd pitch of how Splunk can help organizations achieve all three of those. >>So observability really is about getting insights into all of your environments. So, uh, it's all about metrics, traces and logs, which is about understanding exactly what's going on with every experience of every digital interaction I have with every customer and the ability to Splunk through that with zero, uh, zero sampling or full fidelity of that data is something we see our customers, particularly Navy, um, security, uh, look for me to it's all about orchestration and analytics. So how do I, how do I get that understanding that, that user behavior understanding the analytics around that, and then how machine learning becomes a critical part of that to help me scale my cyber infrastructure and defend. And then lastly resilience is really the core for all it systems in a digital world. Um, and being able to not only harden deliver resilient services like going over, I was able to do the 300% increase in their web traffic. Um, but also when something does go wrong and be able to remediate quickly become critical as well. >>Right? That quick remediation is because, like I was saying earlier, it's no longer a, if we get hit it's when organizations need to have that resilience baked in. Well, Simon, thank you for joining me, breaking down. Some of those reports what's going on in APAC, some of the trends and also some of the opportunities, security being a data problem, um, and organizations, what they can do to remediate that we appreciate your time. Thanks for having my pleasure for Simon Davies and Lisa Martin. You're watching the cubes coverage of splunk.com 21.

from around the globe it's thecube covering space and cyber security symposium 2020 hosted by cal poly hello everyone welcome to the space and cyber security symposium 2020 hosted by cal poly where the intersection of space and security are coming together i'm john furrier your host with thecube here in california i want to welcome our featured guest lieutenant general john f thompson with the united states space force approach to cyber security that's the topic of this session and of course he's the commander of the space and missile system center in los angeles air force base also heading up space force general thank you for coming on really appreciate you kicking this off welcome to the symposium hey so uh thank you very much john for that very kind introduction also uh very much thank you to cal poly uh for this opportunity to speak to this audience today also a special shout out to one of the organizers uh dustin brun for all of his work uh helping uh get us uh to this point uh ladies and gentlemen as uh as uh john mentioned uh i'm jt thompson uh i lead the 6 000 men and women of the united states space forces space and missile system center which is headquartered here at los angeles air force base in el segundo if you're not quite sure where that's at it's about a mile and a half from lax this is our main operating location but we do have a number of other operating locations around the country with about 500 people at kirtland air force base in albuquerque new mexico uh and about another 500 people on the front range of the rockies uh between colorado springs and uh and denver plus a smattering of other much smaller operating locations nationwide uh we're responsible for uh acquiring developing and sustaining the united states space force's critical space assets that includes the satellites in the space layer and also on the ground layer our ground segments to operate those satellites and we also are in charge of procuring launch services for the u.s space force and a number of our critical mission partners across the uh department of defense and the intelligence community um just as a couple of examples of some of the things we do if you're unfamiliar with our work we developed and currently sustained the 31 satellite gps constellation that satellite constellation while originally intended to help with global navigation those gps signals have provided trillions of dollars in unanticipated value to the global economy uh over the past three decades i mean gps is everywhere i think everybody realizes that agriculture banking the stock market the airline industry uh separate and distinct navigation systems it's really pervasive across both the capabilities for our department of defense and capabilities for our economy and and individuals billions of individuals across our country and the planet some of the other work we do for instance in the communications sector uh secure communications satellites that we design and build that link america's sons and daughters serving in the military around the world and really enable real-time support and comms for our deployed forces and those of our allies we also acquire uh infrared missile warning satellites uh that monitor the planet for missile launches and provide advanced warning uh to the u.s homeland and to our allies uh in case some of those missile launches are uh nefarious um on a note that's probably a lot closer to home maybe a lot closer to home than many of us want to think about here in the state of california in 2018 smc jumped through a bunch of red tape and bureaucracy uh to partner with the u.s forest service during the two of the largest wildfires in the state's history the camp and woolsey fires in northern california as those fires spread out of control we created processes on the fly to share data from our missile warning satellites those are satellites that are systems that are purpose built to see heat sources from thousands of miles above the planet and we collaborated with the us forest service so that firefighters on the ground uh could track those fires more in real time and better forecast fires and where they were spreading thereby saving lives and and property by identifying hot spots and flare-ups for firefighters that data that we were able to working with our contractors pass to the u.s forest service and authorities here in california was passed in less than an hour as it was collected to get it into the hands of the emergency responders the first responders as quickly as possible and doing that in an hour greatly surpassed what was available from some of the other assets in the airborne and ground-based fire spotters it was really instrumental in fighting those fires and stopping their spread we've continued uh that involvement in recent years using multiple systems to support firefighters across the western u.s this fall as they battled numerous wildfires that unfortunately continue working together with the u.s forest service and with other partners uh we like to make uh we like to think that we made a difference here but there's still a lot more work to go and i think that we should always be asking ourselves uh what else can space data be used for and how can we more rapidly get that space data to uh stakeholders so that they can use it for for purposes of good if you will how else can we protect our nation how else can we protect our friends and allies um i think a major component of the of the discussion that we will have throughout this conference is that the space landscape has changed rapidly and continues to change rapidly um just over the past few years uh john and i were talking before we went live here and 80 nations now have uh space programs 80 nearly 80 space faring nations on the planet um if you just look at one mission area that uh the department of defense is interested in and that's small launch there are currently over a hundred different small launch companies uh within the u.s industrial base vying for commercial dod and civil uh payload capabilities uh mostly to low earth orbit it's it's just truly a remarkable time if you factor in those things like artificial intelligence and machine learning um where we're revolutionary revolutionizing really uh the ways that we generate process and use data i mean it's really remarkable in 2016 so if you think about this four years ago uh nasa estimated that there were 28 terabytes of information transiting their space network each day and that was four years ago um uh obviously we've got a lot of desire to work with a lot of the people in the audience of this congress or in this conference uh we need to work with big thinkers like many of you to answer questions on how best we apply data analytics to extract value and meaning from that data we need new generations of thinkers to help apply cutting edge edge theories of data mining cyber behaviorism and internet of things 2.0 it's just truly a remarkable time uh to be in the space business and the cyber aspects of the states of the space business are truly truly daunting and important to uh to all of us um integrating cyber security into our space systems both commercial and government is a mandate um it's no longer just a nice to have as the us space force and department of the air force leadership has said many times over the past couple of years space is becoming congested and contested and that contested aspect means that we've got to focus on cyber security uh in the same way that the banking industry and cyber commerce focus on uh cyber security day in and day out the value of the data and services provided is really directly tied to the integrity and availability of that data and services from the space layer from the ground control segments associated with it and this value is not just military it's also economic and it's not just american it's also a value for the entire world particularly particularly our allies as we all depend upon space and space systems your neighbors and friends here in california that are employed at the space and missile system center uh work with network defenders we work with our commercial contractors and our systems developers um our international allies and partners to try and build as secure and resilient systems as we can from the ground up that keep the global commons of space free and open for exploration and for commerce um as john and i were talking earlier before we came online there's an aspect of cyber security for space systems especially for some of our legacy systems that's more how do we bolt this on because we fielded those space systems a number of years ago and the the challenges of cyber security in the space domain have grown so we have a part that we have to worry about bolting it on but then we have to worry about building it in as we as we field new systems and build in a flexibility that that realizes that the cyber threat or the cyber security landscape will evolve over time it's not just going to be stagnant there will always be new vulnerabilities and new threat vectors that we always have to look at look uh as secretary barrett who is our secretary of the air force likes to say most americans use space before they have their first cup of coffee in the morning the american way of life really depends on space and as part of the united states space force we work with defense leaders our congress joint and international military teammates and industry to ensure american leadership in space i really thank you for this opportunity to address the audience today john and thanks so much to cal poly for letting me be one of the speakers at this event i really look forward to this for uh several months and so with that i look forward to your questions as we kind of move along here general thank you very much for the awesome uh introductory statement uh for the folks watching on the stream brigadier general carthan is going to be in the chat answering any questions feel free to chat away he's the vice commander of space and missile systems center he'll be available um a couple comments from your keynote before i get to my questions because it just jumped in my head you mentioned the benefits of say space but the fires in california we're living that here that's really real time that's a benefit you also mentioned the ability for more people launching payloads into space and i only imagine moore's law smaller faster cheaper applies to rockets too so i'm imagining you have the benefits of space and you have now more potential objects flying out sanctioned and maybe unsanctioned so you know is it going to be more rules around that i mean this is an interesting question because it's exciting space force but for all the good there is potentially bad out there yeah so i i john i think the uh i think the basics of your question is as space becomes more congested and contested is there a need for more international norms of how satellites fly in space what kind of basic features satellites have to perhaps deorbit themselves what kind of basic protections does do all satellites should all satellites be afforded as part of a peaceful global commons of space i think those are all fantastic questions and i know that u.s and many uh allied policy makers are looking very very hard at those kinds of questions in terms of what are the norms of behavior and how we uh you know how how we field and field is the military term but you know how we uh populate uh using civil or uh commercial terms uh that space layer at different altitudes uh low earth orbit mid mid-earth orbit geosynchronous earth orbit different kinds of orbits uh what the kind of mission areas we accomplish from space that's all things that need to be definitely taken into account as uh as the place gets a little bit not a little bit as the place gets increasingly more popular day in and day out well i'm super excited for space force i know that a new generation of young folks are really interested in it's an emerging changing great space the focus here at this conference is space and cyber security intersection i'd like to get your thoughts on the approach that space force is taking to cyber security and how it impacts our national goals here in the united states yeah yeah so that's a that's a great question john let me let me talk about in two uh two basic ways but number one is and and i know um some people in the audience this might make them a little bit uncomfortable but i have to talk about the threat right um and then relative to that threat i really have to talk about the importance of uh of cyber and specifically cyber security as it relates to that threat um the threats that we face um really represent a new era of warfare and that new era of warfare involves both space and cyber uh we've seen a lot of action in recent months uh from certain countries notably china and russia uh that have threatened what i referred to earlier as the peaceful global commons of space for example uh it through many unclassified sources and media sources everybody should understand that um uh the russians have been testing on orbit uh anti-satellite capabilities it's been very clear if you were following just the week before last the department of defense released its uh 2020 military and security developments involving the people's republic of china um uh and uh it was very clear that china is developing asats electronic jammers directed energy weapons and most relevant to today's discussion offensive cyber uh capabilities there are kinetic threats uh that are very very easy to see but a cyber attack against a critical uh command and control site or against a particular spacecraft could be just as devastating to the system and our war fighters in the case of gps and important to note that that gps system also impacts many civilians who are dependent upon those systems from a first response perspective and emergency services a cyber attack against a ground control site could cause operators to lose control of a spacecraft or an attacker could feed spoofed data to a system to mislead operators so that they send emergency services personnel to the to the wrong address right attacks on spacecraft on orbit whether directly via a network of intrusion or enabled through malware introduced during the systems production uh while we're building the satellite can [ __ ] or corrupt the data denial of service type attacks on our global networks obviously would disrupt our data flow and interfere with ongoing operations and satellite control i mean if gps went down i you know i hesitate to say it this way because we might elicit some screams from the audience but if gps went down a starbucks wouldn't be able to handle your mobile order uber drivers wouldn't be able to find you and domino's certainly certainly wouldn't be able to get there in 30 minutes or less right so with a little bit of tongue-in-cheek there from a military operations perspective it's dead serious um uh we have become accustomed in the commercial world to threats like lance ransomware and malware and those things have unfortunately become commonplace in commercial terrestrial networks and computer systems however what we're seeing is that our adversaries with the increased competition in space these same techniques are being retooled if you will to use against our national security space systems uh day in and day out um as i said during my opening remarks on the importance of cyber the value of these systems is directly tied to their integrity if commanders in the field uh firefighters in california or baristas in in starbucks can't trust the data they see they're receiving then that really harms their decision-making capabilities one of the big trends we've recently seen is the mood move towards proliferated leo uh uh constellations obviously uh spacex's uh starlink uh on the commercial side and on the military side the work that darpa and my organization smc are doing on blackjack and casino as well as some space transport layer constellation work that the space development agency is designing are all really really important types of mesh network systems that will revolutionize how we plan and field warfighting systems and commercial communications and internet providing systems but they're also heavily reliant on cyber security uh we've got to make sure that they are secured to avoid an accident or international damage uh loss of control of these constellations really could be catastrophic from both a mission perspective or from uh you know satellites tumbling out of low earth orbit perspective another trend is introductions in artificial intelligence and machine learning on board spacecraft or at the edge our satellites are really not so much hardware systems with a little software anymore in the commercial sector and in the defense sector they're basically flying boxes full of software right and we need to ensure the data that we're getting out of those flying boxes full of software are helping us base our decisions on accurate data and algorithms govern governing the right actions and that those uh that those systems are impervious to the extent possible uh to nefarious uh modifications so in summation a cyber security is vital element of everything in our national security space goals and i would argue for our national uh goals uh writ large including uh economic and information uh uh dimensions uh the space force leadership at all levels uh from uh some of the brand new second lieutenants that general raymond uh swore into the space force this morning uh ceremonially from the uh air force association's air space and cyberspace conference uh to the various highest levels general raymond uh general d t thompson myself and a number of other senior leaders in this enterprise we've got to make sure that we're all working together to keep cyber security at the forefront of our space systems because it they absolutely depend on it you know you mentioned uh hardware software threats opportunities challenges i want to ask you because you you got me thinking of the minute there around infrastructure i mean we've heard critical infrastructure you know grids here on on earth you're talking about critical infrastructure a redefinition of what critical infrastructure is an extension of what we have so i'd love to get your thoughts about space force's view of that critical infrastructure vis-a-vis the threat vectors because you know the term threat vectors has been kicked around in the cyber space oh yeah threat vectors they're always increasing the surface area well if the surface area is from space it's an unlimited surface area so you got different vectors so you got new critical infrastructure developing real time really fast and you got an expanded threat vector landscape putting that in perspective for the folks that aren't really inside the ropes on these critical issues how would you explain this and how would you talk about those two things well so i tell you um i just like um uh just like uh i'm sure people in the security side or the cyber security side of the business in the banking industry feel they feel like it's uh all possible threat vectors represent a dramatic and protect potentially existential threat to all of the dollars that they have in the banking system to the financial sector on the department of defense side we've got to have sort of the same mindset um that threat vector from to and through space against critical space systems ground segments the launch enterprise or transportation uh to orbit and the various different uh domains within uh within space itself like i mentioned before uh leo mio and geo-based satellites with different orbits all of the different mission areas that are accomplished from space that i mentioned earlier some that i didn't mention like weather tactical or wide band communications uh various new features of space control all of those are things that we have to worry about from a cyber security uh threat perspective and it's a it's a daunting challenge right now right yeah it's awesome and one of the things we've been following on the hardware side here in the on the ground is the supply chain we've seen you know malware being you know really put into really obscure hardware who manufactures it as being outsourced obviously government has restrictions but with the private sector uh you mentioned china and and the us kind of working together across these these peaceful areas but you got to look at the supply chain how does the supply chain the security aspect impact the mission of the u.s space force yeah yeah so so um how about another um just in terms of an example another kind of california-based historical example right um the very first u.s satellite uh explorer one was built by uh the jet propulsion uh laboratory folks uh not far from here in el segundo up in uh up in pasadena um that satellite when it was first built in the late 50s uh weighed a little bit over 30 pounds and i'm sure that each and every part was custom made and definitely made by u.s companies fast forward to today the global supply chain is so tightly coupled and frankly many industries are so specialized almost specialized regionally around the planet we focus every day to guarantee the integrity of every component that we put in our space systems is absolutely critical to the operations of those satellites and we're dependent upon them but it becomes more difficult and more difficult to understand the the heritage if you will of some of the parts that are used the thousands of parts that are used in some of our satellites that are literally school bus sized right the space industry especially uh national security space sector um uh is relatively small compared to other commercial industries and we're moving to towards using more and more parts uh from non-us companies uh cyber security and cyber awareness have to be baked in from the beginning if we're going to be using parts that maybe we don't necessarily um understand 100 percent like an explorer one uh the the lineage of that particular part the environmental difficulties in space are well known the radiation environment the temperature extremes the vacuum those require specialized component and the us military is not the only uh customer in that space in fact we're definitely not the dominant customer uh in space anymore all those factors require us along with our other government partners and many different commercial space organizations to keep a very close eye on our supply chains from a quality perspective a security perspective and availability um there's open source reporting on supply training intrusions from um many different breaches of commercial retailers to the infectious spread of uh you know compromised patches if you will and our adversaries are aware of these techniques as i mentioned earlier with other forms of attack considering our supply chains and development networks really becomes fair game for our adversaries so we have to uh take that threat seriously um between the government and industry sectors here in the u.s we're also working with our industry partners to enact stronger defenses and assess our own vulnerabilities last fall we completed an extensive review of all of our major contracts here at space and missile system center to determine the levels of cyber security requirements we've implemented across our portfolio and it sounds really kind of you know businessy geeky if you will you know hey we looked at our contracts to make sure that we had the right clauses in our contracts to address cyber security as dynamically as we possibly could and so we found ourselves having to add new language to our contracts to require system developers to implement some more advanced uh protective measures in this evolving cyber security environment so that data handling and supply chain perspective uh protections um from contract inception to launch and operations were taken into account uh cyber security really is a key performance parameter for us now it's as important as the the mission performance of the system it's as important as cost it's as important as schedule because if we deliver the perfect system on time and on cost uh it can perform that missile warning or that communications mis mission perfectly but it's not cyber secure if it doesn't have cyber protections built into it or the ability to implement mitigations against cyber uh threats then we've essentially fielded a shoe box in space that doesn't do the k the the war fighter or the nation uh any good um supply chain risk management is a is a major challenge for us uh we're doing a lot to coordinate with our industry partners uh we're all facing it head on uh to try and build secure and trusted components uh that keep our confidence as leaders firefighters and baristas uh as the case may be uh but it is a challenge and we're trying to rise to that challenge you know this so exciting this new area because it really touches everything you know talk about geeking out on on the tech the hardware the systems but also you put your kind of mba hat on you go what's the roi of the extra development and how you how things get built because the always the exciting thing for space geeks is like you're building cool stuff people love it's it's exciting but you still have to build and cyber security has proven that security has to be baked in from the beginning and be thought as a system architecture so you're still building things which means you've got to acquire things you got to acquire parts you got to acquire build software and and sustain it how is security impacting the acquisition and the sustainment of these systems for space yeah from initial development uh through planning for the acquisition design development fielding or production fielding and sustainment it impacts all aspects of of the life cycle john uh we simply especially from the concept of baking in cyber security uh we can't wait until something is built and then try and figure out how to make it cyber secure so we've moved way further uh towards working side by side with our system developers to strengthen cyber security from the very beginning of a system's development cyber security and the resilience associated with it really have to be treated as a key system attribute as i mentioned earlier equivalent with data rates or other metrics of performance we like to talk in uh in the space world about uh mission assurance and mission assurance has always you know sort of taken us as we as we technically geek out right mission assurance has always taken us to the will this system work in space right can it work in a vacuum can it work in you know as it as it uh you know transfers through uh the van allen radiation belt or through the the um the southern hemisphere's electromagnetic anomaly right will it work out in space and now from a resiliency perspective yeah it has to work in space it's got to be functional in space but it's also got to be resistant to these cyber security threats it's it's not just i think uh general dt thompson quoted this term it's not just widget assurance anymore it's mission assurance um uh how does that satellite uh operator