LogicLibrary Federated Repository Pilo

LogicLibraryConsolidate. Migrate. Integrate.

Don ImhoffEmily O’BrienKen Cotrell02 16 2005

©2005 LogicLibrary, Inc.

Agenda

Introductions Don Imhoff, VP Business Development Channels

Ken Cottrell, Technical Director

Emily O’Brien, Southeast Sales Director

Learn about EPA asset management objectives

Review the Federated Registry Pilot

About LogicLibrary

What is Logidex?

The Need for Logidex

Logidex In Action

Getting Started with Logidex


EPA Software Asset Management Objectives

EPA CIO recently directed that “all new OEI systems development work will be directed to the systems development center as an important step in advancing our EA, eliminating redundancies, and developing reusable components”. It will take a state-of-the-art EA component asset reuse registry and repository to make this directive work”

Approaches?

Other initiatives?

Federated Registry Pilot


Noblestar and Logic Library collaboration

Began as technology review for centralized component registry Software Development Assets (SDAs) = more than just

“Components,” SDAs = Business process models Budget request documents and development plans Legacy systems Enterprise architectures and reference models Technical architectures, frameworks, and patterns Service Oriented Architectures, web services, and middleware .Net, J2EE, Corba components Use cases, test cases, and requirements documents Software application documentation, help files Best practices and methodologies Associated articles and training documents, etc.

Became a review of the applicability of software development asset management systems for ITIM information management.

Focus shifted from component management to IT Information management!


Review interrelated Federal IT Investment Management practices and issues. Determine applicability and adaptability of commercially available solutions. Discover ways to ease each CIO’s burdens and risks w/ IT Investment Management

administration & reporting (ITIM Information Management) Suggest options to Agency CIOs and staffers who manage information about the

systems, components, and technologies addressed in the ITIM function.

External Oversight: OMB, Congress, Independent Orgs.

Agency Executive Staff, CIO, CFO, Investment Review Board, etc.

Chief Architect, Chief Technology Officer, FEA PMO Office, etc.

Systems Development Management and Programming Staff, IRM Staff

Federal Contractors

Inspectors

Directors

Enablers

Achievers

Contractors

Pilot Summary Goals


Current ITIM practices are primarily manual. Decisions are based on static, laboriously modeled, snapshots of dynamic and complex IT organizations.

Plentiful opportunities exist for incorporation of actual artifacts, plus real-time metrics and reports, into ITIM, thus progressing ITIM maturity from managing past-tense renderings to managing real-time tangibles.

Risks in manual/ static/ modeled ITIM Information Management include: management and investment decisions may be made from outdated, inaccurate, or incomplete data; external audits may uncover that the actual environment is not accurately portrayed by static EA models or reports; and, CIOs may experience delays in achieving desired objectives due to being hampered by inaccurate and outdated information.

Inspectors

Directors

Enablers

Achievers

Contractors

Current ITIM Information Management

Manually collecting, cleansing, culling,aggregating, and modeling data aboutAgency IT investment assets & artifacts to:- perform technology assessments ~ prioritize business requirements ~ select build/ buy/ reuse/ hosted/ outsource ~ review and justify for A300/ A53/ eGov- measure reuse, spending reductions, etc.- model Agency EA(s) and processes- enforce Agency EA(s)

- share some artifacts between projects- manage budgets, people, projects, etc.

IT Investment Management Framework (ITIM) Maturity Levels 2 thru 5: - capture investment information, improve investment selection process, meet business needs, inform the investment board, create full portfolio of systems to components, enable systems lifecycle management, improve the portfolio’s usage and cost performance, support optimized use of IT to drive change

Pilot Summary: initial findings


StarOffice Excel, Word

PowerPoint

Niche ‘Repositories’ (XML, .PPT, FEAMS,

A300db, CollabNet, ComponentSource)

SCM (ClearCase, SourceSafe, PVCS)

Popkin SA

Metis

LogicLibrary Logidex

Flashline.com, Inc.

