Hello, hello. Thank you for joining our session. Today we would like to do the presentation about the sort of S-Born automation making comprehensive photographs by consuming and leasing and managing a sort of a bit of materials. Okay, so I am Kokihama. I'm from Toshiba Corporation and my main job is starting S-Born for our comprise and license and Yeah, my name is Arun. I'm leading the open source compliance activities at Siemens Healthineers based out of Bangalore, India. So today we would like to do the presentation. Okay, let's start. From at first I would like to do the explain general topic for the S-Borns. This is today's content that first I'd like to explain challenges in management software dependencies and so then talk about the consuming and leasing and managing software build of materials in the SW360 and first I would like to describe the automated dependence management with S-Borns. Okay, so first one is the training managing software dependencies. So maybe so if you develop some software, you have some programs about the dependencies for example, so if you use their big proof, if you develop the very big projects, you have several issues such as the bound software used for leading on numerous dependencies and their type is very different. So sometimes using C-Rangages sometimes you can use a completely different computer languages. It is difficult to manage all and of course if you develop the big software products, you need to check every vulnerability or license issues. However, so recently many people talked about the S-Borns and so I also think S-Borns is very important because if you develop your software with S-Borns, you can check many information with your products. Without the S-Borns, you can check only a very limited information. However, if you use S-Borns, you can check almost all information for your products. So S-Borns is very useful for verifying vulnerability and licenses. Okay, so and I would like to how to manage S-Borns. Yeah, so if you manage S-Borns in your organizations, it is difficult to manage them because due to the potential use of different management methods or tools by each different products. So if you have the problems about the Log ProJ, that's different product, a different department, manage different S-Borns tools. You cannot find which software or its product use a Log ProJ. Second difficulty is the S-Borns format. Yeah, I like the S-Borns format. However, many people need to use S-Borns like a legal department people. In this case, if you use S-Borns for managing your software product, you need to check Json itself. Is it really good for everyone? And so the other different problem is that in these times, many, many S-Borns tools exist. However, different returns, different results. So you need to consider which result is better for you. So it's a very difficult point in management S-Borns in your organizations. However, so to address these challenges, F-Borns needed to promote and centralize management across their organization, introduce tools to improve rigidity of S-Borns and ensure compatibility across tools. So I would like to say S-Borns 360 is very helpful to solve these problems. Okay, so what is S-Borns 360? S-Borns 360 is an open source software by the Greek Foundation. It is licensed under the EPL2 license that provides both a web application and repository to correct, organize, and make a viable information about software components. It's a sample issue a central hub for software components in organizations. S-Borns 360 allows for S-Born import, export, and tracking components used by a project or product and integrates security vulnerability tools, such as variable code, and maintaining a license obligations, enforcing a policy in your company, and so generating legal documentations. So the basic concept of the S-Borns 360 is centraling maps. So if you register the different information related to the S-Borns on the different tools, you may not find the good results. However, if your data centralized into the one repository or one database, you can manage it easily. So this is an example data of the S-Borns 360 which can manage. Now S-Borns 360 manage the component name or categories and types like the open-source codes or languages like C languages, Rust or Python, and software platform, and operating system, and main run sciences, and operating system or CPID. Like this, you can centralize the register S-Borns data, both GUI, and of course you can register data by the API which is the S-Borns 360 officially supported. So before I would like to do the demo about the S-Borns 360, I would like to mention the S-Borns 360 news. Last month, the S-Borns 360 released version 18. So from this version, officially S-Borns import and export and view function are supported. And so from this version, you can also build the S-Borns 360 by Docker Compos, like it's very helpful. So sometimes people don't want to install it with many times, but so if you can use Docker Compos, you can set S-Borns 360 on your server very quickly. It's not all an additional feature also included for a version 18s. And now we are ongoing development, so we are classic to new GUI frameworks. Now we are using a live play for the frameworks, the frameworks, but we are completely, we try to completely change the react from the live play to the react.js for frameworks. So if you are familiar with React, please join our community. We are always supported. Welcome your contributions for the new GUI frameworks. Okay, from now, I would like to do the demo, how to manage S-Borns in SPDX case. So today I would like to use import S-Borns about the official examples. So if you go to this page on the S-Borns 360, which you manage, so from you can find these pages, upload S-Borns. And so for explanation, I would like to use the official S-BDX example on the S-BDX website. So this includes a lot of information already. So I think it is very good for doing a demo. So after if you set the upload S-Borns, you can get this kind of result. And so if you go to the S-BDX 360, you can get the result on this GUI. Now support it S-BDX 2.2 and the S-BDX write format for managing S-Borns. So almost all data, S-BDX example are registered like this. So like snippet information or the other information related to the S-BDX. And at the same time, S-W360 support it S-BDX write. If you cannot manage all the information, you can just register S-BDX write information. Okay, and after my course speaker do the demo about the Cyclone DX. So I skipped out this time several this demo. Okay, so after that, I would like to do explain about automated dependency management. So generating S-Borns is very important. However, at the same time, you need to automate it these procedures for five reasons. First is efficiency. Automation significantly reduce the time and effort required to generate and manage S-Borns. It eliminate the manual errors and include the speed of operations. Second, accuracy. Automated tools can create a story, identify software components and their associated vulnerabilities. This leads to more accurate risk assessments. Third one is the security scalability. The number of software components include these manual S-Borns generation and management became impractical. Automation allows for security. Fourth, compliance. Automated tools can help ensure compliance with the barriers of their license and regulations. So fifth is the security. Timely identification and resolution of security vulnerability is crucial. Automation helps in early detection and migration of these vulnerabilities. So for solving these problems, I propose to combinational use as SW360 and ORT open source level tool kits. If you use both, the systems allows for the automation of the S-Borns. So what is ORT? I would like to explain. ORT is a force of policy automation and orchestration tool kits, which you can use to manage your open source software dependency. And so you can find some strategies safe and efficient models. And now, ORT has an integration feature for SW360 already. So through the open source review tool kits, you can upload ORT analyzer results to your SW360. And so use SW360 metadata as input for ORT analyzers. And starstores ORT scanner leaders in SW360 for reuse in future scans. This is the basic images for the S-Born automation systems. From your source code repositories, you can get the license or any kind of dependency result which ORT returns. So from ORT, you can find some