Cloud technologies in the financial sector. Benefit from cloud technologies

Some time ago, or rather in 2010, when asked by a respected information portal: , I answered that in the next two years “cloud computing” will not become a mass technology in banks. And so, two years have passed, it’s time to take stock. What is the state of cloud computing in the financial sector, and what are the prospects?

Periodically, there are reports in the press that this or that company, and sometimes government agencies, have begun to use cloud solutions, and some of them have even completely switched to cloud architecture. Upon closer examination, you can see that cloud solutions affected only the simplest services: mail, working with documents, WEB portals, and more serious solutions were not transferred to the clouds. Why? I think there are several reasons. Firstly, information security issues remain incompletely resolved. True, this should not interfere so much with the development of private cloud solutions. Secondly, if we are talking about public clouds, then economic feasibility is in question. For a million organizations, the universal public services offered on the market are suitable for a very limited number of companies. What can we say in this case about several hundred banks, each of which has its own specifics and requirements. In this case, each cloud solution implemented must be unique. Or not necessarily? Your opinion?

If we analyze the situation more closely, the tasks that push IT departments of banks to pay attention to private cloud technologies are quite standard. We will assume that it is advisable to use a cloud platform in cases where there are several uncertain factors, for example: a forecast for the growth of the number of users, an increase in the volume of data, a geographically distributed location of users, an unpredictable increase in the number of transactions performed or other actions. Based on this, the following picture emerges: a multi-branch, geographically distributed, rapidly growing bank. Oddly enough, fast-growing banks also include fairly solid, financially stable institutions. Their dynamic development also depends on decisions made to merge or acquire smaller financial organizations.

Due to the specifics of doing business, public solutions for financial organizations are still of little interest. So what cloud technologies might be relevant for the financial sector in the present and near future? I see the following directions:

1. Formation of a private cloud infrastructure, including cloud storage systems. Hardware solutions for building cloud infrastructure are offered by many global equipment manufacturers: EMC, IBM, HP, HDS, VCE, NetApp and others. Understanding the tasks of large companies, including those from the financial sector, Technoserv has developed its own cloud platform "VSPEX TS". Its difference from the offers of well-known vendors lies in its significantly lower cost, including the cost of ownership.

2. Desktop virtualization. This solution will ensure the mobility of company employees, simplify territorial expansion, and reduce costs for preparing and administering workplaces. There are many different competitive offers on the market. Among them there are both well-known and well-proven solutions from VMware, Oracle, VCE, and solutions from new ambitious players, for example, the TransOS operating system. The advantages of this “cloud” OS are that it can be adapted for both personal computers, and for tablets and smartphones. In addition, TransOS has seriously considered the issue of protection against malware.

3. Another serious trend is solutions for transferring databases to the cloud. For example, Oracle Optimized Solution for Enterprise Cloud Infrastructure helps you speed up the deployment and management of private cloud environments. Considering that solutions from Oracle are widely used in the financial sector, this step will simplify the migration of heavy business solutions such as CRM or SAP, and later DWH and other specialized systems, to the cloud infrastructure. The Oracle representative office announced the holding of the “Oracle Day Business Innovation Forum” in Moscow on October 31, 2012. It will be possible to discuss the latest developments in Oracle Cloud, cloud 12c versions of Oracle products, social and mobile technologies for corporate applications, and much more.

So, I propose to discuss: which cloud areas do you consider the most promising in the financial sector for the next two years?

CLOUD TECHNOLOGIES IN BANKING SECTOR

Aslanov Shamil Suleymanovich

student department PIiMMU FIiIT FBGOU VPO DSU, RF, Makhachkala

E- ma il: dr. aslanoff@ gmail. com

Shavshina Svetlana Anatolyevna

scientific supervisor, Ph.D. econ. Sciences, Associate Professor, Department PIiMMU FIiITFBGOU VPO DSU, RF, Makhachkala

For several years, there have been active discussions regarding the use of cloud technologies in banking sector. Cloud technologies are becoming increasingly in demand among representatives of large and medium-sized banks. Market participants have different speculations regarding the prospects of this technology. There are both enthusiastic reviews and forecasts of dynamic growth, as well as openly negative assessments.

Currently, the use of cloud computing solutions continues to increase in the financial services industry.

According to Gartner Group experts, in the period 2015-2017, most IT applications will move to the cloud. Share cloud services in 2016, the Russian IT services market should be 13%. And according to forecasts from the analytical company IDC, the average annual growth of the Russian cloud services market in 2015-2017 will exceed 40%.

According to research by Orange Business Services analysts, the income of the Russian cloud services market may increase from 4.5 billion rubles. up to 19 billion rubles (2012-2016) (Fig. 1).

At the same time, by 2016, the share of cloud infrastructure should reach 13% of the entire Russian market of IT services. At the same time, the market for services for creating cloud infrastructure can still generate income in the amount of 20 billion rubles. This will become possible as a result of the rapid growth in cloud infrastructure services.

Figure 1. Volume of the Russian cloud services market, billion rubles.

Today, three main methods of providing cloud services are used:

1. Infrastructure as a Service (infrastructure as a service, Iaas). The service provides an “empty” virtual server with a unique IP address or a set of Internet addresses and part of an information storage system.

2. Software as a Service (software as a service). The SaaS concept provides the ability to use a software application as a service remotely via the Internet.

3. Platform as a Service (platform as a service, PaaS). In this service, the user is provided with a virtual platform consisting of one or more virtual servers with pre-installed operating systems and specialized applications.

As can be seen from Figure 2, the most popular type of services in our country is IaaS, the annual growth of which is about 40%

Figure 2. Volume of the Russian cloud technology market by type of service, billion rubles.

This demand is due to the fact that most clients want to independently administer their own systems, which is characteristic feature Russian market. Currently, the IaaS market is represented by eleven companies: ActiveCloud, Clodo, Cloud One, CROC, Parking.ru (Inoventica Group), Selectel, I-Teco, Oversan, Skalaxi, Cloud4Y, Dataline.

Figure 3 shows the largest IaaS providers in Russia.

Figure 3. Large IaaS providers in Russia

At the beginning of 2013, the implementation of IaaS cloud technologies in Moscow and St. Petersburg was about 4%, in other regions - no more than 1%.

The next most important service in the field of cloud technologies is SaaS software, which, according to analysts' forecasts, represents an annual increase of 50%, and will only grow in volume in the future (Fig. 2). More than 90% of the entire Russian SaaS services market is covered by five large companies. In Fig. 4. The largest providers of SaaS services on the Russian market are presented.

Figure 4. Large suppliers in the Russian SaaS market

The latest cloud technology service is PaaS. This service is less in demand on the Russian market compared to IaaS and SaaS. According to various analyses, the volume of each of the PaaS and BPaaS markets in 2012 was approximately 100 million rubles. By 2017, the PaaS market volume will increase to 700 million rubles. (Fig. 2).

According to Information Week analysts, a large number of banks in the world actively use cloud services to conduct their business. In Fig. Figure 5 shows the distribution of cloud services in the world by type of use in the financial sector.

Figure 5. Distribution of cloud services in the world by type of use in financial institutions

The share of cloud services in the Russian IT services market is not so large. High requirements for information security limit banking specialists in the use of cloud technologies.

According to the results of a study by Symantec analysts, of the total number of domestic banks, almost 75% of respondents are considering the admissibility of using cloud technologies. However, the majority of respondents still shy away from the practical use of cloud technologies. According to the results of the survey, the expectations of 43% of respondents who decided to use cloud services for the sake of a sharp increase in the flexibility of the IT infrastructure were not met. Also, hopes for increasing the efficiency of IT systems did not materialize for 48% of respondents. Expectations to reduce operating costs and improve safety levels were not met by 46% and 35% of respondents, respectively.

Based on the results of the study, we can conclude that the problem of using cloud technologies lies in the imbalance between the expectations of banking structures and the real capabilities of these technologies.

