Event Driven Architecture (EDA), SOA Seminar Crystal City, Virginia, November 2nd, 2006, Tim Bass, CISSP, Principal Global Architect, Director. Co-Chair, Event Processing Reference Architecture Working Group (EPRAWG)
1. Event Driven Architecture (EDA) SOA Seminar Crystal City, Virginia November 2nd, 2006 Tim Bass, CISSP Principal Global Architect, Director Co-Chair, Event Processing Reference Architecture Working Group (EPRAWG)
2.
3.
4. Gartner: Extended Application Platform Suite (APS) for Advanced SOA Will Require Expertise in Many Technology Areas Integrated Security and Systems Management g Portal Product, Rich Client User Interaction Shared Middleware Infrastructure (RPC, MOM, WS) APS Core Extended APS Advance APS Core BPM Suite Business Process Management EII, MDM Data Integration Application Integration Integration Broker Event Server Complex Event Processing Application Server, TPM Transaction Processing Business Component Library Application Building Blocks Common Metadata Repository End-to-End Development Framework
10. EDA Visualized Asynchronous, Strongly Decoupled, Not Orchestrated Processes Event 9 P 11 P 33 P 12 P 31 P 32 P 13 P 34 P 21 P 14 P 22 Event 1 Event 5 Event 2 Event 6 Event 3 Event 4 Event 8 Event 7
11. “Traditional SOA” + EDA Visualized Orchestrated Process 1 in an SOA Orchestrated Process 2 in an SOA Processing Not Orchestrated in an EDA Note: Request/Reply Implied in “ Orchestrated Processes” Synchronous & Asynchronous, Loosely Coupled & Strongly Decoupled, Managed, Orchestrated, Not Orchestrated, Consumer-Driven, Producer-Driven Event 9 P 11 P 33 P 12 P 31 P 32 P 13 P 34 P 21 P 14 P 22 Event 1 Event 5 Event 2 Event 6 Event 3 Event 4 Event 8 Event 7
12. “ Traditional SOA” – EDA: Table of Characteristics Draft Summary Comparison – Under Construction Asynchronous Event Triggers Synchronous Service Invocation Application Interaction Flow Control Faster Sense/Respond Service Component Reuse Primary Technical Goal Reduced Costs and Increased Visibility Reduce Costs and Time-to-Market Primary Business Goal One-to-One, One-to-Many, Many-to-Many One-to-One Process Communication Models Publish/Subscribe Orchestration Process Management Producer Consumer Process Trigger No Scheduler Scheduler Required Process Coordination Strongly Decoupled Loosely Coupled Application Interaction EDA SOA Architectural Characteristic
13. FYI: Event Processing (EP) and CEP Visualized P 1 P 8 RE P 4 P 5 P 2 P 7 P 62 P 3 P 61 Events Events Events Events Events Events Events Events Many-to-One Asynchronous Events Processing with Rules Engine (RE)
14. SOA + EDA + CEP Visualized (with Rules Engine) Orchestrated Process 1 in an SOA Orchestrated Process 2 in an SOA Processing Not Orchestrated in an EDA Note: Request/Reply Implied in “ Orchestrated Processes” Event 10 Event 9 Synchronous & Asynchronous, Loosely Coupled & Decoupled, Managed, Orchestrated, Not Orchestrated, Consumer-Driven, Producer-Driven P 11 P 33 P 12 P 31 P 32 P 13 P 34 RE P 14 P 22 Event 1 Event 5 Event 2 Event 6 Event 3 Event 4 Event 8 Event 7
20. Event-Decision Hierarchy 22 Impact Assessment Situational Assessment Relationship of Events Identify Events Location, Times and Rates of Events of Interest Existence of Possible Event of Interest Data/Event Cloud Analysis of Situation & Plans Contextual and Causal Analysis Causal Analysis, Bayesian Belief Networks, NNs, Correlation, State Estimation, Classification Use of Distributed Sensors for Estimations Raw Sensor Data (Passive and Active) Adapted from: Waltz, E. & Llinas, J., Multisensor Data Fusion, 1990 HIGH LOW MED
21. Event-Decision High Level Architecture 22 EVENT CLOUD (DISTRIBUTED DATA SET) KS KS KS KS KS KS KS KS KS KS KS KS KS KS Adapted from: Engelmore, R. S., Morgan, A.J., & and Nii, H. P., Blackboard Systems, 1988 & Luckham, D., The Power of Events, 2002
22.
23. Event-Decision Reference Architecture SOA + EDA + CEP + BPM + The User Experience 24 Adapted from JDL: Steinberg, A., & Bowman, C., Handbook of Multisensor Data Fusion, CRC Press, 2001 EVENT PRE-PROCESSING EVENT SOURCES EXTERNAL . . . LEVEL ONE EVENT TRACKING Visualization, BAM, User Interaction Event-Decision Architecture DB MANAGEMENT Historical Data Profiles & Patterns DISTRIBUTED LOCAL EVENT SERVICES . . EVENT PROFILES . . DATA BASES . . OTHER DATA LEVEL TWO SITUATION DETECTION LEVEL THREE PREDICTIVE ANALYSIS LEVEL FOUR ADAPTIVE BPM
24.
25.
26.
27.
28.
29.
30.
31.
32. TIBCO’S Event-Decision Reference Architecture Combining SOA + EDA + CEP + BPM + BAM ++ Flexible SOA and Event-Driven Architecture
33.
34. Event Processing / CEP Application Scenarios A Few Examples of Detection-Prediction Scenarios We Solve for Customers Predictive Consumer Information Management Financial Services Adaptive ESB (Declarative v Procedural) Financial Services Intrusion and Fraud Detection Financial Services Supply Chain Monitoring Logistics (including RFID) Supply Chain Monitoring Manufacturing Anti Money Laundering and More. Financial Services and Government Power Grid Monitoring Energy Track & Trace / Scheduling Transportation Service Monitoring Telecommunications Track & Trace Supply Chain - Logistics Network & Applications Management Telecommunications CEP Application Scenarios Example Industry Area
35. Use Case One: Identity Theft Detection / Phishing Example Fraud Detection Scenario Uses Proxy Alert Service Account Lockout Profile Mismatch Brand Phishing Alert Security Alert Customer Known Fraud IP Identity Theft Login Success Phishing Alert Brand Misuse Source: Bass, T., TIBCO Software Inc., January 2006
36. Use Case Two: Fusion-Based IDS High Level Event-Driven Architecture (EDA) – Early Phase JAVA MESSAGING SERVICE (JMS) DISTRIBUTED QUEUES (TIBCO EMS) HIGH PERFORMANCE RULES-ENGINE (TIBCO BE) HIGH PERFORMANCE RULES-ENGINE (TIBCO BE) HIGH PERFORMANCE RULES-ENGINE (TIBCO BE) HIGH PERFORMANCE RULES-ENGINE (TIBCO BE ) SENSOR NETWORK RULES NETWORK NIDS BW JMS LOGFILE JMS BW LOGFILE JMS BW LOGFILE JMS BW IDS JMS BW HIDS JMS BW SQL DB BW JMS ADB SQL DB BW JMS ADB MESSAGING NETWORK TIBCO PRODUCTS SYSTEM SYSTEM SYSTEM SYSTEM SYSTEM SYSTEM SYSTEM SYSTEM
37.
38.
39. Event-Driven Operational Risk Management An Enterprise View of Risk and Asset Management with Events Control evaluation (SOX) Operational Risk (Basel II) Security Outsourcing Privacy Business Continuity Planning Event-Driven Operational Risk Assessment & Management