<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: plague]]></title>
    <link>http://securityratty.com/tag/plague</link>
    <description></description>
    <pubDate>Thu, 10 Jul 2008 09:00:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[The Audacity of Capital Markets]]></title>
      <link>http://securityratty.com/article/850f85c1d4f79f75ab94faca2b325146</link>
      <guid>http://securityratty.com/article/850f85c1d4f79f75ab94faca2b325146</guid>
      <description><![CDATA[It it fairly well established that overt risk tasking, greed and corporate arrogance by financial services companies have destroyed the real estate market and crippled the global economy. Countless...]]></description>
      <content:encoded><![CDATA[<p>It it fairly well established that overt risk tasking, greed and corporate arrogance by financial services companies have destroyed the real estate market and crippled the global economy.    Countless millions of folks have lost their homes and life savings.  This corporate arrogance and greed was like a &#8220;greed virus,&#8221; spreading across the world like a plague.</p>
<p>A similar arrogance is happening in CEP-land, where, it seems, each and every financial services event processing application is now a &#8220;CEP application&#8221; just because someone in capital markets puts &#8220;CEP&#8221; in the same paragraph.     I find it ridiculous that the same market of folks who have helped destroy the global economy are now the world&#8217;s self-proclaimed authorities on complex event processing.  Amazing, if you really think about it, isn&#8217;t it?</p>
<p>I read many posts these days by folks in the capital markets trading world, claiming their message routing application is &#8220;CEP,&#8221; or their algo trading application is &#8220;CEP,&#8221;  - feeds and speed, typical of what &#8220;turns on&#8221; the financial services folks.   As an editorial note: I recall when I worked for a software company, folks on the same team who worked on Wall Street would look down on folks with many years of IT experience outside of financial services.   Some would say &#8220;he is only a security guy&#8221; in their attempt to put down anyone who does not have trading floor IT experience on their resume.    I found it all quite ridiculous and foolish.</p>
<p>My resume, for what it is worth, has a number of financial services companies, including either assessing, architecting or building large scale security systems for S.W.I.F.T, Chase or SBC.   This experience does not seem to &#8220;count&#8221; with the trading floor folks, since security is more about getting things right, not just supporting a form of gaming or gambling with other peoples money, with more feeds and speeds the better.</p>
<p>Of late, as I have watched the CEP/EP space evolve,  and unfortunately, I see a similar type of &#8220;capital markets virus&#8221; spreading into CEP-land.   Folks on the trading side of financial services seem to think that whatever they say or do is right, and whatever others outside of the trading side do is wrong.  These folks are quick to ridicule others who have far more experience than they do, outside of the trading floor of capital markets.</p>
<blockquote><p>After all, mostly what they do on the trading side is route orders -  and if a little old lady in a small town in Iowa loses her life savings because of a bad investment decision, it means little to the folks on the trading floor, the market folks are into feeds and speed - just keep the beast alive.  Place your bet on this market or that one!   Away we go, faster and faster!!!!</p></blockquote>
<p>I am sometimes a little sad to observe the same audacity in the CEP world.  Instead of focusing on the hard complex problems that require accuracy, the original set of problems defined when the phrase &#8220;complex event processing&#8221; was minted, the capital market folks have hijacked the term for their marketing purposes in algo trading and order managment systems.  These same people ridicule others who are working to solve the (originally stated) complex event processing problems, problems the capital market traders seemingly cannot understand, since they have never worked on complex network or security management problems.</p>
<p>Nevermind, that these &#8220;ultra low latency&#8221; systems cannot accurately detect a complex money laundering scheme or an elaborate fraud.   Nevermind that these &#8220;CEP engines&#8221; cannot accuracy insure that Average Joe does not lose his hard earned money in a fraud scheme.</p>