that ground control segment operate while under attack so let me break your question a little bit uh just for purposes of discussion into into really two parts uh cyber uh for cyber security for systems that are new and cyber security uh for systems that are in sustainment or kind of old and legacy um obviously there's cyber vulnerabilities that threaten both and we really have to employ different strategies for for defense of of each one for new systems uh we're desperately trying to implement across the department of defense in particular in the space world a kind of a devsecops methodology and practice to delivering software faster and with greater security for our space systems here at smc we have a program called enterprise ground services which is a tool kit basically a collection of tools for common command and control of different satellite systems egs as we call it has an integrated suite for defensive cyber capabilities network operators can use these tools to gain unprecedented insight to data flows and to monitor space network traffic for anomalies or other potential indicators of of bad behavior malicious behavior if you will um uh it's rudimentary at this point but because we're using devsecops and that incremental development approach as we scale it it just becomes more and more capable you know every every product increment that we field here at uh at uh la air force base uh uh we have the united space space forces west coast software factory which we've dubbed kobayashi maru they're using those agile devops uh software development practices uh to deliver uh space awareness software uh to the combined space operations center uh affectionately called the csp that c-spock is just down the road uh from cal poly uh there in san luis obispo at vandenberg air force base they've securely linked the c-spock with other space operation centers around the planet our allies australia canada and the uk uh we're partnering with all of them to enable secure and enhanced combined space operations so lots of new stuff going on as we bake in new development uh capabilities for our our space systems but as i mentioned earlier we've got large constellations on satellite of satellites on orbit right now some of them are well in excess of a decade or more old on orbit and so the design aspects of those satellites are several decades old and so but we still have to worry about them because they're critical to our space capabilities um we've been working with an air force materiel command organization uh called crows which stands for the cyber resiliency office for uh weapon systems to assess all of those legacy platforms from a cyber security perspective and develop defensive strategies and potential hardware and software upgrades to those systems to better enable them to to live through this increasingly cyber security uh concerned era that we currently live in our industry partners have been critical to to both of those different avenues both new systems and legacy systems we're working closely with them to defend and upgrade uh national assets and develop the capabilities to do similar with uh with new national assets coming online the vulnerabilities of our space systems really kind of threaten the way we've done business in the past both militarily and in the case of gps economically the impacts of that cyber security risk are clear in our acquisition and sustainment processes but i've got to tell you it that as the threat vectors change as the vulnerabilities change we've got to be nimble enough agile enough to be able to bounce back and forth we can't just say uh many people in the audience are probably familiar with the rmf or the risk management framework approach to um to reviewing uh the cyber security of a system we can't have program managers and engineers just accomplish an rmf on a system and then hey high five we're all good uh it's a journey not a destination that's cyber security and it's a constant battle rhythm throughout a weapon systems life cycle not just a single event i want to get to this commercial business needs and your needs on the next question but before i go there you mentioned the agile and i see that clearly because when you have accelerated innovation cycles you've got to be faster and we saw this in the computer industry mainframes mini computers and then when you started getting beyond me when the internet hit and pcs came out you saw the big enterprises the banks and and government start to work with startups it used to be a joke in the entrepreneurial circles is that you know there's no way if you're a startup you're ever going to get a contract with a big business enterprise now that used to be for public sector and certainly uh for you guys so as you see startups out there and there's acquisition involved i'm sure would love to love to have a contract with space force there's an roi calculation where if it's in space and you have a sustainment view edit software you might have a new kind of business model that could be attractive to startups could you share your thoughts on the folks who want to be a supplier to you uh whether they're a startup or an existing business that wants to be agile but they might not be that big company we are john that's a fantastic question we are desperately trying to reach out to to those new space advocates to those startups to those um what we sometimes refer to within the department of defense those non-traditional uh defense contractors a couple of things just for uh thinking purposes on some of the things that we're trying to highlight um uh three years ago we created here at uh space and missile system center uh the space enterprise consortium uh to provide a platform uh a contractual vehicle really to enable us to rapidly prototype uh development of space systems and to collaborate uh between the u.s space force uh traditional defense contractors non-traditional vendors like startups and even some academic institutions uh spec as we call it space enterprise consortium uses a specialized contracting tool to get contracts uh awarded quickly many in the audience may be familiar with other transaction agreements and that's what spec is based on and so far in just three years spec has awarded 75 different uh prototyping contracts worth over 800 million dollars with a 36 reduction in time to award and because it's a consortium based competition for um for these kinds of prototyping efforts the barrier to entry for small and non-traditional for startups even for academic institutions to be able to compete for these kinds of prototypings is really lowered right um uh these types of partnerships uh that we've been working through on spec uh have really helped us work with smaller companies who might not have the background or expertise in dealing with the government or in working with cyber security uh for their systems both their developmental systems and the systems that they're designing and trying to build we want to provide ways for companies large and small to partner together and support um uh kind of mutually beneficial uh relationships between all um recently uh at the annual air force association uh conference that i mentioned earlier i moderated a panel with several space industry leaders uh all from big traditional defense contractors by the way and they all stressed the importance of building bridges and partnerships uh between major contractors in the defense industry and new entrants uh and that helps us capture the benefits of speed and agility that come with small companies and startups as well as the expertise and specialized skill sets of some of those uh larger contractors uh that we rely on day in and day out advanced cyber security protections and utilization of secure facilities are just a couple of things that i think we could be prioritizing more so in those collaborations as i mentioned earlier the spec has been very successful in awarding a number of different prototyping contracts and large dollar values and it's just going to get better right there's over 400 members of the space enterprise consortium 80 of them are non-traditional kinds of vendors and we just love working with them another thing that many people in the audience may be familiar with in terms of our outreach to innovators uh if you will and innovators that include uh cyber security experts is our space pitch day events right so we held our first event last november in san francisco uh where we awarded over a two-day period about 46 million dollars to 30 different companies um that had potentially game-changing ideas these were phase two small business innovative research efforts uh that we awarded with cash on the spot uh we're planning on holding our second space pitch day in the spring of 2021. uh we're planning on doing it right here in los angeles uh covent 19 environment permitting um and we think that these are you know fantastic uh uh venues for identifying and working with high-speed startups startups and small businesses who are interested in uh really truly partnering with the us air force it's a as i said before it's a really exciting time to be a part of this business uh and working with the innovation economy uh is something that the department of defense uh really needs to do in that um the innovation that we used to think was ours you know that 80 percent of the industrial-based innovation that came from the department of defense uh the the script has been flipped there and so now more than 70 percent uh particularly in space innovation uh comes from the commercial sector not from uh not from the defense business itself and so um that's a tsunami of uh investment and a tsunami of uh capability and i need to figure out how to get my surfboard out and ride it you know what i mean yeah i mean it's one of those things where the flip the script has been flipped but it's exciting because it's impacting everything are you talking about systems architecture you're talking about software you're talking about a business model you talk about devsecops from a technical perspective but now you have a business model innovation all the theaters of uh are exploding in innovation technical business personnel this brings up the workforce challenge you've got the cyber needs for the u.s space force there's probably a great roi model for new kinds of software development that could be priced into contracts that's a entrepreneurial innovation you got the the business model theater you've got the personnel how does the industry adopt and change you guys are clearly driving this how does the industry adjust to you yeah so um i think a great way to answer that question is to just talk about the kind of people that we're trying to prioritize in the u.s space force from a from an acquisition perspective and in this particular case from a from a cyber security perspective as i mentioned earlier it's the most exciting time to be in space programs uh really since the days of apollo um uh you know just to put it in terms that you know maybe have an impact with the audience uh from 1957 until today approximately 9 000 satellites uh have been launched from the various space faring countries around the planet uh less than two thousand of those nine thousand are still up on orbit and operational and yet in the new space regime um players like spacex have plans to launch you know 12 000 satellites for some of their constellations alone it really is a remarkable time in terms of innovation and fielding of space capabilities and all of those space capabilities whether they're commercial civil or defense are going to require appropriate cyber security uh protections it's just a really exciting time uh to be working in stuff like this and so uh folks like the folks in this audience who have a passion about space and a passion about cyber security are just the kind of people that we want to work with because we need to make sure our systems are are secure and resilient we need folks that have technical and computing expertise engineering skills to be able to design cybersecure systems that can detect and mitigate attacks uh but we also as you alluded to we need people that have that business and um you know business acumen human networking background so that we can launch the startups and work with the non-traditional businesses uh help to bring them on board help to secure both their data and our data and uh and and make sure our processes and systems are are free as much as possible from uh uh from attack um for preparation for for audience members who are young and maybe thinking about getting into this uh trade space um you gotta be smart on digital networking uh you gotta understand basic internet protocols concepts uh programming languages uh database design uh learn what you can from penetration or vulnerability testing and and uh risk assessment i will tell you this and i don't think he will i know he will not mind me telling you this but you've got to be a lifelong learner and so two years ago i'm at home one evening and i get a phone call on my cell phone and it's my boss the commander of air force space command uh general j raymond who is now currently the chief of space operations and he is on temporary duty flying overseas he lands where he's going and he first thing he does when he lands is he calls me and he goes jt um while i was traveling um i noticed that there were e-books available on the commercial airliner i was traveling on and there was an e-book on something called scrumming and agile devsecops and i read it have you read it um and i said no sir but if you tell me what the title of the book is i will read it and so i got to go to my staff meeting um you know the very next week the next time we had a staff meeting and tell everybody in the stab meeting hey if the four star and the three star can read the book about scrumming then i'm pretty sure all of you around this table and all our lieutenants and our captains our gs13s all of our government employees can get smart on uh the scrumming development process and interestingly as another side i had a telephone call with him last year during the holidays where he was trying to take some leave and i said sir what are you up to today are you are you you know making eggnog for the event tonight or whatever and the chief of space operations told me no i'm trying to teach myself python i'm at lesson two and it's not going so well but i'm i'm gonna figure this out and so that kind of thing if the chief of staff or the you know the the the chief of space operations can prioritize scrumming and python language and innovation in his daily schedule then we're definitely looking for other people who can do that and we'll just say lower levels of rank uh throughout our entire space force enterprise um look i i we don't need to need people that can code a satellite from scratch but we need to know we need to have people that have a basic grasp of the programming basics and cyber security requirements and that can turn those things into into meaningful actions obviously in the space domain things like basic physics and orbital mechanics are also important uh space is not an intuitive uh domain so under understanding how things survive uh on orbit is really critical to making the right design and operational decisions and you know i know there's probably a lot because of this conference i know there's a probably a whole lot of high-speed cyber security experts out in the audience and i need those people in the u.s space force the the country is counting on it but i wouldn't discount having people that are just cyber aware or cyber savvy right i have contracting officers and logisticians and program managers and they don't have to be high-end cyber security experts but they have to be aware enough about it to be able to implement cyber security protections um into our space system so the skill set is is really really broad um our adversaries are pouring billions of dollars into uh define designing uh and fielding offensive and destructive space cyber security weapons right they've repeatedly shown really a blatant disregard of safety and international norms for good behavior on orbit and the cyber security aspects of our space systems is really a key battleground going forward so that we can maintain that as i mentioned before peaceful uh global commons of space we really need all hands on deck if you're interested in helping in uniform if you're interested in helping uh not in uniform uh but as a government employee a commercial or civil employee to help us make cyber security more important uh or more cape more able to be developed for our space systems then we'd really love to uh to work with you or have you on the team to build that safe and secure future for our space systems lieutenant general john thompson great insight thank you for sharing all that awesome stories too and motivation for the young next generation the united states space force approach of cyber security really amazing talk thank you for your time final parting question is as you look out and you had your magic wand what's your view for the next few years in terms of things that we could accomplish it's a super exciting time what do you hope for so um um first of all john thanks to you and and thanks to cal poly uh for the invitation and and thanks to everybody for uh for their interest in cyber security especially as it relates to space systems that's here at the conference um uh there's a quote and i'll read it here uh from uh bernard schriever who was the uh the founder if you will uh a legend in uh dod space the founder of the western development division which was a predecessor organization to space and missile systems center general shrever i think captures the essence of what how we see the next couple of years the world has an ample supply of people who can always come up with a dozen good reasons why new ideas will not work and should not be tried but the people who produce progress are breed apart they have the imagination the courage and the persistence to find solutions and so i think if you're hoping that the next few years of space innovation and cyber security innovation are going to be a pony ride at the county fair then perhaps you should look for another line of work because i think the next few years in space and cyber security innovation are going to be more like a rodeo um and a very dynamic rodeo as it goes it is a an awesome privilege to be part of this ecosystem it's really an honor for me to um to be able to play some small role uh in the space ecosystem and trying to improve it uh while i'm trying to improve the chances of uh of the united states of america in a uh in a space war fighting uh uh environment um and so i thank all of you for uh participating today and for this little bit of time that you've allowed me to share with you thank you sir thank you for your leadership and thank you for the for the time for this awesome event space and cyber security symposium 2020 i'm john furrier on behalf of cal poly thanks for watching [Music]

>> Narrator: From around the globe. It's theCUBE covering space in cybersecurity symposium 2020 hosted by Cal Poly. >> Hello, everyone. Welcome to the space and cybersecurity symposium, 2020 hosted by Cal Poly where the intersection of space and security are coming together. I'm John Furrier, your host with theCUBE here in California. I want to welcome our featured guest, Lieutenant General, John F. Thompson with the United States Space Force approach to cybersecurity. That's the topic of this session. And of course he's the commander of the space and missile system center in Los Angeles Air Force Base. Also heading up Space Force. General, thank you for coming on. I really appreciate to you kicking this off. Welcome to the symposium. >> Hey, so thank you very much, John, for that very kind introduction. Also very much thank you to Cal Poly for this opportunity to speak to this audience today. Also a special shout out to one of the organizers, Dustin Debrun, for all of his work, helping get us to this point. Ladies and gentlemen as a John mentioned, I'm JT Thompson. I lead the 6,000 men and women of the United States Space Force's Space and Missile System Center, which is headquartered here at Los Angeles Air Force Base and El Segundo. If you're not quite sure where that's at, it's about a mile and a half from LAX. This is our main operating location, but we do have a number of other operating locations around the country. We're about 500 people at Kirtland Air Force Base in Albuquerque, New Mexico, and an about another 500 people on the front range of the Rockies between Colorado Springs and Denver plus a smattering of other much smaller operating locations nationwide. We're responsible for acquiring, developing and sustaining the United States Space Force's, critical space assets. That includes the satellites in the space layer and also on the ground layer our ground segments to operate those satellites. And we also are in charge of procuring launch services for the US Space Force and a number of our critical mission partners across the Department of Defense and the intelligence community. Just as a couple of examples of some of the things we do, if you're unfamiliar with our work we developed and currently sustain the 31 satellite GPS constellation that satellite constellation, while originally intended to help with global navigation, those GPS signals have provided trillions of dollars in unanticipated value to the global economy over the past three decades. GPS is everywhere. I think everybody realizes that. Agriculture, banking, the stock market, the airline industry, separate and distinct navigation systems. It's really pervasive across both capabilities for our Department of Defense and capabilities for our economy and individuals, billions of individuals across our country and the planet. Some of the other work we do for instance, in the communications sector, secure communications satellites that we designed and build that link America's sons and daughters serving in the military around the world and really enable real time support and comms for our deployed forces. And those of our allies. We also acquire infrared missile warning satellites that monitor the planet for missile launches that provide advanced warning to the US Homeland and to our allies in case some of those missile launches are nefarious. On a note, that's probably a lot closer to home, maybe a lot closer to home than many of us want to think about here in the state of California. In 2018, SMC jumped through a bunch of red tape and bureaucracy to partner with the US Forest Service during two of the largest wildfires in the state's history, the Camp and Woolsey fires in Northern California. As those fires spread out of control, we created processes on the fly to share data from our missile warning satellites. Those are satellites that are systems that are purpose built to see heat sources from thousands of miles above the planet. And we collaborated with the US Forest Service so that firefighters on the ground could track those fires more in real time and better forecast fires and where they were spreading, thereby saving lives and property by identifying hotspots and flareups for firefighters. That data that we were able to working with our contractors pass to the US Forest Service and authorities here in California, was passed in less than an hour as it was collected to get it into the hands of the emergency responders, the first responders as quickly as possible and doing that in an hour greatly surpassed what was available from some of the other assets in the airborne and ground-based fire spotters. It was really instrumental in fighting those fires and stopping their spread. We've continued that involvement in recent years, using multiple systems to support firefighters across the Western US this fall, as they battled numerous wildfires that unfortunately continue. Working together with the US Forest Service and with other partners we'd like to think that we've made a difference here, but there's still a lot more work to go. And I think that we should always be asking ourselves what else can space data be used for and how can we more rapidly get that space data to stakeholders so that they can use it for purposes of good, if you will. How else can we protect our nation? How else can we protect our friends and allies? I think a major component of the discussion that we will have throughout this conference is that the space landscape has changed rapidly and continues to change rapidly. Just over the past few years, John and I were talking before we went live here and 80 nations now have space programs. Nearly 80 space faring nations on the planet. If you just look at one mission area that the Department of Defense is interested in, and that's small launch, there are currently over 100 different small launch companies within the US industrial base vying for commercial DoD and civil payload capabilities, mostly to lower earth orbit. It's truly a remarkable time. If you factor in those things like artificial intelligence and machine learning, where we're revolutionizing really, the ways that we generate process and use data. It's really remarkable. In 2016, so if you think about this four years ago, NASA estimated that there were 28 terabytes of information transiting their space network each day. And that was four years ago. Obviously we've got a lot of desire to work with a lot of the people in the audience in this conference, we need to work with big thinkers, like many of you to answer questions on how best we apply data analytics to extract value and meaning from that data. We need new generations of thinkers to help apply cutting edge theories of data mining, cyber behaviorism, and Internet of Things 2.0, it's just truly a remarkable time to be in the space business and the cyber aspects of the space business are truly, truly daunting and important to all of us. Integrating cyber security into our space systems, both commercial and government is a mandate. it's no longer just a nice to have as the US Space Force and Department of the Air Force leadership has said many times over the past couple of years, space is becoming congested and contested. And that contested aspect means that we've got to focus on cyber security in the same way that the banking industry and cyber commerce focus on cybersecurity day in and day out. The value of the data and services provided is really directly tied to the integrity and availability of that data and services from the space layer, from the ground control segments associated with it. And this value is not just military, it's also economic and it's not just American, it's also a value for the entire world, particularly our allies, as we all depend upon space and space systems. Your neighbors and friends here in California that are employed at the space and missile system center work with network defenders. We work with our commercial contractors and our systems developers, our international allies and partners to try and build as secure and resilient systems as we can from the ground up that keep the global comments of space free and open for exploration and for commerce as John and I were talking earlier, before we came online, there's an aspect of cybersecurity for space systems, especially for some of our legacy systems, that's more, how do we bolt this on? Cause we fielded those space systems a number of years ago, and the challenges of cybersecurity in the space domain have grown. So we have a part that we have to worry about, bolting it on, but then we have to worry about building it in as we field new systems and build in a flexibility that realizes that the cyber threat or the cybersecurity landscape will evolve over time. It's not just going to be stagnant. There will always be new vulnerabilities and new threat vectors that we all have to look at. Look, as Secretary Barrett, who is our secretary of the air force likes to say most Americans use space before they have their first cup of coffee in the morning. The American way of life really depends on space. And as part of the United States Space Force, we work with defense leaders, our Congress joint, and international military teammates and industry to ensure American leadership in space. I really thank you for this opportunity to address the audience today, John, and thanks so much to Cal Poly for letting me be one of the speakers at this event. I've really looked forward to this for several months. And so with that, I look forward to your questions as we kind of move along here. >> General, thank you very much for those awesome introductory statement. For the folks watching on the stream, Brigadier General Carthan's going to be in the chat, answering