<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: reminds]]></title>
    <link>http://securityratty.com/tag/reminds</link>
    <description></description>
    <pubDate>Fri, 18 Jul 2008 10:12:01 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Relax, the Net Backbone Has Space for Your Lolcats]]></title>
      <link>http://securityratty.com/article/b00a463d2bb0a5e64116bda67d599849</link>
      <guid>http://securityratty.com/article/b00a463d2bb0a5e64116bda67d599849</guid>
      <description><![CDATA[Many people have feared that lolcats and other traffic are going to block the tubes, but Ars says today that the net backbone bandwidth is in fact growing and plenty prepared to swallow those cats....]]></description>
      <content:encoded><![CDATA[<p>Many people have feared that lolcats and other traffic are going to block the &#8216;tubes, but Ars says today that the net backbone bandwidth is in fact growing and plenty prepared to swallow those cats. Actually they use a prettier analogy&#8211;</p>
<blockquote><p>Given recent media coverage, it&#8217;s easy to believe that P2P and streaming video traffic is a rising hurricane battering upon ISP levees, that ISPs are frantically sandbagging their systems against disaster, that throttling, bandwidth caps, and traffic management are urgent and absolute necessities to keep the storm surge at bay. But new research from Telegeography only confirms what we&#8217;ve been saying for some time: the Internet backbone isn&#8217;t drowning beneath any kind of exaflood. In fact, backbone capacity has grown faster than Internet traffic in the last year—for the second year in a row.</p></blockquote>
<p>Check out the <a rel="nofollow" target="_blank" href="http://arstechnica.com/news.ars/post/20080903-what-exaflood-net-backbone-shows-no-signs-of-osteoporosis.html">full article</a>, it even has some shiny graphs. It also reminds me of <a rel="nofollow" target="_blank" href="http://xkcd.com/470/">XKCD</a> the other day&#8230; header: &#8220;I get in trouble for showing up contented to protests,&#8221; and the stick figure&#8217;s holding signs: &#8220;Things are pretty OK!&#8221; and &#8220;Anyone for Scrabble later?&#8221;</p>]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 06:21:16 +0000</pubDate>
      <category domain="http://securityratty.com/tag/traffic">traffic</category>
      <category domain="http://securityratty.com/tag/internet traffic">internet traffic</category>
      <category domain="http://securityratty.com/tag/video traffic">video traffic</category>
      <category domain="http://securityratty.com/tag/traffic management">traffic management</category>
      <category domain="http://securityratty.com/tag/net backbone bandwidth">net backbone bandwidth</category>
      <category domain="http://securityratty.com/tag/recent media coverage">recent media coverage</category>
      <category domain="http://securityratty.com/tag/isp levees">isp levees</category>
      <category domain="http://securityratty.com/tag/lolcats">lolcats</category>
      <category domain="http://securityratty.com/tag/grown faster">grown faster</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/382565188/">Relax, the Net Backbone Has Space for Your Lolcats</source>
    </item>
    <item>
      <title><![CDATA[CEP is Not BPM, BAM, BRE, BRMS or SOA]]></title>
      <link>http://securityratty.com/article/19813f3c14d4970ef6ec62577362732d</link>
      <guid>http://securityratty.com/article/19813f3c14d4970ef6ec62577362732d</guid>
      <description><![CDATA[A post in Technology content of current CEP products? reminds me of why I rarely, if ever, agree with anything that comes out of Aleris marketing team. To fair to Jeff, it is not only Aleri but...]]></description>
      <content:encoded><![CDATA[<p>A post in  <a href="http://www.thecepblog.com/wp-admin/viewtopic.php?f=13&amp;t=123&amp;start=0&amp;st=0&amp;sk=t&amp;sd=d">Technology content of current CEP products?</a> reminds me of why I rarely, if ever, agree with anything that comes out of Aleri&#8217;s marketing team.   To fair to Jeff, it is not only Aleri but others, who continually misdefine business process management (BPM) as CEP.</p>
<p>Jeff uses the example, &#8220;Smart Order Routing&#8221; as an example of taking an event and routing the resulting market order match based on some simple rules.    Routing a order kicked off by a simple order match against a deep liquidity pool (or other market factor) does not define complex event processing nor detecting a complex event - the core idea behind CEP.   Order routing based on simple rules is BPM, plain and simple.</p>
<p>Let&#8217;s take another example, fraud.  In this example, there is some complex neural network monitoring for credit card fraud and a potential fraud is detected - this is CEP, detecting a complex event based on some sophisticated analytics.   </p>
<p>After a possible fraud has been detected, a process looks into a database and the routes the incident to someone in the company who is a (1) specialist in credit card fraud, (2) working at the same time of the discovered threat, and (3) immediately available to act on this type of task.   Routing the incident is not CEP, it is BPM.</p>
<p>Jeff makes the argument that it is OK to call an event-driven BPM task CEP because &#8220;it fits the EPTS definition&#8221; in the CEP glossary.   He also avoids the discussion of detection accuracy, and instead insists that latency is a &#8221;very important&#8221; factor in a CEP application.</p>
<p>If you read the various post by vendors in the blog-o-sphere, it is obvious that they are continually defining CEP as BAM, BPM, BRE, BRMS, SOA and just about every other related processing activity that is complimentary to the <a href="http://www.thecepblog.com/2008/08/26/magic-quadrant-for-it-event-correlation-and-analysis-2007/" target="_self">event correlation and analysis </a>required to detect an opportunity or threat to your business.</p>
<p>I&#8217;m not picking on Aleri.  TIBCO has been doing the same thing recently in their <a href="http://tibcoblogs.com/cep" target="_blank">CEP blog</a>, continually attempting to redefine CEP as BRMS.    Detecting business opportunities and threats with high confidence requires sophisticated analytics, and their tools have not yet evolved to &#8220;real CEP&#8221; capabilities.  Instead, vendors are attempting to redefine BPM, BRMS, BRE, and even SOA to some degree, as CEP. </p>
