<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: scalable]]></title>
    <link>http://securityratty.com/tag/scalable</link>
    <description></description>
    <pubDate>Tue, 10 Jun 2008 18:53:28 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[John Zanni Delivers Keynote at the Tier1 Hosting Transformation Summit]]></title>
      <link>http://securityratty.com/article/e6b5db3dba618f48e7fa728ff2173006</link>
      <guid>http://securityratty.com/article/e6b5db3dba618f48e7fa728ff2173006</guid>
      <description><![CDATA[As General Manager of Worldwide Hosting, John Zanni is a key guy for every Managed Service Provider delivering Microsoft based solutions. At this years Hosting Transformation Summit , John gave a...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" height="244" alt="spla_image" src="http://blog.sciencelogic.com/wp-content/uploads/2008/09/spla-image.png" width="244" align="left" border="0"> As General Manager of Worldwide Hosting, <a href="http://www.microsoft.com/presspass/features/2008/jul08/07-29qazanni.mspx" target="_blank">John Zanni is a key guy for every Managed Service Provider</a> delivering Microsoft based solutions. At this year&#8217;s <a href="http://www.hostingtransformation.com/na/2008/" target="_blank">Hosting Transformation Summit</a>, John <a href="http://www.hostingtransformation.com/na/2008/agenda.php" target="_blank">gave a keynote</a> titled: &#8220;Leadership Perspective: Cloud Computing – is Virtualization Enough?&#8221;</p>
<p>John talked <a href="http://blogs.zdnet.com/BTL/?p=10007" target="_blank">about Microsoft’s mission</a>, his perspectives on key industry trends and market opportunity; he touched on <a href="http://www.betanews.com/article/Will_Microsofts_virtualization_spur_a_lot_more_cloud_computing/1221867502" target="_blank">Cloud Computing and Virtualization</a> and took some Q&amp;A from the audience of <a href="http://technet.microsoft.com/en-us/serviceproviders/default.aspx" target="_blank">Managed Service Provider</a> executives.</p>
<p>One of his first proclamations - Microsoft has really embraced the heterogeneous environment. Really? How in the world is Microsoft going to help convince IT line managers, or mid level managers to believe this statement? I think they have a long way to go to achieve this vision with any credibility in the marketplace.&nbsp; I do know that they are making small strides.</p>
<p>Microsoft has been widely credited with some very good blogs that are self critical and introspective. They have also been quite active in the standards boards within <a href="http://www.dmtf.org/home" target="_blank">DMTF</a> and many others such as <a href="http://www.openwsman.org/" target="_blank">Open WSMAN</a> and CIMON (<a href="http://www.openpegasus.org/" target="_blank">Open Pegasus</a>). Microsoft in February published 30,000 pages detailed technical specifications – protocol documentation for Exchange, since that time they have published another 15,000 pages. They have had over 224,000 downloads since February 21, 2008. Thus they are trying to be more open by making some of these <a href="http://www.microsoft.com/about/legal/intellectualproperty/protocols/default.mspx" target="_blank">secret sauce protocol resources</a> <a href="http://msdn.microsoft.com/openprotocols" target="_blank">directly available on the web</a>.</p>
<p>So for now, I will take a very cautious wait and see approach to this proclamation. Time will tell.</p>
<p><strong>Trends</strong></p>
<ul>
<li>Rapid growth continues
<li>Hosting Competition has a new face
<ul>
<li>Platform gorillas (amazooglesoft)
<li>Ad supported Web 2.0 hosters (Google, Facebook,) </li>
</ul>
<li>Utility Cloud Computing models are expanding to non-traditional hosting companies
<ul>
<li>Wells Fargo vSafe - hard to believe that a big bank would start to offer a SaaS offering
<li>New tools and markets digital ribbon, CohesiveIT </li>
</ul>
</li>
</ul>
<p><a href="http://mshostingsummit08.spaces.live.com/blog/cns!4308FE7290C0AF4!245.entry" target="_blank">IDC Data shows that growth of SaaS ISV’s is the biggest layer of growth</a>. The fastest growing services are complex, custom applications. IDC says this area will be bigger than the hosting area in the next 5 years. John said that <a href="http://blogs.msdn.com/ukisv/archive/2008/09/22/the-route-to-saas-and-beyond-final-seminar-places-remain-2nd-oct-08.aspx" target="_blank">Microsoft is spending a lot of time, money and energy on this right now</a>.</p>
<p>John said:</p>
<blockquote><p>“when Microsoft thinks about the building blocks that make-up the cloud, <a href="http://www.microsoft.com/virtualization/" target="_blank">virtualization is a core piece</a> of the puzzle. However you also need also identity services, Operating system with standard set of libraries to tap into… or remote storage that application developers will tap into.. Developers will consume these set of services, but you will also need a set of tools to manage your physical, virtual and geographically distributed datacenter infrastructure.” (that is where ScienceLogic comes in!!)</p>
</blockquote>
<p>He went on to say,</p>
<blockquote><p>“In some ways, virtualization enables decentralization – allows you to move from data centers, enables fast scaling out, business to move from on premise to the cloud and off again…. Automation is very important – this will help you scale your business – this is core to your future success.”</p>
</blockquote>
