<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: nas]]></title>
    <link>http://securityratty.com/tag/nas</link>
    <description></description>
    <pubDate>Thu, 10 Jan 2008 10:58:40 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Virtualization Needs vs. Cool Features]]></title>
      <link>http://securityratty.com/article/5e61ca489a9bbf96b3334c272f8306de</link>
      <guid>http://securityratty.com/article/5e61ca489a9bbf96b3334c272f8306de</guid>
      <description><![CDATA[Regardless of the size of your virtualization project you will probably ask two of the most common questions before you even start
What product(s) &amp; version(s) should I use
How much should I plan to...]]></description>
      <content:encoded><![CDATA[<p>Regardless of the size of your virtualization project you will probably ask two of the most common questions before you even start:</p>
<ol>
<li>What product(s) &amp; version(s) should I use?</li>
<li>How much should I plan to spend?</li>
</ol>
<p>The simplest answer of course is “it depends”. I’ve seen implementations range from a thousand bucks to over several million. Ideally, your virtualization project needs &amp; goals should drive your product selection. The bells &amp; whistles you chose will determine your spending.</p>
<p><strong>10 Basic questions that will help you determine product &amp; cost:</strong></p>
<ol>
<li>Will your Virtual Infrastructure (VI) host production Virtual Machines (VM)?</li>
<li>What servers do you already have that can be used as hosts (32bit, 64bit, Mem, Disk, Network)?</li>
<li>Do you have a need for High Availability (HA)?</li>
<li>Do you have the need to manage SLA’s on your VMs?</li>
<li>What will a typical VM in your VI look like (OS, Disk, Mem, Network, CPU)?</li>
<li>What other IT resources do you have that can be used (SAN, NAS, Switches, etc…)?</li>
<li>What level of comfort does your existing staff have with the various IT resources?</li>
<li>Do you have existing hardware/software support agreements with Vendors you could leverage?</li>
<li>What tools do you already own that are “virtualization aware” and what new tools will you need?</li>
<li>How many VM’s do you plan to scale to?</li>
</ol>
<p>Please, please, please, don’t make the mistake of implementing features that you don’t need and over-engineering just because the product lets you do so.</p>
<p>If you plan it right your product &amp; cost, questions will be answered with no unpleasant surprises.</p>
<p><a href="http://sharethis.com/item?&wp=2.5.1&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=Virtualization+Needs+vs.+Cool+Features&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fvirtualization-needs-vs-cool-features%2F07%2F2008" onclick="javascript:pageTracker._trackPageview('/outbound/article/sharethis.com');">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 01 Jul 2008 17:00:08 +0000</pubDate>
      <category domain="http://securityratty.com/tag/determine product">determine product</category>
      <category domain="http://securityratty.com/tag/product">product</category>
      <category domain="http://securityratty.com/tag/product selection">product selection</category>
      <category domain="http://securityratty.com/tag/questions">questions</category>
      <category domain="http://securityratty.com/tag/basic questions">basic questions</category>
      <category domain="http://securityratty.com/tag/virtualization project">virtualization project</category>
      <category domain="http://securityratty.com/tag/plan">plan</category>
      <category domain="http://securityratty.com/tag/determine">determine</category>
      <category domain="http://securityratty.com/tag/common questions">common questions</category>
      <source url="http://blog.sciencelogic.com/virtualization-needs-vs-cool-features/07/2008">Virtualization Needs vs. Cool Features</source>
    </item>
    <item>
      <title><![CDATA[Unstructured data at risk in most firms, survey finds]]></title>
      <link>http://securityratty.com/article/11e3caf4a00a54be763b10c72313ed5b</link>
      <guid>http://securityratty.com/article/11e3caf4a00a54be763b10c72313ed5b</guid>
      <description><![CDATA[Corporate information stored on file servers and network-attached storage (NAS) devices is in danger of compromise because IT governance policies and access rules in many companies are incapable of...]]></description>
      <content:encoded><![CDATA[Corporate information stored on file servers and network-attached storage (NAS) devices is in danger of compromise because IT governance policies and access rules in many companies are incapable of dealing with a massive growth of unstructured data, according to a Ponemon Institute report issued Tuesday.]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ponemon institute report">ponemon institute report</category>
      <category domain="http://securityratty.com/tag/file servers">file servers</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/access rules">access rules</category>
      <category domain="http://securityratty.com/tag/governance policies">governance policies</category>
      <category domain="http://securityratty.com/tag/massive growth">massive growth</category>
      <category domain="http://securityratty.com/tag/nas">nas</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/companies">companies</category>
      <source url="http://www.networkworld.com/news/2008/070108-unstructured-data-at-risk-in.html?fsrc=rss-security">Unstructured data at risk in most firms, survey finds</source>
    </item>
    <item>
      <title><![CDATA[ Consumer Reports on Aviation Security and the TSA]]></title>
      <link>http://securityratty.com/article/fbfe92e38c092903fd8a793278714d7c</link>
      <guid>http://securityratty.com/article/fbfe92e38c092903fd8a793278714d7c</guid>
      <description><![CDATA[It's not on their website yet, and you'd have to pay to read it in any case, but the February 2008 issue of Consumer Reports has an article on aviation security. Much of it you've all heard before,...]]></description>
      <content:encoded><![CDATA[<p>It's not on their website yet, and you'd have to pay to read it in any case, but the February 2008 issue of <i>Consumer Reports</i> has an article on aviation security.  Much of it you've all heard before, but there are some new bits:</p>