In conclusion, based on the results of the analysis, it can be assumed that in the coming years, IaaS models will be developed as cloud technologies in Russian banks, providing the necessary infrastructure for the bank. The prospects for the development of SaaS and PaaS models in financial institutions seem unlikely due to the specifics of banking software. It is also worth noting that preference will be given to private clouds, since they are able to provide the necessary level of information security by placing and storing all information in the organization’s internal network, and in the independent management of the server by the staff of this bank. In turn, the use and development of hybrid clouds has its own prospects, which are associated with the possibility of moving secondary operations to public clouds

Bibliography:

1.Bataev A.V. Trends and prospects for the development of the information technology market in the Russian banking sector // Young scientist. - 2013. - No. 10. - P. 268-271.

2.Grebnev E. Cloud services. A view from Russia. M.: CNews, 2011. - 282 p.

3.IT in banks and insurance companies 2012. Cnews analytics. [Electronic resource] - Access mode. - URL: http://www.cnews.ru/reviews/free/banks2012/articles/articles17.shtml (accessed March 21, 2015).

4.Kondratiev A.A., Tishchenko I.P., Fralenko V.P. Development of a distributed cloud computing security system // Software systems: Theory and applications. - 2011. - No. 4(8). - pp. 61-70.

Cloud technologies are a method of information processing in which resources computer device are provided to the user in online service mode. The concept of “cloud” in this case personifies an extensive infrastructure that concentrates all technical details.

The main distinguishing property of cloud technologies is the unevenness of the entire variety of user requests, which is further smoothed out through the use of server virtualization. The latter concept implies the distribution of the total load between virtual servers and computers.

The concept of cloud technology includes various concepts that are focused on the provision of services. These concepts may be software, data, infrastructure, workspace, or platform. The main function of cloud technologies in all cases is to maximally satisfy the user’s needs for remote data processing and secure storage.

Today there are several types of clouds, including:

• a private cloud used by one organization and its customers;
• public cloud aimed at widespread use;
• hybrid cloud, which includes both private and public components;
• a public cloud designed for specific consumers and organizations united by common goals.

Areas of application of cloud technologies

Today, the use of cloud technologies is widespread in educational systems in various countries. Many people are making the transition to such technologies. educational institutions Europe, actively using cloud services from Microsoft and Google. IN Lately There are trends in the movement of education management systems to the cloud. The support of external providers is provided to those educational institutions that cannot independently finance high-quality equipment and use of software.

Cloud technologies have also gained recognition in the field of research activities focused on working with huge information arrays, modeling scientific experiments and introducing innovative technologies.

An example of the use of cloud technologies in Russia is the maintenance of electronic diaries for students, personal accounts for teachers, virtual reception rooms and student forums. In recent years, distance education has also been gaining momentum.

The cloud is popular in accounting, which requires constant access to special programs and services. Virtual services of various government departments are becoming widespread, and every network user can access them.

They use cloud technologies in organizations that work with huge arrays of documents, the maintenance of which becomes available to each executor without regular downloading and copying of data.

Benefits of using cloud technologies

Cloud technologies, the advantages of which are based on a high degree of protection and confidentiality of information, are at the peak of their popularity today.

The cloud is the most convenient option for data processing, as it does not require the purchase of expensive licensed programs and additional resource support. To access cloud services, the user only needs high-speed Internet and a functional browser.

For novice cloud users, there are service departments that provide assistance when even the most minor failures occur in the system.

The emergence of cloud technologies has solved the problem of purchasing powerful, expensive computers. Users no longer have to monitor network drive capacity or device performance. Organizations and individuals using the cloud can refuse to finance powerful servers. Among other things, the advantage of such information storages is the unlimited resources provided. In addition, cloud services provide users with a wide arsenal of networking tools that enable secure remote collaboration.

A valuable quality of the cloud today is considered to be user independence and free regulation of the volume of resources used, payment for which is made only taking into account their relevance.

Send your good work in the knowledge base is simple. Use the form below

Students, graduate students, young scientists who use the knowledge base in their studies and work will be very grateful to you.

Posted on http:// www. allbest. ru//

Posted on http:// www. allbest. ru//

INTRODUCTION

For many years, information technology has been inextricably linked with business. This is due to the fact that information technology provides opportunities to improve business efficiency. To remain competitive, companies need to not only keep up with trends and new technologies, but also apply them. These technologies include cloud computing, which is increasingly gaining popularity in the business world.

Cloud computing is a model for providing ubiquitous and convenient network access to a shared pool of configurable computing resources that can be quickly provisioned and released with minimal operational costs or service provider calls. The essence of cloud technologies is to provide clients with remote access to services, computing resources and applications via the Internet.

The relevance of this topic is due to the fact that the use of cloud technologies makes it possible to effectively solve business problems. The introduction of cloud technologies leads to significant changes in the organization, including:

Reduced investment in IT

Reduce IT maintenance resources

Productivity increase

Business adaptability

Disaster recovery

Increasing Capacity and Availability

Despite the effectiveness of these technologies, many companies do not use them, preferring other methods of deploying IT infrastructure. Thus, such companies begin to yield to their competitors, because Business efficiency largely depends on the information technologies used. Thus, today the issue of using cloud technologies in business is relevant, because companies need to know and apply the most effective technologies to improve their business processes that affect the profitability of the organization.

The purpose of this work is to identify how effective the use of cloud technologies in business is. To achieve this goal, I need to complete the following tasks:

1. Define cloud technologies, describe their main characteristics, identify the advantages and disadvantages of using cloud technologies in business

2. Identify the opportunities that cloud technologies provide to companies

3. Explore the functions and capabilities of the Kaspersky Endpoint Security Cloud cloud solution from Kaspersky Lab

4. Assess the effectiveness of using the cloud solution under study in small and medium-sized businesses

This work consists of a main and practical part. The main part contains 3 chapters that define cloud technologies, describe models for deploying and maintaining cloud technologies, and identify the advantages and disadvantages of using cloud technologies in business. In the practical part of the work, I examine the cloud solution Kaspersky Endpoint Security Cloud and evaluate the effectiveness of its use in small and medium-sized businesses.

cloud business kaspersky

1. CONCEPT OF CLOUD TECHNOLOGY

1.1 Definition

Today, cloud computing is one of the most popular areas of information technology development. Modern conditions of the information world require the solution of many tasks that can be effectively performed using cloud technologies. Many of the world's largest IT companies use cloud computing, which confirms the effectiveness of these technologies.

Cloud technologies represent a universal environment for storing and processing information, which combines hardware, licensed software, communication channels, as well as technical support users. Cloud technologies also mean the ability to obtain the necessary computing power upon request from the Internet. Today, large data centers allow not only storing and processing data in their centers, but also make it possible to create your own virtual data centers. This allows companies to avoid wasting resources on building their infrastructure from scratch.

The main feature of cloud technologies is scalability: these technologies are not strictly tied to a hardware platform, nor are they tied to a geographic territory. The use of cloud technologies in companies is aimed at reducing costs and increasing the efficiency of business processes.

Cloud technologies are data processing technologies in which computer resources are provided to the Internet user as an online service. Thanks to this, the user works with cloud services from anywhere and from any device: the main thing is to have access to the Internet. You can access the “cloud” not only via the Internet, but also via a local network. In this case, the user's computer is a terminal connected to the Network. Those computers that perform cloud computing are “cloud computing.” The load is distributed automatically between such computers.

The cloud has three main components:

Cloud computing. Cloud computing refers to the architecture of computer data processing. Cloud architecture provides opportunities for self-service, scale and flexible processes. This architectural solution replaces fixed costs with variable ones and provides ample opportunities for data analysis.

Cloud platforms. Cloud platforms include tools, software and information models, system software and other technologies that perform tasks.

Cloud services. Cloud services are models for providing information services.

The development of cloud technologies has a huge impact on business. In order to have an advantage over competitors, companies need to take into account modern trends in information technology. Companies that use cloud technologies in their business processes receive a number of benefits. Cloud computing is an approach to business process management that reduces the complexity of information systems. This is achieved through the use of cloud computing, self-managed and available on demand within a virtual infrastructure.