<p>CEP is Not BPM, BAM, BRE, BRMS or SOA.</p>
]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 09:37:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/cep blog">cep blog</category>
      <category domain="http://securityratty.com/tag/current cep products">current cep products</category>
      <category domain="http://securityratty.com/tag/cep glossary">cep glossary</category>
      <category domain="http://securityratty.com/tag/bpm">bpm</category>
      <category domain="http://securityratty.com/tag/real cep capabilities">real cep capabilities</category>
      <category domain="http://securityratty.com/tag/cep application">cep application</category>
      <category domain="http://securityratty.com/tag/potential fraud">potential fraud</category>
      <category domain="http://securityratty.com/tag/fraud">fraud</category>
      <source url="http://www.thecepblog.com/2008/08/27/cep-is-not-bpm-bam-bpm-brms-or-soa/">CEP is Not BPM, BAM, BRE, BRMS or SOA</source>
    </item>
    <item>
      <title><![CDATA[This Generations ApathyThe Age of Specialization and ADD]]></title>
      <link>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</link>
      <guid>http://securityratty.com/article/de3980adf7c1fb760b23b64836636412</guid>
      <description><![CDATA[Robert Scoble has some interesting commentary this morning about the number of photojournalists with expensive gear covering the Olympics
Hes a bit indignant that so much energy goes to sporting...]]></description>
      <content:encoded><![CDATA[<p>Robert Scoble has some interesting <a rel="nofollow" target="_blank" href="http://scobleizer.com/">commentary</a> this morning about the number of photojournalists with expensive gear covering the Olympics.</p>
<p>He&#8217;s a bit indignant that so much energy goes to sporting events like the Olympics rather than more important news that isn&#8217;t getting reported around the world.</p>
<blockquote><p>This is in a year when tons of journalists are getting laid off.</p>
<p>This is in a year when there are tons of stories around the world that aren’t getting reported on.</p>
<p>Could we take half of those photographers and send them to Russia, for instance</p></blockquote>
<p>Reminds me of a feeling I had back in college as an undergrad student studying social sciences and humanities, about the way my friends who were physicists interacted with the world. They were so awed by the stars, Mars, astrophysics, and it seemed to me interesting but altogether unimportant. They argued they may find something outside our planet that could help solve Earth-bound problems like disease, or find the origins of earth and humanity &#8212; but really they were doing it because they loved it. One of my friends had a good argument, though &#8212; there are enough people right now that we can specialize in what we care about, and there will still be others covering other topics. He could be a physicist and look into the universe&#8217;s origin, while I studied social interaction and writing, and our other friends looked into solving cancer or eradicating invasive plants in the native wetlands. We have to specialize, and there are enough of us to do it too.</p>
<p>I think it&#8217;s the same way in journalism &#8212; whether it&#8217;s sports, celebrity journalism, or coverage of politics and war, there are a lot of opportunities right now for journalists. Of course the business model is changing, and some old-schoolers won&#8217;t know how to roll with that, but generations change slowly; we&#8217;re learning.</p>
<p>Also, the Olympics is seen as more than a sporting event, it&#8217;s also a symbol of world competition and cooperation too &#8212; a way for countries to come together and share entertainment globally. I think that&#8217;s worth covering.</p>
<p>In the second post, Robert Scoble says there are plenty of great journalists but the public doesn&#8217;t care. In some ways I have to agree with that, but I don&#8217;t think it&#8217;s negative, necessarily. I had a conversation with someone the other day about world news reportage. He says, &#8220;I was just reading this story, but what does it matter to me if there&#8217;s a flood in some city in another country I&#8217;ll never visit and some farmer lost his sheep?&#8221; World news is only important when it&#8217;s relevant, so it&#8217;s no wonder that many people don&#8217;t care &#8212; if they don&#8217;t know much about the area, and it doesn&#8217;t affect them, they have no incentive to give it full attention. You can call that apathy, but I think it&#8217;s an important selectivity skill that humans have. We have to choose what to give priority to, so if nothing stands out as being particularly important, we just ignore it or gloss over it. Human nature&#8230;</p>
<p>Also I think the common person today just gets desensitized and doesn&#8217;t know where to turn their energy, when surrounded by so many crises. Either you focus on one specialty and do your best to work toward one cause in your life &#8212; and maybe that&#8217;s just in the course of your daily work &#8212; or you become a complete Attention-Deficit-Disorder case and bounce from one problem to the next, without knowing how to solve anything. That just causes a sense of bewilderment, despair, and either that bogs you down or eventually you get desensitized.</p>
<p>There&#8217;s a commenter on Scoble&#8217;s blog, Spencer, who talks about this generation&#8217;s apathy. There are so many people who want to blame today&#8217;s generation or the young generation for this &#8220;apathy&#8221; that they sense. But I see it as a survival mechanism that arises from the way information flows these days. We&#8217;re surrounded by crises, everyone wants us to know about them &#8212; the water shortage, global warming, death in Iraq, the national deficit. Okay, crisis, I get it. But no one gives a real clear idea on what any individual is really supposed to do to solve the problem. You can&#8217;t get involved with one global cause, without ignoring all the others, and if you do get involved it&#8217;s likely to become your life&#8217;s purpose. Most people are concerned with other things &#8212; their families, their work, personal development, their homes and futures, and really that&#8217;s enough to take up all their time.</p>