<p>He talked about a new breed of knowledge worker: He called them Digital Natives (compared to grey haired guys like me who are left out of this category).</p>
<p>Definition of a Digital natives? A young adult who has grown up with cellphone, web based applications, Facebook account, as their primary mode of communications.</p>
<p>John commented that we are 5 years into a 10 year journey. Only 12% of all servers in the world are virtualized today… in the next 4 years it will double to 25%. This is <a href="http://www.interopnews.com/news/vmware-ceo-maritz-addresses-virtualization-the-cloud-and-cha.html" target="_blank">the time to think through</a> how this business will affect you.</p>
<blockquote><p>‘Virtualization without good management is more dangerous than not using virtualization in the first place.” Thomas Bittman, Analyst Gartner</p>
</blockquote>
<p>Patching and provisioning nightmare – no scalable administration – sprawl chaos.</p>
<p>John posed a question to the audience: How do you partner to provide the ISV support in application development with specific market needs… partner by keeping the <a href="http://tarrysingh.blogspot.com/2008/09/microsofts-coo-on-cloud-computing.html" target="_blank">hosting to SaaS solution</a> providers up and running and provide the quality of service that their customers expect…. Complimentary services of storage and backup is a big win with a huge market-upside over the next 5 years..</p>
<p>John said that <a href="http://blogs.msdn.com/mhpta/archive/2008/04/10/microsoft-hosting-summit-2008.aspx" target="_blank">Microsoft continues</a> to make&nbsp; <a href="http://www.virtualization.info/2008/07/microsoft-bets-on-hosting-providers-to.html" target="_blank">huge investments with Managed Service Providers</a>.</p>
<ul>
<li>Investing in the <a href="http://www.microsoft.com/hosting/" target="_blank">windows hosting platform</a>
<li>Hyper V and SQL2008 GoLive program - getting beta code out to service provides to find as many bugs as early as possible.
<li><a href="http://blogs.msdn.com/stevecla01/archive/2008/09/22/explaining-software-plus-services.aspx" target="_blank">Software + Services (S+S)</a> incubation center program
<li>Partnering for <a href="http://tarrysingh.blogspot.com/2008/09/microsofts-coo-on-cloud-computing.html" target="_blank">cloud platform market offers</a>
<li>Cloud platform guidance and best practices </li>
</ul>
<p>During the Q&amp;A, David Burns from Cincinnati Bell asked the very best question… “when are you going to make it easier for the Service Provider market to <a href="http://www.virtualization.info/2008/09/microsoft-to-allow-3rd-parties-to.html" target="_blank">deal with the Microsoft Service Provider Licensing Agreement (SPLA)</a> quarterly statistics pull and change the SPLA pricing to be more efficient and creative for the new Virtualization and Cloud offerings you have talked about?&#8221;</p>
<p>John’s response: “We hear your frustrations loud and clear and are working on some new ideas for the future version of SPLA.” My interpretation – &#8220;Dear Service Providers don’t expect anything new or easier to deal with in the next 6 months!&#8221;</p>
<p>His closing remarks: &#8220;Cloud is evolving = very early stages, lots of hype, but think of how this evolution will effect your business and how you can plug into it.”</p>
]]></content:encoded>
      <pubDate>Thu, 25 Sep 2008 12:00:27 +0000</pubDate>
      <category domain="http://securityratty.com/tag/service provider market">service provider market</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/service providers">service providers</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/service provider executives">service provider executives</category>
      <category domain="http://securityratty.com/tag/john">john</category>
      <category domain="http://securityratty.com/tag/john zanni">john zanni</category>
      <category domain="http://securityratty.com/tag/microsoft">microsoft</category>
      <category domain="http://securityratty.com/tag/microsoft based solutions">microsoft based solutions</category>
      <source url="http://blog.sciencelogic.com/john-zanni-delivers-keynote-at-the-tier1-hosting-transformation-summit/09/2008">John Zanni Delivers Keynote at the Tier1 Hosting Transformation Summit</source>
    </item>
    <item>
      <title><![CDATA[Making role management work for the enterprise]]></title>
      <link>http://securityratty.com/article/6b1014726c937d347a9abdc00b8b0565</link>
      <guid>http://securityratty.com/article/6b1014726c937d347a9abdc00b8b0565</guid>
      <description><![CDATA[Many IT security professionals still regard role-based access and identity management as hopelessly complex because the predominantly manual approach used to review and manage roles is not scalable...]]></description>
      <content:encoded><![CDATA[Many IT security professionals still regard role-based access and identity management as hopelessly complex because the predominantly manual approach used to review and manage roles is not scalable and the dynamic nature of roles themselves often get out of sync with reality.]]></content:encoded>
      <pubDate>Tue, 16 Sep 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/roles">roles</category>
      <category domain="http://securityratty.com/tag/predominantly manual approach">predominantly manual approach</category>
      <category domain="http://securityratty.com/tag/manage roles">manage roles</category>