Thus, companies have the following advantages from using cloud computing: reduced IT costs, improved quality of service, and business dynamism. The reduction in IT costs is due to the fact that cloud technologies reduce operational and capital costs: thanks to the cloud, company IT specialists can focus on strategic projects without wasting time managing your own data center.

Cloud technologies work as follows: companies, instead of purchasing, installing and managing their own servers to run applications, rent servers (for example, from Microsoft or Google). The user controls these servers via the Internet. Payment only includes the actual use of servers for processing and storing data.

Computing clouds consist of a huge number of servers located in data centers. Data centers support tens of thousands of applications that are used simultaneously by millions of concurrent users. Full automation is a prerequisite for efficient management of infrastructure of this scale.

Thus, the use of cloud technologies is becoming a trend and companies need to be aware of them and use them effectively to improve business processes.

1.2 Characteristics of cloud technologies

In order for information resources to be classified as cloud technologies, they must have the following key properties: have high availability and scalability, and be cost-effective for the client. In order to distinguish cloud technologies from other earlier approaches to the provision of hardware and software resources, the following main characteristics of cloud computing are distinguished:

1. Wide network availability

2. Easy scalability, elasticity

3. Possibility of monitoring

4. Consumption accounting

5. Self-service on demand

6. Pooling resources

Wide network accessibility means that software products, resources and services are available to the user over the network, no matter what device is used. The user can use a personal computer, laptop, tablet, mobile phone or any other terminal device - the main thing is to have access to the network.

Easy scalability consists of connecting (or disconnecting) additional hardware or software devices. This happens without additional delays with the supplier, automatically.

Clouds are equipped with a monitoring system that allows you to monitor the stability of operation and assess availability.

The following characteristic is especially important for business, because directly affects the monetary resources spent on IT. It is economically beneficial that when using cloud technologies there is consumption accounting. The client does not spend cash for resources that are not used. The resources consumed are taken into account (for example, the number of users and transactions, the amount of data storage used), and based on this accounting, the supplier evaluates the services provided to the client in monetary terms.

On-demand self-service enables the customer to manage their computing needs. Such needs include server time, speed of access and data processing, and the amount of stored data. The client can exercise such control without direct contact with the service provider.

Finally, resource pooling means that the provider combines resources to serve a large number of consumers into a single pool in order to dynamically distribute power among consumers as demand for capacity constantly changes. Thus, clients monitor only the basic parameters (data volume, access speed, etc.), and the actual distribution of resources is monitored by the service provider.

2. MODELS OF DEPLOYMENT AND MAINTENANCE OF CLOUD TECHNOLOGIES

2.1 Cloud deployment models

Typically, the following cloud deployment models are distinguished: private, public and hybrid cloud.

The main models are public cloud and private cloud. A public cloud provides cloud services and resources to a large number of customers using public data centers. A private cloud provides the organization’s own infrastructure. Speaking about the public cloud, it is worth noting that it allows you to convert all relevant costs into operational costs and ensures a quick and budget-friendly launch of an IT solution. With a private cloud, capital investment is saved while maintaining full control of the IT infrastructure.

If we talk in more detail about the private cloud, it should be noted that a private cloud is an infrastructure that is located within one organization. The private cloud is designed to meet the needs of internal workforces by providing high level data security.

Today, businesses are placing more and more demands on IT technologies. A private cloud allows you to solve problems such as providing a large number of business services and optimizing costs. By deploying a private cloud, a company reduces risks associated with information security and guarantees high availability of IT resources, despite the possible high load on servers.

Speaking about the advantages of a private cloud, we can note the following:

1. Compared to the public cloud, the company has more opportunities to control the IT infrastructure, because all its components remain on the company’s side.

2. High level of security. This is ensured by the fact that the service is consumed by one organization, so the infrastructure can be optimally configured to meet the data protection requirements of that organization.

3. High performance. It is connected, in particular, with the fact that all operations take place within the framework of internal firewalls and means of protecting the perimeter of the corporate network. Thanks to this, data transfer is fast.

4. When implementing a private cloud, the efficiency of the IT department increases - at any time it can quickly deploy the required service. IT specialists only need to “pick up” the virtual machine from the template and install the required service.

Despite their advantages, private clouds have a number of disadvantages:

1. Significant costs at all stages life cycle clouds. The deployment phase requires investment in hardware and software.

In addition, a private cloud must be managed, which entails administration and specialist costs.

2. Compared to the public cloud, the risks of service failure or data loss due to physical threats are much more significant.

3. The company may face a lack of space in the cloud when infrastructure resources may not be enough.

Analyzing the above, we can conclude that the most significant disadvantage of a private cloud is the need to spend a significant amount of human and material resources for its creation and further operation. This significantly affects the financial condition of the organization.

Moving on to the public cloud, it is worth saying that a public cloud is an infrastructure designed for free use by several organizations. This cloud model can be owned by multiple companies. Despite this, the word “public” does not mean that user data is available to absolutely everyone. The public cloud implements security mechanisms to control access. Ease of configuration and low cost are the main advantages of public cloud deployment. The provider does all the work associated with creating the cloud, and the client only configures the amount of resources he needs.

In the case of a public cloud, the consumer uses the infrastructure of a third-party provider, which creates many opportunities for efficient use and redistribution of resources. Public cloud services are easy and efficient to use, as clients require nothing more than a stable Internet connection to access applications.

Speaking about the advantages of the public cloud, it is worth noting the following:

1. Ease and efficiency of use.

2. To access applications, you only need a stable Internet connection.

3. Using a public cloud makes it possible to reduce IT costs due to the absence of expenses for hardware and software.

4. Flexibility and scalability: the public cloud allows you to pay for exactly as many resources as are required at the moment, and adjust this parameter up or down.

5. Reducing time for infrastructure maintenance.

6. The risk of business process downtime due to server failures is eliminated, since application servers are located in the cloud. Providers' virtual servers are most often configured on a powerful physical base and located in large data centers, where possible downtime amounts to minutes per year.

7. The use of public clouds and the lack of user contact with complex computer equipment makes it possible to refuse the services of additional IT specialists.

However, the public cloud model has some disadvantages:

1. The main disadvantage of the public cloud is the lack of control on the part of the organization, since the performance of services is completely subordinate to the service provider.

2. Slow speed: The performance of public cloud services directly depends on the stability of the Internet connection, so in some cases data transfer may be slow. When handling large volumes of data, public clouds are inferior in performance to private clouds.

3. Poor data security is a characteristic feature of public cloud environments. Private cloud security is much more reliable.

In addition to private and public clouds, there is a hybrid cloud.

Hybrid cloud is a cloud infrastructure deployment model that provides a combination of private and public clouds and combines the benefits of each separately. The combination of these two models allows a company that already has a private cloud to leverage the resources of the public cloud. Thus, the organization has the opportunity, if necessary, to expand its own infrastructure using the computing resources of the public cloud.

Therefore, when choosing a hybrid cloud, a company gains the control and security of a private cloud with the scale and benefits of a public cloud.

Hybrid cloud features:

1. Expanding the capabilities of the private cloud. Hybrid cloud allows network users to access the applications they need in a private cloud through a public cloud, while the security of the private cloud remains the same.

2. Load redistribution. A hybrid cloud allows, if necessary, to transfer part of the load from a private cloud to a public one, which ensures a high level of performance.

3. Data security. To increase the level of data security, a hybrid cloud allows, if necessary, to store “backups” from a private cloud in encrypted form in a public cloud.

4. Mobility. Thanks to the ability to organize access to certain applications from a private cloud through a public cloud, it is possible to work with these applications from anywhere in the world as long as you have an Internet connection.

2.2 Cloud technology service models (IaaS, PaaS, SaaS)

The cloud computing concept is characterized by service models (layers) that perform specific functions. The cloud provides the following service levels:

Infrastructure as a Service (IaaS)

Platform as a Service (PaaS)

Software as a Service (SaaS)

Figure 1. Cloud technology service models

Infrastructure as a service, IaaS is the provision of computer infrastructure as a service based on the concept of cloud computing? This service model consists of physical assets - network devices, servers, disks, etc. When interacting with IaaS, the user does not control the underlying infrastructure. It manages the data stores, operating system, deployed applications, and network components.