<p>I&#8217;m always amazed when I read about the early unionists. Emma Goldman for example, the activist who pushed for the 8-hr workday, and campaigned for free love in the early 1900s when women were still wearing corsets, used to work 16 hour factory days as a seamstress, then lead meetings late into the night. Today we lead cushy lives comparatively&#8211;8 hour days, plus commute and lunch, family time, dinner time, gym maybe, sleep&#8230; but it still doesn&#8217;t seem like we ever have enough energy and time.</p>
<p>What Emma had that most people today don&#8217;t, is a community living in the same conditions as herself, with clear goals about what they were campaigning for, and a cause that affected their own daily lives. Today, unionism and local activism is in much shorter supply, in part due to the many people who work fairly comfy desk jobs, and the problem that everyone has his own specialization, works in a cubicle, does his or her own thing. The problems we&#8217;re facing today in terms of global warming, global water shortage, aren&#8217;t the same kinds of problems that activists have fought for in the past, and there&#8217;s no clear road map for how to solve them. Our leaders sure aren&#8217;t leading the way.</p>
<p>What we do have, at least, is the Olympics, which is an age old symbol of international cooperation, play and competition&#8230;so, uh, go sports! As for full disclosure, I don&#8217;t actually have a TV and haven&#8217;t watched the Olympics in many years, but I do try taking short showers&#8211;does that help?</p>]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 09:46:26 +0000</pubDate>
      <category domain="http://securityratty.com/tag/world news reportage">world news reportage</category>
      <category domain="http://securityratty.com/tag/world">world</category>
      <category domain="http://securityratty.com/tag/world competition">world competition</category>
      <category domain="http://securityratty.com/tag/world news">world news</category>
      <category domain="http://securityratty.com/tag/global water shortage">global water shortage</category>
      <category domain="http://securityratty.com/tag/global">global</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/solve earth-bound">solve earth-bound</category>
      <source url="http://feeds.feedburner.com/~r/itsecurity/~3/369359733/">This Generations ApathyThe Age of Specialization and ADD</source>
    </item>
    <item>
      <title><![CDATA[Who's Behind the Georgia Cyber Attacks?]]></title>
      <link>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</link>
      <guid>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</guid>
      <description><![CDATA[Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate most, it's lowering down the quality of the...]]></description>
      <content:encoded><![CDATA[<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/WYu9dc61zMQ/s1600-h/georgia_ddos8.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img height="51" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/1TazKONjKVw/s200-R/georgia_ddos8.JPG" style="border: 0pt none ;" width="200" /></a>Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate&nbsp; most, it's lowering down the quality of the discussion I hate the most. Even if you're excluding all the factual evidence (<a href="http://blogs.zdnet.com/security/?p=1670">Coordinated Russia vs Georgia cyber attack in progress</a>), common sense must prevail.<br />
<br />
Sometimes, the degree of incompetence can in fact be pretty entertaining, and greatly explains why certain countries are lacking behind others with years in their inability to understand the rules of information warfare, or the basic premise of unrestricted warfare, that there are no rules on how to achieve your objectives.<br />
<br />
So who's behind the Georgia cyber attacks, encompassing of plain simple ping floods, web site defacements, to sustained DDoS attacks, which no matter the fact that Geogia has switched hosting location to the U.S remain ongoing? It's <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&amp;taxonomyName=cybercrime_and_hacking&amp;articleId=9112443&amp;taxonomyId=82&amp;intsrc=kc_top">Russia's self-mobilizing cyber militia, the product of a collectivist society</a> having the capacity to wage cyber wars and literally dictating the rhythm in this space. What is militia anyway : <br />
<br />
<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/hxG1PZAcltY/s1600-h/information_warfare.1.gif" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/B0-V902UtRA/s200-R/information_warfare.1.gif" style="border: 0pt none ;" /></a>"<i>civilians trained as soldiers but not part of the regular army; the entire body of physically fit civilians eligible by law for military service; a military force composed of ordinary citizens to provide defense, emergency law enforcement, or paramilitary service, in times of emergency; without being paid a regular salary or committed to a fixed term of service; an army of trained civilians, which may be an official reserve army, called upon in time of need; the national police force of a country; the entire able-bodied population of a state; or a private force, not under government control; An army or paramilitary group comprised of citizens to serve in times of emergency</i>"<br />
<br />
Next to the "blame the Russian Business Network for the lack of large scale implementation of DNSSEC" mentality, certain news articles also try to wrongly imply that <a href="http://arstechnica.com/news.ars/post/20080813-georgian-attacks-might-not-be-russians-after-all.html%20">there's no Russian connection in these attacks</a>, and that the attacks are not "state-sponsored", making it look like that there should be a considerable amount of investment made into these attacks, and that the Russian government has the final word on whether or not its DDoS capabilities empowered citizens should launch any attacks or not. In reality, the only thing the Russian government was asking itself during these attacks was "why didn't they start the attacks earlier?!".<br />
<br />
