<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: integration]]></title>
    <link>http://securityratty.com/tag/integration</link>
    <description></description>
    <pubDate>Wed, 17 Sep 2008 02:57:27 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Microsoft promises huge patch day next week]]></title>
      <link>http://securityratty.com/article/bf1ae1bc8b985eff1a16ae72a4c8b47e</link>
      <guid>http://securityratty.com/article/bf1ae1bc8b985eff1a16ae72a4c8b47e</guid>
      <description><![CDATA[Microsoft plans to issue 11 security updates next Tuesday -- the same number it shipped in August when it pushed out the most patches in 18 months -- for bugs in Windows, Active Directory, Internet...]]></description>
      <content:encoded><![CDATA[Microsoft plans to issue 11 security updates next Tuesday -- the same number it shipped in August when it pushed out the most patches in 18 months -- for bugs in Windows, Active Directory, Internet Explorer, Office and Host Integration Server.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:e41ae149a8bb4ace85f9420c40d63692:4w6KHADYhei%2BWQWZ7AT53mc%2FBuSvTm8g0xVRmzy2BibWyzZ7z%2FSviddASBbFBFexbk1%2B61eNXOZW'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:d639249ee7252c85d3814a1727740e43:C8dbBpJ4XXDK%2FIuArYAHQ4myMFPYNWJvrPmsus%2FdZRVJg16VS8Z44%2FFXUO6FWladDLfZAiRRsZLVyw%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:06355cff4e770cbec9ec25be6b78cb19:UQySu8zBdniTqnxwYPNSCStI3Lj91fu4S3FqIOw3z9CcVOHFccs6iybjZFMA5w2rC4yqtE6P%2BzWinw%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:d218a888ece2ca9d3362b6c616314c2a:KFlYWnvBPMvWz3mPjnDcgPJxnX7IItPVjmkWpeJYojreYQJWQ2LAoz1PayPw5NXSX7wieWz0YKzJBA%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>      <a href="http://www.pheedo.com/click.phdo?s=72d5f81674fe6e62cca95e9877122fdf"><img alt="" style="border: 0;" border="0" src="http://www.pheedo.com/img.phdo?s=72d5f81674fe6e62cca95e9877122fdf"/></a>
  <img src="http://www.pheedo.com/feeds/tracker.php?i=72d5f81674fe6e62cca95e9877122fdf" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Thu, 09 Oct 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/host integration server">host integration server</category>
      <category domain="http://securityratty.com/tag/internet explorer">internet explorer</category>
      <category domain="http://securityratty.com/tag/microsoft plans">microsoft plans</category>
      <category domain="http://securityratty.com/tag/active directory">active directory</category>
      <category domain="http://securityratty.com/tag/windows">windows</category>
      <category domain="http://securityratty.com/tag/bugs">bugs</category>
      <category domain="http://securityratty.com/tag/tuesday">tuesday</category>
      <category domain="http://securityratty.com/tag/issue">issue</category>
      <category domain="http://securityratty.com/tag/office">office</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=72d5f81674fe6e62cca95e9877122fdf">Microsoft promises huge patch day next week</source>
    </item>
    <item>
      <title><![CDATA[MSP Snapshot Monitoring with EM7]]></title>
      <link>http://securityratty.com/article/5288692e82e0f23665e5086e43db9ed4</link>
      <guid>http://securityratty.com/article/5288692e82e0f23665e5086e43db9ed4</guid>
      <description><![CDATA[Between the fifth anniversary for ScienceLogic and the Inc 500 milestone, weve become very nostalgic about the beginnings of the company and EM7. For instance, did you know that EM7 was originally...]]></description>
      <content:encoded><![CDATA[<p>Between the <a href="http://blog.sciencelogic.com/sciencelogics-5-year-anniversary/08/2008" target="_blank">fifth anniversary for ScienceLogic</a> and the Inc 500 milestone, we’ve become very nostalgic about the beginnings of the company and EM7. For instance, did you know that EM7 was originally designed with managed service providers in mind? Not so surprising when 5 of the first 6 employees (including all 3 founders) came from hosting and MSP backgrounds and had first-hand experience with the daily trials and tribulations of MSP operations – and the tools that didn’t quite work for them.
<p><a href="http://blog.sciencelogic.com/wp-content/uploads/2008/10/john-at-interop-vegas.jpg"><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="184" alt="John at Interop Vegas" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/john-at-interop-vegas-thumb.jpg" width="244" align="left" border="0"></a>Here we talk to John Proctor, who started out as one of our first customers (and the first MSP customer). And he believed in it so much, he eventually became part of the ScienceLogic team. (Remember &#8220;I&#8217;m not only the President, I&#8217;m also a client&#8221; from <a href="http://www.hairclub.com/inthenews_article1.php" target="_blank">the Hair Club for Men</a>?)
<p>John shares his perspectives about the service provider world and why he took a chance on a little-known product called EM7.
<p><strong>ScienceLogic:</strong> What is your background? How many years have you worked as a service provider and for what types of companies?
<p><strong>John Proctor:</strong> I have been working with Service providers for over twelve years. I worked at a major regional service provider for six years and before that I designed and built national and international networks for ISP’s and Fortune 500 companies as a consultant for PriceWaterhouseCoopers and WorldComm.
<p><strong>ScienceLogic:</strong> You were one of the first customers of EM7 – why did you choose it and how did you get over the hurdles associated with using a start-up company’s product?
<p><strong>John Proctor:</strong> We were actually customer number five. Back in 2004 when we evaluated and purchased EM7 we could see that EM7 provided about 80% of what we were looking for in one integrated solution right out of the box. One of the things that sold us on EM7 was that the ScienceLogic founders had all previously worked for a service provider, so we knew they understood our business and our challenges. But in the end, it comes down to features. Once we compared EM7 functionality to the alternatives, it was clearly a “no brainer.”
<p><strong>ScienceLogic:</strong> What other alternatives were being considered?
<p><strong>John Proctor:</strong> Well, we had started with a few point solutions, but as our business and product offerings matured, this resulted in a growing number of point solutions. What started with 3 or 4 ended up as 14 separate tools. They all had strengths but what they didn’t have was integration and because of this they could not scale. And, if the tools could not scale, our business could not grow.