IaaS relieves a company of the need to maintain complex IT infrastructures, data centers, client and network infrastructures. This helps reduce associated capital costs and operating costs.

Platform as a service, PaaS - is it the provision of an integrated service? platforms for developing, testing, deploying and maintaining web applications? as services.

PaaS is a service model where the client is given the opportunity to use a cloud infrastructure to host basic software and then host applications on it. Such a platform includes tools for creating and testing application software. These tools are provided by the cloud provider.

PaaS, as an integrated platform for developing, testing, deploying and supporting web applications, allows the entire range of operations? for developing, testing and deploying a web application? run in one integrated environment. This approach eliminates the cost of maintaining separate environments for each stage of application development.

Ability to create source and sharing it within the development team significantly increases the productivity of creating an application? based on PaaS.

Service as a Service, SaaS, is an application deployment model that involves providing the application to the end user as an on-demand service. The SaaS concept makes it possible to use software as a service and do it remotely over the Internet. This allows the client not to buy software, but only use it temporarily when the need arises. In this case, the main advantage of the SaaS model for the client is the absence of costs associated with installing, updating and maintaining the equipment and software running on it.

The SaaS model is characterized by the following:

the application can be used remotely

The application is charged either as a monthly subscription fee or based on total transaction volume

no additional payment is required for application support

regular automatic updates

The application can be used by several clients at the same time

The target audience of SaaS is end consumers.

To more accurately describe the three service models, Table 1 describes their characteristics, advantages, disadvantages and risks.

Table 1. Service models. Characteristics, advantages, disadvantages and risks

3. APPLICATION OF CLOUD TECHNOLOGY IN BUSINESS

3.1 Selecting an IT infrastructure for small and medium-sized businesses

A company may have a choice between the following IT infrastructures:

Internal IT infrastructure with self-support

Managed services: IT infrastructure functions are transferred to services that are managed by third parties

Cloud IT infrastructure

In the case where the equipment is owned by the company, the company has an IT infrastructure with internal management. If we compare internal and cloud infrastructure, it is worth noting that cloud infrastructure has a significant advantage in terms of financial indicators: When using a cloud-based IT infrastructure, there is no capital investment required to use it.

When using internal IT infrastructure, a company purchases expensive equipment and pays for the services of people who maintain this equipment. When one of the servers fails, the company must bear the financial costs of repairing and replacing equipment.

When transferring IT infrastructure functions to third-party companies, the following happens: the organization pays a third-party company that owns the servers. The company pays for equipment rental and maintenance.

If one of the servers fails, the third-party company that provides this service takes care of its repair and replacement. This company also makes sure that the necessary operating systems are installed on the servers and manages the network infrastructure on which the servers operate.

Comparative analysis data of IT infrastructures can be carried out by considering the following aspects taken into account when choosing an IT infrastructure:

investment

ongoing operating costs

commissioning time

flexibility

personnel qualification requirements

reliability

Investments. The choice of internal IT infrastructure involves high capital investments, because... The company itself purchases expensive equipment. In the case of managed services, the company has a more moderate investment: the company must pay an initial fee to use the equipment of a third party. Cloud IT infrastructure requires low capital investment: as a rule, organizations do not incur any initial costs or mandatory payments.

Ongoing operating costs. Current operating costs for internal infrastructure consist of costs for wages personnel who maintain and operate the equipment, and the costs of space that is provided by the hosting provider, as well as the costs of real estate, energy and utilities.

For managed services, ongoing operating costs vary depending on the terms of the contract. Often the fees for using a third-party service can be expensive, but in this case the company usually knows how much it will have to spend each month. This amount usually does not change. When considering cloud IT infrastructure, it is worth noting that it can be expensive or cheap: it depends on the needs of the company itself, because cloud infrastructure means that the company pays only for the resources and capacity consumed.

Time of putting into use. The internal IT infrastructure is characterized by a long time to put a new component into use. This is because when using internal infrastructure, a company that wants to add a new component to its infrastructure must plan this work in advance, place an order for the new component, wait for it to be delivered, and implement it in its data center. When a company uses the services of a third-party service provider, the time to bring a new component into use is usually shorter because such third-party companies purchase equipment in advance. With cloud infrastructure, a company can “spinning up” a new server in a matter of minutes if the organization decides it needs one.

Flexibility. The internal IT infrastructure has poor flexibility because... this type of infrastructure has severe limitations. There are common cases where there is an increase in resource demands and there is not enough disk space. The company can eliminate these needs only through new financial costs. Third party service providers have moderate flexibility. They can offer the company a temporary increase in disk space and resources. Cloud infrastructure is highly flexible. This is because such an infrastructure provides the company with resources as needed. A company may not use resources when it does not need them.

Requirements for personnel qualifications. Internal IT infrastructure requires highly qualified personnel. In this case, employees perform the following functions: understand the company’s IT infrastructure, support and replace equipment, monitor the current state of operating systems, install updates to operating systems and software. In the case when a company uses the services of a third-party service provider, the requirements for personnel qualifications are minimal. All issues related to IT infrastructure are resolved by a third-party company that is paid for it. When using cloud infrastructure, personnel requirements vary and depend on how and what exactly the company uses.

Reliability. In the case of internal IT infrastructure, reliability depends on a number of circumstances. Whether an information environment has high fault tolerance primarily depends on the qualifications of the company's employees and the investment in IT infrastructure. Third-party service providers provide high reliability. When comparing third-party service providers with cloud infrastructure, it is worth noting that the latter lacks stability and service levels. Thus, the reliability of the cloud infrastructure can be either moderate or high: it largely depends on the service provider.

Based on the above, we can conclude that for small and medium-sized companies having their own IT infrastructure is not advisable, because This type of infrastructure requires large capital investments and equipment maintenance costs. The choice of such an infrastructure is justified only if the company, from the point of view of confidentiality and security, cannot store its data on the side.

Thus, today it is profitable for companies to use the services of service providers or switch to using cloud infrastructure.

3.2 Benefits of using cloud technologies in business

Cloud technologies have a number of advantages. Next I will consider each of them.

Availability. Cloud technologies make it possible to access products and services from any computer that has Internet access.

Client computers. When using cloud services, a company does not need to purchase equipment with a large amount of memory and disks. Using programs via the Internet does not require a company to have a large number of such computers. Also, the company does not need a large number of storage media, because all programs, services and documents are stored in the cloud.

Reduce damage from data loss or equipment theft. When data is stored in the cloud, copies of this data are distributed across several servers, which may be located in different countries. This way, if equipment is stolen or fails, the company does not lose valuable data.

Reliability. Data centers are managed by qualified specialists who provide ongoing support for the operation of equipment and services. This fact indicates a fairly high level of reliability and fault tolerance of the system.

Economical. The company pays only for those services that it uses. Cloud technologies make it possible to pay only for the resources actually used.

Rental of resources. The need for computing resources is not constant: at some period of time the company needs additional computing resources, at some period of time they are not necessary, that is, the resources are simply not used. Cloud technologies enable companies to use only the required amount of computing resources, thereby reducing the cost of equipment and its maintenance.

Software rental. Cloud technologies make it possible not to purchase software packages for each company employee. Instead, the company buys only the software it needs in the cloud. Purchased programs are used only by those employees who need these programs for work. It is worth noting that the cost of programs that are available via the Internet is lower than their local counterparts for the PC. If the programs are not used frequently by users, then they can be rented at an hourly rate rather than purchased. One of the main advantages of renting software from cloud providers is that the company does not need to spend money and time on updating programs and maintaining them in working order at each workplace.

Service. With the introduction of cloud technologies, there are fewer physical servers, so it becomes easier and faster to maintain them. When considering the software, it is worth noting that it is installed and configured in the cloud. Its update takes place there. The company always makes sure that the latest version of the program is used. In addition, there is no need to spend money on software updates.

Open interfaces. Clouds typically have standard APIs (application programming interfaces) for communicating with existing applications and for developing new ones.