Thankfully, there are some visionary folks out there understanding the situation. Last year, I asked the following question - <a href="http://www.imedialearn.com/imediapoll/poll.php?code=f1156c39d3c972139c62bc91c17e2c53">What is the most realistic scenario on what exactly happened in the recent DDoS attacks aimed at Estonia, from your point of view?</a> and some of the possible answers still fully apply in this situation :<br />
<br />
- It was a Russian government-sponsored hacktivism, or shall we say a government-tolerated one<br />
<br />
- Too much media hype over a sustained ICMP flood, given the publicly obtained statistics of the network traffic<br />
<br />
- Certain individuals of the collectivist Russian society, botnet masters for instance, were automatically recruited based on a nationalism sentiments so that they basically forwarded some of their bandwidth to key web servers<br />
<br />
- In order to generate more noise, DIY DoS tools were distributed to the masses so that no one would ever know who's really behind the attacks<br />
<br />
- Don't know who did it, but I can assure you my kid was playing !synflood at that time<br />
<br />
- Offended by the not so well coordinated removal of the Soviet statue, Russian oligarchs felt the need to send back a signal but naturally lacking any DDoS capabilities, basically outsourced the DDoS attacks<br />
<br />
- A foreign intelligence agency twisting the reality and engineering cyber warfare tensions did it, while taking advantage of the momentum and the overall public perception that noone else but the affected Russia could be behind the attacks<br />
<br />
- I hate scenario building, reminds me of my academic years, however, yours are pretty good which doesn't necessarily mean I actually care who did it, and pssst - it's not cyberwar, as in cyberwar you have two parties with virtual engagement points, in this case it was bandwidth domination by whoever did it over the other. A virtual shock and awe<br />
<br />
- I stopped following the news story by the time every reporter dubbed it the first cyber war, and started following it again when the word hacktivism started gaining popularity. So, hacktivists did it to virtually state their political preferences <br />
<br />
Departamental cyber warfare would never reach the flexibity state of people's information warfare where everyone is a cyber warrior given he's empowered with access to the right tools at a particular moment in time.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">People's Information Warfare Concept</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">Combating Unrestricted Warfare</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/cyber-storm-ii-cyber-exercise.html">The Cyber Storm II Cyber Exercise</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/chinese-hacktivists-waging-peoples.html">Chinese Hacktivists Waging People's Information Warfare Against CNN</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/ddos-attack-against-cnncom.html">The DDoS Attacks Against CNN.com</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">China's Cyber Espionage Ambitions</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/north-koreas-cyber-warfare-unit-121.html">North Korea's Cyber Warfare Unit 121</a><br />
<div><a href="http://ddanchev.blogspot.com/2006/09/chinese-hackers-attacking-us.html">Chinese Hackers Attacking U.S Department of Defense Networks</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><div><a href="http://ddanchev.blogspot.com/2007/10/empowering-script-kiddies.html">Empowering the Script Kiddies</a></div><div><a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">OSINT Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2007/05/corporate-espionage-through-botnets.html">Corporate Espionage Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">Malware Infected Hosts as Stepping Stones</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a></div><div><a href="http://ddanchev.blogspot.com/2006/05/current-emerging-and-future-state-of.html">The Current, Emerging, and Future State of Hacktivism</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Tcck1K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Tcck1K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=X9Eb0K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=X9Eb0K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sJIFNk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sJIFNk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=dY7m7k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=dY7m7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=rRiYlK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=rRiYlK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=XCeTAK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=XCeTAK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IYEN6k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IYEN6k" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/364867192" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 06:16:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/georgia cyber attacks">georgia cyber attacks</category>
      <category domain="http://securityratty.com/tag/warfare">warfare</category>
      <category domain="http://securityratty.com/tag/departamental cyber warfare">departamental cyber warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare tensions">cyber warfare tensions</category>
      <category domain="http://securityratty.com/tag/information warfare concept">information warfare concept</category>
      <category domain="http://securityratty.com/tag/information warfare">information warfare</category>
      <category domain="http://securityratty.com/tag/russian">russian</category>
      <category domain="http://securityratty.com/tag/russian oligarchs">russian oligarchs</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/364867192/whos-behind-georgia-cyber-attacks.html">Who's Behind the Georgia Cyber Attacks?</source>
    </item>
    <item>
      <title><![CDATA[Are the Chinese Olympics a Trap?]]></title>
      <link>http://securityratty.com/article/b42841f9230ec10a1a246d62f67be438</link>
      <guid>http://securityratty.com/article/b42841f9230ec10a1a246d62f67be438</guid>
      <description><![CDATA[The Onion reminds us that we can never be too...]]></description>