<p>I have no problem with folks in capital markets using the term CEP, but they should not ridicule those in technical areas that are not focused on keeping the &#8220;trading beast&#8221; alive so people can lose their life savings in a blink of an eye; but instead focused on solving complex problems such as the class of problems called out when the three letter acronym &#8220;CEP&#8221; was created.</p>
]]></content:encoded>
      <pubDate>Fri, 19 Sep 2008 07:18:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/capital market folks">capital market folks</category>
      <category domain="http://securityratty.com/tag/market folks">market folks</category>
      <category domain="http://securityratty.com/tag/financial services">financial services</category>
      <category domain="http://securityratty.com/tag/financial services folks">financial services folks</category>
      <category domain="http://securityratty.com/tag/folks">folks</category>
      <category domain="http://securityratty.com/tag/complex">complex</category>
      <category domain="http://securityratty.com/tag/capital markets">capital markets</category>
      <category domain="http://securityratty.com/tag/hard complex">hard complex</category>
      <category domain="http://securityratty.com/tag/complex money">complex money</category>
      <source url="http://www.thecepblog.com/2008/09/19/the-audacity-of-capital-markets/">The Audacity of Capital Markets</source>
    </item>
    <item>
      <title><![CDATA[IT Security In The News: DLP, Zombies And Busted Myths]]></title>
      <link>http://securityratty.com/article/851eadf0ed57d455694ab0fabbcb50cf</link>
      <guid>http://securityratty.com/article/851eadf0ed57d455694ab0fabbcb50cf</guid>
      <description><![CDATA[Zombie Jamboree Are you 'fraid of zombies? You should be! According to the Shadowserver Foundation, which tracks zombie numbers worldwide, in the last three months a plague has broken out - a...]]></description>
      <content:encoded><![CDATA[Zombie Jamboree Are you 'fraid of zombies? You should be! According to the Shadowserver Foundation, which tracks zombie numbers worldwide, in the last three months a plague has broken out - a thre...]]></content:encoded>
      <pubDate>Wed, 10 Sep 2008 14:26:58 +0000</pubDate>
      <category domain="http://securityratty.com/tag/zombies">zombies</category>
      <category domain="http://securityratty.com/tag/zombie jamboree">zombie jamboree</category>
      <category domain="http://securityratty.com/tag/tracks zombie">tracks zombie</category>
      <category domain="http://securityratty.com/tag/shadowserver foundation">shadowserver foundation</category>
      <category domain="http://securityratty.com/tag/fraid">fraid</category>
      <category domain="http://securityratty.com/tag/worldwide">worldwide</category>
      <category domain="http://securityratty.com/tag/thre">thre</category>
      <category domain="http://securityratty.com/tag/plague">plague</category>
      <category domain="http://securityratty.com/tag/months">months</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/389231455/">IT Security In The News: DLP, Zombies And Busted Myths</source>
    </item>
    <item>
      <title><![CDATA[Null Strings in ASP.NET Declarative DataSource Updates]]></title>
      <link>http://securityratty.com/article/11f8906732a7b86831292456d642b2f5</link>
      <guid>http://securityratty.com/article/11f8906732a7b86831292456d642b2f5</guid>
      <description><![CDATA[I just spent about 15 minutes debugging a problem where a document was getting unexpected nulls where empty strings should have been. Indeed controls like the TextBox have code in them that allows you...]]></description>
      <content:encoded><![CDATA[<p>I just spent about 15 minutes debugging a problem where a document was getting unexpected nulls where empty strings should have been. Indeed controls like the TextBox have code in them that allows you to set the Text property to null and the TextBox will convert that into an empty string. So it&#39;s a bit counterintuitive that <em>the declarative data source works the opposite way by default</em>.</p> <p>When you use a declarative data source to perform a parameterized update that contains string parameters, consider setting ConvertEmptyStringToNull=&#39;false&#39; on your &lt;asp:Parameter&gt; elements, because <em>it&#39;s true by default</em>! In other words, if a text field contains an empty string, it&#39;ll be sent to your declarative data source not as string.Empty, but as null.</p> <p>Now I don&#39;t know about you, but I don&#39;t like dealing with nulls if I can avoid it. Especially strings. Unless there&#39;s a clear need to have a null state, I avoid them like the plague not only in my database designs but also in my XML schema designs. Hopefully this helps somebody out!</p><div style="clear:both;"></div><img src="http://www.pluralsight.com/community/aggbug.aspx?PostID=52773" width="1" height="1">]]></content:encoded>