Flexibility and scalability. This implies unlimited computing resources (memory, processors, disks, etc.). Cloud technologies are elastic and scalable because resources are allocated and released based on need.

Performance computing. Compared to a regular PC, the computing power available to cloud computing users is limited only by the number of remote servers. This means employees can tackle more complex tasks that require large amounts of memory and storage space. In other words, employees have the opportunity to work with a powerful computer without the company actually purchasing it. Scalability manifests itself in the ability to run a large number of copies of the application on many virtual machines. The number of application copies can increase on demand, depending on the load.

Data storage. Personal computers have limited memory. When using cloud technologies, a company has the amount of data storage that it needs at a particular moment. There is no risk of running out of memory space because... cloud technologies provide a huge number of gigabytes of free space.

Technology for a young company. Cloud technologies are a financially viable solution for a young company, because... there is no need to purchase various expensive equipment and software, as well as to hire people who will support it.

3.3 Disadvantages of using cloud technologies in business

Despite the large number of advantages, cloud technologies have a number of disadvantages, including:

The need for a constant connection to the network. Cloud technologies almost always require a constant Internet connection. This may cause some inconvenience to the company and affect the continuity of business processes, because... If there is no access to the network, then there are no programs or documents. In addition, often cloud-based applications require a stable and good Internet connection with high bandwidth, which leads to the fact that programs can run slower than if they were located locally rather than in the cloud.

Data security. When choosing a cloud provider, you must take into account that not all third-party providers can be trusted with your data. The company must be sure that the provider provides high-quality cloud services, has been working in this service market for many years and has a good reputation. Otherwise, the company may be at risk of losing confidential data.

The state in whose territory the data center is located may have access to any information stored in it. For example, in the USA (the country with the largest number of data centers at the moment), the provider company can disclose the fact of transfer of confidential information only to its lawyers. This problem is key to the issue of storing confidential information in the cloud, which can be solved in several ways: encrypt the information and not store the most valuable information with the provider. One way or another, companies using cloud technologies must take this point into account.

Functionality of cloud programs. Not all programs or their features are accessible remotely. Today, if we compare the functionality of local and cloud programs, the latter are inferior to the former (for example, Google Docs and Microsoft Excel: the latter has more features and opportunities).

Dependency on cloud provider. There is a risk that the provider may not do backup copy data and they may be lost. However, this risk is no greater than the risk that employees themselves may lose valuable data by losing a device or failing to back up data on their PC in a timely manner.

Thus, the advantages of using cloud technologies outweigh the disadvantages. However, before making a choice whether to use cloud computing in its IT infrastructure, a company must competently build an IT security strategy, taking into account all the risks when using cloud technologies.

4. PRACTICAL PART

4.1 Problem statement

The main part of the work defined cloud technologies, examined their main characteristics, and studied deployment and maintenance models. In addition, the advantages and risks of using cloud technologies were identified. In the practical part of the work, it is necessary to study a specific cloud solution for business and evaluate its effectiveness.

For my research, I chose the Kaspersky Endpoint Security Cloud cloud solution from Kaspersky Lab, which ensures the company’s information security. The problem of effectively ensuring information security always remains relevant, because... the company's lack of proper attention to the protection of confidential data leads to an increased risk of information security incidents that can cause significant damage to the company.

The purpose of the practical part of the work is to determine the effectiveness of using cloud solutions offered for small and medium-sized businesses.

To achieve this goal, it is necessary to complete the following tasks:

Explore the capabilities of the Kaspersky Endpoint Security Cloud cloud solution

Identify the benefits of this cloud solution

Assess the effectiveness of using this cloud solution in small and medium businesses

The practical part of the work contains a description of the cloud solution under study, its capabilities and advantages, as well as an assessment of its effectiveness in small and medium-sized businesses.

4.2 Solving the problem

Today, the number of cyber threats is constantly increasing. Enterprise data protection, efficient use of work time and high-performance IT infrastructure are vital to the success of any business, regardless of its size or location. Information security requirements are similar for companies of any size: protection of confidential data, continuity of business processes, security of work devices. The result of a cyber attack on a poorly protected company can lead to serious consequences:

Loss of valuable data, including information constituting intellectual property

Leakage of confidential information about clients and employees

Violation of business processes, which directly affects business profitability.

Not all companies can hire a qualified full-time IT administrator, let alone an IT security specialist. While large companies have the resources to efficiently and effectively protect their data, small and medium-sized companies often cannot always afford to allocate sufficient funds for information protection. According to Kaspersky Lab, small and medium-sized businesses suffer losses from information security incidents, but despite this, such companies often do not take effective measures to counter cyber threats. This leads to the fact that small and medium-sized businesses become the target of attackers, because... there is no due attention to the protection of company data and information. Challenges inherent to small and medium-sized businesses typically include:

limited time for IT security

insufficient resources for administering complex solutions; small (compared to large companies) IT budget

As a result, it is precisely those companies that cannot devote a large amount of resources to information security that need a software solution that does not require significant time and effort to deploy within the company, is easy to manage and does not require additional expensive resources. Kaspersky Endpoint Security Cloud (hereinafter KES) is just such a product, the main advantage of which is the cloud management console. In this cloud-based solution, access to all necessary management functions is in the cloud. For small and medium-sized businesses, it is important that Kaspersky Endpoint Security Cloud is an easy-to-manage product that does not require special technical knowledge. In particular, this is a big plus for small companies, which often cannot have several highly qualified IT specialists on their staff. Kaspersky Endpoint Security Cloud can be customized to the client's needs using predefined scripts adapted to the standard needs of any company. This includes creating multiple user groups with different access rights, blocking access to entertainment sites, blocking the use of USB drives, linking users' corporate and mobile devices to their accounts, and much more. The choice of available scenarios can be expanded, allowing clients to use different functions depending on the number of employees, number of offices and business processes of the company.

4.3 Product Description

Kaspersky Endpoint Security Cloud is a solution that meets the needs of small and medium businesses, providing reliable protection personal computers, mobile devices and file servers from the cloud management console. By choosing this solution, the company does not need to purchase additional expensive equipment. Kaspersky Endpoint Security Cloud allows you to manage your information security system at any time, from any location and device that is connected to the Internet. This solution makes it possible to protect up to 250 jobs.

The product consists of a cloud console designed for centralized management and client applications. To work with the Kaspersky Endpoint Security Cloud cloud console, you need an Internet connection and a browser:

Internet Explorer 10.0 and higher;

Microsoft Edge 13.0 and higher;

Chrome 36.0 and above;

Firefox 35 and above;

Safari 8.0 and above.

During operation, Kaspersky Endpoint Security Cloud uses the following Kaspersky Lab programs:

Kaspersky Endpoint Security 10 for Windows.

Kaspersky Security 10 for mobile devices.

The hardware and software requirements of your computer or mobile device meet the requirements of the programs and browsers listed above.

Kaspersky Endpoint Security Cloud supports the following platforms:

Windows based computers

Windows File Servers

Android and iOS mobile devices

Thus, KES is a software solution, the essence of which is centralized management and protection of devices (PC, Cell phones, tablets, etc.) company employees.

Fig 2. Architecture of Kaspersky Endpoint Security Cloud

Key features of Kaspersky Endpoint Security Cloud include:

centralized installation and updating of Kaspersky Lab programs on the PCs and mobile devices of company employees.

Manage device settings and protect them using security profiles

managing user data, creating user groups, and assigning rights to users from the cloud.

Kaspersky Endpoint Security Cloud has a number of characteristic features:

1. The fastest possible deployment and simple management from the cloud console, flexible cloud administration. The Kaspersky Endpoint Security Cloud cloud console is always ready for use. Centralized management is supported from the cloud console, which allows the administrator to manage the security of the corporate network at any time from any device that has access to the Internet. This is convenient if the company does not have a system administrator who can be regularly present in the office. Thanks to remote protection, a company may not need to hire a second administrator if the company has several offices, which saves the organization money. Due to the fact that the console is cloud-based, the company does not need to purchase and maintain additional equipment, which also makes it possible to save financial resources. Initial setup is quick, so deploying Kaspersky Endpoint Security Cloud does not require much time or effort.