      <content:encoded><![CDATA[<p>The Onion reminds us that we <a href="http://www.theonion.com/content/video/the_beijing_olympics_are_they_a">can never be too careful</a>.</p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=Ry3uLK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=Ry3uLK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=6h3EzK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=6h3EzK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Fri, 08 Aug 2008 10:10:33 +0000</pubDate>
      <category domain="http://securityratty.com/tag/onion reminds">onion reminds</category>
      <category domain="http://securityratty.com/tag/careful">careful</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/are_the_chinese.html">Are the Chinese Olympics a Trap?</source>
    </item>
    <item>
      <title><![CDATA[On CEP as a Discipline]]></title>
      <link>http://securityratty.com/article/a9d1f2721b6335854aee35ef66fda256</link>
      <guid>http://securityratty.com/article/a9d1f2721b6335854aee35ef66fda256</guid>
      <description><![CDATA[In CEP as a Discipline , David Luckham wrote
Actually, it is fair to say that some of CEP can be found in other disciplines. Event processing has been going on in one form or another, for the past 50...]]></description>
      <content:encoded><![CDATA[<p>In  <a href="http://http://forum.complexevents.com/viewtopic.php?f=13&amp;t=121" target="_blank">CEP as a Discipline</a>,  David Luckham wrote: </p>
<blockquote><p><em>&#8220;Actually, it is fair to say that some of CEP can be found in other disciplines. Event processing has been going on in one form or another, for the past 50 years. Simulation, Networking, Active DBs, Middleware.</p>
<p>{ &#8230;. }</p>
<p>CEP has only just begun. The foundations are unexplored. Its an open field of research issues.&#8221;</em></p></blockquote>
<p>Actually, on slide 12 of this presentation from 2006 <a class="postlink" href="http://www.complexevents.com/slides/TIBCO_MARCH_2006.ppt">Processing Patterns for PredictiveBusiness</a>, we show that the foundations for complex event processing have been in place for many years and in many disciplines such as multisensor data fusion, control theory, sensor management, planning, correlation, estimation, tracking, information fusion, data fusion, data mining and more.</p>
<p>One obvious problem (or at least obvious to many of us) with the current group think marketing CEP is that many have ignored the established foundations for event processing and complex event processing that have been mature for many decades. It is not very efficient (nor good for customers) to pick a phrase, or concept, like &#8220;CEP&#8221; and ignore the relevant mulitiple disciplines that have been used to solve complex classes of distributed event processing problems for decades.</p>
<p>Therefore, &#8220;CEP has only begun&#8221; is only true for those who have &#8216;drank the CEP koolaid&#8221; and do not understand (yet) that they are &#8220;reinventing the event processing wheel&#8221; and ignoring (by accident or purposely, I have no idea of the motives) the prior-art and/or selectively picking the prior art or research associated with their company, byline, favorite researcher, CEO, etc. This is a fundamental issue (and constraint) with CEP, in my opinion. Complex event processing does not stand alone as an art or a science, nor should it, nor should it be based on single dimensional, or small groups of single dimensional, technologies.</p>
<p>If you want to see many of the foundations of CEP, you don&#8217;t need to go much further than slide 12 of this  presentation from 2006, <a class="postlink" href="http://www.complexevents.com/slides/TIBCO_MARCH_2006.ppt">Processing Patterns for PredictiveBusiness</a>.</p>
<p>Based on my observation, it reminds me of a small group of folks on a discovery mission where their ship lands on the shore of a distant land and they call this &#8220;new land&#8221; &#8212; &#8220;CEP&#8221; because they feel they have discovered a new land.  Nevermind the big cities that already exist or the many people already &#8220;in the fields&#8221; of their new land.  These &#8221;CEP explorers&#8221; are seemingly in some kind of modern day epic struggle to define themselves as &#8220;discoverers&#8221; or &#8220;founders&#8221; and they are coming up with new names of the lakes, rivers, streams and mountains that defined the landscape long before their ship arrived.</p>
<p>Note: It is encouraging to see folks slowly &#8220;catching up&#8221;&#8230;. maybe in a few years we will move CEP beyond the &#8220;not invented here&#8221; mind share that we see today.</p>
<p>Also note that, recently we saw a flurry of posts where many people rightly stated that &#8220;CEP was overhyped&#8221; - but then in rebuttal the EPTS community leaders came back with &#8220;Is CEP a mere hype?&#8221; or &#8220;Is CEP a hype?&#8221;. spinning the discussion to an extreme position that is wildly different than &#8220;CEP is Overhyped&#8221;.   </p>
]]></content:encoded>
      <pubDate>Tue, 05 Aug 2008 04:46:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cep">cep</category>
      <category domain="http://securityratty.com/tag/move cep">move cep</category>
      <category domain="http://securityratty.com/tag/land cep">land cep</category>
      <category domain="http://securityratty.com/tag/multisensor data fusion">multisensor data fusion</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/complex event">complex event</category>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/prior art">prior art</category>
      <category domain="http://securityratty.com/tag/art">art</category>
      <source url="http://www.thecepblog.com/2008/08/05/on-cep-as-a-discipline/">On CEP as a Discipline</source>
    </item>
    <item>
      <title><![CDATA[Italians Use Soldiers to Prevent Crime]]></title>
      <link>http://securityratty.com/article/c78f1c770359cb273d03943d7dec2ab0</link>
      <guid>http://securityratty.com/article/c78f1c770359cb273d03943d7dec2ab0</guid>
      <description><![CDATA[Interesting : Soldiers were deployed throughout Italy on Monday to embassies, subway and railway stations, as part of broader government measures to fight violent crime here for which illegal...]]></description>
      <content:encoded><![CDATA[<p><a href="http://www.nytimes.com/2008/08/05/world/europe/05italy.html">Interesting</a>:</p>