any questions, feel free to chat away. He's the vice commander of Space and Missile System Center, he'll be available. A couple of comments from your keynote before I get to my questions. Cause it just jumped into my head. You mentioned the benefits of say space with the fires in California. We're living that here. That's really realtime. That's a benefit. You also mentioned the ability for more people launching payloads into space. I'm only imagined Moore's law smaller, faster, cheaper applies to rockets too. So I'm imagining you have the benefits of space and you have now more potential objects flying out sanctioned and maybe unsanctioned. So is it going to be more rules around that? This is an interesting question cause it's exciting Space Force, but for all the good there is potentially bad out there. >> Yeah. So John, I think the basics of your question is as space becomes more congested and contested, is there a need for more international norms of how satellites fly in space? What kind of basic features satellites have to perhaps de orbit themselves? What kind of basic protections should all satellites be afforded as part of a peaceful global commons of space? I think those are all fantastic questions. And I know that US and many allied policy makers are looking very, very hard at those kinds of questions in terms of what are the norms of behavior and how we field, and field as the military term. But how we populate using civil or commercial terms that space layer at different altitudes, lower earth orbit, mid earth orbit, geosynchronous earth orbit, different kinds of orbits, what the kind of mission areas we accomplished from space. That's all things that need to be definitely taken into account as the place gets a little bit, not a little bit as the place gets increasingly more popular day in and day out. >> I'm super excited for Space Force. I know that a new generation of young folks are really interested in it's an emerging, changing great space. The focus here at this conference is space and cybersecurity, the intersection. I'd like to get your thoughts on the approach that a space force is taking to cybersecurity and how it impacts our national goals here in the United States. >> Yeah. So that's a great question John, let me talk about it in two basic ways. At number one is an and I know some people in the audience, this might make them a little bit uncomfortable, but I have to talk about the threat. And then relative to that threat, I really have to talk about the importance of cyber and specifically cyber security, as it relates to that threat. The threats that we face really represented a new era of warfare and that new era of warfare involves both space and cyber. We've seen a lot of action in recent months from certain countries, notably China and Russia that have threatened what I referred to earlier as the peaceful global commons of space. For example, it threw many unclassified sources and media sources. Everybody should understand that the Russians have been testing on orbit anti-satellite capabilities. It's been very clear if you were following just the week before last, the Department of Defense released its 2020 military and security developments involving the People's Republic of China. And it was very clear that China is developing ASATs, electronic jammers, directed energy weapons, and most relevant to today's discussion, offensive cyber capabilities. There are kinetic threats that are very, very easy to see, but a cyber attack against a critical command and control site or against a particular spacecraft could be just as devastating to the system and our war fighters in the case of GPS and important to note that that GPS system also impacts many civilians who are dependent on those systems from a first response perspective and emergency services, a cyber attack against a ground control site could cause operators to lose control of a spacecraft or an attacker could feed spoofed data to assist them to mislead operators so that they sent emergency services personnel to the wrong address. Attacks on spacecraft on orbit, whether directly via a network intrusion or enabled through malware introduced during the system's production while we're building the satellite can cripple or corrupt the data. Denial-of-service type attacks on our global networks obviously would disrupt our data flow and interfere with ongoing operations and satellite control. If GPS went down, I hesitate to say it this way, cause we might elicit some screams from the audience. But if GPS went down a Starbucks, wouldn't be able to handle your mobile order, Uber drivers wouldn't be able to find you. And Domino's certainly wouldn't be able to get there in 30 minutes or less. So with a little bit of tongue in cheek there from a military operations perspective, it's dead serious. We have become accustomed in the commercial world to threats like ransomware and malware. And those things have unfortunately become commonplace in commercial terrestrial networks and computer systems. However, what we're seeing is that our adversaries with the increased competition in space these same techniques are being retooled, if you will, to use against our national security space systems day in and day out. As I said, during my opening remarks on the importance of cyber, the value of these systems is directly tied to their integrity. If commanders in the field, firefighters in California or baristas in Starbucks, can't trust the data they're receiving, then that really harms their decision making capabilities. One of the big trends we've recently seen is the move towards proliferated LEO constellations, obviously Space X's Starlink on the commercial side and on the military side, the work that DARPA and my organization SMC are doing on Blackjack and Casino, as well as some space transport layer constellation work that the space development agency is designing are all really, really important types of mesh network systems that will revolutionaries how we plan and field war fighting systems and commercial communications and internet providing systems. But they're also heavily reliant on cybersecurity. We've got to make sure that they are secured to avoid an accident or international damage. Loss of control of these constellations really could be catastrophic from both a mission perspective or from a satellites tumbling out of low earth orbit perspective. Another trend is introductions in artificial intelligence and machine learning, onboard spacecraft are at the edge. Our satellites are really not so much hardware systems with a little software anymore in the commercial sector and in the defense sector, they're basically flying boxes full of software. And we need to ensure that data that we're getting out of those flying boxes full of software are helping us base our decisions on accurate data and algorithms, governing the right actions and that those systems are impervious to the extent possible to nefarious modifications. So in summation, cybersecurity is a vital element of everything in our national security space goals. And I would argue for our national goals, writ large, including economic and information dimensions, the Space Force leadership at all levels from some of the brand new second lieutenants that general Raymond swore in to the space force this morning, ceremonially from the air force associations, airspace and cyberspace conference to the various highest levels, General Raymond, General DT Thompson, myself, and a number of other senior leaders in this enterprise. We've got to make sure that we're all working together to keep cyber security at the forefront of our space systems cause they absolutely depend on it. >> You mentioned hardware, software threats, opportunities, challenges. I want to ask you because you got me thinking of the minute they're around infrastructure. We've heard critical infrastructure, grids here on earth. You're talking about critical infrastructure, a redefinition of what critical infrastructure is, an extension of what we have. So I'd love to get your thoughts about Space Force's view of that critical infrastructure vis-a-vis the threat vectors, because the term threat vectors has been kicked around in the cyberspace. Oh you have threat vectors. They're always increasing the surface area. If the surface area is from space, it's an unlimited service area. So you got different vectors. So you've got new critical infrastructure developing real time, really fast. And you got an expanded threat vector landscape. Putting that in perspective for the folks that aren't really inside the ropes on these critical issues. How would you explain this and how would you talk about those two things? >> So I tell you, just like, I'm sure people in the security side or the cybersecurity side of the business in the banking industry feel, they feel like it's all possible threat vectors represent a dramatic and protect potentially existential threat to all of the dollars that they have in the banking system, to the financial sector. On the Department of Defense side, we've got to have sort of the same mindset. That threat vector from, to, and through space against critical space systems, ground segments, the launch enterprise, or transportation to orbit and the various different domains within space itself. Like I mentioned before, LEO, MEO and GEO based satellites with different orbits, all of the different mission areas that are accomplished from space that I mentioned earlier, some that I did mention like a weather tactical or wide band communications, various new features of space control. All of those are things that we have to worry about from a cyber security threat perspective. And it's a daunting challenge right now. >> Yeah, that's awesome. And one of the things we've been falling on the hardware side on the ground is the supply chain. We've seen, malware being, really put in a really obscure hardware. Who manufactures it? Is it being outsourced? Obviously government has restrictions, but with the private sector, you mentioned China and the US kind of working together across these peaceful areas. But you got to look at the supply chain. How does the supply chain in the security aspect impact the mission of the US space Force? >> Yeah. Yeah. So how about another, just in terms of an example, another kind of California based historical example. The very first US Satellite, Explorer 1, was built by the jet propulsion laboratory folks, not far from here in El Segundo, up in Pasadena, that satellite, when it was first built in the late 50s weighing a little bit, over 30 pounds. And I'm sure that each and every part was custom made and definitely made by US companies. Fast forward to today. The global supply chain is so tightly coupled, and frankly many industries are so specialized, almost specialized regionally around the planet. We focus every day to guarantee the integrity of every component that we put in our space systems is absolutely critical to the operations of those satellites and we're dependent upon them, but it becomes more difficult and more difficult to understand the heritage, if you will, of some of the parts that are used, the thousands of parts that are used in some of our satellites that are literally school bus sized. The space industry, especially national security space sector is relatively small compared to other commercial industries. And we're moving towards using more and more parts from non US companies. Cybersecurity and cyber awareness have to be baked in from the beginning if we're going to be using parts that maybe we don't necessarily understand 100% like an Explorer one, the lineage of that particular part. The environmental difficulties in space are well known. The radiation environment, the temperature extremes, the vacuum, those require specialized component. And the US military is not the only customer in that space. In fact, we're definitely not the dominant customer in space anymore. All those factors require us along with our other government partners and many different commercial space organizations to keep a very close eye on our supply chains, from a quality perspective, a security perspective and availability. There's open source reporting on supply training intrusions from many different breaches of commercial retailers to the infectious spread of compromised patches, if you will. And our adversaries are aware of these techniques. As I mentioned earlier, with other forms of attack, considering our supply chains and development networks really becomes fair game for our adversaries. So we have to take that threat seriously. Between the government and industry sectors here in the US. We're also working with our industry partners to enact stronger defenses and assess our own vulnerabilities. Last fall, we completed an extensive review of all of our major contracts here at Space and Missile System Center to determine the levels of cyber security requirements we've implemented across our portfolio. And it sounds really kind of businessy geeky, if you will. Hey, we looked at our contracts to make sure that we had the right clauses in our contracts to address cybersecurity as dynamically as we possibly could. And so we found ourselves having to add new language to our contracts, to require system developers, to implement some more advanced protective measures in this evolving cyber security environment. So that data handling and supply chain protections from contract inception to launch and operations were taken into account. Cyber security really is a key performance parameter for us now. Performance of the system, It's as important as cost, it's as important as schedule, because if we deliver the perfect system on time and on cost, it can perform that missile warning or that communications mission perfectly, but it's not cyber secure. If it's doesn't have cyber protections built into it, or the ability to implement mitigations against cyber threats, then we've essentially fielded a shoe box in space that doesn't do the CA the war fighter or the nation any good. Supply chain risk management is a major challenge for us. We're doing a lot to coordinate with our industry partners. We're all facing it head on to try and build secure and trusted components that keep our confidence as leaders, firefighters, and baristas as the case may be. But it is a challenge. And we're trying to rise to that challenge. >> This is so exciting this new area, because it really touches everything. Talk about geeking out on the tech, the hardware, the systems but also you put your kind of MBA hat on you go, what's the ROI of extra development and how things get built. Because the always the exciting thing for space geeks is like, if you're building cool stuff, it's exciting, but you still have to build. And cybersecurity has proven that security has to be baked in from the beginning and be thought as a system architecture. So you're still building things, which means you got to acquire things, you got to acquire parts, you got acquire build software and sustain it. How is security impacting the acquisition and the sustainment of these systems for space? >> Yeah. From initial development, through planning for the acquisition, design, development, our production fielding and sustainment, it impacts all aspects of the life cycle, John. We simply, especially from the concept of baking in cybersecurity, we can't wait until something is built and then try and figure out how to make it cyber secure. So we've moved way further towards working side by side with our system developers to strengthen cybersecurity from the very beginning of a systems development, cyber security, and the resilience associated with it really have to be treated as a key system attribute. As I mentioned earlier, equivalent with data rates or other metrics of performance. We like to talk in the space world about mission assurance and mission assurance has always sort of taken us as we technically geek out. Mission assurance has always taken us to the will this system work in space. Can it work in a vacuum? Can it work in as it transfers through the Van Allen radiation belt or through the Southern hemisphere's electromagnetic anomaly? Will it work out in space? And now from a resiliency perspective, yeah, it has to work in space. It's got to be functional in space, but it's also got to be resistant to these cybersecurity threats. It's not just, I think a General D.T Thompson quoted this term. It's not just widget assurance anymore. It's mission assurance. How does that satellite operator that ground control segment operate while under attack? So let me break your question a little bit, just for purposes of discussion into really two parts, cybersecurity, for systems that are new and cybersecurity for systems that are in sustainment are kind of old and legacy. Obviously there's cyber vulnerabilities that threatened both, and we really have to employ different strategies for defensive of each one. For new systems. We're desperately trying to implement across the Department of Defense and particularly in the space world, a kind of a dev sec ops methodology and practice to delivering software faster and with greater security for our space systems. Here at SMC, we have a program called enterprise ground services, which is a toolkit, basically a collection of tools for common command and control of different satellite systems, EGS as we call it has an integrated suite for defensive cyber capabilities. Network operators can use these tools to gain unprecedented insight to data flows and to monitor space network traffic for anomalies or other potential indicators of a bad behavior, malicious behavior, if you will, it's rudimentary at this point, but because we're using DevSecOps and that incremental development approach, as we scale it, it just becomes more and more capable. Every product increment that we feel. Here at LA Air Force Base, we have the United Space Force's West Coast Software Factory, which we've dubbed the Kobayashi Maru. They're using those agile DevOps software development practices to deliver a space awareness software to the combined space operations center. Affectionately called the CSpock that CSpock is just on the road from Cal Poly there in San Luis Obispo at Vandenberg Air Force Base. They've so securely linked the sea Spock with other space operation centers around the planet, our allies, Australia, Canada, and the UK. We're partnering with all of them to enable secure and enhanced combined space operations. So lots of new stuff going on as we bake in new development capabilities for our space systems. But as I mentioned earlier, we've got large constellations of satellites on orbit right now. Some of them are well in excess of a decade or more or old on orbit. And so the design aspects of those satellites are several decades old. But we still have to worry about them cause they're critical to our space capabilities. We've been working with an air force material command organization called CROWS, which stands for the Cyber Resiliency Office for Weapon Systems to assess all of those legacy platforms from a cyber security perspective and develop defensive strategies and potential hardware and software upgrades to those systems to better enable them to live through this increasingly cybersecurity concerned era that we currently live in. Our industry partners have been critical to both of those different avenues. Both new systems and legacy systems. We're working closely with them to defend and upgrade national assets and develop the capabilities to do similar with new national assets coming online. The vulnerabilities of our space systems really kind of threatened the way we've done business in the past, both militarily and in the case of GPS economically. The impacts of that cybersecurity risk are clear in our acquisition and sustainment processes, but I've got to tell you, as the threat vectors change, as the vulnerabilities change, we've got to be nimble enough, agile enough, to be able to bounce back and forth. We can't just say, many people in the audience are probably familiar with the RMF or the Risk Management Framework approach to reviewing the cyber security of a system. We can't have program managers and engineers just accomplish an RMF on a system. And then, hey, high five, we're all good. It's a journey, not a destination, that's cybersecurity. And it's a constant battle rhythm through our weapon systems lifecycle, not just a single event. >> I want to get to this commercial business needs and your needs on the next question. But before I go there, you mentioned agile. And I see that clearly because when you have accelerated innovation cycles, you've got to be faster. And we saw this in the computer industry, mainframes, mini computers, and then we started getting beyond maybe when the internet hit and PCs came out, you saw the big enterprises, the banks and government start to work with startups. And it used to be a joke in the entrepreneurial circles is that, there's no way if you are a startup you're ever going to get a contract with a big business enterprise. Now that used to be for public sector and certainly for you guys. So as you see startups out there and there's acquisition involved, I'm sure would love to have a contract with Space Force. There's an ROI calculation where if it's in space and you have a sustainment view and it's software, you might have a new kind of business model that could be attractive to startups. Could you share your thoughts on the folks who want to be a supplier to you, whether they're a startup or an existing business that wants to be agile, but they might not be that big company. >> John, that's a fantastic question. We're desperately trying to reach out to those new space advocates, to those startups, to those what we sometimes refer to, within the Department of Defense, those non traditional defense contractors. A couple of things just for thinking purposes on some of the things that we're trying to highlight. Three years ago, we created here at Space and Missile System Center, the Space Enterprise Consortium to provide a platform, a contractual vehicle, really to enable us to rapidly prototype, development of space systems and to collaborate between the US Space Force, traditional defense contractors, non traditional vendors like startups, and even some academic institutions. SPEC, as we call it, Space Enterprise Consortium uses a specialized contracting tool to get contracts awarded quickly. Many in the audience may be familiar with other transaction agreements. And that's what SPEC is based on. And so far in just three years, SPEC has awarded 75 different prototyping contracts worth over $800 million with a 36% reduction in time to award. And because it's a consortium based competition for these kinds of prototyping efforts, the barrier to entry for small and nontraditional, for startups, even for academic institutions to be able to compete for these kinds of prototyping has really lowered. These types of partnerships that we've been working through on spec have really helped us work with smaller companies who might not have the background or expertise in dealing with the government or in working with cyber security for their systems, both our developmental systems and the systems that they're designing and trying to build. We want to provide ways for companies large and small to partner together in support kind of mutually beneficial relationships between all. Recently at the Annual Air Force Association conference that I mentioned earlier, I moderated a panel with several space industry leaders, all from big traditional defense contractors, by the way. And they all stressed the importance of building bridges and partnerships between major contractors in the defense industry and new entrance. And that helps us capture the benefits of speed and agility that come with small companies and startups, as well as the expertise and specialized skill sets of some of those larger contractors that we rely on day in and day out. Advanced cyber security protections and utilization of secure facilities are just a couple of things that I think we could be prioritizing more so in those collaborations. As I mentioned earlier, the SPEC has been very successful in awarding a number of different prototyping contracts and large dollar values. And it's just going to get better. There's over 400 members of the space enterprise consortium, 80% of them are non traditional kinds of vendors. And we just love working with them. Another thing that many people in the audience may be familiar with in terms of our outreach to innovators, if you will, and innovators that include cyber security experts is our space pitch day events. So we held our first event last November in San Francisco, where we awarded over a two day period about $46 million to 30 different companies that had potentially game changing ideas. These were phase two small business innovative research efforts that we awarded with cash on the spot. We're planning on holding our second space pitch day in the spring of 2021. We're planning on doing it right here in Los Angeles, COVID-19 environment permitting. And we think that these are fantastic venues for identifying and working with high-speed startups, and small businesses who are interested in really, truly partnering with the US Air Force. It's, as I said before, it's a really exciting time to be a part of this business. And working with the innovation economy is something that the Department of Defense really needs to do in that the innovation that we used to think was ours. That 80% of the industrial base innovation that came from the Department of Defense, the script has been flipped there. And so now more than 70%, particularly in space innovation comes from the commercial sector, not from the defense business itself. And so that's a tsunami of investment and a tsunami of a capability. And I need to figure out how to get my surfboard out and ride it, you know what I mean? >> Yeah, It's one of those things where the script has been flipped, but it's exciting because it's impacting everything. When you're talking about systems architecture? You're talking about software, you're talking about a business model. You're talking about dev sec opsx from a technical perspective, but now you have a business model innovation. All the theaters are exploding in innovation, technical, business, personnel. This brings up the workforce challenge. You've got the cyber needs for the US Space Force, It's probably great ROI model for new kinds of software development that could be priced into contracts. That's a entrepreneurial innovation, you've got the business model theater, you've got the personnel. How does the industry adopt and change? You guys are clearly driving this. How does the industry adjust to you? >> Yeah. So I think a great way to answer that question is to just talk about the kind of people that we're trying to prioritize in the US Space Force from an acquisition perspective, and in this particular case from a cybersecurity perspective. As I mentioned earlier, it's the most exciting time to be in space programs, really since the days of Apollo. Just to put it in terms that maybe have an impact with the audience. From 1957 until today, approximately 9,000 satellites have been launched from the various space varying countries around the planet. Less than 2000 of those 9,000 are still up on orbit and operational. And yet in the new space regime players like Space X have plans to launch, 12,000 satellites for some of their constellations alone. It really is a remarkable time in terms of innovation and fielding of space capabilities and all of those space capabilities, whether they're commercial, civil, or defense are going to require appropriate cybersecurity protections. It's just a really exciting time to be working in stuff like this. And so folks like the folks in this audience who have a passion about space and a passion about cybersecurity are just the kind of people that we want to work with. Cause we need to make sure our systems are secure and resilient. We need folks that have technical and computing expertise, engineering skills to be able to design cyber secure systems that can detect and mitigate attacks. But we also, as you alluded to, we need people that have that business and business acumen, human networking background, so that we can launch the startups and work with the non traditional businesses. Help to bring them on board help, to secure both their data and our data and make sure our processes and systems are free as much as possible from attack. For preparation, for audience members who are young and maybe thinking about getting into this trade space, you got to be smart on digital