Fig 3. Remote control company devices

2. High level of protection for all types of devices. Multi-level protection of all devices used in the company is provided regardless of their geographical location. The main requirement is that the device can access the Internet.

Recognized Kaspersky Lab technologies protect Windows-based workstations, laptops and file servers from a variety of threats, including ransomware and other ransomware. Device security is ensured at many levels - protecting files from malware, protecting mail servers and Internet traffic. Protection is complemented by such effective technologies Laboratories such as Firewall, Network Attack Protection and System Monitoring. The default solution is configured taking into account the recommendations of Kaspersky Lab specialists. Device protection functions of Kaspersky Endpoint Security Cloud for Windows-based workstations and file servers, as well as for smartphones and tablets, are presented in Tables 2-3.

Table 2. Security features for Windows-based workstations and file servers

Table 3. Security features for mobile devices

3. Centralized management. All protection functions can be configured and deployed from a single console on all devices - Windows-based workstations, laptops, file servers and Androis/iOS-based mobile devices. Thanks to a simple and user-friendly interface, an employee responsible for IT security can quickly set up policies and apply them to all workstations.

4. Preset security settings. There are preset settings based on recommendations from Kaspersky Lab employees. Such settings allow you to provide full protection immediately after implementation.

5. A profitable solution for small and medium-sized companies. This solution allows companies to save money by eliminating the need to purchase additional equipment. All company devices can be protected remotely, eliminating the need to hire additional IT specialists. As a result, the protection of geographically distributed offices and branches of the company is simplified.

The main features of this cloud solution include the following:

1. Control access to devices and the Internet. Device control tools make it possible to determine which devices are allowed access to a company's corporate network. At the same time, Web Control allows you to set security policies regarding the Internet, as well as monitor the use of web resources by employees. The administrator can prohibit or restrict access to certain websites or categories of websites (for example, social networks).

2. Fast deployment from the cloud. Due to the fact that all protection functions are managed from the cloud, there is no need to install a management console on a local server. The cloud console is always available on the website https://cloud.kaspersky.com/, which makes it possible to deploy the necessary software directly from the cloud to all company devices (computers, file servers, mobile devices).

3. Easy management of mobile devices. Mobile device management (MDM, master data management) tools include functions that allow you to define access parameters for smartphones and tablets to the corporate network, set Wi-Fi and Bluetooth settings, control camera use, and adjust other parameters. To manage iOS devices, you don't need to purchase a separate management solution because the iOS device management server is already deployed in the cloud.

4. Protection against mobile threats. Modern technologies Mobile device security products from Kaspersky Lab help protect mobile devices from various cyber threats, including ransomware. Anti-phishing tools (a set of technologies used to protect against online fraud and identity theft) protect against the theft of sensitive information or credentials on fake sites. Attempts at unauthorized flashing are immediately detected, and access to the corporate network is blocked for such devices.

5. Protect valuable data, including on lost devices. If an employee's mobile device is lost or stolen, the administrator can remotely lock the device from the cloud console or delete all corporate data from it, thereby avoiding the loss of important information.

The key functionality of the KES cloud console is presented in Table No. 4.

Table 4. Cloud console functionality

Similar documents

History and development factors of cloud computing. The role of virtualization in the development of cloud technologies. Service models and operating principles of cloud services. Advantages of the cloud for Internet startups. Application of cloud computing technology in business.

abstract, added 03/18/2015


Implementation of cloud technologies in corporate information systems. Application of "cloud" technologies at RUE "Belorusneft". Commissioning, installation and launch of a cloud service, initial configuration and scaling proposals.

course work, added 07/24/2014


The history of cloud technologies. The essence and objectives of cloud technologies, their classification, advantages and disadvantages. Study of the use of cloud technologies using the example of Google Drive. Comparison of Google Drive with Apple's analogue (iCloud).

course work, added 12/05/2016


Creation and implementation levels of cloud computing. Advantages and disadvantages of using cloud technologies in organizing a single information space. Assessing the importance of criteria using the method of “Paired comparison”, “Heat maps”, “Expert assessments”.

thesis, added 04/08/2014


The evolution of cloud services. Characteristics and classification of cloud services. Analysis of the capabilities of cloud services offered for use in small businesses. Analysis of the cost of ownership of a local solution for automating accounting activities.

course work, added 05/10/2015


Analysis of cloud services for business automation and justification of the benefits of switching to cloud data processing. Types and models of cloud services for business, principles of their operation and characteristics. Business automation tasks using the example of cloud solutions.

thesis, added 09/06/2017


Analysis of the structure and content of the company's marketing plan. The cloud computing market and the possibility of their application. Selection of information sources and presentation of the results obtained. Development of a software toolkit for cloud computing.

thesis, added 11/12/2013


The concept of cloud computing, its advantages and disadvantages; types of clouds. Comparative analysis of the risks of using cloud services in Russia and the EU. Regulators in the field of information security, their concepts, features and regulatory authorities.

course work, added 05/14/2014


History of the emergence of computer science. Apple products. Main categories, distinctive features, levels of cloud services. Characteristics of public and private clouds. Advantages and disadvantages of cloud computing, prospects for their development.

test, added 08/06/2013


The concept of cloud technologies is a convenient environment for storing and processing information that combines hardware, licensed software, communication channels and technical support for users. Disadvantages and advantages of Dropbox.

Bataev A.V.

Over the past ten years, the topic of cloud technologies has become widespread not only among IT specialists, but also in business. In the Russian market, cloud services have begun to occupy one of the leading roles; not only large players, but also representatives of small and medium-sized businesses are looking at them. Today, the Russian cloud technology market amounts to billions of rubles. A growing number of Russian banks are not only discussing the prospects of these technologies, but are also actively introducing them into their business processes. Such large players in the banking business as Sberbank of Russia OJSC, Foreign Trade Bank OJSC, Alfa-Bank OJSC are actively investing in cloud technologies.

The development of cloud technologies in the Russian market has its own specifics, associated not only with problems in legislation, but also with imperfect Internet access technologies, hardware and software, as well as limitations in financial capabilities.

Cloud computing is a distributed data processing technology in which computer resources and power are provided to the user as an Internet service. Cloud service is a special client-server technology - the client’s use of resources (CPU time, RAM, disk space, network links, specialized controllers, software, etc.) groups of servers on a network interacting as follows:

• for the client, the entire group looks like a single virtual server;
• the client can transparently and with high flexibility change the volume of consumed resources if their needs change (increase/decrease the server capacity with a corresponding change in payment for it).

The development of cloud technologies was preceded by a difficult and long journey. The ideas of computing virtualization were first developed in the 50s. of the last century when optimizing the operation of large computers (mainframes). The main problem at that time was to ensure maximum load on computers in order to reduce downtime of computing power. It was then that the idea arose of providing temporary remote access to mainframes for users to fully boot up their computers.

The development of personal computers led to a move away from expensive mainframes towards inexpensive servers, so cloud computing technologies did not receive further development.

The next major milestones in the history of the concept of cloud computing were John McCarthy's statement that "computing power may someday become a publicly available resource" and the release of Douglas Parhill's book "The Challenge of the Computer Utility" in 1966. in which he described almost all the main characteristics of clouds existing today.

The idea of ​​what we today call cloud computing was first voiced by J.C.R. Licklider in 1970. During those years, he was responsible for the creation of ARPAnet (Advanced Research Projects Agency Network). His idea was that every person on earth would be connected to a network from which he would receive not only data, but also programs. Another scientist, John McCarthy, expressed the idea that computing power would be provided to users as a service.