      <category domain="http://securityratty.com/tag/security professionals">security professionals</category>
      <category domain="http://securityratty.com/tag/dynamic nature">dynamic nature</category>
      <category domain="http://securityratty.com/tag/hopelessly complex">hopelessly complex</category>
      <category domain="http://securityratty.com/tag/identity management">identity management</category>
      <category domain="http://securityratty.com/tag/regard">regard</category>
      <category domain="http://securityratty.com/tag/sync">sync</category>
      <source url="http://www.networkworld.com/news/tech/2008/091708-tech-update.html?fsrc=rss-security">Making role management work for the enterprise</source>
    </item>
    <item>
      <title><![CDATA[Verisign Multiple Servers Guide]]></title>
      <link>http://securityratty.com/article/6a1a26fc9170e5b1ab8c6963b4d0a1ab</link>
      <guid>http://securityratty.com/article/6a1a26fc9170e5b1ab8c6963b4d0a1ab</guid>
      <description><![CDATA[Source: Verisign) Learn how to maintain site authentication and data integrity across all of your servers. MPKI for SSL allows you to reduce costs and spend less time managing multiple certificates...]]></description>
      <content:encoded><![CDATA[<b>(Source: Verisign)</b>  Learn how to maintain site authentication and data integrity across all of your servers.  MPKI for SSL allows you to reduce costs and spend less time managing multiple certificates with a centralized, scalable tool.  Learn how to gain better control over all of your certificates, read the white paper.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:bbd6527f29ef8f0350bcecb43c3a4473:ZOKwcNjEOBmELDJXiZVTGifje5QhjsT%2FQuQKUAneGNepR8HgFvnKzn2s9C3W%2F4TBnUA%2Fp8vIVdvpaQ3vj3Q7bL3ElghCPB%2FHvtU7ZplcXVY%3D'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:e006b5c9d41291caa517c2757c92ecb2:ukGvjjt6V7C39Pz2MaeJn%2F%2Blwi0ZsT7JAEK%2FzUkgOUYlKB10Guf19nYsjJBj%2BAGv7bHszhZm8SKbGYhq72iXWZupufMORXdRtAwbw0kfL4M%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:54dfdfddbdee5368fbbc0f2cc63356cc:KTR1akiQZg%2BL7C9lA%2B6Kx8g6vk9PzpKL3%2FmpnAgLqmwCx%2FO5hft7ccpau3Gj0GypnGqQCssDi%2Bp3jcK0ZRpmMr7gl%2FRSdCpKdlKGzOthSeU%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v2:2e183e4239473f4bf39b33c07db379f3:a0j0LdB1BS5jXZHaipcuXTcHGB6%2BNTVmlGWxC3gCS1kN%2B55%2B%2B1pzFFAOq9smX2%2FlXtWv39EAm5cqtM7k7LUvSO4YC3aHri1HJ33rWmhxRkA%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=4c5498db68a359ffab3897ea8cdb1253" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=4c5498db68a359ffab3897ea8cdb1253" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Fri, 12 Sep 2008 09:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/maintain site authentication">maintain site authentication</category>
      <category domain="http://securityratty.com/tag/reduce costs">reduce costs</category>
      <category domain="http://securityratty.com/tag/scalable tool">scalable tool</category>
      <category domain="http://securityratty.com/tag/white paper">white paper</category>
      <category domain="http://securityratty.com/tag/data integrity">data integrity</category>
      <category domain="http://securityratty.com/tag/verisign">verisign</category>
      <category domain="http://securityratty.com/tag/multiple">multiple</category>
      <category domain="http://securityratty.com/tag/servers">servers</category>
      <category domain="http://securityratty.com/tag/mpki">mpki</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=4c5498db68a359ffab3897ea8cdb1253">Verisign Multiple Servers Guide</source>
    </item>
    <item>
      <title><![CDATA[Cisco 7600 OSR Backbone Router]]></title>
      <link>http://securityratty.com/article/a447dc34e61d2770ab6d723a54abcb31</link>
      <guid>http://securityratty.com/article/a447dc34e61d2770ab6d723a54abcb31</guid>
      <description><![CDATA[For our confused CEO blogger over at StreamBase, who thinks an Internetbackbone router is the small $30 device he set up in his home office, here is a photo of a the Cisco 7600 OSR which of course...]]></description>
      <content:encoded><![CDATA[<p style="text-align: left;">For our confused CEO blogger over at StreamBase, who thinks an Internet backbone router is the small $30 device he set up in his home office, here is a photo of a the <a href="http://newsroom.cisco.com/dlls/prod_022001b.html" target="_blank">Cisco 7600 OSR</a> which of course runs <a href="http://www.cisco.com/en/US/products/sw/iosswrel/products_ios_cisco_ios_software_category_home.html" target="_blank">CISCO IOS</a>.</p>
<p style="text-align: center;"><img style="vertical-align: middle;" src="http://newsroom.cisco.com/ts_images/Cisco-7600-OSR-high.jpg" alt="Cisco 7600 OSR" height="600" /></p>
<p style="text-align: left;">The Cisco 7600 OSR consists of a 256 Gbps switching fabric and a 30 million packets per second (mpps) forwarding engine. Its breadth of IP services comes from Cisco IOS, which provides features such as security, enhanced QoS, and destination sensitive services. In addition, the Cisco 7600 OSR allows the migration of existing port adapters from Cisco 7500 series routers, via the Cisco FlexWAN module, giving service providers one the industry&#8217;s widest array of interface options in any single platform. This provides service providers great flexibility in deploying the Cisco 7600 OSR for a variety of applications, protects their investment in existing systems, and gives them a practical migration path to the New World Optical Internet.</p>