networking. You got to understand basic internet protocols, concepts, programming languages, database design. Learn what you can for penetration or vulnerability testing and a risk assessment. I will tell you this, and I don't think he will, I know he will not mind me telling you this, but you got to be a lifelong learner and so two years ago, I'm at home evening and I get a phone call on my cell phone and it's my boss, the commander of Air Force Space command, General, J. Raymond, who is now currently the Chief of Space Operations. And he is on temporary duty, flying overseas. He lands where he's going and first thing he does when he lands is he calls me and he goes JT, while I was traveling, I noticed that there were eBooks available on the commercial airliner I was traveling on and there was an ebook on something called scrumming and agile DevSecOps. And I read it, have you read it? And I said, no, sir. But if you tell me what the title of the book is, I will read it. And so I got to go to my staff meeting, the very next week, the next time we had a staff meeting and tell everybody in the staff meeting, hey, if the four star and the three star can read the book about scrumming, then I'm pretty sure all of you around this table and all our lieutenants and our captains our GS13s, All of our government employees can get smart on the scrumming development process. And interestingly as another side, I had a telephone call with him last year during the holidays, where he was trying to take some leave. And I said, sir, what are you up to today? Are you making eggnog for the event tonight or whatever. And the Chief of Space Operations told me no, I'm trying to teach myself Python. I'm at lesson two, and it's not going so well, but I'm going to figure this out. And so that kind of thing, if the chief of staff or the Chief of Space Operations can prioritize scrumming and Python language and innovation in his daily schedule, then we're definitely looking for other people who can do that. And we'll just say, lower levels of rank throughout our entire space force enterprise. Look, we don't need people that can code a satellite from scratch, but we need to know, we need to have people that have a basic grasp of the programming basics and cybersecurity requirements. And that can turn those things into meaningful actions, obviously in the space domain, things like basic physics and orbital mechanics are also important spaces, not an intuitive domain. So under understanding how things survive on orbit is really critical to making the right design and operational decisions. And I know there's probably a lot, because of this conference. I know there's probably a whole lot of high speed cybersecurity experts out in the audience. And I need those people in the US Space Force. The country is counting on it, but I wouldn't discount having people that are just cyber aware or cyber savvy. I have contracting officers and logisticians and program managers, and they don't have to be high end cybersecurity experts, but they have to be aware enough about it to be able to implement cyber security protections into our space systems. So the skill set is really, really broad. Our adversaries are pouring billions of dollars into designing and fielding offensive and destructive space, cybersecurity weapons. They repeatedly shown really a blatant disregard of safety and international norms for good behavior on orbit. And the cyber security aspects of our space systems is really a key battleground going forward so that we can maintain that. As I mentioned before, peaceful global comments of space, we really need all hands on deck. If you're interested in helping in uniform, if you're interested in helping, not in uniform, but as a government employee, a commercial or civil employee to help us make cyber security more important or more able to be developed for our space systems. And we'd really love to work with you or have you on the team to build that safe and secure future for our space systems. >> Lieutenant General John Thompson, great insight. Thank you for sharing all that awesome stories too, and motivation for the young next generation. The United States Space Force approach to cybersecurity. Really amazing talk, thank you for your time. Final parting question is, as you look out and you have your magic wand, what's your view for the next few years in terms of things that we could accomplish? It's a super exciting time. What do you hope for? >> So first of all, John, thanks to you and thanks to Cal Poly for the invitation and thanks to everybody for their interest in cybersecurity, especially as it relates to space systems, that's here at the conference. There's a quote, and I'll read it here from Bernard Schriever, who was the founder, if you will, a legend in a DoD space, the founder of the Western development division, which was a predecessor organization to Space and Missile System Center, General Schriever, I think captures the essence of how we see the next couple of years. "The world has an ample supply of people "who can always come up with a dozen good reasons "why new ideas will not work and should not be tried, "but the people who produce progress are breed apart. "They have the imagination, "the courage and the persistence to find solutions." And so I think if you're hoping that the next few years of space innovation and cybersecurity innovation are going to be upon a pony ride at the County fair, then perhaps you should look for another line of work, because I think the next few years in space and cybersecurity innovation are going to be more like a rodeo and a very dynamic rodeo as it goes. It is an awesome privilege to be part of this ecosystem. It's really an honor for me to be able to play some small role in the space ecosystem and trying to improve it while I'm trying to improve the chances of the United States of America in a space war fighting environment. And so I thank all of you for participating today and for this little bit of time that you've allowed me to share with you. Thank you. >> Sir, thank you for your leadership and thank you for the time for this awesome event, Space and Cyber Cybersecurity Symposium 2020, I'm John Furrier on behalf of Cal Poly, thanks for watching. (mellow music)

>> Announcer: From around the globe, it's theCUBE with digital coverage of next level network experience event, brought to you by Infoblox. >> Okay, welcome back everyone's to CUBE's coverage and co creation with Infoblox. Next Level networking event, virtual event, I'm John Furrier, your host to theCUBE. We're here with Craig Sanderson, Vice President security products at Infoblox. Talking about securing the borderless enterprise, obviously Infoblox, we had a variety of different conversations. Craig, welcome to theCUBE. >> Thank you. Thanks, it's great to be here. >> Remote CUBE, normally we're in person, but since it's COVID-19, we're doing our best to get the stories out and one of things I want to chat with you is with COVID-19, this shift to remote working is interesting and the word work is interesting you got the work forces which are people work places which are locations, which is now home, workflows and work loads all work related, right? So if you think about the enterprise, you know, just the disruption to business model around this unforeseen, almost 100% VPN usage maybe or you got all this remote action, no one could have foreseen all this coming. How is this shift change the security paradigm and posture for enterprises? >> Yeah, I think for a lot of the customers that we've talked to, a lot of them are thinking about digital transformation for some time. What COVID has really done is rapidly expanded or kind of accelerated the need for them to think about what the digital transformation plans are. And unfortunately for some organizations who may be not as far down the line as others, they've looked at their current implementation for remote access, and their traditional security models of like perimeter based and they found that you know in this current environment where suddenly you've gone from being only a partial set of your workforce or remote to now all of them being remote and their applications, their data, the users, they're all kind of spread anytime, anyplace, anywhere. Their traditional models don't really work. So what it's caused a lot of organizations to do is to really accelerate their digital transformation plans and quite often for some of those organizations, they've realized that they've had to make the move relatively quickly because their traditional architectures have just not been designed for this level of disruption the digital transformation has had on their businesses. >> Give some examples of how companies have either been flat footed or on their heels, kind of push back and saying, well, we got caught off guard to ones that are kind of in place that kind of managed the pandemic well, what's the difference? Can you just give some color commentary around, you know, the the profile who got it right or some were right, and some that have gotten it wrong, or are struggling? >> So I think the ones who got it right are the ones who were already thinking about digital transformation. They're looking at the fact that a lot of the applications that their consumers or their users are consuming are increasingly going to be in the Cloud anyway. So the traditional architecture of all the good stuffs on the inside and the bad stuff on the outside, that simply doesn't work with Cloud and those organizations who were looking at obviously Cloud deployments for their applications, SDN IoT, those organizations have had be thinking about how they can secure those devices, the applications and users in a way that is going to be ubiquitous. The fact that you can deploy the security controls wherever those applications users or devices are going to be. So those organizations are already starting to think about how they can build a networking architecture that is going to be suited for digital transformation, and by extension, they've been recognizing that the security model has to change, 'cause they were much further down the path. Really, this has been an acceleration. For those organizations that well, I'm not really interested in Cloud, are worried about the risks associated with Cloud and things like that, who tended to try and stick or cling to the old traditional model. Where they really run into trouble now, it's like this model just doesn't work. And now the decisions almost been taken out of the hands with COVID, because now their users are not on the corporate network. They can't build a rock wall around those users. They now have to provide protection for a user who's potentially not even using the device that they can control. So for those organizations who are already thinking about cloud and SDN and IoT, because of that digital transformation effect they've been starting to think about security, for those who have not thought about that or who have tried have been pushing that off, they're the ones who've been caught somewhat flat footed and now they're been forced to make a decision which maybe not they're actually feeling comfortable already ready to go off and do. >> You know, Craig, I sat with a friend the other day and we're like briefing on hey, you know, COVID-19 really, kind of, exposes almost like the tide coming out as that tsunami comes. You can see everything, all the scabs and all the problems. And then we started talking about the whole work at home situation, like this is probably the biggest use case of IoT in real life because you can really see it play out, not just a factory or sensor or device at the edge of the network, these are work, people doing work, right? So this whole IoT Edge, it's about addressability. So you know, I have to ask you, 'cause we've talked with you guys earlier in other segments around this next level networking experience, I love the word experience, but next level networking means next level. So DDI has an abstraction, DDI being DNS DHCP, and IP address management. How does the security piece fit in? Because certainly, yes, you got at home, we got a bunch of IoT people running their stuff from their home networks and so remote access, and you got also the business around, which includes everything that's connected to the network now, and literally is borderless. So I like that term. So how does DDI security fit into that? Yeah, I mean, it's part of having the experience, I mean, one of the things that's changed, I mean, I've been in security for over 20 years, probably about 10 or 15 years ago, as a security guy, you could come back and you had a veto, you'd come back and say, well, no, we're not going to roll this thing out, these applications, or these services, because it's a risk to the business. Now in a lot of the CSOs that I've talked to is that veto is going away. If this application is going to get rolled out, we're going to run this service security has to catch up. Now what you can't have is from a seamless experience point of view, is to say well, okay, you've now got wonderful application experience, but then it gets ruined by all the security controls are very invasive. So all organizations are having to do is to think about how you can build a seamless networking architecture that can also seamlessly include the security as part of that. And so you can still have the security of the organization needs without it becoming a massive disruption to the experience. And one of the good examples is, for a lot of organizations their remote access, going back to the COVID example, is based on VPN. VPNs are cumbersome and have got troubles with passwords and all these sort of like traditional issues associated with the user experience from a VPN perspective. I mean, a lot of users have the patience to deal with that, and they don't necessary follow all the necessary security controls. So people are being forced to rethink how they can build the quality application experience underpinned by a digitally transformed network, but at the same time, making sure you could layer in at foundational layer, the security functions as well. And that's where a lot of organizations who are a little bit more forward thinking understood that and start to think about like DNS, is essentially this ubiquitous platform, which is already there it can already provide the sort of security services by default. Because going back to your example about IoT, one of the jokes with one of my friends is, and for every IoT security, sorry, every IoT offering, there's a separate IoT security offering. And one of the things that was a lightbulb moment for us is, if you're trying to secure all these heterogeneous IoT devices, well, one thing they have in common, they're all going to get an IP address, so we're going to use DNS. So what people have to start to do is to try and make security seamless, it has to be built into the foundations. It can't be this extra thing that you kind of glob on the side, because it then ruins the overall experience for the users. The nice thing about DNS is its ubiquitous, and you can apply the security, regardless of what the endpoint and application is, because the common denominator they choose they get an IP address and they use DNS. >> And DNS has such a great track record over the years of having layers of abstractions on top of it to pace with the functionality and it's really been an operating model and you bring up the different security packages and postures for each thing. And you mentioned, you know, the old days security guy, oh, no we're killing that, no we're going this way. That was the operational model, but now with DevOps, you put a Cloud earlier, DevOps has proven that agility, speed scale can work, and how to security catch up? It's an operating model. So this is really kind of the key epiphany is, hey, VPNs, that's not the experience that people want. And, you know, I was just talking with someone from Amazon this morning in another interview segment and the discussion was new expectations, new solutions. So that's kind of what we're seeing right now. So how do you enable that out at speed by not screwing over the operations people, right? So 'cause they got to be, operationally, I need to be really rock solid, so you need automation, you got to have those factors and requirements built in, but you got the agility for development. your reaction> >> Yeah, absolutely. We see that especially is one of the things about 'cause DNS essentially ubiquitous. You can apply similar security controls regardless of the environment. So, right now I'm stuck at home because of the COVID virus. So again, I'm going to use DNS, I go through one of our Cloud platforms, I have DNS applying the security controls there. But within the same thing because DNS works as one ubiquitous system and it's like how the internet works with DNS is quite easily, not only can you block malicious threats for myself, but also you can push that same block mitigation to a DNS server that's running in AWS. So if your workload that may also have been compromised, trying to go to the same malicious domain, you can also be blocked by DNS. And so that ubiquity, the fact that it's built as this ubiquitous system, mean one thing is very different in the networking world standards are great. We can plug different things together, they all kind of fit together nicely. Insecurity is not normally that not only the cases, normally, you've got this jigsaw puzzle, where all the pieces don't really fit together. The nice thing with DNS is is absolutely ubiquitous. So one basic example is, if I try to go to a malicious domain, or I tried to steal data over DNS, not only would we be able to block it, but we'd also be able to dynamically share that mitigation to all of the on prem DNS servers, the DNS servers rather in your public or private Cloud, and for all the other like remote users. So the fact you've got this pre built fabric, and it's not that we're security geniuses, it's just it happens to already be there because of DNS and how DNS has been developed over the last 30 or 40 years. So I think the nice thing about it is a lot of organizations are starting to realize that you've got this foundation already there. Ostensibly, it's there for networking purposes, but the ability to repurpose all the core assets of DNS, the scalability, the flexibility, adaptability, the ubiquity, all those things are there by default. Why don't you use that as the new foundation for that next gen security architecture? >> And you know, you got me as a fan, I'll say that right away, because when we think about the simplicity of going to the low level building block in DNS, it fits for what I said earlier, the future of work, the word Work, workplace, workforce, workload, workflows, no matter what it is, it works across. So it's a consistent, primitive. I mean, it makes total sense. Why would you want to have different things. So again, this brings up the whole foundational level of DDI that's got my interest. And I want you to explain this for folks, because I think it's not obvious. Abstractions are pretty clear, people get abstraction layers, reduce complexity, and increase functionality and capability. But DDI, you guys have from a foundational security standpoint, is kind of the unique thing Infoblox has. How is that different, DDI from other offerings in the security stack? >> Yeah, I think the one thing is pretty unique, especially when it comes to DNS is the fact that it's built together as this ubiquitous system, and it's there by default. I mean, otherwise, the internet just wouldn't work. So the nice thing is, is that if you deploy a DNS system we can deploy as a grid, so whether it's the an appliance running on prem or sitting in a public Cloud, or even for roaming users who are going through one of our points of presence, it works as one big ubiquitous system, whereas you take like traditional firewalls, you're configuring these devices separately, and you have to manually stitch it together. And you take multiple different vendors and you know, it doesn't quite fit neatly together. DNS is based on the standard, you could take a DNS server for master DNS server from another company and because it's based on standards, it will work seamlessly together, in fact, that the threat mitigation mechanism where you distribute threat intelligence to tell the DNS, what is the malicious domains or IP addresses to block is based on so called response policy zones. That's been part of the DNS standard since 2010. And it works seamlessly across multiple vendors, whereas in the security world, as I said, it's kind of like a jigsaw where you get all the pieces together that you think you need and then the burden is always on the customer or the organization to then piece these things together and as a chief source it doesn't fit together. I can see that burden can cause a hell of a lot of issues for a lot of the customers. >> Yeah, I got to ask you since DNS is so foundational to element *and have all internet activities obviously, you know URLs is DNS, it's string actually. So everything's based on DNS, how it resolves. So what what about the, how would you respond if someone said, hey, you know, I don't even know DNS is still around. I know it's palm. It's underneath there somewhere, I don't even have to deal with it, it just runs things, we've been using it for years. What's the big deal? So how do you go in and say, hey, customer, hey, enterprise, you're not borderless, I get a hitch. But they have DNS. How do they modernize it? How do they assess it? How do you go in and some of the young kids don't even know what DNS might even is? I mean, like, it's a new, so like, *what do you go where, how do you approach that and what's the pitch because they got it and as an opportunity to innovate. what's the story there? >> *Is really two aspects to it. The first one is, I mean, DNS is a bit like oxygen. If it's not there, you really need to notice it. You just take when we had the Mirai botnet attack a few years back, all these organizations suddenly realized how important DNS is. And there's a reason why DNS is the number one attack vector for DDoS attacks. If I'm an adversary, I could try and take out individual applications it's going to take me forever. I take out your DNS, everything's going to stop. I mean, it's that *foundational z. But because its been >> *Hackers no problem, yeah. >> Exactly, so and for that reason, that's why it's constantly targeted. So firstly, my first pitch to customers is, you've got to take this stuff seriously, because when it goes down, everything is down. And the impact to your organization, not just from a brand reputation, but just from running your business is going to be huge. But on top of that, the way to think of DNS is, the nice thing is is you don't have to change your network architecture. If you think about a typical user who clicks on a phishing link. When they click on a phishing link, who's going to see the malicious requests first? Is it your firewall? No, your DNS server. Because you made the request, you have to resolve the malicious domain that you're going to try and connect to. You need to find out the IP address of it. So your DNS server and it's been proven multiple studies that, the vast majority of malware uses DNS as its control plane. So if you want to understand what the bad guys are doing, you know, your DNS servers got a front row seat to exactly what the bad guys are doing. And to implement security on it is you don't have to change your network architecture, because your DNS is already there by default. All you need to do is infuse it with security knowledge, whether that is machine learning, analytics or threat intelligence. But those DNS servers are ideally positioned. They're going to see the malicious activity, regardless of what the application is. So it's foundational, not just in terms of, if it's not there, it's going to cause a massive issue to your field or environment anyway. But even if you secure the DNS, the DNS is also this wonderful tool that is in all the right places and it's also deeper into the network. One of the challenges you mentioned about operations is the challenges is okay, you can block malware but if you don't know the source address of the device that is actually trying to make the request, you don't know what to go and clean up, where's your DNS server, your DHCP server knows exactly who it is because we handed out the IP address, we know the MAC address, we know the IP address, we know the user name, we have all that information that is going to be critical for security operations. And now you can see what *it's or about maybe the first report, you start to see that organizations are waking up to the fact that you have this treasure trove of security operations data that you haven't tapped largely for political reasons, because the security guys can't reach over and grab the necessary DDI network context from those DNS platforms, because typically they're owned by the networking or the server team. >> Before we get into that *force reports, I think that had some threat investigation data. What you're getting at about this DNS is that basically, it's critical infrastructure. And if you try to forget about it, 'cause it works, you lose sight of the real opportunity, which is, if it's critical infrastructure, you got to treat it like critical infrastructure, and make sure it's modernized, refreshed in the right position to manage all this, right? >> Absolutely. Absolutely, yeah. It's unfortunate With the Mirai botnet attack. A lot of organizations, as they said well, okay, we'll just outsource this, we don't have to worry about it. But when it wasn't there, and it wasn't the fact that, I mean, it was an attempt to take out like Minecraft servers. Nothing to do with most of the businesses who were impacted, but there was a lot of collateral damage. And unfortunate is like one of those things is because DNS is a victim of its own success. The fact that is reliable, it is consistent. You don't have lots of DNS outages typically. As a result of that people tend to forget about how critical it is as the role it plays in serving all of your applications and your users. >> Let's get into the *fourth report 'cause they surveyed a bunch of hundreds of security and risk management leaders, both compliance and also security pros that are using DNS, what were your key thoughts on the takeaways from that study? What should people know about it? >> It's very encouraging as up in Infoblox about five years when I first joined, the usage of DNS as a network context as a way to help with security operations is very, very low. And that causes all sorts of issues for organizations when it comes to doing security operations. I mean, a prime example is, the guys who work in security operations, that is the biggest issue for customers right now. They've bought almost too much security gear. And each of those security tools and platforms, they're generating security events. So again, security events from your firewall, or from your IPS or from your neck system, or whatever it happens to be and the burden now falls on the security operations teams. And it's been proven that there's huge amounts of open opportunities because there just, isn't enough trained security operations staff and the ones who are already in the business, are massively overworked and struggle to get through all the security events that have been firing from their security operations tools. So for what I was encouraging from the first report is that organizations are realizing that DHCP is going to help* you be able to identify the fact that these two security events seem completely separate. One of them is got a source address of 10.1, the other ones 20.1, well, you know what? This laptop moved from one side the building to the other and got a different address, it's actually the same device. But based on the traditional security events you're getting from the existing tools, you know, you're going to think it's two separate events, and they're not. Likewise, one of the things that's coming out is that people start to use DNS as an audit trail. And one of the challenges for organizations is, if you get a data breach, what's one of the first questions a journalist is going to ask you is like, well, what is the scope of the breach? What was impacted? And quite often organizations are not prepared. They come back and say, well, at this stage, we don't know. That's a great way for a CEO or CFO to get fired. So a smarter way of doing it is, if you think about you got the devices under investigation, the DNS queries that those* machines have been making is a wonderful audit trail of not just the external resources it's been accessing, but also the internal resources as well, what has been potentially exposed. So I think from the forest report, we're certainly seeing people realizing what were their biggest challenges security operations. Essentially, the DDI data is almost like the oil that's going to grease the wheels of security operations. And if you don't do that, buying more security gear, it's not going to make the problem better, it's actually going to make it worse unless you can operationalize it. >> Yeah, at the end of the day, the failures right there in the low level of critical infrastructure and building floors no one cares what happened on the 10th floor foundations. I got to get your thoughts on this because as you guys have DDI abstraction, DNS, you know, as it's growing, had its evolutions with abstractions, you know, as these things kind of flex, used to be an old expression DNS tricks, you know, you would mangle DNS, and it was a naming system. So you use it the way you use it and then new innovation layers create more upside and more, takes away complexities. How does DNS scale enable value? Because now you got Cloud, you got Cloud native, new software's being written and developers want to rely on the DNS as a critical infrastructure, but also want to be enabled to have, you know, really robust applications. >> Yeah and I think with the, given the fact that all the work has been put into DNS over the last 20 or 30 years, work has resolved in a very highly available very resilient system. And so a lot of stuff has to go wrong for DNS to fully go down. And it's easy to just take things like *Anycast, Anycast allows you to connect to the nearest DNS server, that's going to give you the resolution. So it's going to give you the best performance. This also can give you the high availability and resilience that goes along with that. And I think also from the security guys point of view, is if all the things that we've started to realize is that DNS is a great avenue by which you can detect somewhat unique threats. So one of the things that comes up quite a lot, we're starting to see old malware being re weaponized to exfiltrate data over DNS. So if you're a DevOps guy, and you're building your new application, if someone compromises your application, if I tried to extract the data over HTTP or email, you probably have a solution for that. 6But how many organizations have visibility in the billions of DNS queries that's going to come out your network in a day. Which ones are those might be actually data that has been stolen, it gets encoded and corrupted, chopped up and sent out and DNS packets. Is very difficult for traditional security appliances to understand and really differentiate between legitimate DNS requests, the malicious ones are actually the ones who are benign applications that essentially tunnel over DNS because they're trying to bypass firewalls. So increasingly, DNS is a threat vector for basic data loss. It's also important to understand is really gives you a window into what the adversary is doing. So not just when it comes to data exfiltration, but other things like domain generation algorithms that allow adversaries to maintain control of devices that they compromised. So a lot of that stuff is not just about the high availability and the ubiquity of DNS, but also making sure you can be fully on top of the potential impact of DNS being exploited as a potential backdoor out of your network. >> Critical infrastructure, but also that's where you're going to see the footprints of any kind of activity right there, it's a great observation space as well for detection and analysis, great stuff. Craig, thank you for taking the time, great insight, great conversation. DNS is critical infrastructure, get on it, and people are on it, they're going to go the next level. Getting the next level networking experience is about having that security always on high availability, and protecting the bad guys. Craig, thanks for joining me on this CUBE conversation for the Infoblox virtual event. Thank you. >> Pleasure. Thanks for having me. >> Okay, that's the CUBE coverage of Infoblox is next level networking virtual event. I'm John Furrier, your hosts of the CUBE. Thanks for watching. (upbeat music)