<p>So, naturally we started looking at framework solutions, but they are expensive to buy, expensive to implement, and expensive to maintain. At one point, we even considered some open source projects. There were several that showed promise, but we would still be stuck with tools that were not integrated. So then we considered hiring developers to cobble something together that would work for our business. The only problem with this alternative was that we felt it would take 6 to 8 months before we could have something viable to work with.
<p><strong>ScienceLogic:</strong> What products were you using before EM7? What were your goals?
<p><strong>John Proctor:</strong> Before we purchased EM7 we used 14 different point solutions to deliver our products and services to the marketplace. Tools like NetCool, Openview, Argent, Heat, What’s Up Gold as well as several other point solutions, vendor specific applications and manually updated spreadsheets. And, as I mentioned before, this does not scale. This also adds a great deal of complexity when you begin to consider business continuity and disaster recovery. All these tools were vital to the delivery of our products and services. Any service provider will tell you it is all about uptime. So if the product is uptime, the tools used to deliver it have to be available 24&#215;7x365.
<p>Our goals were simple: scale and redundancy. As it turns out, the solution was simple as well. EM7 provided a tool that could replace the functionality of almost half of the existing point solutions and the applications that could not be replaced were integrated with EM7 to provide our staff with a “single pane of glass” to see the status and performance of each area of the business from one application. We had visibility into everything from facility systems to applications using EM7.
<p>ScienceLogic also delivers an extensible configuration that addressed uptime and redundancy. We deployed collectors throughout our network that reported back to a central pair of redundant database servers and with this configuration we were able to perform backups and add capacity without taking the system down.
<p><strong>ScienceLogic:</strong> Why are service providers different from enterprises? How are their needs different?
<p><strong>John Proctor:</strong> First and foremost, service providers face the same challenges that only the largest enterprises ever face and they also have many unique challenges that only service providers experience.
<p>One challenge we faced was that we had multiple datacenters in different states. They were all interconnected with plenty of bandwidth between each site, but the tools were not designed to be used across the WAN. Our staff in our remote data center did not have the same access as our staff in the corporate office. Since EM7 is web-based, it immediately eliminated this problem.
<p>Another challenge is that service providers must manage systems across multiple domains. Back in the early version of a specific tool we were using before EM7, the only way you could implement it across multiple domains was to put the same username and password on every computer that you monitored. Beyond the security concerns, maintenance was a nightmare. Anytime we had to change the password, we would get locked out of dozens upon dozens of systems. When the password was changed on the monitoring server, it would attempt to login to the remote machines and fail. Repeated attempts would result in the account getting locked. I think that vendor eventually addressed this issue, but service providers seldom find tools that were designed for their unique situations.
<p><strong>ScienceLogic:</strong> How is EM7 geared to service providers?
<p><strong>John Proctor:</strong> Enterprise IT is a trusted part of the business; they are one of the team. Service providers are outsiders that must earn trust by showing the customer exactly what they are doing.
<p>EM7 provides a multi-tenant environment that allows service providers to manage systems across many different customers while at the same time providing the customer access to see the same information but only what’s relevant to them.
<p>EM7 was built by service providers and even includes a few features just for them. Two of my favorites are bandwidth billing and the emergency notification system. Take bandwidth billing, for instance. EM7 provides a way to collect bandwidth utilization, store subscription information, and calculate a bill from any one of about 10 different methodologies. And at the end of the billing period, EM7 sends the completed report out to whomever you chose via email.
<p>Another unique service provider feature is the emergency notification system. EM7 allows the provider to track what customers used their unique infrastructure components. If they have to perform maintenance on the infrastructure component or have a problem they can send an email to all of the impacted customers in a matter of minutes.
<p><strong>ScienceLogic:</strong> What trends do you see for service providers? What about big trends such as virtualization and cloud computing – how will they impact service providers?
<p><strong>John Proctor:</strong> Virtualization is really hot for service providers right now and for the same reasons as in the enterprise. Service providers run data centers and data centers must be powered and cooled. So, anytime they can use a virtual server instead of adding physical equipment it is a good thing. But then you add the complexity that multiple customers reside on the same host and you must track things like bandwidth utilizations by guest OS, and it all gets a little harder. Lucky for us this is not a problem for EM7.
<p>I still think it’s early days for cloud computing. Depending on who you talk to, much of what service providers (especially the big ones) have already been doing with SAAS offerings and hosted applications could be described as cloud computing already. In which case, service providers are ahead of the game. But whatever the “final” definition, cloud computing actually shares many similarities with virtualization – in that service providers (or enterprises) will need to be able to manage far more “devices” in real-time with “zero downtime” expectations by customers. What this really means is that you’re going to see much more automation in provisioning and IT monitoring tools to handle the scale and speed with which things can change in the data center given vm migration and the talked-about switching between “clouds” that can be used for high availability. </p>
]]></content:encoded>
      <pubDate>Wed, 08 Oct 2008 12:51:50 +0000</pubDate>
      <category domain="http://securityratty.com/tag/em7">em7</category>
      <category domain="http://securityratty.com/tag/service providers">service providers</category>
      <category domain="http://securityratty.com/tag/service providers experience">service providers experience</category>
      <category domain="http://securityratty.com/tag/service providers seldom">service providers seldom</category>
      <category domain="http://securityratty.com/tag/impact service providers">impact service providers</category>
      <category domain="http://securityratty.com/tag/em7 functionality">em7 functionality</category>