<h3>A Revolutionary Platform For Evolving Networks</h3>
<p>The Cisco 7600 OSR helps service providers break through service and bandwidth barriers today, while designing networks to scale for future growth. The Cisco 7600 OSR achieves this through &#8220;adaptive network processing,&#8221; or the ability to evolve the platform for new IP services without hardware upgrades. Unlike fixed, ASIC-based platforms, which are hardware encoded, the Cisco 7600 OSR relies on the highly flexible Parallel eXpress Forwarding (PXF) technology for scalable performance of services. PXF is a patented, Cisco-developed network processor capable of line-rate IP services delivery that can support new IP services through periodic software upgrades. Each OSM has two PXF processors capable of 12 mpps of IP services delivery per interface card.</p>
<p>&#8220;IP+Optical combines the dynamism of the Internet world with the foundation of the transport world, creating an infrastructure that can deliver the services that service providers need,&#8221; said Lele Nardin, vice president of the Internet Systems Business Unit at Cisco. &#8220;Cisco will continue to add innovative solutions on top of this solid foundation to make service providers better equipped to meet the constantly escalating and changing customer demands for new networking services.&#8221;</p>
<h3>Pricing and Availability</h3>
<p>The base Cisco 7600 OSR system is list priced at $73,000 and the entry level system, with interfaces, start at $100,000. The interfaces modules are priced between $27,000 to $180,000. The Cisco 7600 OSR is available now worldwide.</p>
]]></content:encoded>
      <pubDate>Sat, 06 Sep 2008 07:25:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <category domain="http://securityratty.com/tag/cisco flexwan module">cisco flexwan module</category>
      <category domain="http://securityratty.com/tag/osr">osr</category>
      <category domain="http://securityratty.com/tag/runs cisco ios">runs cisco ios</category>
      <category domain="http://securityratty.com/tag/base cisco">base cisco</category>
      <category domain="http://securityratty.com/tag/cisco ios">cisco ios</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/destination sensitive services">destination sensitive services</category>
      <category domain="http://securityratty.com/tag/osr system">osr system</category>
      <source url="http://www.thecepblog.com/2008/09/06/cisco-7600-osr-backbone-router/">Cisco 7600 OSR Backbone Router</source>
    </item>
    <item>
      <title><![CDATA[IBM Raises The Stakes In Business and IT Continuity Services]]></title>
      <link>http://securityratty.com/article/a92cdf5dd8f2018462a4657fa7e717b8</link>
      <guid>http://securityratty.com/article/a92cdf5dd8f2018462a4657fa7e717b8</guid>
      <description><![CDATA[IBM announced today that it was spending US$300 million to build out 13 data centers in 10 countries in 2008 - IBM refers to these sites as &quot;Business Resilience service delivery centers&quot;. These...]]></description>
      <content:encoded><![CDATA[<p><img title="Stephanie Balaouras" alt="Stephanie Balaouras" src="http://www.forrester.com/role_based/images/author/imported/forresterDotCom/Analyst_Photos/Silhouette/Color/Stephanie-Balaouras.gif" border="0" style="FLOAT: left; MARGIN: 0px 5px 5px 0px" /></p>

<p><a href="http://www-03.ibm.com/press/us/en/pressrelease/24957.wss">IBM announced today that it was spending US$300 million to build out 13 data centers in 10 countries in 2008 - IBM refers to these sites as &quot;Business Resilience service delivery centers&quot;.</a> These centers will certainly help IBM deliver more of its traditional IT recovery services but they will also support the next generation of IT continuity services - repeatable, scalable, productize services such as online backup and virtual recovery.&nbsp; These types of services don't require massive capital investment in an inventory of heterogeneous server and storage platforms, instead the service provider can focus its efforts on building a scalable pool of virtualized servers and shared storage built with industry standard components.</p>

<p><a href="http://www.forrester.com/go?docid=42947">Online backup is an important service because it provides an affordable information protection service for small and medium businesses and it's even useful for enterprises as a means to backup PCs corporate-wide as well as small servers at remote locations.</a> In addition to the $300 million that IBM is spending on its new resiliency centers, late in 2008, it acquired <a href="http://blogs.forrester.com/it_infrastructure/2007/12/online-backup-m.html">Arsenal Digital Solutions</a>, one of the major players in online backup. </p>

<p>In addition to online backup, recovery services using software-based replication to a cloud infrastructure will also open up new opportunities. These services will provide a much a better recovery time and recovery point than tape-based services but won't cost nearly as much as custom services based on storage-based replication and dedicated hardware. The cost of these services is more than most small and medium, even some large enterprises can or are willing to pay for. SunGard was the first to announce such a productized service, <a href="http://blogs.forrester.com/srm/2008/08/traditional-dis.html">Forrester expects all the traditional DR service providers to bring similar offerings to market over time.</a></p>