>>from the Cube Studios in Palo Alto and Boston connecting with thought leaders all around the world. >>This is a cube conversation. I'm stew Minuteman, and this is the Cube's virtual coverage of AWS Summit online. Happy to welcome back to the program to help give us some insight into what's happening. Aws last week. And today, that is Cory Quinn is the cloud economist at the Duck Bill Group. Cory, I know it's >>thank you. Always a >>pleasure to see you >>now it is always a pleasure to see me. Thank you for once again exhibiting remarkably poor judgment and inviting me back onto your program. >>Yeah, you know, Korea, you've been on the program a few times now, including in some of the AWS goes Ah, 18 San Francisco AWS, New York City. You know, reinvent we see you. But this is the first time we've had you on online. So give us a little bit about you know what? That impact of the global pandemic has been meaning to you and more importantly, what you've been seeing from our dear friends at AWS. >>Sure, the fact that not traveling anymore and spending almost all of my time at home means that I'm a lot closer to the edge when it comes to the content I put out because I no longer have to worry about someone punching me in the face. But other than that, from a business perspective, things tend to be continuing on much as they have before with four different customer concerns. The more interesting question from my side has been what is the effect this is having on people Because we're working from home remotely? It's not really a fair test of how well you can do remote. I've been doing it like this for years, and there's a There's a sense of existential dread that's hanging over people's at more so than usual, more so than right before the AWS re invent. You know, when you're wondering if you're about to have your entire business put out of business by an AWS. Now, it's just that sort of dread that never goes away because they won't deliver the keynote If you'll pardon me if using a metal >>Yeah, it's been really interesting to watch, you know, for you, of course. I mean, Amazon is, you know, a big player in the industry before this Amazon one that gets talked about a lot in the news. You know Amazon overall, You know, when this first pitch they announced they were hiring 1000 then they went through that faster than anyone could believe. You know, you think about having to hire a driver remotely. You know, my joke was you know, Alexa the screen. Everybody and I are everyone. But then they hired another 75,000. And it's not just the warehouse and the whole food people, because I've seen a number of people that I know getting hired by AWS do. So you know, you talk. It's all about the people that you know, the number one in the endemic people. How's Amazon doing? What feedback are you getting for? How they're doing? >>Well, I don't have too many internal sources that confirm or deny things of strategic import because it turns out that I'm generally not for those things. Who knew something I'm picking up on across the industry has been that if you're building a hyper scale cloud provider, you're not looking to next border. The investments you make today are going to be realized 3 to 5 years No one is currently predicting a dramatic economic impact community felt for a decade, based on the current question. So, yeah, AWS is still investing in people, which is always going to be the limiting constraint there still launching regions we have to launch within a month, and we're still seeing a definite acceleration of anything of the pace of innovation as a W was like. Now my perspective, that's both reassuring that some things never change. And, of course, the usual level of depression where oh, good, there's still more services to learn what they do. Learn how the names work, find ways to poke holes in their various presentational aspects. And, of course, try and keep the content relatively fresh. There's only so many times you could make the same joke for people. >>Yeah, absolutely. And of course, you bring up a really good point. You know, Amazon that they have a long strategic plan there. If they're building new data centers, they're building the power in perfect for these things. It's not something that they're going to change on a dime. They plan these things out far in advance, and AWS does, of course, have a global scope. Um, you know, I really, you know, wonder. You know, from an operational standpoint, are there any pressures on them? You wrote an article you know, relatively recently talking about one of the other public cloud providers that is by our customers. And we even have performance issues. AWS seems to be running through this dealing with acid. You know, I've had phone systems that have problems. You know, everybody as when they're working from home engine internally. Even if you've got a gig bandwidth When the fire neighborhood has Children on, you know, the classrooms online for video. There's pressures there. So you know where your teams from what I've seen, you know, AWS operationally is running well and, you know, keeping things all up and running Is am I missing anything? >>No. I mean the database is fond of saying there's no compression algorithm for experience, as I'm fond of saying, that's why they charge per gigabyte. But what that means is that they've gone through a lot of these growing pains and largest instructional stories in 2010 to 2012 EBS outages, causing a cascading failures as everyone saturates links as they roll from region to region or availability zone availability zone. They understand what those workloads look like and what those years are, and they've put in credible amount of engineering into solving these problems. I think that anyone who looks at this and doesn't see this happening is unfortunate place because we don't have to its approach utility level of reliability. You don't wonder every time you turn the faucet on whether water is going to, and we're now at a point of seeing that with AWS Resource. Now they're still going to be recurring issues. And there have been basically since this thing watched a particular instance. Size and family in a particular availability zone of a particular region may be constrained for a period of weeks, and that is something that we've seen across the board. But that has less to do with the fact that they didn't see this stuff coming in that appropriately and more to do with the fact that there's a lot of different options and customer demand is never going to be an exact thing we are seeing some customers dramatically turn off city and others sporadically scrapping capacity up. It comes down to what is the nature of this endemic on >>there. Yeah, well, this absolutely does. But you know, some of those promises of the cloud test I should be able to spin things down some things I should be able to turn off. And if I have to know shut down by business, I should be able to do that. Um, I'm curious what you've heard on changing demand out there. Worry. Um, you know, on the one hand, you know customers there re buying, they're getting reserved. They're making for that. They can, you know, optimize every dollar. But when something like this comes up and they need a major change, you know, are they stuck with a lot of capacity that they didn't necessarily want? >>Sometimes it comes down to a lot of interesting variables For me, the more interesting expression of this is when companies see demand falling off a cliff. As users, we're no longer using what their what they built out. But their infrastructure spend doesn't change. That tells me that it's not a particularly elastic infrastructure. And in fact, when people are building the elasticity into their applications, they always interpret that is scaling up rather than scaling down because the failure mode of not scaling up fast enough is you're dropping customer requests on the floor. The failure mode of not scaling down fast enough just means you're spending money. So when you see user demand for environment cut by 80% but the infrastructure cost remains constant or the infrastructure usage defending. That's a more interesting problem. And you're not gonna have a lot of success asking any cloud provider for adjustment when? Well, okay, you're suddenly not seeing the demand, but you're still remains the same. What is this based upon? You need to actually demonstrate a shortfall. First of wow, you know, we normally spend a $1,000,000 a month. Well, now we're spending 200 grand a month. Yeah, about that. And once you could do that, there are paths forward. I have not yet heard stories about, frankly, any of the big Three cloud providers, absolutely hanging customers out to dry in the cloud I have heard whispers about, for example, with G suite, where they're not willing to. And this this feels like a very dark way to go. But I'm going for it. Where will we just laid off 1/3 of our staff and we get a break on the annual licensing for those seats on G suite. And the answer is no. That feels like it stings and is more than a little capricious. >>Yeah, No, absolutely. You know, one of the things that the underbelly of fast is, you know? Oh, it should be elastic like cloud. But often times you're locked one or your contract, and if all of a sudden you find yourself with that meeting half the demand and you call them up, you know, Are they going to give you that break? So you know, Price and Corey, you know better >>than most. So all right, let me spoil it for you. Every provider is going to give you a break on this because this is a temporary aberration. As far as the way the world works, we're not going to start seeing Global 10 X every year, I hope. And when this crisis passes, people are going to remember how their vendors treated. And if it's well, we held your feet to the fire and made you live up to that contract that sticks with me, and it doesn't take too many stories like that, or people pulling lawsuits out of Acer to demonstrate that a company beat the crap out of them to say, Huh? Maybe that's not where I want to thank my sizeable cloud. Invest. >>Yeah. So, Corey, how about you know, there are there certain areas where I heard, you know, certain that maybe were slow rolling cloud and all of a sudden realize that when they're working from home, they plug and adjust their servers that are saying, Oh, jeez, maybe I need to hop on this. Then there's other services. You think VPN usage must be through the roof workspaces. So when first announced, you know, many years ago was a bit of a slow roll had been a growth ah, area for Amazon for the last couple of years. Are you hearing anything specific to new services or increase growth in certain services like I'm in? >>There are two patterns we're seeing. Of all. One is the traditional company you just described, where they build out a VPN that assumes some people will occasionally be working from home at a 5% rate versus the entire workforce 40 hours a week that that model that model is training every. Whereas if you go back the last 10 years or so and look at a bunch of small businesses that have started up or startups that have launched where everything they're using is a SAS service or a cloud service, then there is no VPN. I don't have a VPN. For example, the fact that I have a wireless network here in my house and I'm at dislocation. There's this I p address isn't white listed anywhere. The only benefit that this network has over others is that there's a printer plugged in here, and that's it. The identity model of Ioffe indicate to these services by the credentials of a user name and password by enchanting something, and they send an email that I click the link that that winds up handling the Asian night and there is no bottleneck in the same direction. I feel like this is going to be the death now for a lot of VM centric for tonight. >>Alright, Corey, want one of the other things about aws is they don't stop. And what I mean is, you know, you talked about them always being online. But you know every week there's a new announcement. It keeps feeding your newsletter, feeding your feet. You know everything going on there. How is number one? You know the announcement? Brains from AWS going and anything specific. You know, John Furrier was, you know, interest in, you know, Amazon Apolo, something that was released relatively recently. >>The problem with a lot of these new services that get released relatively recently is that it requires time to vet out how it works, how it doesn't work, how it should have wound up being implemented to solve your particular use case or, in my case, how they could have named it better. But you're not able to come up with those things off the top of your head the first time you see it because it's irresponsible at scale to deploy anything in production. You don't understand. It's failure cases right now, with everyone scrambling, most companies are not making significant investments in new capabilities. They are desperately trying to get their workforces online and stay afloat and adjust very rapidly changing. And oh, they built a new data store or something of that. Nature is not going to be this sort of thing that gets people super excited in most shops, that time will change. But I do feel a bit of it right now for a lot of these product teams who've been working away on these things for months or years. And now suddenly they're releasing something into a time when people don't I care about it enough to invest the effort that, yeah, you bring up a really good >>point. Corey, you know, there's certain things. If I was working on a project that was going to help me be more agile and be more flexible, I needed that yesterday. But I still need that today. Um, some other projects, you know, might take years to roll out a eyes. Technology that has been growing bring over the last couple of years were I O T solutions are a little bit more nascent. So is what you're thinking. It's a little bit more Stick to your knitting and the solutions and the products that you're leveraging today. And some of the, you know, more visionary and futuristic ones might be a little bit of a pause button for the next couple months. >>Exactly if you're looking at exploring something that isn't going to pay dividends for 18 months. Right now, the biggest question everyone has is what is the long term repercussion of this going to be? What is the year? What we're gonna look like in three years? Because that's where a lot of these planning horizons are stretching to. And the answer is, Look, when I wind up doing a pre recorded video or podcast where I talk about this stuff and it's not going to release for four days, I'm worried about saying something that was going to be eclipsed by the new site. I worry on my podcast reporting, for example, that I'm going to wind up saying something about that dynamic, and by the time it airs in two months, it's Oh, look at this guy. He's talking about the pandemic. He doesn't even mention the meteor, and that's the place right now where people are operating from, it becomes much more challenging to be able to adequately and intelligently address the long term. When you don't know what it's going to look like, >>Yeah, absolutely. For our viewers, when you hear my segment on Cory's ask and you wonder why we could talk about that it's because we missed that one week window that we're in right now When we're talking about murder Hornet, Not when we recorded it. Not when we released the really good point court. You know, Corey, you know, data is one of the most important things. You've done a lot about data portability, you know, all the costs involved. Cloud Amazon's trying to help people, you know, with, you know, bringing data together. You know, I said in one of the interviews with Andy Jassy a couple years ago, while customers were really the flywheel for AWS for a number of years, I think it is data that is that next flywheel. So I'm curious your thoughts as our, you know, enterprises think about their data, and AWS is role >>there incorrectly. If you want me to be blunt, there's an awful lot of movement, especially as we look at AI and machine learning to gather all of the data. I've been on cost optimization projects where Wow, that's an awful lot of data sitting there. And that s three bucket. Do you need it all? And I'm assured that yes, all of the sales transaction logs from 2012 are absolutely going to be a treasure trove of data just as soon as they figure out what to do with it, and they're spending our piles of money on >>it. But >>it's worse than that because it's not just that you have this data that's costing you money. That's almost a by product. There's risk to an awful lot of forms of data with regulation that continues to expand. Data can become a toxic asset in many respects. But there's this belief of never throw anything away that's not really ideal. Part of the value of a same data management strategy is making sure that you can remove all of the stuff that you don't absolutely need right now, with AI and ML being where they are, there's this movement or keep everything because we don't know what that's going to be useful for. Down the road, it's a double edged sword, and enterprises are at this point not looking at this through a lens of this thing could hurt me so much as they are. This thing could possibly benefit that the business in the future. >>Alright, so Cory, I I've really noticed over the last few months you've spent a bit more. I'm talking publicly about some of the other clouds that aren't AWS, though. You know what we are covering? AWS Summit online. Give us what you're hearing from Microsoft, Google and others. You know any strategies that Aaron you any you know, customer movement? That is worth >>sure. I think that we're seeing customers move in the way that they've always been moving. People made a bit of a kerfuffle about a block post I put out with the extremely Clickbait idle of Zoom chose Oracle Cloud over AWS. Maybe you should, too, and there were a few. There are few conclusions people drew understandably from that particular headline, which was, for example, the idea that AWS have lost a workload that was being moved from AWS to Oracle. Not true. It was net new. They do already has existing relationships with both Azure and AWS by their own admission. But the argument what what I took that particular change to be in my case was an illustration of something that's been bugging me for a while. If you look at AWS data transfer pricing publicly posted stop, which again, no one of this scale is going to pay. It is over 10 times more expensive than Oracle. Wow. And what that tells me is that I'm now sitting here in a position where I can make you made a good faith recommendation to choose Oracle's for cost reasons, which sounds nuts. But that's the world in which we live. It's a storytelling problem, far more than it is a technical shortcoming. But that was interpreted to mean that Oracle's on the rise. AWS is in decline. Zoom is a very strong AWS customer and has made public commitments. They will remain so right now. This is what we're seeing across the board. You see Zoom doing super well. They're not building out a whole lot of net new, either. What they're doing is building is just it's desperately trying to stay up under brushing unprecedented demand. That's where the value is coming from right now, clouds elasticity and they're not doing. You know, we're going to go ahead and figure out if we can build a new continuous deploy process or something that it makes on call a little bit less brutal. That's not what anyone's focusing on it here. Wow, this boat is sinking. If we don't stay up, grab a bucket, start bailing. And that is what they're doing. The fact that they're working with every cloud provider, it shouldn't come as a surprise. >>Yeah, well, it's interesting. I'm thinking about Zoom, and one of the things that I've been watching them for the last couple of everybody has is, you know, the daily updates that are happening Related security. Um, you know, I think back, you know, 67 years ago, Amazon had This is our security model. We're not changing it for anyone now. You know Amazon as a much more flexible and nuanced. So there are >>still in violent principles that Amazon will not and cannot shift. So, to be clear, they have different ways of interfacing with security in different ways of handling data classification. But there are rules that you knew are not changing. It's not well surprised. Now, suddenly, every Amazonian who works there can look through your private data that none of that is >>happening. I >>just want to very clear on >>that. Yeah, No, you're absolutely right. It's more security, you know, getting more engine even than ever. And it was already coming into 2020 before everything changed. What was one of the hot topic? Great. You know, I'm curious. You know, we're looking at a virtual event for AWS. Have you been to some of these? You know, you're getting burnt out from all of the online content. I'm sure everybody's getting tired of you. So are you getting tired of everyone else? >>I don't accept that anyone ever get tired of me. I'm a treasure and of the light. But as far as online events go, I think that people are getting an awful lot profoundly wrong about that. For example, I think that people focus on, well, I need to get the best video and the best microphone, and that's the thing that people are going to focus on, rather than maybe I should come up with something that someone wants to listen. People are also assuming that the same type of delivery and content works super well in a stage for 45 minutes is not going to work when people can tab over to something else and stop paying attention. You've got to be more dynamic. You've got to be able to grab people's, and I think that people are missing the forest for the trees. Here, you're just trying to convert existing format into something that will work online in the immediate short term. Everyone is super sympathetic. It's not going to last. People are going to get very tired of the same tired formatting ropes, and there's only so much content people are going to consume. You've got to stand out and you've got to make it compelling and interesting. I've been spending a lot of time trying to find ways to make that >>work. Yeah, I had a great conversation with John Troyer, he said. You know, we can learn something about what? Some of the late those Ah, you know, I think there's a new opportunity for you to say There's a house band, you know. You have a small child at home, divert Amerine there's your house band. You know you can have a lot of fun with >>Oh, absolutely, especially during a tantrum that's going to go super. Well, I'm just gonna watch one of her meltdowns about some various innocuous topic, and then I'm going to wind up having toddler meltdown the Amazon s three remix, and I'm sure we could wind up tying it back to something that is hilarious in the world of cloud. But I'm trying to pull off a little bit longer before I start actively exploiting her for Internet points. I mean, I'm going to absolutely do it. I just wanted to get a little color. >>All right. Well, Corey, want to give you the final word on AWS? The online events happening, you know, give our audience that what they should be looking at when it comes to their AWS estate, >>cool as usual attention to what's coming out. It's always been to have a low level awareness of what's coming out on stage. I don't feel you need to jump in and adopt any of it immediately. Focus on the things that matter to your business. Just because something new and shiny has announced on stage does not need a fit for you doesn't mean it's not, but remain critical. I tend not to be one of the early adopters in production, things that have a potential to wind up housing challenges, and I'm not saying, Oh, stay on the exact old stuff from 2010 and nothing newer, but there is a bit of a happy medium. Don't think that just because they released something that a you need to try it or B, it's even for, you know, AWS service is for everyone but every AWS services for someone. >>Alright, Well, Cory Quinn, always a pleasure to catch up with you. Thanks so much for joining with you joining us. >>Thank you. It was over the suffering. The slings and arrows Appreciate >>it. All right. Thank you for watching everyone. Lots of coverage of the cube at the AWS Summit online. Check out the cube dot net for all the offering. And thank you for what? >>Yeah, yeah, yeah.