<blockquote>Soldiers were deployed throughout Italy on Monday to embassies, subway and railway stations, as part of broader government measures to fight violent crime here for which illegal immigrants are broadly blamed.

<p>[...]</p>

<p>The conservative government of Silvio Berlusconi won elections in April while promising to crack down on petty crime and illegal immigrants. The new patrols of soldiers, who are not empowered to make arrests, do not seem aimed only at illegal immigrants, though the patrols were deployed to centers where illegal immigrants are housed. </p>

<p>“Security is something concrete,” Mr. La Russa said on Monday. The troops, he said, will be a “deterrent to criminals.”</blockquote></p>

<p>That reminds me of one of my favorite logical fallacies: "We must do something.  This is something. Therefore, we must do it."  It does seem largely to be a demonstration of "doing something" by the Berlusconi government.  The legitimate police, of course, think it's a terrible idea.</p>

<blockquote>“You need to be specially trained to carry out some kinds of controls,” Nicola Tanzi, the secretary of a trade union that represents Italian police officers. “Soldiers just aren’t qualified.”

<p>He also questioned whether the $93.6 million that will be spent for the extra deployment, called Operation Safe Streets, might not have been better used to increase the budgets for Italy’s police and military.</blockquote></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=lUII6K"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=lUII6K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/schneier/fulltext?a=lLsCCK"><img src="http://feeds.feedburner.com/~f/schneier/fulltext?i=lLsCCK" border="0"></img></a>
</div>]]></content:encoded>
      <pubDate>Tue, 05 Aug 2008 02:36:44 +0000</pubDate>
      <category domain="http://securityratty.com/tag/illegal immigrants">illegal immigrants</category>
      <category domain="http://securityratty.com/tag/soldiers">soldiers</category>
      <category domain="http://securityratty.com/tag/police">police</category>
      <category domain="http://securityratty.com/tag/broader government measures">broader government measures</category>
      <category domain="http://securityratty.com/tag/italys police">italys police</category>
      <category domain="http://securityratty.com/tag/favorite logical fallacies">favorite logical fallacies</category>
      <category domain="http://securityratty.com/tag/operation safe streets">operation safe streets</category>
      <category domain="http://securityratty.com/tag/fight violent crime">fight violent crime</category>
      <category domain="http://securityratty.com/tag/silvio berlusconi">silvio berlusconi</category>
      <source url="http://www.schneier.com/blog/archives/2008/08/italians_use_so.html">Italians Use Soldiers to Prevent Crime</source>
    </item>
    <item>
      <title><![CDATA[Ah, the joys of blogging!]]></title>
      <link>http://securityratty.com/article/2e21442e3f94142ee989877a5ea060c4</link>
      <guid>http://securityratty.com/article/2e21442e3f94142ee989877a5ea060c4</guid>
      <description><![CDATA[People ask why do you blog? In the final analysis I blog because I like to. Every once in a while though you get a comment from a reader that reminds you why it is all worth while. Here is one I...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>People ask why do you blog?&nbsp; In the final analysis I blog because I like to. Every once in a while though you get a comment from a reader that reminds you why it is all worth while.&nbsp; Here is one I received today from a person alleging to be a Julie Peterson:</p><blockquote><p><em>Julie Peterson commented on </em><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/04/safe-access-win.html"><em>Safe Access wins SC Magazine Award Reader Trust Award, again!</em></a><em>: </em></p>

<p><em>Dressed in a tuxedo and chewing those rubber chicken breasts at the award ceremony is your idea of fun? Aren't you the same mentally retarded idiot who said in 2007 that you hated SC awards and that anyone can buy the SC awards with a sponsorship? Why do you think people give over $10k as sponsorship for the SC awards? Who is watching the awards except other vendors? By the way you suck big time with your rubbish blogs. Didn't networld magazine give you the boot within 3 months? Think before you write Mr. mental. Well done on winning, but please, dont give the impression that you cant buy an award from SC! And don't forget to eat your medication pills tonight, otherwise from your hair it is obvious you ran away from a mental hospital.</em> </p></blockquote><p>First of all Julie, let me thank you for your kind words! You made the statement and let me answer your questions for you.</p>

<p>1. Is dressing in a tuxedo and chewing rubber chicken breasts my idea of fun?&nbsp; Actually, I do enjoy dressing up in a tuxedo once in a while.&nbsp; The food at the awards ceremony was actually pretty good, if not diet friendly, as were the cocktails.&nbsp; The entertainment at the awards show was pretty good as well. Catching up with friends you had not seen for a while and networking with industry peers was pretty worthwhile too.&nbsp; Maybe your idea of a good time is putting on a bowling shirt and swilling a couple of beers and pretzels before going home and undressing into your dirty ripped underwear. Hey I say to each his own.</p>