      <pubDate>Fri, 29 Aug 2008 11:42:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/strings">strings</category>
      <category domain="http://securityratty.com/tag/declarative data source">declarative data source</category>
      <category domain="http://securityratty.com/tag/empty strings">empty strings</category>
      <category domain="http://securityratty.com/tag/null">null</category>
      <category domain="http://securityratty.com/tag/empty">empty</category>
      <category domain="http://securityratty.com/tag/xml schema designs">xml schema designs</category>
      <category domain="http://securityratty.com/tag/textbox">textbox</category>
      <category domain="http://securityratty.com/tag/text property">text property</category>
      <category domain="http://securityratty.com/tag/nulls">nulls</category>
      <source url="http://www.pluralsight.com/community/blogs/keith/archive/2008/08/29/null-strings-in-asp-net-declarative-datasource-updates.aspx">Null Strings in ASP.NET Declarative DataSource Updates</source>
    </item>
    <item>
      <title><![CDATA[Effective Security with a Continuous Approach to ISO 27001 Compliance]]></title>
      <link>http://securityratty.com/article/742a0f6337db9ec4d8b2ea17dead37c7</link>
      <guid>http://securityratty.com/article/742a0f6337db9ec4d8b2ea17dead37c7</guid>
      <description><![CDATA[Source: Tripwire) The ISO 27001 standard is primarily referred to as the Information Security Management System (ISMS) certification standard. Organizations that seek to implement an ISMS are examined...]]></description>
      <content:encoded><![CDATA[<b>(Source: Tripwire)</b>  The ISO 27001 standard is primarily referred to as the Information Security Management System (ISMS) certification standard.  Organizations that seek to implement an ISMS are examined against ISO 27001. As with several global standards, the scope of this standard is far reaching, with several sets of control objectives and guidelines. Its fundamental purpose is to act as a compendium of techniques for securing IT environments and thus effectively managing business risk as well as demonstrating regulatory compliance.<p>ISO 27001 is recognized internationally as a structured methodology for information security. Companies that choose to adopt ISO 27001 demonstrate their commitment to high levels of information security, however it does not mandate specific procedures nor define the implementation techniques for gaining certification. Thus, companies being audited for ISO 27001 compliance deal with the same issues that plague companies facing regulatory audits: how to effectively achieve compliance and, following an audit, cost-effectively maintain it.<p>The Tripwire Enterprise solution provides organizations with powerful configuration control through its configuration assessment and change auditing capabilities. In this white paper, learn how with Tripwire Enterprise, organizations can quickly achieve IT configuration integrity by proactively assessing how their current configurations measure up to specifications as given in ISO 27001. This provides immediate visibility into the state of their systems, and through automating the process, saves time and effort over a manual efforts.
<p><a href="http://feeds.computerworld.com/~a/Computerworld/Security/News?a=k034He"><img src="http://feeds.computerworld.com/~a/Computerworld/Security/News?i=k034He" border="0"></img></a></p><img src="http://feeds.computerworld.com/~r/Computerworld/Security/News/~4/331677375" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 10 Jul 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/iso">iso</category>
      <category domain="http://securityratty.com/tag/tripwire enterprise">tripwire enterprise</category>
      <category domain="http://securityratty.com/tag/tripwire enterprise solution">tripwire enterprise solution</category>
      <category domain="http://securityratty.com/tag/adopt iso">adopt iso</category>
      <category domain="http://securityratty.com/tag/tripwire">tripwire</category>
      <category domain="http://securityratty.com/tag/certification standard">certification standard</category>
      <category domain="http://securityratty.com/tag/certification">certification</category>
      <category domain="http://securityratty.com/tag/standard">standard</category>
      <category domain="http://securityratty.com/tag/plague companies">plague companies</category>
      <source url="http://feeds.computerworld.com/~r/Computerworld/Security/News/~3/331677375/whitepapers.do">Effective Security with a Continuous Approach to ISO 27001 Compliance</source>
    </item>
  </channel>
</rss>