>> Announcer: Live from Las Vegas, It's the Cube. Covering AWS reInvent 2019. Brought to you by Amazon Web Services and Intel along with its ecosystem partners. >> Welcome back everyone, we're live here in Las Vegas in the Cube for live coverage of Amazon reInvent 2019. I'm John Furrier here instructing the singer from the noise. We have an amazing guest here, the founder of Aviatrix, I mean the CEO of Aviatrix, Steve Mullaney. Welcome to the Cube, thanks for comin' out. >> Thank you, good to see you. >> So first of all, I want to get into your experience, because I think it's notable having you on, because you've been in the industry for years, you're CEO of a multicloud software, a new kind of company. And this is what Andy Jassy was talking about on his Keynote today, that there's new kinds of companies, there's the born in the cloud, then there's enterprises re-borning in the cloud, my word. It's actually pivoting or re-platforming, re-imagining, whatever you want to call it. This is the new game, and if you're not on that side of the street you could be out of business. >> Steve: Yeah, no we're definitely seeing that and I think that's the thing that really got me excited about a year ago, was watching enterprises make that transition and say you know what, the center of gravity has gone from architectures inside the on-prem data center, is now moved to in the cloud. That shift has happened, people talked about it five years ago, but they didn't mean it. Now when you talk to enterprises, they are actually moving into the cloud, not just talking about it. And they're saying that is the center of gravity. And what's interesting to me was, I think even just the tone of Andy Jassy today and what he was talking about was once you define what your architecture is, you push it everywhere. So cloud 1.0 and 2.0 was really more about taking my architecture that was on-prem and pushing it into the cloud. So let me take virtual clients, a virtual router, basically my hardware router, package it up, put it on the cloud. That's not cloud native, it's cloud naive as we talk, right? So the change that's happened is now everybody realizes that the center of gravity is in the cloud, and you start seeing things like outposts. You see things like wavelength, you see things like TGW network Manager and things getting pushed out. The architecture of the cloud, now actually pushing out and extending out into on premises. >> John: Well, I want to give you a prop for a couple things. One is, for the folks watching, and read my post about my interview with Andy Jassy, I said two things in there that I borrowed or stole from Steve. One was cloud native without the T is cloud naive. And T for trust, T for IT, that was clever. And we're going to get into that-- >> Well I stole that from our sales guy Harold Hilderbrand, so you know what? >> John: Harold shout out to you. The second thing that I heard used when we were talking, we were talking about transitions vs. transformations. I think that is so on point because I think that encapsulates what Jassy's saying and what the industry is feeling right now. Transitions are for incremental improvements, transformations are for flipping the script. >> Steve: Right, right. >> This is really happening. Can you share what you mean by transitions vs. transformations? >> Yeah, so when you're in a computing model, there's been really three computing models. There's mainframe, which was 50's or 60's, to 80's or 90's, there's a 20-30 year period where IBM, DAC and so forth. That was the way you did enterprise computing. Then this PC client server thing came along, which was viewed as a toy at the beginning. For print sharing and work groups and people said are you kidding me? PCs, Servers are just PCs with two power supplies. I'm not running my mission critical infrastructure on PCs. But in the 90's with the internet, IP protocol, it's shifted. That became that transformation. So incumbents never win transformations. DEC, IBM and what happens is they're never in the conversation, because it's a transformation. Incumbents always win transitions, so for the last 20 to 30 years, Cisco, great, fantastic company. Very respected company. John Jamers will talk about transitions and talk about he would pat himself on the back, and how they would win market transitions. You're supposed to win a market transition as an incumbent, don't pat yourself on the back. The customers will force you to win the transition because they don't want another leader when you're in that same model. We are now entering that third transformation, this a model of computing change. This is from the top down business transformation Andy was talking about, which is true. You have companies redefining who they are, and they are leveraging cloud technologies to do that. This is not a cost thing, this is not a bottoms up technology thing that IT guys just say ah I want to learn something new. This is top down business transformation, existential threat to the survival of my company kind of stuff, and we need to move fast, and enterprises all move together. That's now happening and transformations, that confusion creates opportunities, because it moves so fast that the legacy vendors just don't have time. They have the innovators dilemma, they can't move to the new way quick enough. >> Yeah and one of the things I want to get your thoughts on and I want to get your reaction to is as we go to all the events in cloud, in this business, we see everything, the one tell sign, for me, is the security market. Security got unbuckled out of IT, in the board conversation. The jewels are on the table, the security, if you get hacked you're out of business. Talk about threats to the business, security is the leading indicator. What's going on in security? They're building their own staff, they're hiring developers in house. They are really changing the game on how they use technology. That's just in one area. You're talking about a complete reset, or reconsideration of everything that Jassy said. >> Everything, yeah, it's the business, right? Your applications are your business, right? And then all the infrastructure underneath that is there to service the applications and the data, that's why it's there. When you talk to different people, and you talk to customers like NBC and CBS, and content people, they're moving to the cloud. They're now having channels that are 100% hosted on AWS for the first time. Why are you doing that? I asked this of CBS. Because we need to move faster. Guess what, they're competing with Netflix and Amazon. They can't do it the old way, they're going to die. So they're moving all of their channels, hundreds of channels to be now cloud enabled. Because it allows them to deliver it in months as opposed to years. >> Your really interesting background, I'll share with the audience, you have a networking background, the old WellFleet became Bay Networks. Early employee at Cisco, then went to early employee at Palo Alto Networks security company. CEO Of Nicira, which is a big pioneer in software-defined networking. Which, at the time, evolved into the crown jewels of AVMWare. >> Yep, in a sense. >> You would say I would agree with that. And now you're on Aviatrix where it's got a multi-cloud abstraction, so you're kind of riding this new wave. So the question I have for you is, I coined the term being reborn in the cloud. Not born in the cloud. People who are born in the cloud, clean sheet of paper, they can scale up. But an enterprise has got to transform. Has to become reborn with cloud architecture. >> Steve: Yes, yes. >> This is a fundamental, almost look in the mirror moment as an enterprise executive, saying are we being reborn? >> Yes. >> How do companies do that? >> So we have a number of companies, enterprise companies, that are 30 year old, 40 year old enterprise software companies that, honestly, were left for dead. Where people thought, they weren't SaaS. They missed out on the whole Benny Hoff SaaS movement and they were on-prem. They had all the features, all the functionality, but they didn't have the delivery model of SaaS. They were hurting, they were going to die. People left them for dead. Now what they are doing is they've reborn themselves, in the cloud. They are pushing themselves in the cloud. Informatic, Variant, Epsolon, Eluysian, Teradata. We've got tens of these companies, that are, have reinvented themselves and now they're actually doing really, really, well. Because they had the functionality that they've always had, but now they have the delivery mechanism. There not SaaS actually, and the customers like that. Because I get my own three or four VPCs, it's my own network, it's not multi-tenant. It's hosted within AWS and now they're just migrating as fast as they can, all of their on-prem applications of customers into AWS and other clouds. >> John: All right, so I want to ask you about multi-cloud. Jassy didn't use the word multi-cloud, the critics are tweeting away on that. But, of course he's going to say multi-cloud, he's the cloud. He's the one cloud, he wants to be. >> Yeah. >> Multi-cloud is a reality. He did point out in my interview, and I think he might have mentioned on stage, that people are picking up primary and secondary. And then it's not 50/50 it's 70/30, 90/10. Whatever the ratio is then just pick one. Amazon gets picked a lot for the leader. What's your vision and how do you see the multi-cloud playing out? As people start becoming more cloud operations based. >> My view, and people, we are in the first pitch in the first inning of this cloud and people say AWS is a 40 billion dollar run rate, how can that be? Because the money has always been and always will be with large enterprise. They are now just starting to move into the cloud. There's trillions of dollars of spend that's coming into public cloud. So, first off, it's very beginning, early days. Second thing is AWS has done incredibly well with the developers and the born in the cloud people. Enterprises, not so much. And, you know what? Microsoft kind of understands enterprises. So I think we're going to be set up for a little bit of battle here, and it's, by no means, over. So I think AWS recognizes that and every single enterprise that I have talked to says I may not be a third, a third, a third across all three of the big clouds. Maybe I'll have one primary, and I think Andy Jassy says that, which I kind of agree with. I think people will have a primary, but I don't think everyone's primary is going to be AWS. I think there's going to be a lot of Azure primaries. And even some Google primaries, probably more, and I think it will be a two horse race for that. But then they're going to use the other clouds because, I was just talking to a customer today. The signature recognition software runs better in Azure. They're an AWS customer, they're moving to Azure for this. Why, because that app runs better in Azure for some reason. I think people, particularly enterprises, will make that decision. >> All right, so I want to get your take on two things, first of all I agree with you. >> I think that's what will happen. >> I would agree with that, so let's just take this scenario. Amazon wins on capabilities, they're constantly adding new stuff everyday. So, if you're a builder, it's the ultimate tool shed for technology. Azure isn't there yet, they're trying to catch up as fast as they can, they're pedaling as fast as they can. But there's a build out level and then there's a consumption level. So there's having all that capability, but also the customer's consumption has to be addressed. Solutions packaging, ease of use. So delivery mechanisms for infrastructure in the cloud. The consumption, how I buy and use, is now a consideration. Or consumer experience or whatever you want to call it. What's your take on those two dynamics? >> I think you'll see, from AWS, I don't know this, but it has to be, because this is what enterprises want. The phrase 'Go Build' is great for an early adopter. You go tell that to an enterprise, here's the power tools, go build your house. They go, I'm going to cut my hand off. I don't want to go build anything, I want to consume. So I think you're going to see them changing their tune a little bit, because the markets evolved, and I think it's caught them a little bit by surprise as well. I think Microsoft, because they know the enterprise, they won't say 'Go Build'. They're going to say 'Come Consume'. And I think that's going to resonate with enterprises. Because, at the end of the day, they don't really want to do that. Now, either way, I think it's going to be a battle. That's where Aviatrix comes into play. We help enterprises, no matter what cloud you're on, across multiple clouds or one, actually consume services. So we abstract away all the details of those native services. >> Well, I would say, if you got to transform, you have to do some building, but it would have to be the easy kit. >> Steve: Yeah, I want the easy button, I mean. >> John: Paint by numbers. >> Yeah. >> John: Self-installing house. So I got your take on that. So you got a lot of buzz in the analyst community around a phrase I've heard you say. >> Steve: Which one is that? >> There's no more food left in the data center. >> Oh, okay, yeah. >> John: And the animals are leaving the data center. >> And that's right. >> John: Food being the supplier. >> The on-prem data center. >> John: The on-prem are money and the animals being the vendors. So if there's no food in the data center, what's happening? What does that mean? >> Steve: They're goin' through, the center of gravity has moved into the cloud, that's where the food is. So you're going to see a lot of cloud naive legacy vendors put cloud on things, right? It's the same crap they had, they're just going to put cloud on it because, like I said, what do animals do when they run out of food? They go find where the food is, right? If people get mad when I say that because data centers are not going away. I know that data centers aren't goin' away, but they're going to get quarantined like mainframes got quarantined. It's going to be an expense area, it's not going to be an investment. And what do you do with an expense? You quarantine it, you cap it, you hopefully keep it flat, or your reduce it. But, sure, the data centers are going to be around for a long time but all their market caps are based on big growth. And, where people are confused is, for the last five years, everybody said we are moving to cloud. But they were talking. So if you look over the last five years, all the people selling the on-prem have done very well. So, clearly, this whole cloud thing was a hoax, right? Because, for five years, you said it was coming and it hasn't, so therefore I'm good. The problem is you're good right up until you're not good and that just happened. >> And that's happening now in your opinion? >> That's happening now and your seeing it in peoples results, publicly. And they're washing it over. They're saying it's a temporary problem. I compensated the field wrong. Bullshit, I know what's going on and, you know what? There's going to be no hiding from that. >> Yeah, and the expansion's going to be in the cloud where the developers are building apps that drive top line. >> Steve: That's where all the investment's going. >> Okay so, there's a couple of major areas developing with the cloud dynamic. The cloud scale and now data tsunami and data scale. Diversity of data and all those things are happening. You can see that in the announcements. Large scale data, the data layer network, data ops, data as code, infrastructure as code, large scale, all that's great. But networking still becomes the fundamental problem. Jassy talked about it on stage. Hops to the network, they got this wavelength thing for 5G. That's really cool. All the kind of important things that are going on, is going on at the network. Same concepts being applied to a new architecture. >> Yeah. >> Your thoughts? >> Exactly right. One of our customers, I forget who it was, said a phrase to me that I love. Again I steal everything John. >> John: I steal from you. >> Yeah, he said the network comes first. I go that is perfect, I'm going to use that. In fact, actually it's on our website. The network comes first. Because when you're building up that infrastructure, in all of computing. Compute network and storage, what's the most important? Network by far. Why, because if the network isn't architected correctly, you're screwed for life. So you've got to get that right. So that's what everybody is doing right now. Is they look and they say strategically, we're going to go build a city. First thing I got to go and do is get the basic infrastructure, and the network comes first. That is the core of my basic infrastructure. If you get that wrong, life is bad for a long long time. That's what's going on right now. >> Okay, so you've had a great career, you got the CEO of Aviatrix going on. You're also looking at startups, you advise, been on boards. What's your view of the startup landscape if you're advising startups to go at this market, this trillion dollar enterprise market, the money's being thrown in the air and the money's in the middle of the table. How do they attack that money, how do they attack the marketplace? >> First thing, number one, you got to be cloud native. You have got to understand the basic native constructs of Azure, Google, AWS. You cannot be just this thing that plops on top of it, you got to be able to programmatically, program that infrastructure and leverage it. Because all of the hundreds of billions of dollars being spent, you want to use that, right. You don't want to have to go recreate that. So that, to me, is number one. And then number two, I think there's a lot of opportunity in the cloud. Everybody thinks AWS will do anything and everything you need in networking. That is a bunch of crap. There is so many limitations that they have for enterprises. Like hundreds of limitations. The beautiful thing with networking is you push one area, and ten other problems happen. So we've got 20 years of things to do to make networking better. So that's what we're going to do. But also at the edges, right? I would say where the interesting thing happens, is the interface between on-prem and cloud. So BGP, IOS, Cisco IOS, all the things that, because it's kind of like the virtual, the physical interface. It's the cloud to on-prem interface. There's still going to be an interface. >> John: You still need plumbing. >> Then there's still going to be an interface. That interface is where a lot of the complexity and friction comes. So whether it's IoT, edge computing type things, or things that we do of bringing that cloud in a seamless, kind of simple, automated way. Bringing on the on-prem into the cloud world in a very seamless way. >> John: So, I'm got to ask you a final question. You came out of retirement. You had the good life on boards, golfing, clipping coupons, going to the beach every day. Now you're the CEO of a company going grinding it out again. A lot of older ageism coming back into the biz. A lot of people who have been in the systems business. >> Steve: Oh yeah. >> A lot of people coming back into the game. Why did you come back, what was the main driver for you to come back out of retirement? >> 'Cause this is a thousand foot wave and it's ten times bigger than what I saw in client server. It's the biggest opportunity of value creation and innovation that I have ever seen and ever will see in my life. What's also fun is every single one of the customers that we are dealing with are all old guys like me. They're all 40s, 50s, 60s, it's the IT guys from 30 years ago that everyone left for dead. Everyone thought, oh it's the developer-led infrastructure, the developers are going to do everything, uh uh. This is IT, IT is coming back and saying thank you very much developer, we got it from here. This is serious business now. This isn't fun and games anymore. We're taking over. >> But it's serious IT, it's reborn IT, it's not the old IT. >> Not the old IT, they want to do it. It's the old guys. But they're enlightened guys and gals and they want to do it in the cloud way, with the simplicity and the automation. But yet I want to bring the functionality, visibility, and control that I had on-prem. I don't want to do it the old way. I want to do it the new way. Guy today I was just talking to a customer who said, I don't want to build my Dad's network. But he's 50 years old, he's my age, you know. And so, but I think that's the key, they're enlightened networking people, yet they have the 30 years of history of understanding the subtleties of BGP and networking. >> This was our chance to hear you in the Cube, we had such a great time, our team's awesome. It's our seventh year doing reInvent, eight years total of this conference. What's your take of Jassy's Keynote this year? Is this an inflection point? Is this one of those moments where you're going to look back and say this was a time that Amazon made a change, or gassed it extra hard? >> I think, my take is, look every year he says amazing things and every year is another step function. But I think this year will go down as the year that people will look back a couple of years from now and say that was the point, that it got serious, like really serious in terms of big enterprises coming in and I think it's going to send a message to the other public clouds, and a message to all the other enterprises that say hey, maybe I'm falling behind. When you see Goldman Sachs and you see banks are laggers to the cloud. They're not early adopters, they're laggers. You see that and you go well, wait a minute, maybe I'm missing out. I think it's going to actually accelerate because he's seeing it, you know. So I think it will go down as a big inflection point. >> John: Steve Mullaney, President and CEO of Aviatrix, who's going to, you'll be on Thursday to go over some of the stuff you guys do as a company. Appreciate the commentary, and great experience riding the wave. How high was that wave? >> A thousand foot. >> Thousand foot wave. We've been riding this wave for years. What a great time it is to be here at reInvent. Keep coverage, I'm John Furrier. We will be back with more coverage after this short break. Here in the Cube Intel Studios sponsored by Intel. Thanks to Intel for your generous contributions to making the Cube and supporting our mission. We really appreciate it. Thanks for watching, we've got the more coverage after this short break. (upbeat music) (upbeat music)

