Paper

ManualsBrandsIntel ManualsOtherIntel Xeon Processor E7320

Executive Summary

High-speed data analytics is changing the way companies compete, enabling them to generate real-time insights

to support their most important business processes. The SAP HANA* platform is a clear leader in this arena,

providing a uniquely fast and adaptable platform for real-time business on an enterprise scale.

Cloud computing offers a complementary technology that also provides game-changing capabilities for business

computing. Yet many companies have been reluctant to deploy mission-critical applications, such as SAP HANA,

in hosted cloud environments. Although they would like the potential benets, they have unique requirements

regarding security and compliance. Virtustream answers those security and compliance concerns with a global

cloud infrastructure that is designed specically for hosting mission-critical workloads.

Now Virtustream is taking cloud security to even higher levels by integrating Vormetric Data Security* into its

cloud infrastructure and utilizing a variety of security technologies that are built into the latest Intel® Xeon®

processor E7 v2 family. With this addition to the Virtustream cloud infrastructure, companies retain complete

control over their data, security keys, and security policies.

Intel, Vormetric, Virtustream, and SAP worked together in SAP* Co-Innovation Lab to integrate and test the

combined solution. The results of the tests show that:

1. The performance overhead of encrypting data with Vormetric Data Security is remarkably low on these new

platforms, one percent or less across all tested workloads.

2. SAP HANA based on the Intel Xeon processor E7 v2 family provides up to 2.2x the performance of SAP

HANA based on the previous-generation Intel® Xeon® processor E7 family, with much lower overhead for

encryption.

With this advanced, high-performance security architecture, customers can implement strong data

encryption and more granular access controls for SAP HANA, with negligible performance impact and possible

performance improvements. And with SAP HANA running on the latest Intel Xeon processor E7 v2 family, they

can experience real-time performance across very large data sets—up to three times larger than could be

supported using previous-generation platforms

Security in the Cloud

for SAP HANA

Intel, Vormetric, Virtustream, and SAP deliver enterprise-class,

customer-controlled data security

White Paper

Intel® Xeon® Processor E7 v2

product family

Real-Time Business Intelligence

Summary of content (12 pages)

PAGE 1
White Paper Intel® Xeon® Processor E7 v2 product family Real-Time Business Intelligence Security in the Cloud for SAP HANA* Intel, Vormetric, Virtustream, and SAP deliver enterprise-class, customer-controlled data security Executive Summary High-speed data analytics is changing the way companies compete, enabling them to generate real-time insights to support their most important business processes.
PAGE 2
Security in the Cloud for SAP HANA* Table of Contents Executive Summary. . . . . . . . . . . . . . . 1 The Goal: Real-Time Business with Cloud-Based Efficiency . . . . . . . 2 The Roadblocks. . . . . . . . . . . . . . . . . . . 2 Security Gaps in Public Clouds . . . 2 Data Residency Requirements . . . 3 Achieving Security and Compliance for SAP HANA in the Cloud. . . . . . . . . 3 SAP HANA: Built-In Security for Enterprise Environments . . . . . . .
PAGE 3
Security in the Cloud for SAP HANA* There is another security risk in most public clouds. The CSP administrators who manage the infrastructure typically have access to the entire solution, including applications and data. Although there may be operational safeguards, the potential for insider attacks exists, not only from CSP administrators, but also from advanced persistent threats (APTs) that use sophisticated, long-term strategies to exploit insiders.
PAGE 4
Security in the Cloud for SAP HANA* Vormetric Data Security is deployed and managed using the Vormetric Data Security Manager, which can be located either in the customer’s data center or in the cloud. Encryption keys are stored in a secure vault (see Figure 1). In typical implementations of SAP HANA, encryption keys may be hosted and managed by IT maintenance staff.
PAGE 5
Security in the Cloud for SAP HANA* Virtustream: Enterprise-Class Security and Compliance in the Cloud Virtustream is a global CSP that focuses specifically on hosting mission-critical workloads for large businesses. Customers vary in size from midsize enterprises to Fortune 500 and Global 2000 companies, and they represent a broad range of industries, including financial services, healthcare, retail, manufacturing, and many others.
PAGE 6
Security in the Cloud for SAP HANA* • P redictable backup and replication services in accordance with published terms and conditions or as specified in customer service level agreements. • T rusted infrastructure for application workloads. Virtustream takes advantage of Intel® Platform Protection Technology with Trusted Execution Technology (TXT).4 TXT cryptographically verifies platform and hypervisor integrity when systems are booted.
PAGE 7
Security in the Cloud for SAP HANA* By supporting both AES-NI and Secure Key, the Vormetric Data Security Manager increases encryption security while simultaneously reducing the performance impact on both applications and the supporting infrastructure. Notes on platform support: • AES-NI is supported in the Intel Xeon processor E7 v2 family, as well as the previous-generation Intel Xeon processor E7 family, both of which are certified for the SAP HANA platform.
PAGE 8
Security in the Cloud for SAP HANA* Negligible Encryption Overhead for OLTP-Bench Workload: Testbed Framework for Online Transaction Processing (OLTP) An open-source OLTP workload was used to determine how SAP HANA performs when operating as the database for a typical transactional business application. The OLTP workload simulates an orderentry application and includes a mix of transactions commonly associated with managing, selling, and distributing a product or service.
PAGE 9
Security in the Cloud for SAP HANA* Faster Performance with Encryption for SAP ERP Performance of SAP HANA With and Without Encryption [Workload: SAP-OLTP] Workload: SAP-OLTP8 During the testing, the workload placed on the system was equivalent to that generated by 40,000 users accessing a 4 GB dataset loaded in the SAP HANA database for various ERP functions. The results are shown in Figure 4.
PAGE 10
Security in the Cloud for SAP HANA* Summary SAP HANA is transforming the way companies compete, allowing them to analyze all available data almost instantly and integrate the resulting insights into real-time business processes. With on-demand infrastructure solutions from Virtustream, businesses can combine this breakthrough business capability with the agility and cost efficiencies provided by a hosted cloud environment, without compromising performance, availability, security, or compliance.
PAGE 11
Security in the Cloud for SAP HANA* 11
PAGE 12
Security in the Cloud for SAP HANA* 1 On a 4-socket natively-connected platform: Intel® Xeon® processor E7 family supports 64DIMMS, max memory per DIMM of 32 GB RDIMM; Intel® Xeon® processor E7 v2 family supports 96DIMMs, max memory per DIMM of 64 GB RDIMM. This enables a 3x increase in memory. 2 Better performance at lower total cost claim based on Intel estimated SPECint*_rate_base2006 results and pricing of comparable 4-socket rack server using Intel® Xeon® processor E7-4890 v2 (37.5M Cache, 2.