<p>These cloud-based service offerings are important for several other reasons, first, it could help stem the tide of enterprises who are just so fed up with the traditional disaster recovery services model that they take DR back in house, second, it could convince, more medium size businesses that they can afford more advanced IT continuity solutions and lastly, it will help protect their market against new competitors who can simply partner with cloud providers such as Amazon S3 and Google to offer similar services.</p>

<p>IBM is not only using its expansion and acquisitions to stay competitive, it's also also hoping that customers will recognize the value of IBM expertise, process and best practices in BC. </p>

<p>What do you think? Does the reputation and expertise of BC and IT Continuity service providers like IBM and SunGard critical in your decision-making or can new players enter the market? Do these lower cost services that offer better RTO and RPO renew your interest in service providers or do you still plan to keep DR in-house?</p>

<p>I welcome your thoughts.</p>]]></content:encoded>
      <pubDate>Fri, 22 Aug 2008 11:38:40 +0000</pubDate>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/recovery">recovery</category>
      <category domain="http://securityratty.com/tag/recovery services">recovery services</category>
      <category domain="http://securityratty.com/tag/continuity services">continuity services</category>
      <category domain="http://securityratty.com/tag/service">service</category>
      <category domain="http://securityratty.com/tag/ibm">ibm</category>
      <category domain="http://securityratty.com/tag/service provider">service provider</category>
      <category domain="http://securityratty.com/tag/service offerings">service offerings</category>
      <category domain="http://securityratty.com/tag/cost">cost</category>
      <source url="http://blogs.forrester.com/srm/2008/08/ibm-raises-the.html">IBM Raises The Stakes In Business and IT Continuity Services</source>
    </item>
    <item>
      <title><![CDATA[On Idiots and Logs]]></title>
      <link>http://securityratty.com/article/6490a97e465cf9d880fa1849d0525c8e</link>
      <guid>http://securityratty.com/article/6490a97e465cf9d880fa1849d0525c8e</guid>
      <description><![CDATA[How on Earth can someone even utter the phrases &quot; scalable log management &quot; and &quot; Microsoft Access for data storage &quot; in one sentence? OMG, OMG, OMG

MS Access, for God's sake! I wonder if they tried...]]></description>
      <content:encoded><![CDATA[How on Earth can someone even utter the phrases "<span style="font-weight: bold;">scalable log management</span>" and "<span style="font-weight: bold;">Microsoft <span style="font-style: italic;">Access </span>for data storage</span>" in one sentence? OMG, OMG, OMG...<br /><br />MS Access, for God's sake! I wonder if they tried storing logs in Excel spreadsheets?<br /><br />Yeeeeesh.<div class="blogger-post-footer">About me: http://www.chuvakin.org</div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=POYrOK"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=POYrOK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=6Uxd8K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=6Uxd8K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?a=pM3f8K"><img src="http://feeds.feedburner.com/~f/AntonChuvakinPersonalBlog?i=pM3f8K" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~4/365910571" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 15 Aug 2008 07:51:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/microsoft access">microsoft access</category>
      <category domain="http://securityratty.com/tag/omg">omg</category>
      <category domain="http://securityratty.com/tag/access">access</category>
      <category domain="http://securityratty.com/tag/scalable log management">scalable log management</category>
      <category domain="http://securityratty.com/tag/logs">logs</category>
      <category domain="http://securityratty.com/tag/data storage">data storage</category>
      <category domain="http://securityratty.com/tag/excel spreadsheets">excel spreadsheets</category>
      <category domain="http://securityratty.com/tag/yeeeeesh">yeeeeesh</category>
      <category domain="http://securityratty.com/tag/phrases">phrases</category>
      <source url="http://feeds.feedburner.com/~r/AntonChuvakinPersonalBlog/~3/365910571/on-idiots-and-logs.html">On Idiots and Logs</source>
    </item>
    <item>
      <title><![CDATA[SSO Summit Day One Morning Session]]></title>
      <link>http://securityratty.com/article/500327e2eca382c04451c330dcc1e875</link>
      <guid>http://securityratty.com/article/500327e2eca382c04451c330dcc1e875</guid>
      <description><![CDATA[I am at the SSO Summit , high in the Colorado mountains (9200 feet elevation to be exact), the I-70 West sign is one of my favorite road signs. Ping Identity has done a great job putting this...]]></description>