<p>2. I am not the idiot who in 2007 said that I hated the SC awards and that anyone can buy the SC awards with a sponsorship.&nbsp; I am the idiot who <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/08/ssaaty-blog-win.html">said that about the InfoSec Products Guide</a> award by the folks at Silicon Valley Communications.&nbsp; In contrast I have always said nice things about the SC awards. I actually have a lot of respect for them.&nbsp; Also for the record, StillSecure has never been a sponsor of the SC Magazine awards. I have seen sponsors who did not win awards as well.&nbsp; So looks like you got that one wrong Julie, but it happens.</p>

<p>3. ???Networld??? magazine didn???t give me the boot within 3 months.&nbsp; They never had the chance, as I never wrote for ???networld, network world or any other magazine. Maybe you have me confused with Mike Rothman or Mitchell Ashley, who do and did write for Network World. But let me assure you that I do try and think before I write.</p>

<p>4. Regarding what medication pills I take and does my hair make it obvious I ran away from a mental hospital. I don???t take any medication, maybe I should.&nbsp; Better living through chemistry you know ;-)&nbsp; As to my hair, what can I say.&nbsp; At this stage I am happy I have any hair at all.&nbsp; My wife always says when I get my haircut it looks like a Buzz Lightyear style, but no one ever mentioned a mental hospital look to it.&nbsp; In any event sorry it doesn???t appeal to you.</p>

<p>So who is this troll Julie Peterson?&nbsp; Could it be Richard Stiennon in drag?&nbsp; Maybe his wife striking out?&nbsp; Maybe another one of my fans?&nbsp; Who knows, but these sort of comments keep me juiced about blogging and remind me of how much fun I have doing it.&nbsp; Thanks again Julie!</p></div>
]]></content:encoded>
      <pubDate>Tue, 29 Jul 2008 14:10:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/troll julie peterson">troll julie peterson</category>
      <category domain="http://securityratty.com/tag/julie peterson">julie peterson</category>
      <category domain="http://securityratty.com/tag/networld magazine">networld magazine</category>
      <category domain="http://securityratty.com/tag/magazine">magazine</category>
      <category domain="http://securityratty.com/tag/awards">awards</category>
      <category domain="http://securityratty.com/tag/win awards">win awards</category>
      <category domain="http://securityratty.com/tag/magazine awards">magazine awards</category>
      <category domain="http://securityratty.com/tag/awards ceremony">awards ceremony</category>
      <category domain="http://securityratty.com/tag/julie">julie</category>
      <source url="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/07/ah-the-joys-of.html">Ah, the joys of blogging!</source>
    </item>
    <item>
      <title><![CDATA[Ah, the joys of blogging!]]></title>
      <link>http://securityratty.com/article/822d1a6ac16159dd85108200273bf839</link>
      <guid>http://securityratty.com/article/822d1a6ac16159dd85108200273bf839</guid>
      <description><![CDATA[People ask why do you blog? In the final analysis I blog because I like to. Every once in a while though you get a comment from a reader that reminds you why it is all worth while. Here is one I...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p>People ask why do you blog?&nbsp; In the final analysis I blog because I like to. Every once in a while though you get a comment from a reader that reminds you why it is all worth while.&nbsp; Here is one I received today from a person alleging to be a Julie Peterson:</p><blockquote><p><em>Julie Peterson commented on </em><a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/04/safe-access-win.html"><em>Safe Access wins SC Magazine Award Reader Trust Award, again!</em></a><em>: </em></p>

<p><em>Dressed in a tuxedo and chewing those rubber chicken breasts at the award ceremony is your idea of fun? Aren't you the same mentally retarded idiot who said in 2007 that you hated SC awards and that anyone can buy the SC awards with a sponsorship? Why do you think people give over $10k as sponsorship for the SC awards? Who is watching the awards except other vendors? By the way you suck big time with your rubbish blogs. Didn't networld magazine give you the boot within 3 months? Think before you write Mr. mental. Well done on winning, but please, dont give the impression that you cant buy an award from SC! And don't forget to eat your medication pills tonight, otherwise from your hair it is obvious you ran away from a mental hospital.</em> </p></blockquote><p>First of all Julie, let me thank you for your kind words! You made the statement and let me answer your questions for you.</p>

<p>1. Is dressing in a tuxedo and chewing rubber chicken breasts my idea of fun?&nbsp; Actually, I do enjoy dressing up in a tuxedo once in a while.&nbsp; The food at the awards ceremony was actually pretty good, if not diet friendly, as were the cocktails.&nbsp; The entertainment at the awards show was pretty good as well. Catching up with friends you had not seen for a while and networking with industry peers was pretty worthwhile too.&nbsp; Maybe your idea of a good time is putting on a bowling shirt and swilling a couple of beers and pretzels before going home and undressing into your dirty ripped underwear. Hey I say to each his own.</p>

<p>2. I am not the idiot who in 2007 said that I hated the SC awards and that anyone can buy the SC awards with a sponsorship.&nbsp; I am the idiot who <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2007/08/ssaaty-blog-win.html">said that about the InfoSec Products Guide</a> award by the folks at Silicon Valley Communications.&nbsp; In contrast I have always said nice things about the SC awards. I actually have a lot of respect for them.&nbsp; Also for the record, StillSecure has never been a sponsor of the SC Magazine awards. I have seen sponsors who did not win awards as well.&nbsp; So looks like you got that one wrong Julie, but it happens.</p>