      <category domain="http://securityratty.com/tag/em7 sends">em7 sends</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/service provider world">service provider world</category>
      <source url="http://blog.sciencelogic.com/msp-snapshot-monitoring-with-em7/10/2008">MSP Snapshot Monitoring with EM7</source>
    </item>
    <item>
      <title><![CDATA[All Quiet on the CA Front]]></title>
      <link>http://securityratty.com/article/a644ba10404315a6034969475c3def4a</link>
      <guid>http://securityratty.com/article/a644ba10404315a6034969475c3def4a</guid>
      <description><![CDATA[If youve read the blog, you know that we follow the Perils of CA with much amusement. Honestly, you couldnt make up the stuff that Sanjay Kumar et al were and apparently are still making headlines...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; margin: 5px; border-right-width: 0px" height="113" alt="sanjay kumar" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/sanjay-kumar.jpg" width="240" align="left" border="0" /> If you&#8217;ve read the blog, you know that we follow the Perils of CA with much amusement. Honestly, you couldn&#8217;t make up the stuff that <a href="http://java.sys-con.com/node/666065" target="_blank">Sanjay Kumar</a> et al were and apparently are still making headlines with <a href="http://digitaldaily.allthingsd.com/20080904/sanjay-kumar-goes-to-white-castle-prison/" target="_blank">&#8220;35-day months&#8221;</a>, accusations that founder Charles Wang knew and was part of the whole mess, a former US senator involved too, Sanjay&#8217;s unbelievable <a href="http://www.networkworld.com/news/2007/041307-cas-kumar-ordered-to-pay.html" target="_blank">$1 billion in restitution</a>&#8230;and <a href="http://channelmarker.blogs.techtarget.com/2008/09/03/kumar-accuses-damato-ranieri-in-ca-coverup/" target="_blank">the list goes on</a>. (<a href="http://www.nytimes.com/2006/04/25/technology/25fraud.html" target="_blank"><em>img from NYTimes.com</em></a>)</p>
<p>But I am reminded that it&#8217;s not just the titillating stuff that&#8217;s of interest. CA is still one of the Big 4 and up until a couple of years ago making headlines with some major and strategic purchases in our space &#8211; such as buying <a href="http://news.cnet.com/CA-to-buy-Concord-Communications/2100-1014_3-5658423.html" target="_blank">Concord for its e-Health software</a> in 2005 and <a href="http://www.itnewsonline.com/showstory.php?storyid=2339&amp;scatid=1&amp;contid=3" target="_blank">Wily Technology</a> in 2006.</p>
<p>I recently ran across a <a href="http://blogs.the451group.com/techdeals/" target="_blank">451 Group report</a>, &#8220;<a href="http://blogs.the451group.com/techdeals/investment-banking/ca-ghosts-of-deals-past/" target="_blank">CA: ghosts of deals past</a>&#8221; by Brenon Daly (if you haven&#8217;t read one of his takes on the M&amp;A market, you don&#8217;t know what you&#8217;re missing) that showed quantitatively just how much the acquisitions had slowed down.</p>
<p>2003 &#8211; 4</p>
<p>2004 &#8211; 3</p>
<p>2005 &#8211; 6</p>
<p>2006 &#8211; 6</p>
<p>2007 &#8211; 0</p>
<p>2008 &#8211; 0 (so far)</p>
<p>Two or three years ago (I still have the slide in our presentations), it seemed like you couldn&#8217;t go a month or two without hearing about the latest acquisition by the Big 4 &#8211; to either fill gaps in their monolithic portfolios or <a href="http://www.networkworld.com/newsletters/nsm/2008/092908nsm2.html?nladname=100108networksystemsmanagemental&amp;code=nlnsm162167" target="_blank">take out a growing threat</a>, which had built some good technology. This should sound very familiar to anyone (like me) who rubbed up against WorldCom. Growth (in revenue and technology) by acquisition. Buy your own revenue and don&#8217;t worry about the niggling details like integration.</p>
<p>But we&#8217;ve certainly seen the acquisition trend slow across the board. HP, after its mega-purchase of <a href="http://www.networkworld.com/weblogs/management/012012.html" target="_blank">Mercury Interactive in 2005 for $4.5 billion</a>, for example, went relatively silent on the acquisition front in our space. Perhaps, as it turns out, because they were too busy preparing for the even bigger <a href="http://bigtech.blogs.fortune.cnn.com/2008/05/12/why-hp-is-smart-to-gamble-on-eds/" target="_blank">purchase of EDS for $13.9 billion</a> (and <a href="http://www.networkworld.com/news/2008/091508-hp-announces-24600-layoffs-in.html?hpg1=bn" target="_blank">the layoffs, 24,600 and counting</a>, which in this worsening economy are probably just starting).</p>
]]></content:encoded>
      <pubDate>Wed, 01 Oct 2008 11:31:54 +0000</pubDate>
      <category domain="http://securityratty.com/tag/acquisition">acquisition</category>
      <category domain="http://securityratty.com/tag/acquisition front">acquisition front</category>
      <category domain="http://securityratty.com/tag/acquisition trend slow">acquisition trend slow</category>
      <category domain="http://securityratty.com/tag/technology">technology</category>
      <category domain="http://securityratty.com/tag/wily technology">wily technology</category>
      <category domain="http://securityratty.com/tag/founder charles wang">founder charles wang</category>
      <category domain="http://securityratty.com/tag/billion">billion</category>
      <category domain="http://securityratty.com/tag/strategic purchases">strategic purchases</category>
      <category domain="http://securityratty.com/tag/brenon daly">brenon daly</category>
      <source url="http://blog.sciencelogic.com/all-quiet-on-the-ca-front/10/2008">All Quiet on the CA Front</source>
    </item>
    <item>
      <title><![CDATA[Start-up adds SSO to cloud integration platform]]></title>
      <link>http://securityratty.com/article/710115ccf67db188104ffd8b0ac745e9</link>
      <guid>http://securityratty.com/article/710115ccf67db188104ffd8b0ac745e9</guid>
      <description><![CDATA[Start-up Symplified on Monday said it would release in early October a single sign-on module for its identity integration platform designed to help companies securely connect their corporate...]]></description>
      <content:encoded><![CDATA[Start-up Symplified on Monday said it would release in early October a single sign-on module for its identity integration platform designed to help companies securely connect their corporate infrastructure to cloud-based computing services.]]></content:encoded>
      <pubDate>Sun, 28 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/companies securely connect">companies securely connect</category>
      <category domain="http://securityratty.com/tag/identity integration platform">identity integration platform</category>
      <category domain="http://securityratty.com/tag/single sign-on module">single sign-on module</category>
      <category domain="http://securityratty.com/tag/start-up">start-up</category>
      <category domain="http://securityratty.com/tag/infrastructure">infrastructure</category>
      <category domain="http://securityratty.com/tag/october">october</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/release">release</category>
      <category domain="http://securityratty.com/tag/monday">monday</category>
      <source url="http://www.networkworld.com/news/2008/092908-symplified-keychain-sso.html?fsrc=rss-security">Start-up adds SSO to cloud integration platform</source>
    </item>