      <content:encoded><![CDATA[<div>I am at the <a href="http://www.ssosummit.com/">SSO Summit</a>, high in the Colorado mountains (9200 feet elevation to be exact), the I-70 West sign is one of my favorite road signs. <a href="http://www.pingidentity.com/">Ping Identity</a> has done a great job putting this together. It is the perfect size around 125 people. Most of the best conferences I have been to have been around 60-150 people. There are a *lot* of enterprises involved here. </div><br><div>John Haggard who has an extensive background in SSO and lately is at Passfaces kicked off the sessions with a SSO history talk. Going through a lot of mainframe centric SSO protocols from the 80s and 90s, I am no expert in these areas and it was fascinating to see the way things vacillated between strength and weakness of SSO protocols.</div><br><div>A couple of points from the presentation:</div><br><div><blockquote><p>The history of SSO is a story of extreme complexities, compromises, vulnerabilities and unintended consequences.</p></blockquote></div><div><blockquote><br></blockquote></div><div><blockquote><p>SSO is a story of one simple objective - to spin off units of computation work to execute on behalf of an authenticated user without requiring the original user's password.</p></blockquote></div><div><blockquote><br></blockquote></div><div><blockquote><p>Phishing has always been completely avoidable</p></blockquote></div><br><div>He went through the various incarnations of mainframe SSO from logon id through things like ACF2, VTAM Session managers, terminal emulators, multiplatform access to web access through facades. The implication he drew from this last step are well worth repeating: "Time to rethink everything." Problem is - of course, people don't rethink, they put MQ Series in front of the mainframe and hook a web app in front of that and go. </div><br><div>Finally, he connected some interesting dots to SAML and SOA security issues. </div><br><div><blockquote><p>SSO without strong auth is and always will be simply nuts</p></blockquote></div><div><blockquote><br></blockquote></div><div><blockquote><p>SAML gets its right</p></blockquote></div><div>His points around common weaknesses in integration in SOA and Web 2.0 technologies for companies that are *not* using SAML were excellent. Of course, I will go into some more details on this tomorrow.</div><br><div>Ping's CTO Patrick Harding took the stage and gave an overview of the next generation of SSO options from Kerberos to present and as is his wont demonstrated various real world strengths and weaknesses, quoted a Gartner analyst (shock!) saying OpenID is the hare and Cardspace is the tortoise. Nice.</div><br><div>Andrew Cameron from GM is speaking now on GM's experiences implementing SSO, and there are a lot of real world lessons learned in his presentation.  Plus my favorite identity architecture, user has Kerberos, services speak SAML. very nice, very scalable. All in all, its my starting point for how to identity in an enterprise. He also spoke about a pet peeve of mine - how to globalize authorization. This is not a problem that vendors have historically attacked with relish. They are very happy to help you solve authentication, but they are perfectly happy to keep their authorization internal either for vendor lock in reasons and/or for sloppy authorization design. This will take a LIberty-esque consortium of enterprises to resolve. </div><br><div>So many conferences are dominated by vendors and consultants who conspire to what I call the "sacred church of things YOU should be doing." Instead this conference is bringing together a great mix of real world in the trenches practitioners who have problems to solve today, with rubber meets the road deployable solutions and an eye towards longer term strategy for SSO and identity.</div>]]></content:encoded>
      <pubDate>Thu, 24 Jul 2008 09:35:02 +0000</pubDate>
      <category domain="http://securityratty.com/tag/sso">sso</category>
      <category domain="http://securityratty.com/tag/sso history talk">sso history talk</category>
      <category domain="http://securityratty.com/tag/sso summit">sso summit</category>
      <category domain="http://securityratty.com/tag/mainframe sso">mainframe sso</category>
      <category domain="http://securityratty.com/tag/sso options">sso options</category>
      <category domain="http://securityratty.com/tag/sso protocols">sso protocols</category>
      <category domain="http://securityratty.com/tag/real world">real world</category>
      <category domain="http://securityratty.com/tag/real world lessons">real world lessons</category>
      <category domain="http://securityratty.com/tag/authorization internal">authorization internal</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/07/sso-summit-day-one-morning-session.html">SSO Summit Day One Morning Session</source>
    </item>
    <item>
      <title><![CDATA[Feature Request #1: Stable Code]]></title>
      <link>http://securityratty.com/article/8ccf3e65d2b1b8b72fdbe0860c092c80</link>
      <guid>http://securityratty.com/article/8ccf3e65d2b1b8b72fdbe0860c092c80</guid>
      <description><![CDATA[I have a note to all network hardware vendors
Dear network vendor
As someone that is forced to configure and implement security on your hardware, I would greatly appreciate stable code and properly...]]></description>