license information or files or dependencies. And so at the same time, using the ORT integration feature, you can set the SW360. You can set the data to SW360 automatically. Then if the data already exists in SW360, you can use some curation data for reducing the time or reducing the registration times. And so of course, sometimes you need to add some information to SW360. For example, if you want to add your own system source code information to the SW360, you can add it by manually. And of course, if you have the codes and data for SW360, you can also use data to SW360. Laterally, if for protecting supply chains and if you want to deliver S-Bombs, you can select Cyclone DX or SPDX. So you made the S-Bombs for your customers with SW360. And so yeah, it's almost all, but so I think just in my idea that if we add some vulnerability system to add this, it is better to manage for S-Bombs. So in the near future, I would like to collaborate other vulnerability systems like vulnerability codes. Okay, that's all from me. Am I audible at the back? If you have any questions on this part of the session, maybe you can go now. Or if it is fine, I'll proceed with mine. Okay, I'll proceed with mine. So just introducing myself again for the people who joined late, my name is Arun. I work for Siemens Healthineers out of Bangalore, India. And I lead the software, secure development and compliance activities at Healthineers. So you have heard about what software 360 is. And to go a little bit back on the history, it was created around 2014 at Siemens. And initially Bosch and Siemens were collaborating on this tool. And later during the time, Bosch had other plans and we gave some part of the code to ORT and some part of the code to software 360. And right now the major contributors or maintenance are Siemens and Siemens Healthineers, Toshiba, Karyad. And we have a few other contributors also. So how many of you in this crowd have used or is using software 360? Okay, so I understand the household is for the curious minds. I hope you would test this application quite soon. So in the recent times, all of you are aware about the SBOM requirements that came in. And this brought in a bigger challenge at Siemens because historically our policy was to clear the source code of all the components that was being used. And at the time of implementing this tool, it was implemented for more of a waterfall model of engineering. And it was working fine. People used to end manually the components that they could identify. And in recent times, you know how fast the development world have changed. And the system was not built to scale up to its current requirements in the DevOps. So this new challenge of identifying the consumption model through package managers. And Siemens being an old company, we have a lot of old code in CC++. And a lot of the package managers were not used historically, but now the shift is happening. And we have new requirements. And it's all coming together with the new regulations also. So we had to devise a new approach where we wanted to capture the package information and the source information and how it was related to the project that we are building in health news. So just to go through the compliance workflow, this is the internal compliance workflow, which is modeled based on the open chain compliance workflow, where identification, registration, review assessment, verification and documentation are the core parts of the workflow. So today, I would be focusing on the registration and review assessment part. Because that is where the software 360 is used in conjunction with phasology. So earlier you have heard about integrating ORT into the pipeline. So in Siemens, we have a slightly different approach. I mean, we don't use ORT right now. But we are kind of liberal in terms of the SCA tools that can be used for identification or analysis of your code base. And the small part that we introduce there is right now it is an internal tool which we plan to open source. Sometimes in the future is an S-bomb enricher. So we have allowed like anybody is free to use any tools that they feel capable of analyzing their rapport and creating an S-bomb. And we have a Siemens standard bomb which is based on Cyclone DX format. So that is like 100% Cyclone DX plus some customizations for Siemens requirements. So the only requirement we have placed on the development teams is that whatever tool you use as long as your generated S-bomb adheres to the standard S-bomb format, then it can be imported into software 360 without any issues. So we do have the use case for both formats, but currently the priority is given for Cyclone DX because our standard bomb is based on Cyclone DX. But in our use case, SPDX would also be later brought in. And for this matter, we had to slightly change the current architecture or the data structure of software 360. So we introduced something called package portlet. I would talk about it in a minute. And all of these integrations of for review and assessment, we do it with Phosology. And both in Phosology, we also support both the formats for the certain output documents that we require. So internal compliance policy requirements. So we have set up these three points like source repositories should be identified for all OSS binary packages consumed. And all open source software components is to be subjected to a license clearing at file level. And packages should be automatically mapped to the corresponding release version of the component. So this is not always possible. Not all the open source communities or repositories maintain a release structure. Sometimes it is just the master branch and they only change the versions for the packages that generate out of it. But generally, if there is a version, we want to clear the source of that corresponding version. So this is the basic compliance requirements from our organization. And to meet that, we have defined these three aspects in the business context or in software 360 conduct. So what is a component? So component is the top hierarchical structure, top element in the hierarchical structure. And which is usually mapped to the source repository. And we treat the VCS URL version control system URL as the unique identifier for a component. So and then there is a reason for we using that because two components can have the same name. And then we want to identify if two components have a same name. The next check that we do is who is a manufacturer or who is the vendor. So based on that, a new component would be created. And even if it is the same manufacturer and same component, there could be a difference in terms of licenses. For example, OpenSSL, they change licenses from OpenSSL to Apache. So in that case, we would have one component with the OpenSSL license until version 1.xr and then another new component with the changed license information. So that is the top level of the hierarchy. Coming next is, as I told earlier, where there is a release properly maintained, this would be the component release. So we create a component and if there is a release available, we nest it under that component release. So this was the current structure or until now. So in the new model, we have introduced the package level which is always linked to a component release. So this is mostly used when there is a non-modified consumption model directly from the package repositories. So as an example here, I have given Angular. So you can see the GitHub repo Angular as the component and its particular version, 16.2.3 as a package. And when it comes to the NPM repository, you see Angular slash core where they have pointed to the repository Angular. So this would be the structure in how software 360, it would be modeled in the three hierarchical structure. So I mean, this is just a pictorial representation of what I just explained. It's just how a component and a component release is mapped. And this is a top-down approach where a component is created first, then a release is created. And the new model, we have the releases, the component, and the packages coming in. So the difference is the creation is kind of bottoms up. So first, a package is created during the import of a Cyclone DX S-bomb based on the unique package URL. And then it automatically figures out, based on the VCS URL information, the component and the release. So once a component is created, the next time it gets reused. So just to make the understanding easy, it's an example