<blockquote>Larry Tortorich, a TSA training officer and former representative to the Joint Terrorism Task Force who retired in 2006, also says he saw problems from the inside.  "There was a facade of security. There were numerous security flaws and vulnerabilities I identified. The response was, it wasn't apparent to the public, so there would not be any corrective action."</blockquote>

<p>I've regularly pointed to reinforcing the cockpit doors as something that was a good idea, and should have been done years earlier.</p>

<blockquote>Critics, however, say a stronger door is only half of the solution.  "People have this illusion that hardened cockpit doors work, and they don't," Dzakovic says.  "If you want to have a secure door, you need to have a double hulled door."

<p><i>Consumer Reports</i> searched NAS, the Aviation Safety Reporting System, and found 51 incidents since April 2002 in which flight crews reported problems with the hardened doors.</blockquote></p>

<p>Most of them weren't really security issues: locking mechanisms failing, doors popping open in flight, and so on.  But this was more interesting:</p>

<blockquote>A 2006 study of aviation security by DFI International, a Washington, D.C. security consultancy, found that a drunken passenger kicked a hole in a door panel and that aircraft cleaners "broke a fortified door off its hinges by running a heavy snack cart into it on a bet."

<p>El Al, of course, has double doors.  But since the cost is between $5K and $10K per aircraft, the airline industry has fought the measure in the U.S.</blockquote></p>

<p>The article also talks about how poor the screeners actually are, but I've covered all that already.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=kPzH2UD"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=kPzH2UD" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=olRsImD"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=olRsImD" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=2d1P0ID"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=2d1P0ID" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Thu, 10 Jan 2008 10:58:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/aviation security">aviation security</category>
      <category domain="http://securityratty.com/tag/security consultancy">security consultancy</category>
      <category domain="http://securityratty.com/tag/doors">doors</category>
      <category domain="http://securityratty.com/tag/double doors">double doors</category>
      <category domain="http://securityratty.com/tag/door">door</category>
      <category domain="http://securityratty.com/tag/consumer reports">consumer reports</category>
      <category domain="http://securityratty.com/tag/secure door">secure door</category>
      <category domain="http://securityratty.com/tag/cockpit doors">cockpit doors</category>
      <source url="http://www.schneier.com/blog/archives/2008/01/consumer_report.html"> Consumer Reports on Aviation Security and the TSA</source>
    </item>
  </channel>
</rss>