>>From Miami beach, Florida. It's the queue covering a chronics global cyber summit 2019 brought to you by Acronis. >>Okay, welcome back. Everyone's the cubes covers two days here in Miami beach. The Fontainebleau hotel for the Kronos has global cyber summit 2019. It's inaugural event around a new category emerging called cyber protection. Um, this isn't a wave that's going to be part of the modernization a week we've been calling cloud 2.0 or whatever you want to call it. A complete modernization of the it technology stack and development environment includes core data center to the edge and beyond. Our next guest is Dan havens, chief growth officer per Chronis. Dan, thanks for coming on. Appreciate it. And thank you for having me, Dan. So, uh, what does chief growth officer mean? You guys obviously are growing, so obviously we see some growth there. Yeah, numbers are there. What she, what she, we have a couple of divisions in the company where we see we can really accelerate the business. >>So we came in and we wanted to make some large investments here. One of those areas was sports. You're seeing race cars out here on the floor, you're seeing all kinds of baseball teams, soccer teams, and we're talking to everybody. We have 40 teams now that are using our technology for competitive advantage on the field. Uh, the other areas, OEM, so, uh, original equipment manufacturers, everybody from making a camera to a server somewhere, having a Cronus be embedded, that's a big angle for us and we just didn't have a lot of focus. So I came into to build those divisions. I've actually joined the CEO before in a prior life in his last company and did something similar for him on a similar, uh, back there and we had violent success. So yeah, it's been a lot of fun. I've been here a year and a half and we're killing it. >>We got triple digit growth in the sporting category and similar in the OEM. It's interesting, you know, I look at a lot of these growth companies and the kind of a formula. You see, you guys have a very efficient and strong product platform engineering group. A lot of developers, a lot of smart people in the company, and a strong customer facing for the lack of a better word, field. The group you're in, you're involved, this is not, and you got marketing supporting it in the middle. Yep. So nice, efficient organizational structure on a massive way. But cyber, because this isn't your grandfather's data projection, this is a platform. What's the pitch? So the key here for us is we have to always say, and, and it, it's, it's hard to simplify and we're easy. In fact, we're cost-effective. Sometimes I'll even say I'm cheap and I'm easy. >>And that does not go out of style for an enterprise, right? So our ability to take good old fashioned backup and these things that other people need and basically extend that across. Now I can have one window where I can control, keep 'em out. If somebody gets in or from the inside or a disaster happens. I from this one place can recover my data. I'm secure with my data. I have the ability to notarize my data. So this one, and by the way, key simple interface. Customers love simple. This one simple interface to be able to do that. Now it takes a lot of engineering that goes behind that. I have plenty of, I have fancy engineering degrees and all that, but I try forget that when I'm talking to a customer because at the end of the day it's gotta make sense. A mind that doesn't know, says no. >>And I think we do a pretty good job of simplifying the message, but as they get under the covers and they roll it out, they recognize that there's, you know, we, we, we have more engineers per employee capita than any company that would have 1600 employees. Simple, easy to use. It reduces the steps it takes to do something as a winning business model. You kind of come from that school you mentioned, you know, cheap and easy. That's what is key. Yeah. But we're in a world where complexity is increasing and costs are increasing. Yep. These are two dynamics that are facing every enterprise, cyber it everywhere. What's your story when you want to educate that person so they can get to that? Yes. I want to work with you guys. What's that? What's that getting to? Yes. Processed motion look like. So the beautiful part is is we sell software right now. >>Software can be purchased complex. You install it, you can figure, you do everything yourself. We also can sell that from a cloud standpoint. So now you consume it like a service. Just like you consume Netflix at home, right? I can now consume this protection as a service. You have bolts spectrums covered. Most enterprises are somewhere in the middle. We call that hybrid. So the idea here is that there's going to be components where this data's not leaving these four walls. It might be government agency, it might be some compliance factor, but the ability to be able to say yes anywhere on that spectrum, it makes it very easy for an executive to say, okay, but we have a very, as you leverage the cloud, the OnRamp for this can be as simple as turning on the surface and pointing it at a data source. I mean, you're a student of history, obviously even in this business for awhile, you've done been there longer than you'd think. >>Data protection was kind of like that. Afterthought, backup data recovery all based upon, yeah, we might have an outage or a flood or hurricane Sandy who knows what's going to happen. You know, some force majority out there might happen, but security is a constant disrupter of business continuity. The data's being hijacked and ransomware to malware attacks. This is a major disruption point of a world that was supposed to be a non disruptive operational value proposition. Yeah, so the world has changed. They went from a niche, well, we've got their architecture of throwing back up. You've got to think about it from day one at the beginning. This seems to be your, your story for the company. You think about security from the beginning with data protection. There's only one club in the bag, so to speak. Talk about that dynamic and how's that translating into your customer's storytelling customer engagements to show you, you used an interesting word at the beginning, disaster recovery years ago, I started my tech industry in 1992 right? >>Disaster recovery is when we're going to have a flood or a hurricane and the building's going to burn down. What we find is most of our customers, that's certainly happens, but that's not the driver. The driver now is somebody after my data because the world has changed. Not only has the amount of data we're collecting change, but the ability to illegally monetize somebody else's data has become reality and you have social media that is socializes if you get breached and so forth. So there's a number of drivers. Number one, I don't want to be turned out of business. Number two, I don't want to be ransom. Then number three, I certainly don't want to do the cover of the wall street journal tomorrow morning as a top executive who looked past data. We literally watch brands, I won't mention the brand now, but a very large fortune 1000 what's called out yesterday. >>We see it every few days and we watched the carnage of their brand get deluded because they weren't protected. So I think it's the perfect storm up. I've got a ton of data, so it's coming in from all directions. Secondly, I I'm concerned about, you know, my brand and been able to protect that data and then you know, what do I do? And the disaster in this case is not necessarily flood or fire. It's that somebody from the inside or outside got in the gym. Pretend that I'm a decision maker. I'm like, my head's exploding. I'm got all this carnage going on. I don't want to get fired yet. I know I'm exposed. Nothing's yet happened yet. Maybe I settled the ransomware thing, but I know I'm not in a good place. What's your story to any, what's your pitch to me? What's in it for me? Tell me. >>Tell me the posture and the, well, we're halfway home. If you say, I know I'm not in a good place, right? Cause oftentimes somebody has to get bit first or they have to see their neighbor get bit first and then they say, Hey come in. One of my first plays would be let's find out what place you really are. I can do that very quickly and an assessment, we can gather your systems, we can get a sense for our, where's your data? Where it's flowing from. What are you doing? What are you doing to protect it? We typically will come back and there's going to be spots where there's blind spots. Sometimes they're fully naked, right? But the good news is is now we know the problem, so let's not waste any time, but you can get onboard and baby steps or you know, we can bandaid it or we can really go into full surgery however you want to move forward. >>But the idea is recognizing this has to be addressed because it's a beast. Every single device that's out there on the floor, in any enterprise, any company is a way in and a POC are critical for your business model. You want to get them certainly candy taste, show the value quickly has a POC, gets structured unit assessment. You come in on a narrow entry nail something quick, get a win. What's the, what's the playbook? Love PLCs because we're so fast and easy meaning oftentimes you do PLCs cause you're complex software and you're trying to prove your point and so forth. I love to push a POC cause I can do it inside of days, but I get the customer to take the drive. It's just on the car lot. If I get you to drive it down the block, you're not bringing it back. You're bringing it home to the neighbors. >>Right. That is the case with our software and our hit rate is key. But again it's because it's straightforward and it's easy. So though most sales cycles don't push for pilot. I can't wait to get a pilot but we don't need 30 days to do it in a couple of days. They're going to recognize I can do this too. You have a good track record of POC. If I get, this is going to be the most conceding. You might have to edit this out. If I get an audience, I will win. That is the most conceited statement on the planet. And if I get the audience and they will look, and this is why we use the sports teams. Sports teams are the cool kids using this. And if I get an executive to say, what are you guys doing with the red Sox? If I could get him or her to look, it's game over. >>Hey being bad ass and having some swagger. It's actually a good thing if you got the goods to back it up. That's not fun. Piece here is that the product works well and it's not this massive mountain to hurdle. It is. We can get started today and take bites as we go, but you mentioned sports. Let's get into that talk track. As we have been covering sports data for now six years on the cube in San Francisco. We were briefly talking about it last night at the reception, but I think sports teams encapsulates probably the most acute use case of digital transformation because they have multiple theaters that are exploding. They got to run their business, they got a team to manage and they got fan experience and their consumers, so you've got consumerization of it. You got security of your customers either in a physical venue from a potential terrorist disaster could happen to just using analytics to competitive venture from the Moneyball model to whatever sports really encapsulates what I call the poster child of using digital into a business model that works. >>You've been successful with sports. We interviewed Brian shield yesterday. Yup. Red Sox, vice-president technology. He was very candid. He's like, look it, we use analytics. It helps us get a competitive, not going to tell you the secrets, but we have other issues that people not thinking about drone strikes while the games going on, potential terrorist attacks, gathering the people, you know, adding on East sports stadium to Fenway park. They have a digital business model integrating in real time with a very successful consumer product and business in sports. This has been a good market for you guys. What's been the secret to success? >> Explosive market? Couple things. First off, you summarized well, sports teams are looking for competitive advantage, so anything that can come in under that guys is gonna get some attention plus data, fan data, system data, ticket data. Um, in baseball, they're studying every single pitch of pictures ever thrown. >>They have video on everything. This is heavy lift data, right? So a place to put it saved money, a place to protect it, a pace to access it so that all of my Scouts that are out in the field with a mobile device have the ability to upload or evaluate a player while they're out still on them and on the field somewhere maybe in another country. And then add the added caveat in our sexiest piece. And that's artificial intelligence. You mentioned Moneyball, right? Uh, the, the entire concept of, of stat of statistics came out in the Moneyball concept and you know, we all saw the movie and we all read the book, but at the end of the day, this is the next step to that, which is not just written down statistics. Now we can analyze data with machine learning and we have very, we have unique baseball examples where there's absolutely no doubt they have the data. >>It's the ability to, how do I turn that to where I can be more competitive on our racing team. So we're actually working with teams improving, changing the car on the track during the race, using our software fact. We always look forward to opportunities where somebody says, Hey, come in and talk about that because it's incredibly sexy to see. Um, but sports are fun because first off they're the cool kids. Secondly, they're early adopters. If it's gonna give competitive advantage, uh, and third, they hit all the vectors. Tons of data have to protect it. >> It's our life in the business models digital too. So the digital transformation is in prime time. We cannot ignore the fact that people want wifi. They got Instagram, Facebook, all of these, they're all conscious of social media. There are all kinds of listening sports club, they have to be, they have to be hip, right? >>And being out front like that, think about the data they have come in at. And so not just to be smart on the field, they have to be smart with our customer. They're competing with that customer for four of their major sports or whatever. Major sports in the, in the, in the, in our case in this fashionable to be hip is cool for the product, but now you think about how they run their business. They've got suppliers, um, that have data and trusting suppliers with data's. There's a difficult protection formula. They've got national secure security issues. They have to protect, well they have to protect as a big part, but they have to protect, well first off these, these archives of data that are of 20 races ago or of this pitcher pitched three years ago and I have a thousand of his pitches and I'm looking for towels. >>That is, that's mission critical. But also, uh, to boot you have just business functions where I'm a, I'm a team and I have a huge telco sponsor and we are shifting back and forth and designing what their actual collateral is going to be in the stadium. They're actually using a Chronis to be able to do that up in the cloud where they can both collaborate on that. Not only doing it, but being able to protect it that way. It's, it's more efficient for them. It's interesting. I asked Brian shield this question, I asked her how does baseball flex and digital with the business model of digital with the success of the physical product or their actual product baseball. And he said an interesting thing. He's like the ROI models just get whacked out because what's the ROI of an investment in technology? It used to be total cost of ownership. >>The class that's right under the under the iceberg to sharpen whatever you use, you use that. We don't use that. We think about other consequences like a terrorist attack. That's right. So so the business model, ROI calculation shifting, do you have those kinds of conversations with some of these big teams and these sports teams? Because you know they win the world series, their brand franchise goes up if they win the national championship, but whatever their goal is has real franchise value. There's numbers on that. There's also the risk of say an attack or some sort of breach. >> Well, I won't mention the names, I won't mention the teams by name, but I have a half a dozen teams right now and two that are actually rolling out that are doing facial recognition just for security, a fan's entering their stadium. So they are taking the ownership of the safety of their fan to the level of doing visual or facial recognition coming into their stadium. >>Obviously the archive to measure against is important and we can archive that, but they're also using artificial intelligence for that. So you're absolutely right. They owe their fan a safe experience, not only a safe experience with good experience and so forth. And we love to be associated whenever we can with wins and losses. But to your point, how do you get, or how do you show a TCO on a disaster and nobody wants to, and by the way, we've seen enough of that to know it's looming. And there's also the supply chain too. I can buy a hotdog and a beer from Aramark, which is the red socks. They say supplier that's not owned by the red Sox. They have a relationship. But my data's in, I'm a consumer of the red Sox. I'm procuring a, you know, some food or service from a vendor. Yeah, yeah. My data's out there. >>So who protects that? Well, these are unique questions that come up all the time. Again, that's a business decision for the customer. The idea is with cloud collaboration, it's technically quite easy, but again, they have to decide where they're gonna commingle their data, how they're going to share. But the idea here is, again, back to the spectrum, fully cloud and accessible and locked down airtight government's scenario where we have a, you know, a lock bottom line is you get to pick where you want to be on there and there's going to be times where my example of talking to the, uh, the telco vendor, we're, we're actually going to share our data together and we're going to make us faster, make a quicker return and design this collateral for our stadium faster. Those are business decisions, but they're allowed because it, Coronas can be as hybrid as you need to be along the site. >>And again, that resonates with an executive. They never want to be wearing handcuffs and they don't want to pay overpay for stuff to not use our stuff. And if you decide to consume cloud, you, you just pay as you go. It's like your electricity bill. All right. So the red Sox are a customer of you guys. You have or they use your service. What other sports teams have you guys engaged with who you're talking to? Give a taste of some of the samples. So European, we have a couple of formula one teams. We have a racing point. We have the Williams team and formula E we have to cheetah the dragon team. We have a adventury, we also have Neo. So we have a good presence in the racing clubs. We have a ton of a world rally cars and, and, and motorcycle motorcross and so forth. >>Then you step over into European football. So we, we, we started in cars and recognize this is hot. So then we got our first, uh, European team, uh, and we had arsenal. As a matter of fact, we have one of the legends here signing with us today. And you know, I mean, they're rock stars, right? People follow them. Anyway, so we have arsenal and we did man city. Um, and we just landed, uh, Liverpool just did that this quarter, two weeks ago. I literally just, the ink is still drying. Um, and then you move into the United States, which I brought the, you know, I brought the circus to town on January one, 2019. First when was the Boston red Sox. We quickly followed that up. You'll see us on the home run fence at San Diego Padres. Volts bought for different reasons, but both very sexy reasons. So it's the reason. >>What were the main drivers? So in the case of the Boston red Sox, it was, it was a heavy lift on video. A lot of on the protection side. Um, the, uh, San Diego was file sync and share. So the example I was giving of, um, being able to share with your largest telco vendor or with your largest investors slash sponsor for your stadium, um, that was the driver. Now what's funny about both is as they get started, he's always expanding, right? So we have the baseball teams, we did land this quarter, the Dallas stars. So that's our first hockey club. I really want. And my goal is to try to get a couple in each of the main four categories and then some of the subs, um, just cause you get the cool kids, you get a tipping point. Everybody then wants to know what's going on. I have a hundred and play. >>And so we, we typically try to qualify regional where it makes sense. Um, uh, we're, you know, we're very close with a team here in the region. So, you know, they, in the feedback from, from the, from the successes you had implementations, why, what's uh, what's been the feedback from the customers. So here's the file in this. Sounds like I'm just tripping with sales guy and I apologize. Warning signs. Okay. If they use it, we're home free. So when you get Brian or any one of these guys that are using it, all I have to do is make sure that a new customer hears this person who has no reason to say anything else and just expose them to it. Because it's this unknown, scary thing that we're trying to protect against and being able to do that and have the freedom of how aggressive or you know, what metaphor am I going to cover that? >>And then also, uh, you know, the, obviously the economics work is you pay as you go. Um, it's, you know, it's a good story. Well, Dan, congratulations on the success. Um, great to see you guys really digging in and getting those PLCs and being successful. We watching your growth. Final question for you yes. Is all the data and the patterns that you see and all of customers. What's the number one reason why a Cronus is selected and why you women? I think that's an interesting question and I think that it's a couple of reasons. Number one, we work, we're easy. We have an enormous footprint. So there's a lot to reference from. Many people have already used us on the consumer side, so we're safe. So that's one reason I would also tell you however, that we have a great ecosystem because a Kronos is different than most software companies. >>Most software companies have a huge outside sales force that sells direct to customer a Chronis. Everybody here is a partner. We sell through a service provider to a channel member through a, through a, a, a, an ISV. Um, and then we have some direct enterprise. But the idea is there's a variety of solutions that can be baked on this foundation. And I think people like that variety. I, they, they like the, like the freedom of I'm not just trapped with this one thing. I can buy it and all options are available and I will tell you an it, nobody wants to be locked down. Everybody wants options, safety in numbers. They want their data protected with the whole cyber land lens. And they know everything's changing every six months. Something's different. And I don't want to be handcuffed in my desk. I want all options available. I think that's our best value from all right, Dan, thanks for coming on. Dan havens, chief growth officer, but Krohn is weird. The Chronis global cyber summit. I'm John Ford. Stay tuned for more cube coverage after this short break.