of Nuget and how it appears in the Nuget repository, where it refers to a source repository which is the GitHub and what developers use the Nuget package. And we need to clear the source repository for the security and license compliance requirements. So the major savings in terms of compliance effort here is, in the Alden model, we were forced to clear around 31 components and create 31 clearing reports. So in the new model, when we perform this mapping, the effort reduces to just one. So all the binaries which are referring to the same repository, we can go ahead with just one clearing report of that repository. And according to your requirements, you could implement certain methodologies where you can continuously track the development or the changes in the repository and then continue reusing the report. So there is a significant savings of effort for compliance activities because it's very rare that licenses changes between minor releases. So this is the package portlet. You might not have seen the third portlet there in the earlier demo. This is how it displays and it's a complete standalone one where you can search based on the package manager type, et cetera, and the name of the package and the release which it is linked to based on the VCS URL and the licenses. So all these information are collected from the SBOM that is imported. I will show a demo right now on this. So this is where we can import an SBOM. So we select from the project. So when you're doing it first time, you can do it from the project. You can import an SBOM, just drag and drop the file. And once it is successful, you will be able to see a short status here with the name of the project that created, what were the releases created, packages created, what is reused, and also the time taken. And there's also some error reports that would come. I will just show it in the demo here. So once it is created from a project view, this is how you could see it. Like the linked packages is what you can say as the SBOM view as such. And on the top, license clearing would be based on the linked releases. So it's like we kind of created two views for two audiences in the company. So this view is for the developers.  And once you go to the license clearing step, that is what the compliance team looks at. They know, okay, we just need to clear these components and the project goes into the next stage. So the same view. So the component, the first is the component, the second is the release. And within the release, also you would see what all packages are linked to that particular release. So this kind of happens automatically and there is an option possible for you to correct it manually if required. And in the package details page, currently you don't see the part where you can capture vulnerability but the newer version has the ability to point your vulnerability assessment tool integrated to Software 360 which would then display the vulnerability per package if something is identified. And in future, Software 360's idea is to incorporate open source vulnerability databases. So we are looking at vulnerable code and other options. So by default, there would be an open source based vulnerability monitoring tool integrated in Software 360. So right now the module, we use the Siemens internal tools to be integrated but the idea is to get the tracking right from the point of creation. So I mean, this you can refer in the slides later. The slides are uploaded in the website so you can see if you want more understanding on this. So I'll just go ahead with the demo. So here, I'm going to show you import of an SBOM. It's always a high risk when I try to do a demo live in an event. But yeah, I mean, it's worth the effort. I'm too optimistic at times. So this is just a test instance. So don't assume the performance by seeing this demo. It's just for the demo purpose. So for the Cyclone DX, I kind of just drag and drop this. Upload an import. Hopefully it should work. Yes, upload is successful. Importing SBOM is in progress. It's like waiting for the launch of SpaceX. We don't know what is going to happen. Anyway, I'll come back to it because it will show the time of the input. So I can mean them. I will show a sample which I have already created. So here, if you see, in the project view, in the attachments, automatically the imported SBOM would be attached. And the status of the import would also be shown here. So it's a JSON file. So if you are integrating it in your CI-CD pipeline, your developers can access these documents via REST API also. So right now what I'm showing is how to do it from the UI part. For all of these features, REST API is available today. So you can directly integrate the creation, updation, everything via CI-CD. So another important aspect is once you create this project and then there is an import SBOM from within the project. So this is where you can update the already created SBOM because there is a chance where new versions of the SBOM might happen at different times. So you can re-import it here. Okay, so luckily it got created. So 741 releases were created from total 1326 packages and it took 42 seconds for doing it from the UI. And it gives a clear indication about what information it doesn't contain because all the packages were successfully created, but the packages that did not have a VCS information is listed here. So this can be again sent for enriching because generally we tend to, the plan is to enrich it prior to importing so that we don't get this message, but for the community version, it is available and you can enrich and re-import it. So if you look at this project, but I'm, yeah, test project for NPM. Okay, so this is our project. Yes, so you get a summary of the basic information and in the administration panel you can actually configure your license header file. So this would be used for generating the readme document or notice files and license clearing. So this is where the input for the clearing team goes in where we subject the source repositories for the license clearing. And as you saw earlier, there was VCS information missing and hence no component were linked. We could do this later also as an update. So yeah, so now you have seen the first bug in the demo. Somehow the package information is not appearing, but you saw that in one. So this was my backup information here. So this is how it works. So granular view of binary packages which can be linked to their repositories and hence enabling both vulnerability monitoring and license compliance in a much more seamless way. So that's all from the demo side. And yeah, so the idea is to transform the perception that security and supply chain compliance, how it appears to developers is mostly this way. I mean that's the developer on the wall. And we want to change this perception where supply chain compliance would look like this for all developers. We want to make developers so comfortable handling these knives. So yeah, I have put the link to Phosology and Software 360. You can scan and join and if you like it, give it a star. Yes, we are open for questions. Since I did not find a user for Software 360, that's could be a reason that I don't have any, we're not having any questions. Yes, first question there. I saw you import the Cyclone DX into the SW 360. Does the software 360 support other format? Yes, yes. The one, the demo that Kokihama showed a few minutes earlier was the SPD X1. Yes, how about if a supplier deliver you Excel files? We do have offline scripts that could do these inputs. We utilize the rest end points to do that, but natively we don't have the Excel import feature configured yet. But you could do it with a script because we all have rest end points for all of these things. I saw this Software 360 has integrated with several scanning tool. For example, ORT, for example, the falseology. I don't know if there are any use cases with the commercial scanning tool as well. The possibilities are there, of course, yes, because we have not tested it with anything because if there is a common format agreed between the commercial vendor where you can utilize the rest end points, it should be possible. But right now we have not providing any support for any proprietary vendor by default. But based on usage, if you need it, I think it is possible to do it. Thank you. Thank you. Okay, I guess that's the end of our presentation and the question round. Thank you for your time and your patience in listening. Thank you.


