IBM Systems Magazine, Mainframe - July/August 2014 - 32

speed the process and support
algorithms like Data Encryption
Standard (DES), Triple DES and
Advances Encryption Standard,
as well as secure hash algorithms
(SHA) such as SHA-1 and SHA-2.
In addition to these on-chip
offerings, users can leverage
tamper-resistant, programmable
PCI Express Gen2-based Crypto
Express 4S cards as add-ins.
The hot pluggable cards can be
configured to act as co-processors
to increase the throughput of
encryption/decryption or as
accelerators to speed it up.
Additional benefits include
scalability and cost. A mainframe
chassis can host up to 16 cards,
and requires only a single
update, compared to an x86
implementation that could
involve dozens or even hundreds
of servers that all require updates
and maintenance.
Securing data requires
encrypting the outgoing
transmissions and decrypting
the incoming transmissions. It
can gobble up vast amounts of
processing cycles, particularly
if the data has to go to off-chip
memory. The System z server
incorporates a significant amount
of on-chip cache, which speeds
operations. Keeping the data on
chip also helps prevent sidechannel attacks. Meanwhile,
because the virtualization layer
of System z is intrinsic rather
than a bolt-on afterthought like
VMware, virtual machines can
access cryptographic services
without explicit authorization,
raising the level of security while
reducing the workload for system
administrators.
Integrating cryptographic
facilities at the processor level is
not unique to the mainframe. The
issue is not what they're doing but
how-and how well.
"You'll find crypto facilities
on x86 and RISC systems at

High
Standards
System z is the
only computing
platform that has
demonstrated
compliance to
the Common
Criteria's
Evaluation
Assurance

Level 5+
rating

The mainframe
has the highest
mean-timebetween-failure
rating result:

30 years
Most mainframes
experience

less than
5 minutes
of downtime
a year

32 // JULY/AUGUST 2014 ibmsystemsmag.com

the processor level, but the
mainframe implementation is
particularly robust," says Joe
Clabby, president of Clabby
Analytics and author of the
report. For proof, look no further
than certification. The System z
platform is the only computing
platform that has demonstrated
compliance to the Common
Criteria's Evaluation Assurance
Level 5+ rating.
Perhaps the biggest difference
between the x86/RISC offering
and the System z platform is
the mainframe's capability to
manage data. System z servers
are equipped with a powerful
communications system front
end with up to 288 processors,
allowing it to rapidly preprocess
and route enormous volumes
of I/O and then present it to
the processor ready to digest.
That's what makes it so effective
at transaction processing,
for example.
"These systems are great big
sucker-inners and blower-outers,"
Clabby says. "They take a lot of
data-heavy I/O, streamline it and
process it, then hand it off to
the CPU."
A full suite of ancillary software-including Security zSecure*
suite and IBM InfoSphere*
Guardium*-simplifies administering security and demonstrating
compliance. Products such as
the RACF* program can manage
user authentication and develop
a tiered authorization scheme to
better protect data.

Ensuring Operations
Although security dominates the
risk management conversation,
another type exists- risk to
business. Security doesn't matter
if the computing platform can't
fully support operations. It must
be fast, reliable and available,
and at the end of the day, it has to
fit the budget.

Even the safest operations
are useless if the machine can't
deliver the results in a timely
fashion. Today's x86 boxes
and RISC systems boast clock
speeds as high as 4 GHz, which
sounds fast until you discover
that System z servers operate at
5.5 GHz. However, x86 and RISC
machines run two to four threads
per cycle compared to just one for
the mainframe. Advantage, RISC
and x86? Not at all.
"Nothing processes transactiontype workloads better for
high-volume and I/O-intensive
workloads than a System z server,"
Clabby says. System z features
on-chip cache, which includes 48
MB of Level 3 cache, making data
transfer more efficient. With the
addition of significantly higher
clock speed, the platform can
stack workloads and execute them
in series or parallel. Workloads can
be processed at maximum speed
while eliminating downtime,
making the mainframe particularly
well-suited to transactions and
batch processing.
Any risk management strategy
must take into account reliability
and availability. Downtime is a
major threat to business success.
If a system goes down while
running a business analytics
batch process in the middle of
the night, it may merely be an
inconvenience. If a transaction
processing system goes down for
an hour on Cyber Monday, it could
be a multimillion-dollar disaster.
Mainframes have been
designed from the beginning for
reliability, combining a "shared
everything" architecture with a
high degree of component-level
redundancy. The result is a mean
time between failures of about
30 years for System z, with an
average downtime of less than five
minutes a year. In the rare event
of failure, the system is designed
for real-time recovery. System z


http://www.ibmsystemsmag.com

IBM Systems Magazine, Mainframe - July/August 2014

Table of Contents for the Digital Edition of IBM Systems Magazine, Mainframe - July/August 2014