<p>3. “Networld” magazine didn’t give me the boot within 3 months.&nbsp; They never had the chance, as I never wrote for “networld, network world or any other magazine. Maybe you have me confused with Mike Rothman or Mitchell Ashley, who do and did write for Network World. But let me assure you that I do try and think before I write.</p>

<p>4. Regarding what medication pills I take and does my hair make it obvious I ran away from a mental hospital. I don’t take any medication, maybe I should.&nbsp; Better living through chemistry you know ;-)&nbsp; As to my hair, what can I say.&nbsp; At this stage I am happy I have any hair at all.&nbsp; My wife always says when I get my haircut it looks like a Buzz Lightyear style, but no one ever mentioned a mental hospital look to it.&nbsp; In any event sorry it doesn’t appeal to you.</p>

<p>So who is this troll Julie Peterson?&nbsp; Could it be Richard Stiennon in drag?&nbsp; Maybe his wife striking out?&nbsp; Maybe another one of my fans?&nbsp; Who knows, but these sort of comments keep me juiced about blogging and remind me of how much fun I have doing it.&nbsp; Thanks again Julie!</p></div>

<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=SHtn9x"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=SHtn9x" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=6lQ41J"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=6lQ41J" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=wHd2XJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=wHd2XJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ubGPNJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ubGPNJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=19TqYJ"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=19TqYJ" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=DScy2j"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=DScy2j" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=D7Fxhj"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=D7Fxhj" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/349857433" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 29 Jul 2008 13:12:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/troll julie peterson">troll julie peterson</category>
      <category domain="http://securityratty.com/tag/julie peterson">julie peterson</category>
      <category domain="http://securityratty.com/tag/networld magazine">networld magazine</category>
      <category domain="http://securityratty.com/tag/magazine">magazine</category>
      <category domain="http://securityratty.com/tag/awards">awards</category>
      <category domain="http://securityratty.com/tag/win awards">win awards</category>
      <category domain="http://securityratty.com/tag/awards ceremony">awards ceremony</category>
      <category domain="http://securityratty.com/tag/magazine awards">magazine awards</category>
      <category domain="http://securityratty.com/tag/julie">julie</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/349857433/ah-the-joys-of.html">Ah, the joys of blogging!</source>
    </item>
    <item>
      <title><![CDATA[A Culture of Compliance]]></title>
      <link>http://securityratty.com/article/6117c5f2f3744f6336d6a64b32ac58f3</link>
      <guid>http://securityratty.com/article/6117c5f2f3744f6336d6a64b32ac58f3</guid>
      <description><![CDATA[For those of you that arent familiar with it, Ethisphere is generally a great source for interesting news about corporate ethics violations, insider trading, bribery, fraud, and other embarrassing...]]></description>
      <content:encoded><![CDATA[<p>For those of you that aren’t familiar with it, <a href="http://ethisphere.com/">Ethisphere </a>is generally a great source for interesting news about corporate ethics violations, insider trading, bribery, fraud, and other embarrassing news stories. <a href="http://ethisphere.com/man-earns-nearly-47-million-for-not-firing-employees/">This recent article</a> has a much more pleasant ending than most, with a former general manager of a waste collection company earning nearly $47 million for obeying the law. After repeatedly refusing to fire three of his employees over the age of 60 despite ongoing pressure from his superiors, he was wrongfully terminated, according to the jury. Partly responsible for the large settlement were actions taken by his employers after he was terminated, including tampering with memos related to his performance review. The good-guy-comes-out-on-top stories are always nice to see. But <a href="http://www.irs.gov/compliance/article/0,,id=180171,00.html">while it may work for the IRS </a>(which reminds me, I have this colleague...) and the occasional waste collection company, most organizations can’t rely on the promise of riches to entice staff to behave appropriately and report wrongdoing. This quarter I will be writing a report on how compliance professionals work to create a culture of compliance and responsibility in their organizations. I have seen very interesting videos, training programs, and other awareness campaigns to drive the message home, and there are certainly examples of reward and punishment, but I’d like to hear from you as well... any good examples of how your company distributes or enforces policies, or maybe stories of a colleague who was singled out and embarrassed for not following the rules?</p>]]></content:encoded>
      <pubDate>Fri, 18 Jul 2008 10:12:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/compliance">compliance</category>
      <category domain="http://securityratty.com/tag/news stories">news stories</category>
      <category domain="http://securityratty.com/tag/news">news</category>
      <category domain="http://securityratty.com/tag/stories">stories</category>
      <category domain="http://securityratty.com/tag/compliance professionals">compliance professionals</category>
      <category domain="http://securityratty.com/tag/waste collection company">waste collection company</category>
      <category domain="http://securityratty.com/tag/recent article">recent article</category>
      <category domain="http://securityratty.com/tag/message home">message home</category>
      <category domain="http://securityratty.com/tag/examples">examples</category>
      <source url="http://blogs.forrester.com/srm/2008/07/a-culture-of-co.html">A Culture of Compliance</source>
    </item>
  </channel>
</rss>