Celebrations for St. Lucia's 43rd Independence Anniversary launched on Monday, 7 February 2022 at the Finance Administrative Centre and saw the unveiling of the logo for this year's observance, designed by Royal Joseph and the Independence 43 jingle, produced by Irvian Ace Lochte. The theme for this year's celebrations is Duval Assam, celebrating our people. The theme encourages St. Lucia's hair and abroad to set aside their differences and strive towards achieving progress together. Royal Joseph indicated that the theme deeply inspired this year's logo. Within the logo, you have the hands which pretty much comes together and we use various colors from the flag to create that piece, to show the diversity, to show that different persons of different backgrounds coming together to achieve one goal. We have the triangle, which is also from our flag, but it also signifies that forward motion. Co-Chairman of the Independence Committee, Tharil Montra, provided insight into the calendar of activities for Independence 43. There's a range of activities to look out for and there's a common theme, common thread, tying them all together, so they're not just disparate activities, I don't want people to see them as separate initiatives, but to see the thread that ties them together. So whether we start off from the prison worship service, we all at least solutions profess to be believers in a supreme being, whatever the denomination. So we must recognize our own humility towards that creator and give thanks and gratitude to it. And so that's an important part of the calendar of activities. There is going to be the military parade to show the discipline, to show the state. That is certainly back. That is certainly back. I mean, our own Nobel laureate at least, First Louis, pointed to the fact that a society without the creative sector is a cultural desert. So our calendar of activities celebrates a lot of that creative sector in its many forms. So when we're going to think of live at live at, I mean, this is an exciting phenomenon where all the creative sector, we have to perhaps get more understanding of what that creative sector is. So whether visual artists, whether digital photographers, whether graphic artists, chalk art, I mean performance arts, all forms of that art form will be on this page during live at live at. Minister for Tourism, Investment, Creative Industries, Culture and Information, Honourable Dr. Ernest Hilaire encouraged Saint Lucia to participate fully in celebrations for Saint Lucia's 43rd independence. I think I want to join the others who spoke before me to, to invite all solutions here in abroad to celebrate independence 43 with us, to focus on the theme, do some that we want to do together as a people, overcome in some of our differences, some of the division that we have. And let's put people always at the centre of national development. It's not about bridges, roads and buildings. It's about people put in the people first. Of course, they will always need those things. But say to our people, let's reflect on our theme, let's reflect on the activities and let us put the people at the centre of development and let's take our country forward together. For more information on the celebration of Saint Lucia's 43rd independence, please visit 758 Independence on Facebook and Instagram.


Live from San Francisco, extracting the signal from the noise. It's theCUBE, covering Oracle Open World 2015 from Studio C, brought to you by Cisco. Now your host, Stu Miniman. Welcome back to Oracle Open World 15 here in Moscone South in the middle of the exhibition hall. I'm Stu Miniman and this is theCUBE. Happy to have back on the program John McCable who's the senior product manager with Oracle Solutions at Cisco. How do you on the program last year? Welcome back. Thank you, appreciate it. All right, so John, you know, what's an Oracle Solutions guy doing in a place like this? We actually have a lot of Oracle Solutions that we test and prove on Cisco UCS, our server platform. And so we're here today talking to customers, explaining what the solutions are, hearing their challenges and problems, addressing their concerns and having a little fun along the way. All right, excellent. Yeah, you've actually been on the other side of this wall, given some of the presentation. Tell me, what's the vibe? What are you getting from the customers? What's kind of top of mind? What are they asking about and kind of the big challenges and opportunities for them? Well, you know, a lot of customers are looking at database performance, right? They're anticipating moving to 12C probably next year. And so they're looking for people who've been there, tested it, done that, have got the best practices written and developed. They're always interested in performance. And so the latest proof points that we've announced at the show this year around SPEC JBB 2015 has been top of mind for them. We've got 38 world record benchmarks with Oracle Code more than anybody else. And the other thing they're asking about is cloud. You know, cloud architecture, cloud computing, what does it really mean to them? Even while they're not maybe wanting to jump to the full cloud implementation right away in a public cloud environment, they're looking at use cases. What, how can they utilize the cloud to be able to solve some of their challenges but not take their data and put it into a full cloud environment yet? All right, let's help for our users unpack that a little. So you mentioned 12C. Most people don't understand how much work goes into, you know, of course we know Oracle's got to do their coding. But when that kind of comes over to Cisco, how long have you guys been working on that? What goes into making sure that it works? You can take advantage of features. And you know, what does Cisco offer that you know is kind of going to be important to customers when it comes to that 12C upgrade? What's going to be important to customers is the fact that we've taken the Oracle 12C code, we've done a Cisco validated design with it. And what that really means is we put over 2,000 man hours in to do full testing, not just that the code runs on UCS, we also inject a lot of faults into the system, into patches and so forth to try to trip the system up and make sure the system recovers appropriately, provides the level of performance and we document this in the Cisco validated design. So when customers run those types of configurations, they know it's going to run right the first time, that full certification information then we provide to Oracle, they review, they bless it. So Oracle support teams are fully aware of the certification and this is the third time we've done the certification of unified fabric with Oracle database. We did 10G, 11G and now 12C and customers have been overjoyed with the fact that when the database runs our systems, it runs correctly, provides high performance and so it really solves a lot of their initial headaches when they move to a new version of the database. You know, what'd they do with the numbers? The 12C, is that supposed to be cloud related now? That C for cloud is what Oracle's come up with, yes. Yeah, so, you talked about cloud also. Where's your customer's mindset on cloud and how do they look at Oracle when it comes to cloud? They heard Oracle's messaging here, Oracle's saying, they're building the enterprise cloud in the place where Oracle could live, what's Cisco saying and what do you hear from the customers? Well, talking to customers, really what we're talking about is the fact that while you want to look at a cloud environment, how it can help you. A lot of customers are looking at use cases like test and dev, right? They need to maybe have set up 40, 50 different copies of their database so they can test different firmware, different versions of the OS, that type of thing and so they're using a public cloud environment, such as Oracle, such as other clouds like Cisco cloud to be able to set up those test dev cases, do the testing up in the public cloud environment and then take the image they want to use back and run it on-prem. And so that's one of the key use cases that they've been talking to us about and seeing that we can provide them that type of assistance to help them implement that. All right, so John, one of the things we've been talking to your peers here at the show is kind of the ecosystem that Cisco has and in many cases the stacks that they're building. From an Oracle solution standpoint, can you talk to really kind of the storage partnerships, the broader solutions, what Cisco brings and maybe you can give us a couple examples of some of the partners you're doing stuff with. Sure, happy to. So really what we have is integrated infrastructures. We provide the UCS elements of our blades form factor typically with the fabric interconnects and then we mirror that with the storage products from the ecosystem, right? We've done a lot of work in the past with NetApp around FlexPod and in fact here at the show we are introducing a new Cisco Valde design we did with Oracle 12C on Clustered On Tap, the latest version so it's really beneficial for NetApp customers. We've done a lot of work in the past with EMC with Vblock and this year we're really doing a lot of work with Nimble Storage. One of the things that kind of led us in that direction was the fact that we had Oracle JD Edwards had actually come to us and said that in December of next year there's going to be new FASB regulations that are going to come into the industry. That's going to force a lot of the ERP vendors to have to provide patches or four version upgrades to be able to accommodate these FASB regulations and so JD Edwards was looking for different types of solutions that they could be able to talk to their customers about. So we sat down with Nimble and we came up with SmartStack, which is Nimble's CS300 storage with Cisco UCS. We announced it at the JD Edwards Summit back in February and at that summit they had 668 partners and they all heard about the solution, they all took a vote and they gave Cisco and Nimble a reward for having the top solution at that particular event. So that's pretty good validation of the work that we've done with Nimble for JD Edwards customers. Yeah, that's, you know, because of good proof points as you said, kind of not just, you know, there's the hard work to get it done and then, you know, well, how much adopted? How many people are buying it? Do you see more and more customers buying the integrated stack solutions? Definitely, yeah, we're seeing a huge increase in people buying the integrated infrastructures. The reason for it really is that people are looking for total solutions, right? They don't want to buy just a server, they want the full storage, they want the best practices defined, then we know that someone has been there and done that before and we can show that with our white papers and Cisco Validated Designs and people can install it, it reduces a lot of risk for them and provides them the level of performance they're really looking for.  