Table of Contents
Editor's Desk: Protecting information
IBM Perspective: Sunny outlook on the mainframe
Techbits: Watson: your personal shopper
Infographic: How the mainframe changed our world
Partner PoV: ISVs can help mainframe customers keep up with a rapidly evolving environment
Focus on Storage: IBM FlashSystem addresses storage and application performance issues
Currents: As data consumption expands, information protection policies must be put in place
Case Study: Credit Where Credit's Due: Isracard Group devises a novel way to verify its system integrity before disaster occurs
Cover Story: A Secure Fortress: The mainframe delivers the reliability, safety and cost-effectiveness your IT shop needs
Feature: Be Proactive in Risk Management: Protecting data is crucial as your business connects in ever-increasing ways along the access superhighway
Feature: Being Risk-Aware: New IBM and Ponemon study examines the economics of IT risk and reputation
Administrator: Active/Active Sites helps distribute workloads during outages
Tech Corner: A point-in-time tool, Runtime Diagnostics can find issues in a pinch
Solutions: Reflection 2014; CA Chorus; VFTP 3.0; Lifecycle Manager; STEPLIB-Rx; Ivory VisualConnect; Mainframe Abend Assist; Linux Enterprise Server Starter System for System z
Stop Run: Together, IBM executives Pat Toole Jr. and Pat Toole St. bring more than half a century of dedication to the company
Reference Point - Global Events, Education, Resources for Mainframe
2014 Mainframe Solutions Edition Product Index
IBM Systems Magazine, Mainframe - July/August 2014 - Intro
IBM Systems Magazine, Mainframe - July/August 2014 - Cover1
IBM Systems Magazine, Mainframe - July/August 2014 - Cover2
IBM Systems Magazine, Mainframe - July/August 2014 - 1
IBM Systems Magazine, Mainframe - July/August 2014 - Table of Contents
IBM Systems Magazine, Mainframe - July/August 2014 - 3
IBM Systems Magazine, Mainframe - July/August 2014 - 4
IBM Systems Magazine, Mainframe - July/August 2014 - 5
IBM Systems Magazine, Mainframe - July/August 2014 - Editor's Desk: Protecting information
IBM Systems Magazine, Mainframe - July/August 2014 - 7
IBM Systems Magazine, Mainframe - July/August 2014 - IBM Perspective: Sunny outlook on the mainframe
IBM Systems Magazine, Mainframe - July/August 2014 - 9
IBM Systems Magazine, Mainframe - July/August 2014 - Techbits: Watson: your personal shopper
IBM Systems Magazine, Mainframe - July/August 2014 - 11
IBM Systems Magazine, Mainframe - July/August 2014 - Infographic: How the mainframe changed our world
IBM Systems Magazine, Mainframe - July/August 2014 - 13
IBM Systems Magazine, Mainframe - July/August 2014 - Partner PoV: ISVs can help mainframe customers keep up with a rapidly evolving environment
IBM Systems Magazine, Mainframe - July/August 2014 - 15
IBM Systems Magazine, Mainframe - July/August 2014 - Focus on Storage: IBM FlashSystem addresses storage and application performance issues
IBM Systems Magazine, Mainframe - July/August 2014 - 17
IBM Systems Magazine, Mainframe - July/August 2014 - 18
IBM Systems Magazine, Mainframe - July/August 2014 - 19
IBM Systems Magazine, Mainframe - July/August 2014 - Currents: As data consumption expands, information protection policies must be put in place
IBM Systems Magazine, Mainframe - July/August 2014 - 21
IBM Systems Magazine, Mainframe - July/August 2014 - 22
IBM Systems Magazine, Mainframe - July/August 2014 - 23
IBM Systems Magazine, Mainframe - July/August 2014 - Case Study: Credit Where Credit's Due: Isracard Group devises a novel way to verify its system integrity before disaster occurs
IBM Systems Magazine, Mainframe - July/August 2014 - 25
IBM Systems Magazine, Mainframe - July/August 2014 - 26
IBM Systems Magazine, Mainframe - July/August 2014 - 27
IBM Systems Magazine, Mainframe - July/August 2014 - 28
IBM Systems Magazine, Mainframe - July/August 2014 - 29
IBM Systems Magazine, Mainframe - July/August 2014 - Cover Story: A Secure Fortress: The mainframe delivers the reliability, safety and cost-effectiveness your IT shop needs
IBM Systems Magazine, Mainframe - July/August 2014 - 31
IBM Systems Magazine, Mainframe - July/August 2014 - 32
IBM Systems Magazine, Mainframe - July/August 2014 - 33
IBM Systems Magazine, Mainframe - July/August 2014 - Feature: Be Proactive in Risk Management: Protecting data is crucial as your business connects in ever-increasing ways along the access superhighway
IBM Systems Magazine, Mainframe - July/August 2014 - 35
IBM Systems Magazine, Mainframe - July/August 2014 - 36
IBM Systems Magazine, Mainframe - July/August 2014 - 37
IBM Systems Magazine, Mainframe - July/August 2014 - Feature: Being Risk-Aware: New IBM and Ponemon study examines the economics of IT risk and reputation
IBM Systems Magazine, Mainframe - July/August 2014 - 39
IBM Systems Magazine, Mainframe - July/August 2014 - 40