    <item>
      <title><![CDATA[Two Copycat Web Malware Exploitation Kits in the Wild]]></title>
      <link>http://securityratty.com/article/59660edd6ee56561c03dbddbfcbaac92</link>
      <guid>http://securityratty.com/article/59660edd6ee56561c03dbddbfcbaac92</guid>
      <description><![CDATA[We're slowly entering into &quot;can you find the ten similarities&quot; stage in respect to web malware exploitation kits, and their coders continuous supply of copycat malware kits under different names,...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SNqBEcPBZZI/AAAAAAAACLA/AJVrNj6P8JE/s1600-h/zopa01.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SNqBEcPBZZI/AAAAAAAACLA/of0mCvvFn4o/s200-R/zopa01.JPG" /></a>We're slowly entering into "can you find the ten similarities" stage in respect to web malware exploitation kits, and their coders continuous supply of copycat malware kits under different names, taking advantage of different exploits combination. <a href="http://ddanchev.blogspot.com/2008/09/copycat-web-malware-exploitation-kits.html">Copycat web malware exploitation kits are faddish</a>, however, from a strategic perspective, releasing exploits kits like this one <a href="http://www.trustedsource.org/blog/153/Rise-Of-The-PDF-Exploits">covered by Trustedsource</a>, consisting entirely of PDF exploits, can greatly increase the exploitability level of Adobe vulnerabilities in general.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SNqC_oeGqgI/AAAAAAAACLI/tCvdE7XRFt4/s1600-h/zopa02.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SNqC_oeGqgI/AAAAAAAACLI/iSGUOgS9ZUg/s200-R/zopa02.JPG" /></a>A similar web malware exploitation kit, once again using only Adobe related exploits is Zopa. Have you seen this layout before? That's the very same layout <a href="http://ddanchev.blogspot.com/2007/10/mpack-and-icepack-localized-to-chinese.html">MPack</a> and <a href="http://ddanchev.blogspot.com/2007/07/icepack-malware-kit-in-action.html">IcePack</a> were using, were in the sense of cybercriminals preferring to use much mode modular alternatives these days. Ironically, Zopa is more expensive than MPack and IcePack, with the coder trying to cash-in on its biased exclusiveness and introduction stage buzz generated around it.<br />
<br />
<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://1.bp.blogspot.com/_wICHhTiQmrA/SNqFtIcwL7I/AAAAAAAACLQ/ZTdoCdSNYbA/s1600-h/stats_copycat_kit.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="http://1.bp.blogspot.com/_wICHhTiQmrA/SNqFtIcwL7I/AAAAAAAACLQ/aGd-dPNq3TY/s200-R/stats_copycat_kit.jpg" width="151" /></a>The second web malware exploitation kit is relying on a mix of exploits targeting patched vulnerabilities affecting IE, Firefox and Opera, with its authors asking for $50 for monthly updates, updates of what yet remains unknown. Both of these kits once again demonstrate the current&nbsp; mentality of the kit's coders having to do with -- thankfully -- zero innovation, fast cash and no long-term value.<br />
<br />
However, modularity, convergence with traffic management kits, vertical integration with cybercrime services and bullet proof hosting providers, advanced metrics, <a href="http://securitylabs.websense.com/content/Blogs/3183.aspx">evasive practices</a>, improved OPSEC (operational security), and dedicated cybercrime campaign optimizing staff, are all in the works.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2008/08/web-based-botnet-command-and-control.html">Web  Based Botnet Command and Control Kit 2.0</a><br />
<a href="http://ddanchev.blogspot.com/2008/08/diy-botnet-kit-promising-eternal.html">DIY  Botnet Kit Promising Eternal Updates</a><br />
<a href="http://ddanchev.blogspot.com/2008/08/pinch-vulnerable-to-remotely.html">Pinch  Vulnerable to Remotely Exploitable Flaw</a><br />
<a href="http://ddanchev.blogspot.com/2008/06/zeus-crimeware-kit-vulnerable-to.html">The  Zeus Crimeware Kit Vulnerable to Remotely Exploitable Flaw</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/small-pack-web-malware-exploitation-kit.html">The  Small Pack Web Malware Exploitation Kit</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/crimeware-in-middle-zeus.html">Crimeware  in the Middle - Zeus</a><br />
<a href="http://ddanchev.blogspot.com/2006/11/nuclear-grabber-toolkit.html">The  Nuclear Grabber Kit</a><br />
<a href="http://ddanchev.blogspot.com/2008/02/rbns-phishing-activities.html">The  Apophis Kit</a><br />
<a href="http://ddanchev.blogspot.com/2008/05/firepack-exploitation-kit-localized-to.html">The  FirePack Exploitation Kit Localized to Chinese</a><span style="font-weight: bold;"><br />
</span><a href="http://ddanchev.blogspot.com/2007/10/mpack-and-icepack-localized-to-chinese.html">MPack  and IcePack Localized to Chinese</a><br />
<span style="font-weight: bold;"><span style="font-weight: bold;"></span></span><a href="http://ddanchev.blogspot.com/2008/05/icepack-exploitation-kit-localized-to.html">The  Icepack Exploitation Kit Localized to French</a> <br />
<a href="http://ddanchev.blogspot.com/2008/04/firepack-exploitation-kit-part-two.html">The  FirePack Exploitation Kit - Part Two</a><br />
<a href="http://ddanchev.blogspot.com/2008/02/firepack-web-malware-exploitation-kit.html">The  FirePack Web Malware Exploitation Kit</a><br />
<a href="http://ddanchev.blogspot.com/2007/05/webattacker-in-action.html">The  WebAttacker in Action</a><br />
<a href="http://ddanchev.blogspot.com/2007/08/nuclear-malware-kit.html">Nuclear  Malware Kit</a><br />
<a href="http://ddanchev.blogspot.com/2008/01/random-js-malware-exploitation-kit.html">The  Random JS Malware Exploitation Kit</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/metaphisher-malware-kit-spotted-in-wild.html">Metaphisher  Malware Kit Spotted in the Wild</a><br />
<a href="http://ddanchev.blogspot.com/2007/04/shots-from-malicious-wild-west-sample_7672.html">The  Black Sun Bot</a><br />
<a href="http://ddanchev.blogspot.com/2007/04/shots-from-malicious-wild-west-sample_20.html">The  Cyber Bot</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/google-hacking-for-mpacks-zunkers-and.html">Google  Hacking for MPacks, Zunkers and WebAttackers</a><br />
<a href="http://ddanchev.blogspot.com/2007/07/icepack-malware-kit-in-action.html">The  IcePack Malware Kit in Action</a><b> <br />
</b><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=H3UxL"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=H3UxL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=p3TZL"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=p3TZL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=h2h0l"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=h2h0l" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LBCnl"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LBCnl" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ntatL"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ntatL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=AnrYL"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=AnrYL" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=0AlHl"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=0AlHl" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/402081047" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 24 Sep 2008 10:28:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/diy botnet kit">diy botnet kit</category>