Is that still kind of a fair comparison that, you know, I've got, you know, infrastructure that, you know, is great for Oracle, it can also do lots of other workloads. If you work with Cisco and its partners versus, you know, Oracle is, you know, they can do other applications, but where they're really showing their best performance and their best skill set is when it's a full RedStack. Yeah, really, with Cisco UCS and our storage partners, it's a type of solution that's really good for all workloads. We can do Oracle extremely well, obviously, when we get the proof points to prove it, but customers aren't running just Oracle. They're running Microsoft, they're running SAP, they're running other types of workloads and oftentimes we find customers want to run multiple hypervisors onto the solution itself because they might use, say, VMWare to consolidate lots of different images, but they want to use Oracle VM to consolidate the Oracle database images so they can set up hard partitions that help to reduce their Oracle licensing costs as a result of doing that. And so the multiple hypervisors solutions is what really helps separate Cisco UCS apart from everybody else in the market. All right, so what about from a performance standpoint?  What kind of data do you have? What kind of tests do you do? Do you have any proof points you can share from a performance standpoint? Sure, well, as I said, we've got 38 world record benchmarks in the history of Cisco UCS. This year we've done some new results around PeopleSoft. We just did the spec result I mentioned earlier. We've had 14 eBusiness Suite benchmarks, so we got the leading performance for all Intel vendors. We've done performance benchmarks with JD Edwards, with Siebel. In fact, Oracle actually approached us a couple years ago, and we did a TPC result with them. And so as much as people talk about performance, and Oracle obviously talks about performance, there's not a single benchmark out there where Exadata has competed against UCS on the benchmark itself. And so we think we provide leading performance and we, you know, set the results and see if the competition can beat us. Excellent. What are some of the other big issues? Security has been a big discussion this week. How important is that when you talk about building the UCS Oracle solution? Well, security is always very important to customers, right? And that's why when we designed UCS, we designed it around our Nexus technology. And what that really means for a customer, for one example, is that if you send data packets between nodes in an Oracle Rack cluster, you can't have data packet loss. The package simply doesn't arrive. By incorporating Nexus technology, we've proven that all the data packets are going to go to all nodes in Oracle Rack cluster. And so all the CPU cycles that you're going to use to drive the workload, are actually driving Oracle's workload, not resending those transactions again. And we've got the data points to prove it. Miracom did an independent third party study comparing Cisco UCS to some of our competition. And where the competition had data packet loss, we had zero data packet loss. And that's one of the key differences that I think separates us from the competition. All right, so I'm curious. We were talking before about 12C and that migration. How fast are customers adopting this? How much is their push for it? Traditionally, we have too often that it's all right. How many N minus whatever's customers are running? So what do we expect to see? It's the rollout of 12C. How long will this take? It will take a while because you're right. Customers tend to be risk adverse. If you look at the install base, my own estimate says that probably 30 to 40% of the customers are still running Oracle Database 10G. Another 50% are probably running 11G or two. And then there's a handful that are running 12C right now. I think when we're sitting here a year from now, we're going to see a lot more customers have been moving to 12C because at that point, it'll have more longevity in the field. And more people are going to feel it's a safe database to move to. They'll understand some of the new features of 12C, such as the in-memory capability and what that might mean to them. And so I think we're going to see a lot more customers, a lot more use cases, about 12C sitting here a year from now. I think for the majority install base to move up to 12C, it's probably looking at a couple of years, maybe two to three years at least. Yeah, great. You mentioned in-memory. I mean, I've been a product manager previously at times in my career, and it was always you look at this roadmap and you're like, all right, what's the customer pulling for and what are we trying to push at them? And you need some of those key triggers. You mentioned in-memory, there are some other things. Is licensing more advantageous? Is there anything else that is going to kind of help move customers along at a reasonable pace? You know, licensing itself, I don't think it's going to move customers along because the in-memory capability, the container data dictionary, those are layered products that you simply license, right? And so I think what customers are struggling with a little bit right now is trying to understand how much benefit do they get from those new technologies? Will their own environment benefit from having their data set up in a column format that the in-memory capability gives you? And what's the challenge of implementing that, right? Of course, you get them on stage. It sounds very cool. It can happen just like that. Well, database administrators have been around for a while. They know it doesn't happen just like that. And so how do you test for something like that before you put into the full implementations another set of questions they have. So they're looking for people who have some experience in that area. They're willing to talk to other customers at user group meetings, such as IOUG and so forth, understand their experiences, what the issues they've had so they can hopefully have a better implementation in the future. These capabilities are going to take another year or two before people really start migrating to those people. All right, so does Cisco have any services to try to help customers go through that process of the upgrade? Any kind of training you're doing to help or does Oracle drive a lot of that? We do. We have Cisco Advanced Services that has done an excellent job of providing customers with a feel good of being able to move to new versions of database. We can sit down with customers and we can first talk about what does a migration really mean? We can architect the major steps for them and then we can help them with either each step in that process or do the entire full process. In fact, a couple years ago EMC was making a migration off old risk architecture to Cisco UCS. Advanced services went in and we architected the entire migration for them and literally moved those databases over the course of a weekend to the latest version of the Oracle database and the long story short is they saved over $7 million replacing their risk architecture with Cisco UCS. And so we've got professionals that have been there, done that and can make customers feel really good about moving to the latest version. So John, there's been some discussion at the show. You know, there's a lot of change going on. So we're seeing Oracle making some changes. This is, you know, I think, you've been coming to this show for many years. 15 years. 15 years, I mean, this is not the Oracle of even five years ago. Right.  You know, what has changed? You know, where are we today when it comes to Oracle?  Database performance availability. Now with Oracle, we talk about database, but it's also applications. It's about different delivery models with the cloud. Customers will want to talk about setting up their own private cloud environment and delivering those services to the customers in a more rapid manner, being able to then cost out each department's use of the infrastructure within their ID department and charge back to those departments as a way to help pay for the implementation of the new products and services. And so it really is a much broader use cases that you're seeing today than what you saw even five years ago. And you're right, the industry has changed. I mean, there are some vendors that aren't at the show anymore. You've got some that are been moving to private. You've got some that have been moving in different directions. And so it really is a different show now from what it was even five years ago. All right, so John, I want to give you the final word. If, you know, we come and hear you on the stage. Yeah. You know, talking at Oracle Open World 2016. You know, what do you think there's some of the top items that we're going to be talking about? I think we'll be talking about some new performance around Oracle Database 12C. I think we'll be talking about unified fabric. We'll be talking about service profiles and how we can move those workloads around quickly and easily to different servers within the UCS architecture so we can match the workload to the resources to meet spikes in performance. And we'll be talking about probably another few thousand more customers running on UCS. We've got 46,500 customers right now. I think we'll have a few more by this time next year. All right, well, John McCable with the Oracle solutions inside of Cisco. Appreciate you sharing us with the updates. We'll be back with lots more coverage here from Oracle Open World 2015. This is theCUBE. Thanks for watching.


