Business Impact
- Simplify the complicated tasks of securing containers and understanding application behavior
- Capture detailed health, risk, and performance data
- A more secure environment and a consistent process across development teams
- Time savings and increased efficiency
Company Overview
Airline Tariff Publishing Company (ATPCO) is a privately held corporation that collects and distributes fare and fare-related data for the airline and travel industry. Its mission is to be the airline industry’s trusted partner in driving innovation, reducing complexity, and delivering network economics to the entire distribution ecosystem through standards, technology, and effective governance.
Founded over 50 years ago and owned by some of the world’s major airlines, ATPCO blends reliable data and systems with innovative technology to lead the industry into the next generation of distribution through the smart connection of content through all its channels.
ATPCO currently works with more than 430 airlines worldwide and supplies the industry’s intermediated fare data to all the major airfare pricing engines. ATPCO stores more than 211 million active fares in its database and has a global distribution system that includes Sabre and Amadeus, airline central reservation systems, travel agencies, airline sites, POS, and online organizations like Expedia, Orbitz, and Google Trips.
Challenges
ATPCO not only collects, but also manages, contextualizes, and distributes fare and fare-related data for the airline and travel industries. They are considered the “data engine” that enables airlines globally to effectively set prices for airfares.
ATPCO’s top priority is leading these airlines, systems, and channels into the next generation of retailing. Using its unique and trusted position as the guardian of the data that powers flight shopping globally, it helps the industry unlock more value by providing solutions that help airlines modernize offer management and product display in all channels. Therefore, it is imperative that ATPCO is able to distribute its data quickly and effectively. To ensure this, the company is focused on continually modernizing its approach to application development.
As part of their modernization efforts, ATPCO began transforming its software development processes by shifting from monolithic applications to cloud-native microservices, leveraging containers and Kubernetes. As ATPCO moved to the Red Hat OpenShift Container Platform, the time was right to rethink how to simplify, consolidate, and transition to tools built for modern environments. It needed solutions that provided the necessary insight to protect its environment during all stages of the container lifecycle.
Understanding that monitoring, securing, and troubleshooting cloud environments is fundamentally a data problem, ATPCO selected Sysdig to deliver the information needed to ensure it delivers reliable, secure, performant applications during both the application development and operation phase. Implementing the Sysdig Cloud-Native Visibility and Security Platform, ATPCO gained end-to-end visibility into their clouds, containers, and applications as well as the ability to isolate and remediate security problems faster.
Solutions
Securing and Monitoring Essential Systems
With the Sysdig implementation, ATPCO has realized multiple benefits. For one, Sysdig Monitor, one of the technologies that make up the Sysdig platform, collects and enriches environment data to give ATPCO a better understanding of the behavior and usage of each application on itsOpenShift clusters. This increased visibility into its environment provides the company with the necessary insight for capacity and growth planning.
ATPCO also uses Sysdig Secure — another Sysdig platform technology — for vulnerability management and runtime security monitoring, and ensuring ATPCO’s security team is aware of all container, host, and orchestrator activity from development to production to reduce risk. Before deployment, Sysdig Secure scans ATPCO’s container images and quickly identifies vulnerable packages, libraries, and configurations, and alerts the team to any potential issues. The result is a more secure environment and a consistent process across development teams. ATPCO Application Architect, Praveen Nerellapalli states, “I can now release software without worrying about if the container is secure and instead, I can just focus on coding and delivering value to the customers.”
Policy Rules for Protection and Security
In production, Sysdig Secure protects ATPCO’s containers with policy rules that look for anomalous behavior across their OpenShift clusters. When triggered, these rules are able to stop or isolate the affected containers to eliminate the immediate risk. Sysdig Secure’s accelerated forensics are also key in the event of a security incident. All pre- and post-incident events are recorded and saved for quicker post-mortem data analysis and better-informed decision making. ATPCO’s security response teams can efficiently detect, analyze, and respond to security threats on containers and the applications inside them.
Finally, the Sysdig Teams feature available with the Sysdig platform enables ATPCO to group internal users within job functions and product groups to isolate and grant access to the resource scope needed for each team. This permits ATPCO to monitor usage by different teams while allowing each team to drill-in on the information that is most pertinent to their functions. The ability to assign team privileges to hosts, namespaces, clusters, or deployments, ensures information is available only to those who need it, making it easier to respond to incidents and adding another layer of security and compliance.
Providing Airline Customers and Travel Sites With Up-to-Date Fare Data on More Than 211 Million Fares
Since implementing Sysdig across all environments to increase visibility and security, ATPCO can now more effectively manage its container and OpenShift clusters. The Sysdig platform removes the silos between security, DevOps, and service owners transforming the ATPCO team from reactive to more proactive and collaborative.
The Sysdig platform has allowed ATPCO to deploy its newest generation of products and services quickly and provided added confidence in rolling out future products in the pipeline. Since implementing the Sysdig Cloud-Native Visibility and Security Platform, ATPCO has continued to process millions of changes to fares within an hour or less, providing airline partners and customers with the service they expect.
Visit www.atpco.net to learn more about ATPCO.
Take the Next Step!
See how you can secure every second in the cloud.