IBM Systems Magazine, Mainframe - July/August 2014 - 41
IBM Systems Magazine, Mainframe - July/August 2014 - 42
IBM Systems Magazine, Mainframe - July/August 2014 - 43
IBM Systems Magazine, Mainframe - July/August 2014 - Administrator: Active/Active Sites helps distribute workloads during outages
IBM Systems Magazine, Mainframe - July/August 2014 - 45
IBM Systems Magazine, Mainframe - July/August 2014 - 46
IBM Systems Magazine, Mainframe - July/August 2014 - 47
IBM Systems Magazine, Mainframe - July/August 2014 - Tech Corner: A point-in-time tool, Runtime Diagnostics can find issues in a pinch
IBM Systems Magazine, Mainframe - July/August 2014 - 49
IBM Systems Magazine, Mainframe - July/August 2014 - 50
IBM Systems Magazine, Mainframe - July/August 2014 - 51
IBM Systems Magazine, Mainframe - July/August 2014 - Solutions: Reflection 2014; CA Chorus; VFTP 3.0; Lifecycle Manager; STEPLIB-Rx; Ivory VisualConnect; Mainframe Abend Assist; Linux Enterprise Server Starter System for System z
IBM Systems Magazine, Mainframe - July/August 2014 - 53
IBM Systems Magazine, Mainframe - July/August 2014 - 54
IBM Systems Magazine, Mainframe - July/August 2014 - 55
IBM Systems Magazine, Mainframe - July/August 2014 - Stop Run: Together, IBM executives Pat Toole Jr. and Pat Toole St. bring more than half a century of dedication to the company
IBM Systems Magazine, Mainframe - July/August 2014 - Cover3
IBM Systems Magazine, Mainframe - July/August 2014 - Cover4
IBM Systems Magazine, Mainframe - July/August 2014 - Reference Point - Global Events, Education, Resources for Mainframe
IBM Systems Magazine, Mainframe - July/August 2014 - 2014 Mainframe Solutions Edition Product Index
IBM Systems Magazine, Mainframe - July/August 2014 - SE2
IBM Systems Magazine, Mainframe - July/August 2014 - SE3
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20201112
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20200910
http://www.ibmsystemsmagmainframedigital.com/mspcomm/ibmsystemsmag/ibmsystems_mainframe_20200708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20200102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2020mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20191112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/relevantz_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2019mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20190102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20181112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20180102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/2018mfse
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20171112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_sesupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20170102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_linuxsupp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20161112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/MainframeSecurity
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20160102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20151112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910_se
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150910
http://www.ibmsystemsmagmainframedigital.com/MFSkills
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506_supp
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20150102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20141112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_gt_201405
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/BigData
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20140102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20131112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910_v2
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20130102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20121112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/buyersguide2013
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20120102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/ibmsystems_mainframe_2012bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20111112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20110102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20101112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100910_bg
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100506
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100304
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20100102
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20091112
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090910
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090708
http://www.ibmsystemsmagmainframedigital.com/nxtbooks/ibmsystemsmag/mainframe_20090506
https://www.nxtbook.com/nxtbooks/ibmsystemsmag/mainframe_20090304
https://www.nxtbookmedia.com