With spring approaching, Ukraine's forces had managed to hold off Russian advances through the worst of the winter months. Ukraine's President Volodymyr Zelensky said this in interview with CBS News. We have stabilized the situation. It is better than it used to be two or three months ago when we had a big deficit of artillery ammunition, different kinds of weapons, he said, we totally didn't see the big, huge counteroffensive from Russia. They didn't have success, he said. But Zelensky acknowledged that the invading Russian troops and their seemingly endless supply of missiles and shells had destroyed some villages, according to CBS News. We didn't have rounds, artillery rounds, a lot of different things, he said, stressing that while his troops have managed to keep the Russians largely at bay up to now, they're not prepared to defend against another major Russian offensive expected in the coming months. That, he said, was expected around the end of May or in June, he said. And before that, we not only need to prepare, we not only need to stabilize the situation, because the partners are sometimes really happy that we have stabilized the situation, Zelensky said of the US and Ukraine's other backers. No, I say we need help now. He said what's needed most are American Patriot missile defense systems, and more artillery. While he's grateful for the billions of dollars in US support his country has already received, he said the nature of the funding dedicated by the American government to help Ukraine must be put into perspective, with lawmakers in the US still wrangling after months of partisan gridlock over a $60 billion aid package. Zelensky acknowledged that the war in Gaza had refocused global attention and US aid away from his country's struggle.


Oh, and welcome to Stand the Energy Man here on Think Tech, Hawaii. I'm Stan Osserman, formerly, and I say formerly as of this past Wednesday from the Hawaii Center for Advanced Transportation Technology, and now it's just little old me coming to Think Tech on my own time and doing a host job, and I love doing this stuff. I really appreciate the feedback I get from everybody, and today we have a really great show. I was fortunate in a couple weeks, actually a couple months ago, to be in Washington, D.C., with some of the other folks from Hawaii, to attend the Department of Energy's annual merit review on hydrogen, and I met some great, great folks there that had great presentations, and one of the gentlemen I met is our guest today, Dr. Franklin Tang Diaz, and an interesting gentleman, he's got an interesting background and I'll let him talk about it, but I think he kind of splits this work time between Houston and Costa Rica, which I kind of admire, because I almost retired in Costa Rica, and if I wasn't living in Hawaii, I probably would have retired in Costa Rica, but anyway, Doc, thanks for joining us today. This is really an honor to have you on the show. It's a pleasure. It's a pleasure, Stan. Well, why don't you tell the audience a little bit about yourself if they haven't heard about you already, and we'll let you get started. Okay. Well, as you said, I am originally from Costa Rica, another paradise just like Hawaii, very similar features, volcanic beaches, beautiful oceans, and so on, and I always was fascinated by space. Space was my calling from a very early age, and I was a child of Sputnik, like many people my age, we were transformed by the whole opening of the space age. So I wanted to follow a career in space, and so in 1968, I emigrated to the United States. I flew to the U.S. as a teenager. I was 18 years old, and I spoke no English at the time, and I didn't have any money to speak off. And so I, like many other, many immigrants to this country, I just had to open my future, my way in this great land. And I went to school, learned English. I went back to high school. I had already graduated from high school in Costa Rica, because I didn't speak English, I went backwards a little bit to pick up some steam, and learn the language, and got a scholarship to go to the university, the University of Connecticut. That's where I ended up, studied engineering. And all that time, you know, I aimed the space program, looking at the space program, and I was very fortunate to be starting my college career. When Neil Armstrong stepped on the moon, and I had followed that whole program from the beginning, interestingly enough, that at the time that happened a couple of years later, the space program was canceled, at least the moon program was canceled by President Nixon at the time. And all of a sudden, we were immersed in an energy crisis. That was an energy crisis of 1973, when the OPEC countries began to curtail the export of oil to the Western countries. I remember that. That was when they started having a gas crisis and rationing gas. Yeah, so anyway, two things that were kind of combined. One was the cancellation of the moon program, and the opening of opportunities in the field of energy, which also interests me. And I was studying engineering and physics. And of course, the space program was not really an option to continue on. So I decided to go into energy and to nuclear power. And I went to graduate school. I graduated then from the University of Connecticut as a mechanical engineer and as a physicist, and then I went to grad school at MIT and got involved in the fusion program, thermonuclear fusion, something very futuristic. I was always thinking that space somehow was going to combine this, eventually it was going to converge to this. And sure enough, in the late 70s, NASA began to open up again with the testing of the space shuttle. And I always wanted to be an astronaut. And so I had become a US citizen in 1977. And I had all the requirements. So I applied to the program in 78. Of course, I was rejected the first time, like many others.  But I applied again in 1979. There was another opportunity. And I was selected in 1980 as a member of the ninth class of astronauts for the space shuttle program. And so I began working at NASA as an astronaut in training in 1980 and ended up spending 25 years in the space program. It was tremendous, for me, the realization of a lifelong dream. I flew for the first time in space in 1986 on my first flight. And I ended up flying seven times in space. I flew all of the space shuttles, except for the Challenger. And went to the Russian space station, Mir, spent some time there. I got involved in many of the major missions. And I helped build the International Space Station. So 25 years as an astronaut, it was an amazing journey for me. And then all that time, I was involved in the development of a rocket engine that would be an electric propulsion system for deeper missions into space. Something that would go far beyond the speed of a chemical rocket. And so that research was ongoing, sort of in parallel, as I was doing my flying in space. And eventually, in the early 2000s, 2004, I decided that it was time for me to move on to sort of my next goal or my next dream, which is to develop this propulsion system. And so I founded a company. I founded the Arrasa Rocket Company in 2005. And I've been since then working in the field of rockets. And along the way in 2009 or so, I began to diversify the company into the field of energy and hydrogen. Because I lived on the space shuttle on hydrogen