      <category domain="http://securityratty.com/tag/kit">kit</category>
      <category domain="http://securityratty.com/tag/nuclear malware kit">nuclear malware kit</category>
      <category domain="http://securityratty.com/tag/icepack exploitation kit">icepack exploitation kit</category>
      <category domain="http://securityratty.com/tag/nuclear grabber kit">nuclear grabber kit</category>
      <category domain="http://securityratty.com/tag/apophis kit">apophis kit</category>
      <category domain="http://securityratty.com/tag/malware exploitation kit">malware exploitation kit</category>
      <category domain="http://securityratty.com/tag/kits">kits</category>
      <category domain="http://securityratty.com/tag/control kit">control kit</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/402081047/two-copycat-web-malware-exploitation.html">Two Copycat Web Malware Exploitation Kits in the Wild</source>
    </item>
    <item>
      <title><![CDATA[TIBCO BusinessEvents 3.0]]></title>
      <link>http://securityratty.com/article/de1f0c5b81d2a653775eaade21547299</link>
      <guid>http://securityratty.com/article/de1f0c5b81d2a653775eaade21547299</guid>
      <description><![CDATA[I was pleased to read the Paul Vincents post, TIBCO BusinessEvents 3.0 . TIBCO has always had a forward thinking vision for distributed computing and this release of BE 3.0 is another step in the...]]></description>
      <content:encoded><![CDATA[<p>I was pleased to read the Paul Vincent&#8217;s post, <a title="Permalink" href="http://tibcoblogs.com/cep/2008/09/22/tibco-businessevents-30/">TIBCO BusinessEvents 3.0</a>.    TIBCO has always had a forward thinking vision for distributed computing and this release of BE 3.0 is another step in the right direction.  TIBCO now has the only commercial-off-the-shelf (COTS) event processing platform on the market that supports distributed event processing, multi-agent architectures, distributed object caching, extensibility, continuous queries, state management and state-of-the-art rules.</p>
<p>Even thought TIBCO&#8217;s BusinessEvents does not yet support Bayesian Classifiers, Artificial Neural Networks and other advanced decision support algorithms, it is just a matter of time before TIBCO will add these advanced features &#8220;out of the box&#8221;.  On the other hand, the extensible nature of TIBCO&#8217;s BE makes it possible to add probabalistic computing functionality, however this requires quite a lot of programming and integration work.</p>
<p>When I see a great release like this for TIBCO, it makes me a little nostalgic for &#8220;the good old days&#8221; travelling the world in the front of the aircraft for TIBCO.   TIBCO has a rich and diverse customer base.  This customer base includes financial services companies; however, TIBCO is much less dependent on financial services than other event processing companies.   So, with TIBCO you not only get great technology, but rock-solid stability in an unstable and uncertain business world.</p>
<p>As a side note, an S&amp;P analyst recently <a href="http://www.thecepblog.com/2008/09/18/sp-downgrades-tibco-to-sell-on-financial-services-exposure/" target="_blank">downgraded</a> TIBCO&#8217;s stock <a href="http://online.barrons.com/quotes/main.html?symbol=tibx">(TIBX)</a>, primarily due to chao in the financial services sector.    Because of TIBCO&#8217;s global reach and stability, plus forward vision, advanced technologies and many years of commericial success, the S&amp;P downgrade will create a buying opportunity for TIBCO stock.</p>
]]></content:encoded>
      <pubDate>Wed, 24 Sep 2008 01:54:39 +0000</pubDate>
      <category domain="http://securityratty.com/tag/tibco businessevents">tibco businessevents</category>
      <category domain="http://securityratty.com/tag/tibco">tibco</category>
      <category domain="http://securityratty.com/tag/tibco stock">tibco stock</category>
      <category domain="http://securityratty.com/tag/tibcos">tibcos</category>
      <category domain="http://securityratty.com/tag/tibcos businessevents">tibcos businessevents</category>
      <category domain="http://securityratty.com/tag/tibcos global reach">tibcos global reach</category>
      <category domain="http://securityratty.com/tag/financial services">financial services</category>
      <category domain="http://securityratty.com/tag/financial services sector">financial services sector</category>
      <category domain="http://securityratty.com/tag/vision">vision</category>
      <source url="http://www.thecepblog.com/2008/09/24/tibco-businessevents-30/">TIBCO BusinessEvents 3.0</source>
    </item>
    <item>
      <title><![CDATA[What to watch for - the Rest of the Fortune 500 Gets Their Software Security]]></title>
      <link>http://securityratty.com/article/d0a9a1ce70c7eb39399e6f52665bcf05</link>
      <guid>http://securityratty.com/article/d0a9a1ce70c7eb39399e6f52665bcf05</guid>
      <description><![CDATA[The financial industry drives a lot of what happens in security. They have had a lot of money, and lots of people try to steal from them their customers. They did drive some good stuff, but only from...]]></description>
      <content:encoded><![CDATA[<p>The financial industry drives a lot of what happens in security. They <strike>have</strike> had a lot of money, and lots of people try to steal from <strike>them</strike> their customers. They did drive some good stuff, but only from one vertical&#39;s perspective. I have advocated for awhile that software security look to other verticals to understand their security needs. Now that we&#39;re watching these behemoth financial firms vanish before our eyes, we will see the needs of insurance, manufacturing, healthcare and other verticals take on more precedence. If you want some ideas on what is important, start <a href="http://duckdown.blogspot.com/">here</a>. FWIW, here are some key themes that i think will emerge.</p><br />
<div><span style="FONT-WEIGHT: bold">Standard Support</span></div>
<div><a href="http://xmlnetworking.blogspot.com/">Mark O&#39;Neill</a> posted this comment to an earlier <a href="http://1raindrop.typepad.com/1_raindrop/2008/09/software-security-may-live-in-interesting-times.html">blog</a> and it bears repeating</div><br />
<blockquote class="webkit-indent-blockquote" style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px 0px 0px 40px; BORDER-TOP-STYLE: none; PADDING-TOP: 0px; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; BORDER-BOTTOM-STYLE: none">
<p><span style="COLOR: #333333; LINE-HEIGHT: 19px">Take a difference I&#39;ve noticed between financial services and government. I have encountered situations where a financial services customer may say &quot;what if we just forget about using all those standards and make all these messages simpler&quot;, as they have optimization hard-wired as a goal. A government customer is (in my experience) more likely to focus on standards support for interoperability, and also to support directives that certain standards are used (e.g. XACML, let&#39;s say).</span></p></blockquote>
<blockquote class="webkit-indent-blockquote" style="PADDING-RIGHT: 0px; PADDING-LEFT: 0px; PADDING-BOTTOM: 0px; MARGIN: 0px 0px 0px 40px; BORDER-TOP-STYLE: none; PADDING-TOP: 0px; BORDER-RIGHT-STYLE: none; BORDER-LEFT-STYLE: none; BORDER-BOTTOM-STYLE: none">