Personal Productivity Tools

Individuals / Workgroups

No re-use inventory

Does not support classification activities

Manual versioning

Laborious manual data collection, cleansing, verification, and reporting

FEA-CapableEnterprise SDA Repositories

Niche Applications

“Enterprise”Technologies

Increasing levels of support for the strategic management of ITIM initiatives; automating all levels of SDA usage, real-time metrics collection

Workgroups

Multiple, un-coordinated re-use inventories

Multiple schemes for classification

Supports at least one asset type; asset types vary by product

Version control

Some have add’l functionality, like collaboration

Division / Department

Manual/ modeled/ static inventories; support for asset types varies

Coordinated scheme for classification

Some associative / linkage capabilities

Supports multiple asset types

Supports governance and version control

Agency / Cross Agency (as desired); supports all ITIM business processes

Automated metrics collection re: tangible asset inventories (not static models; provides real-time/ actual info for ‘what if’ modeling in Metis and Popkin)

FEA & CPIC-specific linkage / associative abilities: FEA, Agency EA(s), Reference Models, TOGAF, DODAF, Exhibit 300’s, etc.

Link to multiple repositories for single source of information about an asset

Support ALL asset types, lifecycles, governance requirements, versioning

Coordinated scheme for classification

• Accurate in real- time

• Strategic Management

• FEA Maturity

• Strategic Process Changes

• Savings

Unique to Logidex:

Enhanced federation capabilities

Launch from Portals, or w/in IDEs, or collaboration s/w like Groove v3.0

Automated discovery of reusable assets

S/W for component certification & QA

Open API for use of Semantic Search s/w like Vivisimo

Pilot Summary: technical solution options

Logic Library


About LogicLibrary: Marquee Customers and deep industry partnerships


Industry Recognition:Gartner Magic Quadrant 2004

Challengers Leaders

Ability to

Execute Adaptive

Niche Players Visionaries

Allen Sys

Sybase

Ascential

CA/Advantage

•

••

•

Completeness of Vision

As of 2/04

•

Through 2005

•

••

Flashline

LogicLibrary

••

•MetaMatrix

Informatica

UnicornCA/ModelManager

•Select

•FujitsuDAG••CS •Troux

#1 distributed#2 in vision#3 in ability to execute

For 2005, Logic Library increases it lead. CA is removed from Leader Quadrant.


LogicLibrary’s Largest Customer: IBM’s Software Group (SWG)

SWG (WebSphere, Rational, Tivoli, Lotus, and DB2) will drive internal componentization efforts with Logidex across IBM by providing: Knowledge assets –patterns, architectures and best

practices Components – Rational’s RAS assets and binaries

Goal: reducing time-to-market and promoting cross-utilization of components

Why They Chose Logiclibrary: Integration: Logidex current and future support for

Rational products Performance: Enterprise performance and scalability Customer service: Management of enhancement

requests from IBM

What is Logidex?


What is Logidex?

LogicLibrary is the market leader in software for managing, reusing and governing software development assets (SDAs)

Logidex: simplifies the creation, integration and

governance of service-oriented architectures (SOAs) and other key enterprise application initiatives

integrates with leading development environments

accelerates application development

The Need for Logidex


Analysis + Design Coding Testing + QA Deployment

Use Cases

Requirements

TechnicalModels

SCM Systems

Test Cases

Business Process Models

Documentation

Best Practices

Design Patterns

Tracking System/Repository

The Need for Logidex:Stove-piped SDLC


LOGIDEXMETADATA

Use casesBusiness process modelsBest practicesDesign patternsTechnical architecturesApplicationsComponentsServicesDocumentationTest cases

Analysis + Design Coding Testing + QA Deployment

Use Cases

Requirements

TechnicalModels

SCM Systems

Test Cases

Business Process Models

Documentation

Best Practices

Design Patterns

Tracking System/Repository

The Need for Logidex:Metadata across SDLC


Understand…

WHAT you have

WHERE it is

HOW it fits

BusinessRequirements

Build Search

The Need for Logidex:Know What You Have


The Business Needs for Logidex:

“Due to budget pressures, we need to CONSOLIDATE our application environment.”

“We need to MIGRATE our legacy applications to J2EE (or .NET).”

“We want to INTEGRATE our enterprise applications with our supply chain applications.”


How Do You Manage SOA Initiatives?