fuel cells. And to me, that was the future. That would be the future of electric transportation on Earth. And so I wanted to try this hydrogen economy and hydrogen infrastructure in Costa Rica. Because Costa Rica does not have any natural resources of oil or natural gas. And so I think the niche for hydrogen in Costa Rica is perfect. And it's a country that prides itself of having a very clean electrical infrastructural hydroelectric and wind and solar and so on. They're very similar to Hawaii and in some ways, I think. And in fact, my first connection with the hydrogen for real in Costa Rica was through Hawaii. I came to visit the installations in Hawaii. And that's how the whole thing got started. So we're very interested and very happy to have become very pioneers in Costa Rica and Latin America in the implementation of hydrogen technology. We need to do a sister-state thing between Costa Rica and Hawaii, I think, and that'd be a great adventure. I think so. I think that would be a good thing. I have two personal questions to ask before we get into this. And the first one is, where does an astronaut, in terms of thousands of feet, where does an astronaut space begin? How many tens of thousands of feet up? Well, the typical number is 100 kilometers, something like 50 miles up in the sky. That's where the boundary. But there is no real definite boundary. I mean, the atmosphere just gets thinner and thinner and thinner. And eventually, there's very little air. And presumably back where you are in the 300 or 350, 400 kilometers are altitudes for the space station. That is space. You're in space. There's no question about it. I'm asking to see if I'm in trouble for one of the flights I had in F4. My next question though is, did you know Eileen Collins on the space shuttle program? I do. I do know Eileen very well. In fact, we trained together. And we never flew together. But we've flown airplanes together. And she joined the program. When I was there, she joined a few classes later. But a wonderful, wonderful person. Very good. Very, very person that many men and women emulate. I agree. She was my final instructor in T-38 in the Air Force. And I've always watched her career. I know now she works for an insurance company. I won't say which one. I'm a board of directors. But yeah, she's a great lady. And I've always admired her. Oh, that's neat that we have that connection. Anyway, let's talk a little bit about energy. You mentioned that up in space, the space program uses a lot of fuel cells in the space program. And I find it kind of ironic that most of the folks that I run into are afraid of hydrogen because they don't think it's safe. And I can't think of a more critical environment that would prove the safety of it than in outer space. Yeah. Yeah, absolutely. I mean, the space shuttle, all of the space shuttles, of course, relied on hydrogen. And we carried containers or tanks of liquid hydrogen and also liquid oxygen because, of course, we don't have any air out there to bring oxygen in. So we carried oxygen and hydrogen. And we would combine both in fuel cells. The special had three fuel cells. And we produce plenty of electricity and also plenty of water. That was the other thing that was pretty neat. All of the drinking water for us came from the fuel cells. And in fact, we used to produce so much water that we had to dump it overboard in many cases. And in some cases, when we flew to the Russian space station near, we would actually collect water before we would do the docking and have big bags, plastic bags full of water because the Russians always were in need of clean water in the near station. So that was amazing to me that water is such an important byproduct that could be really used on Earth. Did you also generate hydrogen with electrolyzers or anything with solar power? No, the shuttle didn't have the staying power, the capability to stay there for more. I mean, the longest that a shuttle could have stayed, perhaps with an extended duration kit of hydrogen and oxygen would be maybe a month curtailing and being very frugal about the use of energy. But it was the space station right now does not use hydrogen fuel cells. They do have solar energy. But when we operate on the moon, on Mars, the water cycle will be critical, it will be very important to be able to produce hydrogen and oxygen to breathe and hydrogen to generate electricity and also both of them to produce water. So I think fuel cells are going to come back into the space program in a big way when we deploy activities in the surface of the moon and Mars and so on. I tell you what, Dr. Tang, we're going to take a quick break here. When we come back, what I'd like to talk about is some of the efforts that you're involved in in Costa Rica to get their economy up on hydrogen. I'd really like to hear about that. We'll be back in 60 seconds. OK. Hello, everybody. My name is Walter Kawai. I'm your host for a monthly live streaming video entitled Ukulele Songs of Hawaii. Where I bring on guests, we enjoy talking story about the music industry here in Hawaii, sometimes going back 50 decades if possible, and always having some good fun talking with entertainers. We're here located at Think Tech Hawaii downtown Honolulu at the Pioneer Plaza building and in their studios. And so join me next month for Ukulele Songs of Hawaii. Hey, hello, and welcome back to Stan Osterman and Stan Energyman here on Think Tech Hawaii. And we're actually coming to you live from outer space. You believe the background. And our guest today, a certified astronaut, Dr. Franklin Chang Diaz, who also happens to have been brought up in Costa Rica, one of my other favorite places. But on my bucket list, yes, to visit. And I'll have to get over there sometime. And I think I will now that I know somebody down there. Dr. Chang, thanks for being with us today. And let's talk a little bit about Costa Rica and what you're doing in hydrogen down in Costa Rica. OK. Well, Costa Rica is a very small country in Central America. It is between Panama on the South and Nicaragua on the North. It is a country that does not have any energy resources in the form of oil or natural gas. So Costa Rica, from very early on, electrified its matrix of energy matrix with hydroelectric power. The country has plenty of hydroelectric power. And it has a lot of sun and also a lot of very good wind as well. It has volcanoes as well. So it has a lot of geothermal capabilities as well. Now, all of the transportation in Costa Rica is still fossil-based. That is, oil or gasoline or diesel, which has to be imported. And when you look at the total amount of energy that the country consumes, only about 30% of that is electricity. About 70% of the energy is still imported, fossil, gasoline, diesel, NAFTA, bunker oil, and so on. And so we want to change that. We want to move away from fossil fuels in the transportation sector and into hydrogen, because obviously, the country has plenty of sun and plenty of wind to supply all of its needs in terms of transportation. So that's what we're set out to accomplish. The country is very small. It's only 50,000 square kilometers. It only has about 5 million people. It is a very stable democracy. It's one of probably the most stable democracies in the Western world, in Latin America, certainly, for sure. And it's well-educated. The country is