<p><span style="COLOR: #333333; LINE-HEIGHT: 19px"><br /></span><span style="COLOR: #333333; LINE-HEIGHT: 19px">If the vendor was to build their product based solely on either customers needs, they would assume, as you say, that &quot;the client just doesn&#39;t get it&quot;. It would be either &quot;These government people are crazy, the people back at the bank told us those standards were not important&quot;, or else &quot;these financial services people are crazy, we show them all the complex support for standards we have and they do not seem to care at all, they just want us to strip all that out&quot;.</span><br /><span style="COLOR: #333333; LINE-HEIGHT: 19px">In that case, the trick would be to build something down the middle, with the standards support and the optimization. But, just focusing on one sector is bad.</span></p></blockquote><br />
<div>The financial people have been optimizing for so long and they had so much money they didn&#39;t need to worry about standards, they were the standard. But you don&#39;t need standards for standards&#39; sake, you need...</div><br />
<div><span style="FONT-WEIGHT: bold">Interoperability</span></div>
<div>The financial people didn&#39;t worry about this, the pot of gold was so big people would pay to play and build their own adapters. Architects at other companies need to figure out how to cost effectively knit things together and get authN, authZ, and audit too.</div><br />
<div><span style="FONT-WEIGHT: bold">Fuzzy Edges</span></div>
<div>Take something hideous like the FIX protocol. Everyone knows its broken but they just built stuff all around in terms of accountability and other controls. they could do this because there was a living breathing audit log of transactions - a hard edge. So the financial industry drove lots of poor plumbing and compensated with hard edges. It worked well enough I suppose, but as any protocol plumber knows, you need to fix the pipes eventually. Especially if you want to...</div><br />
<div><span style="FONT-WEIGHT: bold">Scale</span></div>
<div>Need to scale across domains, locations, geographies. Its not one little closed trading floor loop. Its wheels within wheels. You might say its <span style="FONT-STYLE: italic">federated</span> autonomous nodes.&#160;</div><br />
<div>its not just technical run time scale. Its people scale. You can&#39;t assume that your tool is supported by several security people per project. The tools have to scale for one security person and a hundred developer type ratios. Better automation, better reporting, faster integration. Raise the floor one inch, but raise the <span style="FONT-STYLE: italic">whole</span> floor.</div>
<div>&#160;</div>
<div><strong>Smaller Overall Security Budget</strong></div>
<div>I saved the best for last. When the financial people wanted software security, they kept spending on network security and they added dollars to support software security tools and processes. The rest of the F500 can&#39;t or wont be able to, this means that for the software security vendors, they will need to <strong>take market share</strong>. Its not just competing against each other, its making the business case for software security over other types of security that have <a href="http://1raindrop.typepad.com/1_raindrop/2008/08/golf-driven-security.html">ossified technically</a> but still command a rosy price, like *cough* network firewalls.</div>
<div>&#160;</div>
<div>Side note, I know three financial firms that did excellent work in software security. really dug and invested time and money to make sure they are world class in that space. Strangely enough with all these firms melting down, the three I am thinking of that took a conservative approach, addressing software security in a root and branch mode,have not been named as a target for the next meltdown. Coincidence? We report, you decide.</div>]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 11:06:51 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/government customer">government customer</category>
      <category domain="http://securityratty.com/tag/government">government</category>
      <category domain="http://securityratty.com/tag/government people">government people</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/financial people">financial people</category>
      <category domain="http://securityratty.com/tag/software security vendors">software security vendors</category>
      <category domain="http://securityratty.com/tag/financial services people">financial services people</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/09/what-to-watch-for---the-rest-of-the-fortune-500-gets-their-software-security.html">What to watch for - the Rest of the Fortune 500 Gets Their Software Security</source>
    </item>
    <item>
      <title><![CDATA[Sorry, Qantas, No Unfettered Broadband]]></title>
      <link>http://securityratty.com/article/e46bb700b1a972d41bfd64aba65817f9</link>
      <guid>http://securityratty.com/article/e46bb700b1a972d41bfd64aba65817f9</guid>
      <description><![CDATA[Qantas backs off from earlier plans, changes provider for in-flight broadband: The Sydney Morning Herald somewhat erratically and incompletely reports that Qantas has delayed and modified its...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/plane.jpg" align="right" border="0" hspace="5" /><a href="http://www.smh.com.au/news/travel/qantas-limits-access-to-web/2008/09/17/1221330929870.html"><strong>Qantas backs off from earlier plans, changes provider for in-flight broadband:</strong></a> The Sydney Morning Herald somewhat erratically and incompletely reports that Qantas has delayed and modified its in-flight broadband plans. Aeromobile was the provider when the service <a href="http://www.breakingtravelnews.com/article.php?story=2007081609481129&query=qantas"><strong>was tested in second quarter 2007</strong></a>, but OnAir is now described as the airline's partner. This was noted by colleague Fabio Zambelli, who emailed me the news, and <a href="http://www.setteb.it/content/view/4742"><strong>has his own account</strong></a> at 7BIT (in Italian).</p>

<p><a href="http://www.onair.aero/index.php?pid=123"><strong>OnAir</strong></a> has so far tested their calling/texting-only service on two aircraft--one operated by Air France, one by TAP Portugal--even though RyanAir announced plans that its planes would started being unwired with the service by late 2007. Still no word on that fleet progress.</p>

<p>Qantas will apparently launch cached Web browsing and limited Web email (probably through a proxy) along with instant messaging, with full Internet service coming "later in 2009." This is clearly due to a lack of satellite coverage that was just remediated a few weeks ago (see below). The first plane with limited service, a new A380, should be in flight 20-October-2008.</p>

<div style="float:right; margin:0px; padding-left: 10px; padding-bottom: 0px;"><p><img src="http://wifinetnews.com//images/2008/SorryQantas.jpg" alt="SorryQantas.jpg" border="0" width="100" height="152"></p><p style="font-size: 10px">I hate in-flight<br/>broadband</p></div>To Qantas' credit, note that each seat on the plane will have a laptop opower socket, a USB port, and a multimedia system that can show 100 movies and 500 TV show episodes, play the contents of 1,000 CDs and 20 radio stations, and offer 80 games. 