In the 90s there is rapid development global network— The Internet, which has an indirect impact on the development of cloud technologies. Significantly increased throughput networks, the geography of coverage has expanded. Along with the development of computer networks, hardware technologies have improved, multi-core processors, the volume of information storage has increased significantly. All this led to the development of the following computer technologies, which enabled the emergence of cloud services:

• virtualization is the process of remote access to computing power;
• ASP - technologies for creating web applications and web services;
• SOA is a service-oriented architecture that provides the use of independent services with clearly defined interfaces that can be called in a certain standard way to perform their tasks;
• Web 2.0 is a technique for designing systems that, by taking into account network interactions, become better the more people use them;
• development framework - a software environment for the development of multi-agent systems and applications;
• distributed scalable computing is a method of solving labor-intensive computing problems using several computers, most often combined into a parallel computing system;
• grid computing is a form of distributed computing in which a “virtual supercomputer” is presented in the form of clusters of loosely connected heterogeneous computers connected via a network, working together to perform a huge number of tasks (operations, jobs);
• utility computing - “utility computing”, when the service of performing particularly complex calculations or storing data arrays is ordered;
• open source software - the source code of such programs is available for viewing, studying and changing, which allows the user to take part in improving the open program itself, use the code to create new programs and correct errors in them.

Further development of cloud computing technologies occurred in the mid-2000s. In 2006, Amazon launched a service called Elastic Compute cloud (EC2) as a web service that allowed its users to run their own applications, and a year later such IT industry giants as Google, Sun and IBM offered their cloud services .

In 2008, Microsoft offered not just a service, but a full-fledged cloud operating system, Windows Azure, which today is one of the largest and most comprehensive projects in the field of cloud services.

In 2010, cloud services appeared that were aimed not just at software developers, but at ordinary users.

Today, there are three stages in the development of cloud technologies proposed by Gartner (see table):

Stages of development of cloud technologies

At the first stage, cloud computing developed at the expense of companies in which cloud technologies were attracted by the opportunity to quickly enter the market and radically increase development efficiency. At this stage, cloud computing was most effective within IT projects that provided a return on investment in 18-24 months.

The main feature of the second stage is market consolidation. The number of cloud offerings has outstripped market needs, and the competition for users among various cloud vendors has reached its peak, leading to a series of mergers and acquisitions. At the same time, the maturity of cloud offerings has increased, and conservative users have begun to seriously consider cloud computing. The duration of cloud projects has increased, and companies have launched projects that provide a return on investment in the future from 3 to 5 years.

According to forecasts, the third stage will see the accumulation of critical mass and widespread adoption of cloud computing. The market will be dominated by a relatively small number of key suppliers, who will be able to offer their technologies to the market as de facto standards. There will also be an increased understanding of the risks associated with dependence on specific vendor cloud technologies, which will lead to a surge in popularity of one of the open source cloud platforms.

The main parameters describing cloud technologies have the following characteristics:

• Pooled Resources. Very often clouds are presented as a large virtualized infrastructure, but it is worth noting that clouds use virtualization with added functionality. Cloud technologies combine resources into a single whole and allow automatic services running in real mode to dynamically deploy and scale user and service resources;
• Self Service (self-service). Once the user has used the allocated resources, he should be given the ability to manage them through self-service mechanisms, for example to convert them to more advantageous configurations. In cloud technologies, resources are actually managed by the user, who has every opportunity to build them to suit his needs;
• Elastic (cloud technology elasticity). It consists of the ability to dynamically scale at user request in a very short period of time;
• Usage Based (pay-as-you-go model). This is a set of provisions that determine that the user pays for cloud services only when he uses the provided capacity. This allows you to reconfigure resources, for example, to pay for support and maintenance of idle equipment, as well as to solve problems that the corporation faces, and thereby ensure their efficient use.

The economic benefit is obvious: combining resources into a single whole, which allows you to provide the necessary configuration with the possibility of optimal payment and build the infrastructure with the help of which the organization can solve the economic problems it faces.

Today there are three main methods of providing cloud services:

• Infrastructure as a Service (infrastructure as a service, Iaas). The user is provided with an “empty” virtual server with a unique IP address or a set of Internet addresses and part of the information storage system. To control the characteristics, start, stop of the server, the provider provides the user with a program interface (API);
• Software as a Service (software as a service). The SaaS concept provides the ability to use a software application as a service remotely via the Internet. This service allows you not to purchase expensive software, but simply use it temporarily to solve the problem;
• Platform as a Service (platform as a service, PaaS). In this service, the user is provided with a virtual platform consisting of one or more virtual servers with pre-installed operating systems and specialized applications. As a result, the user can choose from the provided cloud services the one that is necessary to solve the business problem.

Within the main areas, the following cloud services are distinguished:

• Hardware as a Service (hardware as a service, HaaS). In this case, the user is provided with equipment that he can use for his own purposes. The advantage here is that you save money on maintaining this equipment and there is no need to purchase it. This option, in fact, is a type of IaaS service, and differs in that the user, based on the provided equipment, can deploy his own infrastructure with the necessary software product;
• Workplace as a Service (workplace as a service, WaaS). In this service, the customer uses a cloud environment to create employee workplaces, setting up and installing all the necessary software for the staff’s work;
• Data as a Service (data as a service, DaaS). Provides the ability to provide the user with disk space on which he can store large amounts of information;
• Security as a Service (security as a service). Allows the customer to quickly install systems that ensure the safe use of web technologies and reliable protection of the local network. This service allows you to save on deploying your own security system.

The line between the methods of providing cloud services is quite thin and very often a service represents a synthesis of several services at the same time, so recently there has been a tendency to combine all services into one whole - Everything as a Service (EaaS). In this case, the user is provided with everything - from the software and hardware to the management of business processes, including interaction between users, the so-called turnkey service, when the user only needs access to the Internet.

There are three types of clouds:

• a private cloud is a secure IT infrastructure controlled and operated by one organization. A company can manage the cloud itself or outsource it to an external organization. In this case, the infrastructure can be located either on the territory of the company itself, or at the vendor’s, or mixed, i.e., partially at both the organization and an external company. The best option, when a private cloud is deployed on the territory of an organization and is completely managed by its employees;
• A public cloud is an information infrastructure that is simultaneously used by many companies. Users of public clouds receive only access to the necessary services, but do not have the ability to exercise control, and they do not need to maintain the infrastructure. Any company or individual can become a user of these clouds. Owners of public clouds offer an easy and affordable way to deploy the necessary business systems with great expandability;
• hybrid cloud is an infrastructure that uses best qualities public and private clouds when solving the problem. Most often, this approach is used in companies that have their own private cloud infrastructure, but if its load increases, for example, large volumes of information, some tasks are transferred to the public cloud.

Using cloud services has a number of advantages over using conventional infrastructure:

• the user pays only for the volume of services that he needs, and only when such a need exists;
• cloud technologies make it possible to save money on the acquisition, support, and modernization of software and hardware;
• scalability - the ability to significantly expand the number of servers, applications, and workstations used;
• fault tolerance - ensuring reliable operation of the system, which can be duplicated when using cloud services;
• remote access - provides the ability to access virtually anywhere in the world where the Internet is available.

Along with the advantages, there are also a number of disadvantages associated with cloud services:

• the user is not the owner (unless the cloud is completely private) and does not have access to the cloud infrastructure; therefore, the safety of the data used depends entirely on the campaign providing these services;
• To receive quality services you need high-speed Internet;
• lack of generally accepted standards in the field of cloud services security.

Despite the shortcomings of cloud services, the prospects for their implementation in Russia are enormous. According to research conducted by analysts at Orange Business Services, the income of the Russian market of cloud services for business is from 4.5 billion rubles. in 2012 it may increase to 19 billion rubles. in 2016. In parallel with this, the market for services for creating cloud infrastructure can bring in more than 20 billion rubles. income. It is expected that the market for services based on the construction of cloud infrastructure, while also developing actively, by 2016 will exceed the volume of the market for cloud services themselves. This will become possible thanks to the rapid growth in the volume of services for the construction of “clouds”, their merger and customization, as well as the movement from the usual infrastructure to the cloud. In total, by 2016, the share of cloud services should reach 13% of the entire Russian IT services market (Fig. 1).