well-educated. And so I think the conditions are all right. The economic conditions as well, because the price of gasoline and the price of diesel is sufficiently high to warrant an alternative fuel for transportation. So hydrogen comes to that level of equity where it becomes interesting to apply it. So I think the niche is correct, and we're trying to do that. How much of your power is produced by hydroelectric? Because the difference between wind, solar, and hydroelectric is hydroelectric is a good firm, steady power source. When the sun, solar is not always available, and wind, of course, is not always available. And that becomes a big issue here in Hawaii, because we have solar and we have wind, but we don't really have the hydroelectric except on the Big Island per se. And the only other natural resource we can tap into for firm, steady power that's also renewable is geothermal. So how much of your energy is currently hydroelectric? And are you looking at geothermal for any or long-term basal of power? Yeah, the bulk of the electric power is still hydroelectric. I'd say maybe 80% or so of that 30% which constitutes electricity. We're not talking about transportation now. We're talking just about electric grid. Only I'd say maybe about maybe 80% of that electricity is hydroelectric. There is a growing infrastructure in geothermal power. Yes, there's a couple of big projects being developed right now. And of course, wind and solar as well. And more and more people are beginning to open up to solar. The biggest problem in Costa Rica is the fact that energy is a monopoly. It's a government monopoly. And it is difficult sometimes to deal with that, because it kind of stifles a little bit the competition process of the private sector. But within those parameters, frameworks, that I think Costa Rica has really been an example of clean energy. In fact, there were times when the country was 100% carbon-free, at least in the electric part. Again, I'm not talking about the transportation. But the electric part is still a significant portion of the total matrix. Dr. Tseng, I tell you what, we have your video. Why don't we show your video now and give some folks a chance to brush up on their Spanish and their quick reading? And see what's going on in Costa Rica. OK. I think I'm most proud of the Adastra team. It's like they've entered this project with the heart. They've been dedicated completely to soul and body for the success of this project. It's been difficult, very, very difficult. We've had many failures, many troubles, many problems. But these guys have not been measured with that. They've continued forward, they've continued with perseverance and they've achieved the success at the end of the day. There is an operational knowledge that is not achieved by reading books. And that has made us much more robust, more capable of solving problems that are always present in the course of things. Things, in theory, work very well. In practice, no. What we've tried so far is that it can be done. And it can be done. Technically, we were able to do it. The Adastra team, together with the other members of the project, were able to show that a hydrogen ecosystem is possible to do it in Costa Rica. The important thing is that the Costa Rican directly benefits with public transport. A person who goes to work every day and pays, let's say, 500 columns to go, let's say, from the city of Liberia to maybe work at the airport, he could get on a hydrogen bus and not feel a financial difference that doesn't cost him any more. But he will go much more comfortably, he will have a very, very advanced transport and we are going to do it with fuel produced in the country and without contaminating the environment. I think that the Costa Ricans have all the necessary ingredients to do this. We have our gray material in abundance. We have a peaceful, educated country with attention to the environment. What we need is to get out of the way. Doc, thanks for sharing that video with us. That's really awesome. And I guarantee you there is a heck of a lot in common between Hawaii and Costa Rica. It's on my bucket list. I'm going to get down there. Two of my favorite hobbies, fishing and surfing. So besides hydrogen, it's got fishing and surfing calling my name. But we've got about two minutes left and I'd like to leave it all to you to just talk a little bit more about what you envision for Costa Rica in the future. Are you going to retire down there? Or are you going to do the snowbird thing? Go back and forth. I guess having flown in space transforms the human being into a citizen of a planet. And we don't even think of ourselves anymore as citizens of a given country, per se, but more like a citizen of a planet. And I just kind of live everywhere. I live wherever anywhere. This planet is so small. And I feel kinship and communion with just about everybody. So I've been living in the US for more than 50 years, most of my life. I love Costa Rica. I love Latin America. I love. I have Chinese roots in my background, European roots. Well, I mean, you name it. It's just a citizen of a planet Earth. What is the Chinese term? Chapsui. Chapsui. Yeah, I guess so. I think that someday, this is what I tell people, that most of humanity will be living outside of our planet. And the planet, the Earth, will perhaps be maybe a national park of humanity, the patrimony of our human civilization. And that's why it's so important to keep it and take care of it, and make sure that we don't mess it up. But eventually, most of us, most people will be living elsewhere. And the Earth will be the place to come to see the beauty of where we came from. That's the world we'll go on vacation, huh? That's right. Right. Doctor, it's been awesome having you on the show. It's really great. I definitely want to have you back. But I know Mitch Ewen has a show on Think Tech on Wednesdays.  Oh, really? So he's definitely going to have you on his Wednesday show, coming up probably in the next couple of months. But thank you so much for being on the show. It's an honor. And I really appreciate you sharing some time with us. And we look forward to talking to you again. So Aloha from Hawaii. Let's work on that sister statehood thing between Costa Rica and Hawaii. I think it's a natural. Well, in Costa Rica, we say pura vida instead of aloha. So it's great. May I come here? May I come here, Seniors? You're welcome. Thank you.


We're the best American football players in the world. I guess the best football players in the world are now participating in the World Cup and they all play on natural grass. Every single match, like, when we went to London, Tottenham Hotspur Stadium had a beautiful natural grass pitch, right?  I think just the injuries, the recovery, just spending a lot of time on turf and then spending time on grass as well. I feel like I recovered quicker, you know, when I played on a natural surface as I do on the artificial surface.  It's just, it doesn't have the same bounce, like the same give like a natural surface does. So you also see a lot of people getting their knees kind of like caught or ankles kind of caught or feet kind of caught. And this is causing a lot of injuries. You know, we're just trying to bring attention to the matter that natural surface is better for players' health in the long term. You know, we should be treated as such.