<p>The Morning Herald seems to overstate the importance and scope of a complaint filed by the union representing American Airlines' flight attendants. The detailed coverage in the U.S. had more to do with the potential for issues, and likely attendants lack of interest in policing yet another media on the plane. Filtering doesn't work, the attendants probably already know, and this may just be a negotiating point with the airline.</p>

<p>On why Qantas is waiting until late 2009? This requires unwinding how OnAir gets its signal.</p>

<p>Aeromobile and OnAir both rely on Inmarsat satellites for their service. Both companies had several years ago staked their futures on the fourth-generation network Inmarsat was to inaugurate with three satellites that would use beamforming to allow precise delivery of nearly 500 Kbps per receiver, with hundreds or thousands of regions being able to be targeted from a single satellite. Inmarsat's third-gen network--don't confuse this with 3G cellular ground-based networks--can deliver about 64 Kbps per channel.</p>

<p>Now, unfortunately, Inmarsat was three years late on launching its trans-Pacific bird. While the company <a href="http://www.inmarsat.com/About/Newsroom/Press/00021465.aspx?language=EN&textonly=False"><strong>claims 85 percent coverage of the earth</strong></a> and 98 percent coverage of population, there's a big gap over the Pacific that also prevents them from having good overlap between the U.S. and Japan/China/Korea, as well as the southern Pacific, covering Australia. Since the biggest market for long-haul flights would likely be Australia, Japan, and China, traveling trans-Pacific or trans-hemispheric routes, that gap is rather large.</p>

<p>Aeromobile opted to build out a service, deployed only by Emirates airline as far as I can tell, that uses the 3G service since it was available, and most necessary equipment is already installed on most over-water planes. OnAir was waiting for 4G, which has necessitated a long wait, but allowed them to launch in Europe with a seemingly next-generation service. Given that OnAir is controlled by an airline-owned integration firm, SITA, and by Airbus, they're not going anywhere.</p>

<p>Inmarsat finally <a href="http://spaceflightnow.com/proton/i4f3/"><strong>lofted its third satellite on Baikonur Cosmodrome in Kazakhstan</strong></a> on 19-August-2008, and the launch and separation was reported as successful. Previously, the company has needed up to a year to verify and deploy its 4G satellites. (You can <a href="http://forum.nasaspaceflight.com/index.php?topic=12380.105"><strong>read extremely close coverage of the launch</strong></a> at a Web site devoted to space enthusiasm.)</p>

<p>However, the dirty little secret about Inmarsat's BGAN is that it costs a fortune to heft bandwidth across it. Thus, in-flight broadband over BGAN, if it's ever available, is going to be changed on an extremely high per-MB rate. None of the providers want to say this. This is in contrast to Row 44 (and, once, Connexion by Boeing), which relies on leased Ku-band transponders where they can fix costs and they require high volumes to keep per-bit costs efffectively low.</p>

<p>OnAir's launch of calling on Air France's service involves paying a few euros per minute for calls, which might help you understand what data costs could ultimately run.</p>]]></content:encoded>
      <pubDate>Thu, 18 Sep 2008 06:33:20 +0000</pubDate>
      <category domain="http://securityratty.com/tag/satellite coverage">satellite coverage</category>
      <category domain="http://securityratty.com/tag/coverage">coverage</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/service involves">service involves</category>
      <category domain="http://securityratty.com/tag/internet service">internet service</category>
      <category domain="http://securityratty.com/tag/in-flight broadband plans">in-flight broadband plans</category>
      <category domain="http://securityratty.com/tag/plans">plans</category>
      <category domain="http://securityratty.com/tag/inmarsat satellites">inmarsat satellites</category>
      <category domain="http://securityratty.com/tag/inmarsat">inmarsat</category>
      <source url="http://wifinetnews.com/archives/008448.html">Sorry, Qantas, No Unfettered Broadband</source>
    </item>
    <item>
      <title><![CDATA[Interop NY Keynotes: Novell]]></title>
      <link>http://securityratty.com/article/ed3e3cadb42982e0cf29b0c202baba08</link>
      <guid>http://securityratty.com/article/ed3e3cadb42982e0cf29b0c202baba08</guid>
      <description><![CDATA[Novell President and Chief Executive Officer Rob Hovsepian learned what interoperability meant when he had a large retailer client who wanted all his businesses to connect and close-out at the same...]]></description>
      <content:encoded><![CDATA[<p>Novell <a href="http://www.novell.com/company/bios/rhovsepian.html" target="_blank">President and Chief Executive Officer Rob Hovsepian</a> learned what interoperability meant when he had a large retailer client who wanted all his businesses to connect and close-out at the same time.</p>
<p><strong>Making IT work as One</strong></p>
<p>How does my company stay efficient while we&#8217;re using technologies around interoperability? How can innovation help my business?</p>
<p>Top business needs:</p>
<ul>
<li>Reduce cost</li>
<li>Manage complexity</li>
<li>Mitigate risk</li>
</ul>
<p>Mixed IT environments are a reality for almost all organizations. Different environments, architectural strategies, desktop profiles, etc. There are benefits to having mixed source environments, although homogenous environments are ideal. On average 46,000 hours in an organization are spent on Sarbanes-Oxley standards.</p>
<p>Some considerations to make IT work as one:</p>
<ul>
<li>Strategy</li>
<li>Solutions</li>
<li>Ecosystem</li>
</ul>
<p><strong>Strategy</strong></p>
<p>Actionable strategy is key. The emergence of three silos (applications, systems and infrastructure, and operations) are now moved into one. There is a lot of pressure to make these pieces come together.</p>
<p><strong>Solutions</strong></p>
<p>You need focused solutions to solve problems today while keeping an eye to the future. There are three main needs: the data center, end-user computing, and identity and security. This is also what is the most important to the market right now. The end goal is the agility of the data center.</p>
<p>Data Center Challenges</p>
<ul>