For Russian customers, IaaS infrastructure solutions are most preferable. This type of service is the most in demand, and the annual increase in such services is about 40% (Fig. 2). This is explained by the desire of customers to independently administer their systems, which, in turn, is due to the peculiarities of the Russian market, a large number of programs of their own development, as well as the general distrust of customers in the cloud technology market. Today, the IaaS market is represented by eleven major players: ActiveCloud, Clodo, Cloud One, CROC, Parking.ru (Inoventica Group), Selectel, I-Teco, Oversan, Skalaxi, Cloud4Y, Dataline (Fig. 3). At the beginning of 2013, IaaS penetration in Moscow and St. Petersburg was about 4%, in other regions - no more than 1%.

The second most important service in the field of cloud technologies is SaaS software, which, according to analysts, shows an annual increase of 50%, and will only increase in the future (Fig. 2). There are five major players in the Russian SaaS services market, which occupy more than 90% of the total market (Fig. 4).

The next stage in the development of the cloud market is the use of PaaS services, which are not very popular on the Russian market, however, the first offers from foreign suppliers have begun to appear. According to various estimates, the volume of the PaaS and BPaaS (business processes as a service) markets in 2012 was about 100 million rubles. each, by 2017 they will amount to 700 million rubles. (Fig. 2) .

In the Russian cloud technology market, preference is given to private clouds because they provide a higher level of security, make it easier to integrate non-standard solutions and achieve better manageability compared to public clouds. In recent years, there has been a trend towards designing hybrid clouds, which is due to the presence of many companies with well-developed IT infrastructure and data centers, so the most suitable path for them is to create a hybrid cloud (Fig. 5).

For the global financial market, cloud technologies are becoming increasingly commonplace. Thus, according to a study by Information Week, a large number of banks in the world actively use cloud solutions for business (Fig. 6).

Russian banks can only envy such a proliferation of cloud technologies. In Russia, there are a number of both objective and subjective reasons that limit the spread of cloud technologies in the banking sector.

Firstly, banks are subject to restrictions, such as the requirements of government regulators in the field of working with personal data and state secrets, as well as the conditions of external regulators, such as international payment systems. All this makes the transition to cloud technologies much more difficult, especially when it comes to hybrid and public clouds.

Secondly, the development of public cloud technologies is hampered by the need for data storage requirements. Data security in public services cannot always be ensured at the proper level.

Third, the deployment of cloud services is affected by negative attitudes associated with the inability to self-administer in the clouds.

Fourthly, the transition to cloud technologies requires significant costs for restructuring its information infrastructure.

According to the results of a study conducted by Symantec among Russian banks, almost three-quarters of respondents are discussing the possibility of switching to cloud technologies, but most of them are still refraining from practical actions. And the expectations of those who decided to use cloud services for the sake of a sharp increase in the flexibility of the IT infrastructure did not come true for 43% of respondents. In addition, 48% of respondents hoped in vain to improve the efficiency of IT systems, to reduce operating costs - 46% and to increase the level of security - 35%.

Such results indicate, rather, that the problem is not in the cloud technologies themselves, but in the imbalance between the expectations of banking structures and the real capabilities of these technologies.

Meanwhile, today there are major changes in the use of financial products due to the development of consumer preferences. In all banks without exception, there was a need for remote access to self-service systems with a guarantee of high speed and convenience for clients. And the emergence of new financial intermediaries in the market of traditional banking services leads to increased competition and the need for banks to find new channels for providing their services to clients.

Therefore, despite open questions in the field of security, banks are among the most active consumers of cloud solutions.

Despite the modesty of banks in highlighting their successes in conquering the clouds, it is still possible to highlight several projects in recent years where cloud technologies contributed to achieving clear results in terms of efficiency.

One of the most interesting projects— “pilot” related to the deployment of a private cloud at the Central Bank of Russia (contractor - InfosystemsJet company). A full-fledged IaaS platform with a self-service portal was created and tools were used to minimize the main information banking risks in the cloud environment. As a result of the project, the speed of processing user requests has significantly increased, and the load on system administration has significantly decreased.

Global financial businesses today, thanks to the cloud, can provide services to their divisions around the world. For example, the data processing center (DPC) of Citibank OJSC in Frankfurt is certified to the highest class and can provide services not only to the bank’s Western branches, but also to its Russian branches.

OJSC Sberbank of Russia today also pays great attention to the centralization of back-office systems of territorial banks and is introducing the next generation of three-level systems. In the future, the financial organization plans to transfer them to a cloud model, and since 2013 the bank has been operating on a single centralized platform.

Cloud projects today are carried out by Gazprombank OJSC and Ak Bars Bank OJSC (contractor - ICL-KPO company). OJSC Raiffeisenbank also views the prospects for building a private “cloud” positively. The problem he plans to solve in this way is the efficient provision of computing power for solving specific problems.

OJSC Banca Intesa is still just mastering the basic techniques of working with the IaaS cloud and is trying to use it as a backup data storage center. The partner is the Croc company. If cloud technology really allows for significant savings in resources and at the same time information security is ensured, clouds will be considered by the bank as one of the main directions for the development of IT infrastructure.

Last year in Russia there was even a project to transfer automated banking system(ABS). The project is being carried out by the bank JSCB Moscow Financial Club, CFT Group of Companies. Initially, the bank switched to using core banking applications using cloud technologies. Further, the CFT Group of Companies provided the bank OJSC JSCB Moscow Financial Club as a service with an external IT infrastructure for the core banking system, which included not only virtual computing power, but also elements of the security infrastructure, access control, authentication, and means of ensuring failure- and disaster-tolerance -sti. It is expected that the project will allow the bank to reduce costs for equipment and its maintenance.

In conclusion, the main trends in the implementation of cloud services in the banking system should be noted:

• banks are wary of using cloud technologies, primarily due to information security;
• the introduction of cloud technologies is taking place in large financial institutions, since the transition requires quite large investments in reconfiguring the bank’s IT infrastructure;
• preference will be given to private clouds that can provide the necessary level of information security and independence in system configuration; however, it is worth noting that the development of hybrid clouds has its own prospects associated with the possibility of moving secondary operations to public clouds;
• In the coming years, IaaS models will be developed as cloud technologies in Russian banks, providing the necessary infrastructure for the bank. As for SaaS and PaaS models, their development prospects in financial institutions seem unlikely due to the specifics of banking software;
• As an application of cloud technologies in Russian banks, it should be noted the use of cloud-computing in the field of data storage, data processing centers, and workplace virtualization.

BIBLIOGRAPHY

1. Kotsdratyev A.A., Tishchenko I.P., Fralenko V.P. Development of a distributed cloud computing security system // Software systems: Theory and applications. 2011. No. 4(8). pp. 61-70.

2. Belotserkovsky A. Microsoft Windows Azure: Information. URL: http://www.intuit.ru/goods_sto re/ebooks/9198

3. Shirokova E.A. Cloud technologies // Modern trends in technical sciences: material. Intl. scientific conf. (Ufa, October 2011). Ufa: Summer, 2011. pp. 30-33.

4. Grebnev E. Cloud services. A view from Russia. M.: CNews, 2011. 282 p.

5. Cloud services (Russian market). URL: http://www.tadviser.ru/index.php/Article: Cloud_services_(Russian_market)

6. Cloud services 2013. Cnews analytics. URL: http://www.cnews.ru/reviews/new/oblachnye_ servisy_2013/

7. IT in banks and insurance companies 2012. Cnews analytics. URL: http://www.cnews.ru/reviews/free/banks2012/articles/articles17.shtml

8. Bataev A.V. Trends and prospects for the development of the information technology market in the Russian banking sector // Young scientist. 2013. No. 10. P. 268-271.

9. Bataev A.V. Dynamics of development of the IT technology market in the banking sector of Russia // Financial problems of the Russian Federation and ways to solve them: theory and practice: collection. Proceedings of the 13th Int. scientific-practical conf. St. Petersburg: SPbSPU, 2012. pp. 432-437.

10. Boklacheva E.A., Efremova L.I. Cloud technologies in Russia: problems and prospects. URL: sisupr.mrsu.ru>2012-1/PDF/14_inf/Boklacheva.pdf

11. Cloud services 2012. Cnews analytics. URL: http://www.cnews.ru/reviews/free/cloud/