SOA Governance Enterprises need a governance platform for

controlling the production, distribution and consumption of application services

Organizations must protect against vulnerabilities and strive to guarantee security within the applications they design and build – especially in SOA environments


The Need for Logidex:SOA Governance Feedback Loops

> Delivery of architectural guidelines and supporting materials> Governance over project-specific selection of architectural materials

> Traceability of architectural materials used within a project> Feedback on effectiveness of architectural materials


The Need for Logidex: Analysts Agree…

"Enterprises can substantially improve application development productivity and quality, while also decreasing time-to-market, by a factor of 5-1 or more through a committed software asset reuse program. At the heart of this initiative must be the ability for analysts and developers to easily locate and reuse these assets.”

Source: Michael Blechar, Gartner Research


What is BugScan?

BugScan founded 2/2003 in Sunnyvale, CA by application security experts NAI, TripWire, Cenzic, Finjan

What is BugScan? Second-generation, automated code security scanner

(white box) Analyzes C/C++ binaries on x86 for insecure coding

practices Fast, objective and repeatable Able to generically detect the classes of bugs that caused

the last few major worms: Blaster, Nimda and Code Red Integrated into Logidex

Logidex in Action


Logidex In Action

SOA at CNA Insurance

Software reuse at MetLife


Logidex in Action:Governing SOA Development

Business Need

Proven Success

Enterprise-wide service-oriented architecture initiative

Need for tool to manage the development process

• Consistent management of services in development

• Single tracking point for services

• Ability to track project-based service usage

Solution Implemented Logidex for an

asset repository Tracking services throughout

development process Support best practices

throughout lifecycle


Logidex in Action:Software Asset Reuse

Business Need

Proven Success

Software asset reuse initiative Need for integrated tool to enable

and encourage the reuse process

Controlled internal software assets Increased use and reuse of

software assets Ability to track and report on asset

reuse

Solution Implemented Logidex for a

consolidated metadata asset catalog

Controlled submission, review, approval cycle

Logidex Highlights


Logidex Highlights

Integrated – Tight integration with leading source change management

(SCM) tools accelerates ROI Tight integration with leading IDEs allows users to work within

their own environment UDDI publication module ensures that only approved services

are available for use in SOAs Out of the Box Assets ---Referential and dynamic content

provides access to industry best practices Secure - Role-based security and advanced searching options

improves development team productivity Scalable –

Robust three-tier Web services architecture ensures enterprise scalability and performance

Federated library support enables collaboration across globally distributed teams


Role-based Security and Advanced Searching


Role-based Security and Advanced Searching


Tight IDE Integration

Keeping users in their own environment improves productivity

Advanced searching makes it easy to find the SDAs you need


Tight Integration with IDEs:Analysts Agree…

“The integration of metadata repository tools, like LogicLibrary's Logidex, into leading development tools like Microsoft's Visual Studio and IBM's WebSphere Studio is a key enabler of reuse programs."

Source: Michael Blechar, Gartner Research


LOGIDEX

METADATA

REFERENTIAL CONTENT DYNAMIC CONTENT

Open Source License Compliance Module

UDDI Governance

Automated Security Analysis

Referential & Dynamic Content


Federated Library Support

METADATA

METADATA

METADATA

Multiple distributed physical Logidex libraries support geographically distributed application development teams – including outsource vendors


UDDI Publication Module


Robust, Three-tier Web Services Architecture

Supports enterprise scalability and performance needs

Allows for easy and fast integration with multiple application development tools




LogicLibrary’s Proof of Value (POV) Program

Designed to allow customers to evaluate Logidex with their own assets and within their own environment

Includes both services and temporary software licenses

Offers multiple options for delivery, implementation and training

Tailored to meet customer needs


Summary

Logidex is the premiere, enterprise SOA governance platform

Accelerates development and supports SOAs, software reuse, open-source compliance,

outsourcing and FEA

Offers industry-standard content and industry-leading integration with application development tools

In use at marquee IT shops, including IBM

Provides POV program for getting started quickly and proving value

LogicLibrary Federated Repository Pilo

Documents

systems development

component management

systems development

informationaboutthe

investment review board

becamea review

federated registry pilot

investment decisions