<li>Create an agile IT infrastructure</li>
<li>Address power and space constraints</li>
<li>Deliver performance, security and availability</li>
<li>Manage hardware, software and labor costs</li>
<li>Meet service level agreements</li>
</ul>
<p>Data Center Solutions</p>
<ul>
<li>Workload management - green IT and server efficiency, unified physical and virtual environment</li>
<li>Virtualization and Consolidation - business continuity and disaster recovery</li>
<li>Enterprise Servers</li>
</ul>
<p>End-User Computing Solutions</p>
<ul>
<li>Collaboration</li>
<li>Enterprise desktops - Novell uses Linux and Open Office, interesting to note</li>
<li>Endpoint management</li>
</ul>
<p>Identity and Security Challenges</p>
<ul>
<li>Minimize risk, uncertainty and policy violations</li>
<li>Provide timely and secure access to information</li>
<li>Ensure, document and prove information security</li>
<li>Reduce the cost of proving compliance</li>
<li>Reduce the cost and complexity of governance</li>
</ul>
<p>Identity and Security Solutions</p>
<ul>
<li>Identity and Access Management - user provisioning, role management, access management</li>
<li>Compliance Management - Audit, Governance, Risk Management and Compliance (GRC), IT controls automation, Security, Information and Event Management (SIEM)</li>
</ul>
<p><strong>Ecosystem</strong></p>
<p>The ecosystem is powerful. Companies should challenge partners for innovation and interoperability.</p>
<p>Community Innovation - open source and open standards</p>
<p>IT Landscape - Mixed IT Environments</p>
<ul>
<li>Consulting, systems integration vendors</li>
<li>Application vendors</li>
<li>Systems software vendors (Novell)</li>
<li>Hardware, network vendors</li>
</ul>
<p>How does your ecosystem help your company? How do your partners help? What is their role in the industry to help you? How are all the vendors in the industry helping you?</p>
]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 10:40:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security solutions">security solutions</category>
      <category domain="http://securityratty.com/tag/solutions">solutions</category>
      <category domain="http://securityratty.com/tag/data center solutions">data center solutions</category>
      <category domain="http://securityratty.com/tag/systems">systems</category>
      <category domain="http://securityratty.com/tag/systems integration vendors">systems integration vendors</category>
      <category domain="http://securityratty.com/tag/vendors">vendors</category>
      <category domain="http://securityratty.com/tag/homogenous environments">homogenous environments</category>
      <category domain="http://securityratty.com/tag/environments">environments</category>
      <category domain="http://securityratty.com/tag/application vendors">application vendors</category>
      <source url="http://blog.sciencelogic.com/interop-ny-keynotes-novell/09/2008">Interop NY Keynotes: Novell</source>
    </item>
    <item>
      <title><![CDATA[Software Security May Live in Interesting Times]]></title>
      <link>http://securityratty.com/article/f83e50b4a48c530cbf3cd68c706084d3</link>
      <guid>http://securityratty.com/article/f83e50b4a48c530cbf3cd68c706084d3</guid>
      <description><![CDATA[Next week is the OWASP App Sec conferenc e in New York, I am doing Web Services security training and talking on Web services security and the OWAPS Top 10; and it should be &quot;interesting&quot; to be there...]]></description>
      <content:encoded><![CDATA[<p>Next week is the <a href="http://www.owasp.org/index.php/OWASP_NYC_AppSec_2008_Conference">OWASP App Sec conferenc</a>e in New York, I am doing Web Services security training and talking on Web services security and the OWAPS Top 10; and it should be &quot;interesting&quot; to be there in the middle of Hurricane Subprime as the MBAs scramble to restructure the global financial system. On the plus side, the Yankees are not going to make the playoffs.</p><br /><div>The financial industry has driven a lot of things in technology and with all of the massive changes there I would expect it to have a major impact ons software security. Financial services were set to spend $568 billion on technology this year, and for one <a href="http://blogs.wsj.com/biztech/2008/09/16/tech-spending-another-victim-of-the-financial-collapse/">example</a>, Merrill Lynch spent $566 million last quarter alone.</div><br /><div>I think that software security for better or worse has been driven by financial services to this point. In my <a href="http://www.cigital.com/silverbullet/show-027/">podcast with Gary McGraw</a>, I talked about software security &quot;what got us here, won&#39;t get us there&quot; syndrome. Where some vendors and consultants have success with a certain technology or process in a big bank, then they bless it as &quot;hey this works!&quot; and try and roll it out at an insurer, healthcare company, or manufacturer; and are surprised when it doesn&#39;t work. A lot of times they assume that the client just doesn&#39;t get it, but they do, they just have a different business model. Most of the other industries have far fewer hard edges and more integration to deal with.&#160;</div><br /><div>Software security should benefit from opening up to dealing with other business models. I guess now we&#39;re going to find out.<br /><br /><br /></div>]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 02:57:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <category domain="http://securityratty.com/tag/web services security">web services security</category>
      <category domain="http://securityratty.com/tag/financial services">financial services</category>
      <category domain="http://securityratty.com/tag/fewer hard edges">fewer hard edges</category>
      <category domain="http://securityratty.com/tag/global financial system">global financial system</category>
      <category domain="http://securityratty.com/tag/technology">technology</category>
      <category domain="http://securityratty.com/tag/hurricane subprime">hurricane subprime</category>
      <category domain="http://securityratty.com/tag/business models">business models</category>
      <category domain="http://securityratty.com/tag/healthcare company">healthcare company</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/09/software-security-may-live-in-interesting-times.html">Software Security May Live in Interesting Times</source>
    </item>
  </channel>
</rss>