>> Announcer: From Santa Clara, California, It's theCUBE! Covering Technovation World Pitch Summit 2019. Brought to you by SiliconANGLE Media. Now, here's Sonia Tagare. >> Hi and welcome to theCUBE. I'm your host, Sonia Tagare, and we're here at the Oracle Agnews Campus in Santa Clara, California, covering Technovations World Pitch Summit 2019, a pitch competition in which girls from around the world develop mobile apps in order to create positive change in the world. With us today, we have a Technovation executive, Devin Dillon, who is the Senior Director of Partnerships at Technovation, welcome to The Cube. >> Thank you. >> So, before we start, for people who don't know, can you tell us more about Technovation World Pitch? >> Sure, so Technovation World Pitch is sort of the culminating event of a program that we run for young girls around the world. So we invite girls to solve problems in their community. This year, we had over 7,000 girls from 57 countries participating. So lots of girls with lots of ideas. And then this World Pitch is the culmination of that. So it's a competition, and our winners from around the world are invited to come here and share their ideas. And a really exciting part is they get to meet all of their peers that are also working on solving problems and exploring technology, so it's a really great week. >> That's awesome, and can you tell us more about how you got involved in Technovation, and what your role is at the company? >> Sure, so I got involved in Technovation about seven years ago, the program was small. It had just gone international. I think our first year, we had less than 10 countries that were participating, but I really liked the idea of putting education online, accessible to anybody. Anyone can lead it, and solve a problem in their community, and learn a little bit as they were doing that. So that's how I got involved. And then, the program has grown, and we now have this big celebration event. So it looks different, but yeah, that's how I got involved. >> And can you tell me more about your role? >> Sure yes. So, I lead the program. So we have two programs at Technovation. We have Technovation Girls, which this World Summit is the celebrating event for, then we have Technovation Families, which is an educational program for our younger audience. It invites families to solve problems with AI. So my role is really to make sure that our programs are awesome, and helping people to learn. Our resources are good, and we're supporting our leaders around the world. So, our Technovation team never actually leads programs, we invite everyone from around the world to lead the programs, so we do a lot of work to make sure that the quality is there, and that the programs are having a great impact on the kids. >> Wow, and I recently heard that Iridescent became Technovation, so can you tell us more about that change, and why that decision was made? >> Yeah, I'm happy to. So, like I mentioned, we have two flagship programs. They previously had names that were pretty different and our organization was called Iridescent. And Technovation, it was this program, it was like a program that had gotten a lot of global scale and participants. So much so, that when we would say Iridescent, people would recognize us. So we changed our overall organization name to Technovation, and this program is now called Technovation Girls. We challenge girls to solve a problem in their community, using coding, and create a mobile app and a business plan, and then our other program, Technovation Families, challenges families to solve a problem using AI. >> And so I heard the girls had an amazing week. What was the schedule like, who did they get to meet? >> Sure, so it's a busy week. We have flown in girls from all over to be able to see a little bit of the Bay Area, to be able to meet each other, so we have lots of activities. We've had field trips to a lot of tech companies, so we were able to visit Uber, we were able to visit Autodesk, Google Ventures, where the girls are able to see and hear from different mentors in the industry, meet people that are working on technology, ask the questions, and then the other component is we invite the girls to connect with each other. It's a powerful moment where we have a lot of girls representing different cultures and different ideas, so we have fun things like dance parties and opportunities for them to get to know each other also. >> That sounds like a really bonding sleep over. >> Yeah, we try to create that atmosphere. Of course the girls can be shy, and they're coming maybe the first time to the United States. Many of them, English is their third or their fourth language, so it can be a little scary at first, but I think by today, they have been able to hopefully create some lasting friendships. >> That's amazing, and along with the friendships, for the people who do win, what kind of prizes do they get? >> Yeah, so we are giving away this year, over $50,000 worth of prizes. $30,000 of that is scholarships so the students can continue their education since they're young girls, they're able to sort of put that to their education how they would like, and then another option is that they can continue developing their idea. So the girls have crated a mobile app and a business plan, and so they're able to continue developing that if they would like to. >> And do they have mentors guiding them through that? >> Yes, and the exciting thing is, a lot of the mentors are here. So the way that the competition works, is that the girls are working on their idea for many months. They are creating an idea, they're coding, they're learning a lot of different things, they can be creating business plans, and the mentors are really there to support them, to help them build a relationship with someone who's maybe in the tech industry, but also just someone to give encouragement and to help them work together on their problem. >> And have you seen an increase in participant in Technovation over the years? >> Yeah, so this year, like I mentioned, we had 7,000 participants, which is a large year for us. The past two years, we've had great growth, because the program is online, and it's freely accessible. We've really been able to see a lot of take up from different people around the world. >> What countries do you hope to reach to eventually? >> Yeah, good question. Well we had submissions from 57 countries this year, so you know, each year, the submissions kind of change. So we're growing in a lot of really exciting places, I always love to see ideas from all different areas of the world, so tonight, we have some great ideas represented from Nigeria, and Cambodia, and Bolivia, and Canada, like really right there, like lots of corners of the world, so it's always exciting to see. >> And like what criteria do finalists have to pass to make it to this stage? >> Yeah, good question. So they need to submit a lot of different things to be invited to the competition. So the girls really work on pitching their idea, because we know that if you have an idea, not just in technology, you need to be able to understand how to present it and develop you know a business plan, and how you want others to understand what you're doing. They have created a mobile app, so they've coded something. They've probably learned technology or some technology skills, and then, what are our other components. They like develop their idea. So a large part of it is really thinking of an idea, making it batter, developing an actual product, so. >> Wow, and how do you think Technovation is helping the overall girls in tech, women in tech community? >> Yeah, so we're hoping it could get girls interested. So our girls are young, but we really hope to spark an interest and get them involved in the community, hopefully, this is a step on their path. Maybe they will keep taking classes that are technology related, or maybe they'll make some friends that are into technology and form a community. Maybe they'll go to college for this. Maybe some of them will become computer scientists, or engineers, or someone in technology, so it's pretty open, we want to create problem solvers and problem solvers so a lot of different things in our world, including impact technology. >> And going off of that, are there any success stories that really stand out to you? >> Yeah, I'm trying to think of some girls from this year. I think what always stands out to me, from the girls, is that they aren't just building like a mobile app. A lot of them are collaborating with people in their community, with their governments, with different non-profits. So, one of the girls this year, she's working on opioid addiction, and she's been collaborating with a lot of researchers in different universities, she's been thinking about how to create a prototype. Another girl this year is working on supporting farmers and invasive species. So she's been working with different invasive species groups to understand how this program is affecting people, so I think it's always really fun to see how the girls are not just thinking about themselves, or collaborating just on their team, they're really thinking about their community and making an impact with different people and different groups. >> And how do you hope Technovations going to continue to improve and impact more girls? >> Well, I hope we continue to create girls that feel empowered to make the world better. Which you know, is idealistic, but I think that's power of education, is that you help people to think about how to make the world better at the end of the day, and I hope we're giving them those tools. Hope we continue giving them the tools to make their lives and their communities better. >> That's awesome, and thank you so much for being here. >> Devon: Sure, thank you so much. >> This is Devon Dillon, and I'm Sonia Tagare. Thanks for watching The Cube. Stay tuned for more. (upbeat funky music)

>> from Santa Clara, California It's the Cube covering techno ovation World Pitch Summit 2019 Brought to You by Silicon Angle Media Now here's Sonia to Gari >> Hi and welcome to the Cube. I'm your host, >> Sonia to Gari, and we're here at Oracle's >> Agnew's campus in Santa Clara, California covering techno vacations. World Pitch Summit 2019 a pitch competition in which girls from around the world developed mobile lapse in order to create positive change >> in the world with us. Today we have team >> powerful daisies from Brazil. Um, and their acts called safe tears. So their members are on a Toronado. Uh, Clara Patan. Um, Anna Julia Uh, Giacomelli um Emmanuel Amara Skin and Julie Carr Bio. Welcome to the Cuban. Congratulations on your being finalists. Thank you. So your app safe tears tell us more about that. >> So our APP is a suicide prevention app in which its user gets his own glass of blue feelings, where to use their ads or remove tears accordingly with his feelings. So if the user said they had tears any, they're happy they take theirs out. >> Wow, that's amazing. So can you tell us how someone would use Thea >> So let's say I'm set. So I go to the app and I at use. So add those as my 2% rise is the absolute send motivational messages to me like saying go talk to somebody over find help and also encouraging me to be to know, to get better. And if I'm happy, I take tourists out and I get messages like congratulating me too because I'm doing better. >> So is there like a graph of your improvement of how you feel some days you feel the other days >> we would like to implement dead in your future. But right now, in this version of the app that is not available >> OK, well, yeah, that would be a great thing, Thio. So how did you come up with this idea? >> So in our community, there was a lot of suicide cases and off course with friends and family, and it was something that really needed more help. So we went Thio lecture about suicide, and the woman said that we are like a glass of water. We we feel that up and then one day all the water gets out and then somebody you know tries to suicide themselves. So we wanted this person to thio like realize that she's getting wars so she can find help before anything bad happens. >> And I know that sometimes giving advice to someone who's depressed can be very tricky. And you have to make sure saying the right thing. So how did you find out what kind of advice to give in your app? >> Yeah, we had help over school psychologist. So she was there with those the whole time we were developing and she helped us do Every single message is that the absense to the person is, you know, viewed by >> her And have you seen has anyone used the app and has felt better? Any success stories >> they're hesitant to launch, But we did tested it and people really liked it and thought that they would use it. >> That's amazing. So how >> did you all meet and why did >> you decide to join techno vacation? >> So we were from the same school from different classes where we're from the same school. So we met there and our teacher showed us the documentary code girl and their inspired us to join techno vacation because we thought it would be a cool experience. >> And so how detective ation help you achieve your goals and make your act better. >> So without techno vacation, of course, we couldn't be here and get all this experience in learning's to improve our app. So it's helping a lot. >> And, um, can you tell us more specifically like, what skills have you learned from Tekken? Ovation. >> Like programming, big public speaking and about business. We learn a lot like doing the business plan about marketing and publicity and all that. And I heard you >> guys had an amazing week this week. You went to whoever you saw Golden Gate Bridge. Can you tell us more? About what? The highlights of the wiki pad? >> Yeah, we went to Webber, of course. And we talked to people there. He was amazing. Talk to employees and see how is life there. And also we went to the Golden Bridge and we crossed the bridge. It was a Bahar, you know, we're not used to exercising. Right? And last night we had a dance party. What? She was really fun and we got to interact with people from all over the world and it was amazing. >> That's so great. Well, thank you so much for coming on. I'm so looking forward to seeing your app in the APP store one day. And congratulations. And good luck for the pitch tonight. >> Thank you so much. This has been team >> powerful daisies from Brazil. This'd the Cube. We'll see you next time.

>> from Santa Clara, California It's the Cube covering techno ovation World Pitch Summit 2019 Brought to you by Silicon Angle Media. Now here's Sonia to Gari. >> Hi. And welcome to the Cube. I'm your host, Sonia to Gari and we're hearing oracles Agnew's campus in Santa Clara, California covering techno vacations world its Summit 2019 a pitch competition in which girls from around the world developed mobile lapse in order to create positive change in the world with us. Today we have team tech witches from India with a nun. You Grover said in there. Um, when she got the other, um, and Anushka Sharma. Welcome to the Cube. And congratulations on being finalists. Thank you. So your app is called May 3. Can you tell us more about that? >> Yeah. App is an android application which connects old age homes with orphanages so that senior citizens can spend time with orphan children on individuals like you and I and everyone else can volunteer and donate to old age homes and orphanages through our app. >> Okay. And so how would someone used the Afghanis? Oh, go through Step by step >> s O as an individual. If you log into the app usually do lis. So if you press on connect, you could either press on connect to an old age home or connect to. And often it's so. For instance, I want to connect to an old age home. I press that button I would see a list off old age homes. On that list is a list of organizations that have signed up on the APP. So I press on their arranged on the order off proximity to my location. So I pressed on. Whichever one I want is a view, and then I see all of their details. I could contact them, connect to them by messaging them, calling them up, viewing their website or even navigating to their location using who will maps. Then I could also press on, see what donations they require and see exactly what they need. For instance, if an organization requires clothes or blankets, I would be able to view that on donate accordingly. Okay, >> so it's not just introducing older people to orphans, it's it's more about like, just like what can we do as a society to like donate to exactly >> on as the administrator? Often old days home, you can connect to an orphanage on organized meetings between senior citizens on children so they can spend time together and have fun activities. For instance, we have already conducted two activities in which people mingo together on the children were singing songs and they were even, you know, sharing stories. They were dancing together. It was really heartwarming. >> Wow. And do you have any other success stories from what's happened so far? >> So yeah said the two meetings that have been conducted already were huge successes in our opinion. So we had children from an often it's called cyber ball creep are going to an old age home on dhe. They spent time with the elders there, talk to them, mingled with them, learned about their life experiences on DDE up in the other meeting to reverse singing songs on Theo. Elders and children were sort of having fun together, and it was amazing. >> So I visited your instagram page and which looks amazing, by the way, thank you. And I noticed that there were a list of activities for every for for them to do when they meet each other. So can you tell us more about those activities? >> Yes, so some of the activities I already talked about them, but they could also sort of have a picnic together, get some food for each other or the children could make drawings, write poems for the elders. And those can be put up in the old age home itself so that even after the children leave, it's like a reminder and a token of love for the elders that reminds them that they are loved on the you are cared for Andi. They could also have other activities, like yoga sessions together, maybe read books to each other. There was other kinds of activities that are listed on. How did >> you come up with this idea? >> Oh, well, the initial inspiration. Or I wouldn't say inspiration. It was a bus, the incident that happened to me. So I lost both of my grandparent's. Within the span of failure, I lost my grandmother, too, can't cancer. And then after her, she passed away. My grandfather sort of felt like really lonely and that he had lost all purpose in life. On I could see firsthand the effects that loneliness could have on someone's mental and social well being on that lead to health problems that he never, ever had before. And we lost him in, unfortunately in January this year, so I really wanted to work on senior care on. Then. My teammate Basseterre suggested that we should also include orphans within this. Since you know we in India especially, we have a very strong familial bond between children and grand parents, and the's children do not have that same connection. They grew up without that kind of nurturing love that only parents or grandparents can provide to a child on. So we felt that we should be solving both of these problems and bridging them together in some in some way on. That's how we came up with this idea. >> It sounds like it's an amazing idea, and it also sounds like it could help more than just the community that you're in. But it could really help the whole world because so many people deal with loneliness, especially in old age or orphans who want love from a grand parent or parents, so it just sounds like it could be really useful. It's a lot of people, thank you. So how has your experience a techno nation been >> It has bean an amazing Johnny. We want expecting to make hated this level and is just phenomenal on the huge honor to be standing here on We began by just Regis formed We are all classmates on We have known each other for a while and so we just found out about this competition formed a team started working towards that on We were really passionate about this car. So working and taking time out of school to work on this just came naturally simply because how important this cause, boss, for us personally on then. So 12 The deactivation journey we kept on learning new things. Not all of us were aware off how to court applications. So we used Tekken ovations or curriculum on other online resources to teach ourselves those skills along the way and developed our entire project submission on DDE. Yeah, it's just amazing to be here now, sitting in front of such a huge audience. >> Absolutely. It's such a huge success for all of you. So can you tell us more about how how you all met your said your classmates, right? >> Yeah. So the four of us are classmates on Anushka is in another class within the stools, so be already sort of knew each other. Andi, I found out about the competition online and techno vacation seemed really ins like, Ah, create platform, especially because it's like, if specifically wants to empower women to court and going to make a stone. Male dominated fields that computer science on entrepreneurship. So the four of us off science students and she studies Commerz on. That's how we came together and started walking. >> That's amazing. So where do you have to see this app? You know, if you get the funding if you win today, where do you hope to see it in five years? >> Right now? Are up has already been launched in the play store, and we have about 1000 plus downloads in the future. We would like to know just to expand out of the Delhi nCr reason by We're currently working on a go pan in there and hopefully in the future in about 10 years. Maybe spread this throughout the world because I feel like communities across the work and benefit from >> men. Three. >> That's amazing. Best of luck to all of you and good luck for your pitch tonight. And congratulations. Once again. Thank you so much. So this has been team tech witches from India. You're watching the cube staging for more.

>> from Santa Clara, California It's the Cube covering techno ovation World Picks Summit 2019 Brought to you by Silicon Angle Media Now here's Sonia to Gari >> Hi and welcome to the Cube. I'm your host, Sonia today, Aria and >> we're here at Oracle's >> Agnew's campus in Santa Clara, California covering techno vacations World Summit 2019 a pitch competition in which girls from around >> the world create mobile >> lapse in order to create positive change in the world >> with us. Today we have team decoders >> from Albania. Welcome. Thank you. The members are day a row, Johnny. Um Arla Ho, Huh? And your non desk Degrassi. Welcome. And congratulations on being finalists. Thank you. So your app is called JSA. Tell me more about that. >> Okay, So this name is an opinion, and it actually means find your voice, which is also our Moto jesu is focused on helping women who suffer from domestic and gender based violence. So it has all these features that are based on our three main pillars helping the user identify the problem, empowering them and then enabling them to take >> action. That's amazing. And I know sometimes in domestic abuse cases, sometimes just identifying the problem is the hardest part, so that's awesome. That's the first part in your AB s o. Can you tell us more about how someone would use Thea? >> Yeah, So on the first round after insulation, they would face this entrance quiz a T end. It gives you on evaluation about these five questions about gender based fans, but it's more about self reflection and serving as an early warning mechanism for people and questioning their whole, >> um, >> their whole perception on gender based finalists. After that, they come to the main menu, which is the 30 day program, which has myths about violence that you can give the answer. If it's a powerful, it will give you the anti myth, mindfulness exercises and success stories of other women in similar situations. Besides from the program, we have an information and you that has contacts. Thio, coordinator to municipality coordinators, Thio nonprofit organizations. It has some basic information about gender based violence ended. It signs legislation updates on, um, laws that women can benefit from and some other additional information. But also one of the main points of our app is connecting. Scattered resource is in our country So we have all these NGOs and old these institutions that are designed to help women. But most of them do not know that they exist. So when they want to separate from an abusive husband and want to report violence, they don't know where to head. So serving that we have the S. O s menu, which has the emergency hotlines, because in Albania we have separate health fines for different situations not like here in America. 91 on you have different numbers. They change them from time to time, and it's really important to have them all in one place when you need them. Most way also have, um, you can also connect directly to psychologists, lawyers, doctors and shelters that help women who >> suffer from domestic bounds. That's amazing. It just sounds like such a great app. >> And one more thing, which is really important because this feature that I'm about to mention is about all women. It's the opportunities many. So we have collaborated with local businesses, and they have agreed to furnish the AB with job notices, how workshop notices and coupons that allowed the only the users of the app can you respond to so they can benefit from that. But the thing is, when a user, even though they didn't they do not suffer from domestic violence. The Enter the app for the Opportunities menu. They also go through the entrance questionnaire. So that's when all the questioning for >> a violin starts. And do you find that this domestic violence is a huge problem in your community? Or how did you come up with >> this idea? >> Yes, it's actually a really huge problem in Albania. We have grown up seeing all these headlines. At the moment we opened the TV, there would be a ah headline that would say, Husband killed life and it would be for the most absurd reasons. And we have. It has all these deep cultural roots, and it's really horrible. We would see it, um, Unger peers through early signs of it, of course, and we would see how Dad would soon develop Thio. What we will be see today in the news and we see it's not getting any better. So we decided we wanted to do >> something about it. That's amazing. And I hope you, uh, you take the sap worldwide and globally. Thank you I'm sure it will help a bunch of other people in the world as well. Oh, thank you so much. That is all the time we have for today. Thank you for being on the Cuban. Good luck for tonight. >> Thank you. Uh, I'm your host, Sonita Gari. Thank you for >> watching the keeps Coverage of techno. Haitian World pitched 2019 till next time.

>> from Santa Clara, California It's the Cube covering techno ovation. World Pitch Summit 2019 Brought to You by Silicon Angle Media. Now here's Sonia to Gari >> Hi and welcome to the Cube. I'm your host, Sonia to Gari, and we're here at Oracle's Agnew's campus covering techno vacations. World Pitch Summit 2019 a pitch competition in which girls from around the world developed mobile labs in order to create positive change in the world with us. Today we have teen LPs n from Spain. Welcome, and the team members are Paulo Fernandez Rosa's Sandra Cho Manual Gomez, Nouria, Peoria, the CIA, Fernandez and with the beyond Tovar. Welcome to the Cube. Thank you. So your app is called one and where tell us more about that. >> They will, when I'm were easy enough that detects anomalies when you go out to work or run am. It's to ensure woman's safety on it, obtains your location in real time. And if something happens, for example, if you stop or if you're in getting near to your destination, it calls the emergency contact or the emergency service's >> Wow, and so can you tell us how a user would would go through it. Step by step. >> Yes, A first of all you need to establish our contact am. So then you have two different Moz A the start mold, which is a for when you, for example, go running. And when do you stop the up? He takes that anomaly so it sends you a message in case off emergency it goes a the emergency contact on the other mode, it's they take me to a remote. So that's when you, for example, want to go home. And so you you don't follow your route. I am the only they up since you and alert. And in case of emergency, it's Cindy. Um, message to your contact. >> Wow. I feel like that could be really useful. Yes. Is that a big problem in Spain? >> Yes, it's He's actually well into feel better. Okay, Yeah, >> we saw this problem in our community on when they gave us the opportunity to try to help in some way. We thought while we can try to create this application on forgives on on it in our country, there have been a lot of women murdered on kidnapped ennui. A thought that it was something very >> very important. I'm That's amazing. So how did you all come up with this idea? >> A. Well, it'll be gone when we hear about their martyr off Laurel. Wilma It that made us a became aware with the magnitude of the problem, so am I. We wanted to do something that they will will be a helpful for us. So we did this >> application. Wow. And, um what problems or struggles as you go through creating this app? I >> am. Well, I think that the the worst think was the time because we had, like, a really short time to do this application to develop and to develop it because we started in February on, we had to We have a deadline in April. So for us, the time was the most difficult part. Also, the programming, the coding. But that that was because we had to learn coding. So yet the time was our our difficult >> part. If you get funding, where do you see this app in five years? >> Well, a We want to continue developing this up on improving it because we really need this up. We want to add new new languages and also introduce it in a iose to a iPhone users to use it also on in 50 years. We would like a this up to continue working about. Hopefully, maybe a this problem with disappear. >> That's great. Um, so tell us more about your experience at Tech Novation. How did you all meet? And why did you decide to join techno vacation? Tell >> me. So we discovered generation in the high school. Our technology teacher air showed as the contest, and we decided to join. And we're old friends. So it was a, like, easy to work because we already know each other. So am that's the best part. And we won't really wanted to do something that could be useful for us. So we decided to to start the Italians with that idea. >> That's awesome. What? What's been like the best experience a part of the experience so far? >> A this trip, actually, Yeah, it is being amazing. I am. It's actually one of the best rips off my life, and we're all having a great time here. >> That's also, um So, uh, thanks so much for coming on. We really appreciate it. And good luck for tonight. Thank you. This is team LPs n from Spain. Thanks so much for watching Stay tuned for more