      <content:encoded><![CDATA[<p><em>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; I have a note to all network hardware vendors&#8230;</em></p><p>Dear network vendor,</p><p>As someone that is forced to configure and implement security on your hardware, I would greatly appreciate stable code and properly functioning features. Unfortunately, I cannot always choose the hardware my customers are using in their infrastructure. However, if you would like for me to recommend they continue purchasing and using it, then the product must demonstrate to me that it is: capable, reliable, predictable and well-documented. If your product is not meeting these requirements, I&#8217;m forced to recommend other solutions to your (current) customer. </p><p><u>Stable Code</u>. If I have to spend 2-6 hours per implementation working through your product&#8217;s bugs, and then must either spend time on a support call or spend time getting packet captures to prove to you it&#8217;s not working, I am not a happy camper because you&#8217;re slowing down my progress. Your customer is not happy because they&#8217;re paying for that time and I&#8217;m not cheap. </p><p><u>Features</u>. Don&#8217;t publish in technical documentation that your product, or code can do something, only for me to find out later that it cannot. On-site in the middle of an implementation is not the time to architect Plan B. Let me know before, either through technical docs, white papers, best practices or release notes. I do read those. If you want to bend the truth, do it the marketing fluff, not my technical documents. </p><p><u>Documentation</u>. If your product <em>does</em> do what you say it does, then please do document and explain the concepts and procedures. Examples are good, but explanations are mandatory. A correct CLI reference is always lovely as well. If there are got&#8217;chas or tricks, please also document those. Again, white papers or release notes are fine. Having to track down the one security engineer from your company that holds the magic key is not practical, nor scalable. Plus, he may be on vacation during my install, which would make me irate. </p><p><u>Support</u>. If your product is not functioning or performing as expected, do NOT expect your customers to have a current maintenance contract to address a known issue or bug (or an un-known issue or bug for that matter). If they found a bug for you, you should probably <em>give</em> them a maintenance contract for a year&#8230; or two. If you don&#8217;t let us call support, I will find one of your pre-sales engineers and we will use him or her for post-sales support, which is not what you want them to do. But that&#8217;s your problem, not mine.</p><p>I believe that sums up the major issues. Specifically, I am interested in security, RADIUS, SSH, SNMP, DHCP&nbsp;and 802.1X functions. Before you add another bell or tweak another whistle, please make what you have works&#8230; consistently. That should be first, so it&#8217;s my Feature Request #1. </p><p>Respectfully,</p><p>jj</p><p># # #</p>
]]></content:encoded>
      <pubDate>Mon, 30 Jun 2008 00:01:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/code">code</category>
      <category domain="http://securityratty.com/tag/stable code">stable code</category>
      <category domain="http://securityratty.com/tag/support">support</category>
      <category domain="http://securityratty.com/tag/post-sales support">post-sales support</category>
      <category domain="http://securityratty.com/tag/current maintenance contract">current maintenance contract</category>
      <category domain="http://securityratty.com/tag/current">current</category>
      <category domain="http://securityratty.com/tag/maintenance contract">maintenance contract</category>
      <category domain="http://securityratty.com/tag/security engineer">security engineer</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <source url="http://www.securityuncorked.com/security-uncorked/2008/6/30/feature-request-1-stable-code.html">Feature Request #1: Stable Code</source>
    </item>
    <item>
      <title><![CDATA[A Hot Cloudless Computing Day in Florida]]></title>
      <link>http://securityratty.com/article/b81fb70f1fd9cdfcfb0287c075a854d5</link>
      <guid>http://securityratty.com/article/b81fb70f1fd9cdfcfb0287c075a854d5</guid>
      <description><![CDATA[From the Gartner IT Infrastructure, Operations &amp; Management Summit in balmy Florida
First of all, Id like to point out a major difference between the Gartner conference and the big Cisco Live user...]]></description>
      <content:encoded><![CDATA[<p>From the <a href="http://www.gartner.com/it/page.jsp?id=603107" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.gartner.com');" target="_blank">Gartner IT Infrastructure, Operations &amp; Management Summit</a> in balmy Florida…</p>
<p>First of all, I’d like to point out a major difference between the Gartner conference and the big <a href="http://www.cisco-live.com/" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.cisco-live.com');" target="_blank">Cisco Live</a> user conference going on down here at the same time. Keynotes start at 8am at the Gartner show – and before that is breakfast, networking, etc. etc. John Chambers’ keynote over at Cisco Live starts at 10am. 8am versus 10am. I knew there was a reason I should have been a network engineer&#8230;</p>
<p><img style="border-right: 0px; border-top: 0px; margin: 0px 10px 10px 0px; border-left: 0px; border-bottom: 0px" src="http://blog.sciencelogic.com/wp-content/uploads/2008/06/cloud-question-mark-cloud-computing.jpg" border="0" alt="cloud-question-mark-cloud-computing" width="156" height="244" align="left" />But here’s something they don’t have at Cisco Live – <a href="http://agendabuilder.gartner.com/str24/WebPages/SessionList.aspx?Speaker=85" onclick="javascript:pageTracker._trackPageview('/outbound/article/agendabuilder.gartner.com');" target="_blank">VP &amp; Distinguished Analyst Thomas Bittman</a> talking about Cloud Computing and the Future of Infrastructure.</p>
<p><em>(</em><a href="http://www.watblog.com/2008/03/25/yahoo-computational-research-laboratories-team-up-for-cloud-computing-research/" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.watblog.com');" target="_blank"><em>Picture credit: WATBlog</em></a><em>)</em></p>
<p><strong>Point:</strong> The idea is that <a href="http://opensource.sys-con.com/read/585485.htm" onclick="javascript:pageTracker._trackPageview('/outbound/article/opensource.sys-con.com');" target="_blank">it’s complex to create computing power</a> so we should centralize it among a few providers (Google, Amazon, ebay) to gain economies of scale. Ability to drive down price by centralizing and getting to scale is just too compelling. In this scenario, computing is a commodity; IT is a commodity. Remember Nick Carr’s controversial book, “Does IT Matter”?</p>
<p><strong>Gartner Counterpoint:</strong> IT is not a commodity because of constant innovation. So it’s not about a big investment in old/stagnating technology but more about developing and investing in agility. <a href="http://www.itbusinessedge.com/blogs/tve/?p=285" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.itbusinessedge.com');" target="_blank">There will be not a few cloud computing providers</a> but thousands.</p>
<p><strong>A quick definition of Cloud Computing by Gartner</strong>: a style of computing where massively scalable IT-enabled capabilities are delivered as a service to external customers using Internet technologies.</p>
<p><strong>Cloud Computing Drivers:</strong></p>
<ul>
<li>connections are becoming pervasive (anywhere, anytime)</li>
<li>response time expectations are shrinking</li>
<li>relationships are online and short-lived</li>
</ul>
<p>Tom Bittman shared a view of the <a href="http://www.roughtype.com/archives/2008/06/microsoft_to_pu.php" onclick="javascript:pageTracker._trackPageview('/outbound/article/www.roughtype.com');" target="_blank">evolution of the data center</a> – from “Silos to Clouds”. Prior to about 2002, data centers were sprawled siloed organizations focused on component management. Over time, <a href="http://blogs.eweek.com/masked_intentions/content/systems_management/it_management_in_the_age_of_cloud_computing.html" onclick="javascript:pageTracker._trackPageview('/outbound/article/blogs.eweek.com');" target="_blank">hardware cost went down, flexibility is up spurred by technologies like virtualization</a> and creating fluid pools of capacity that can be moved around intelligently. What we are <a href="http://blogs.zdnet.com/Gardner/?p=2685" onclick="javascript:pageTracker._trackPageview('/outbound/article/blogs.zdnet.com');" target="_blank">moving towards is automated, services-oriented environment in data centers</a> that are focused on enabling agility. Ecco Cloud Computing!</p>
<p><strong>Gartner predictions:</strong></p>
<ul>
<li>By 2012, 80% of the Fortune 100 will be paying for some cloud computing services, and</li>
<li>30% will be paying for cloud computing infrastructure services.</li>
</ul>
<p><a href="http://sharethis.com/item?&wp=2.5.1&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=A+Hot+Cloudless+Computing+Day+in+Florida&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fa-hot-cloudless-computing-day-in-florida%2F06%2F2008" onclick="javascript:pageTracker._trackPageview('/outbound/article/sharethis.com');">ShareThis</a></p>]]></content:encoded>
      <pubDate>Tue, 24 Jun 2008 15:46:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/gartner">gartner</category>
      <category domain="http://securityratty.com/tag/gartner counterpoint">gartner counterpoint</category>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/ecco cloud">ecco cloud</category>
      <category domain="http://securityratty.com/tag/gartner predictions">gartner predictions</category>
      <category domain="http://securityratty.com/tag/8am versus 10am">8am versus 10am</category>
      <category domain="http://securityratty.com/tag/infrastructure services">infrastructure services</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <source url="http://blog.sciencelogic.com/a-hot-cloudless-computing-day-in-florida/06/2008">A Hot Cloudless Computing Day in Florida</source>
    </item>
    <item>
      <title><![CDATA[Blue Box SE#025 - An interview with Eric Hernaez about Solegy and the OpenSBC Project]]></title>
      <link>http://securityratty.com/article/68cc0edd9defde9601e764783f55b503</link>
      <guid>http://securityratty.com/article/68cc0edd9defde9601e764783f55b503</guid>
      <description><![CDATA[Synopsis: Blue Box Special Edition #25: An interview with Eric Hernaez, CEO of Solegy, about the OpenSBC project
Welcome to Blue Box: The VoIP Security Podcast Special Edition #25, a 13-minute podcast...]]></description>
      <content:encoded><![CDATA[
<div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Synopsis:</strong>&nbsp; Blue Box Special Edition #25: An interview with Eric Hernaez, CEO of Solegy, about <a href="http://www.opensourcesip.org:8080/clearspacex/index.jspa">the OpenSBC project</a></p><hr /><p>Welcome to <strong>Blue Box: The VoIP Security Podcast</strong> Special Edition #25, a 13-minute podcast&nbsp; from Dan York and Jonathan Zar covering VoIP security news, comments and opinions.&nbsp; &nbsp; </p>

<p><a href="http://media.libsyn.com/media/lodestar/BBP-SE025-SolegyOpenSBC.mp3" rel="enclosure">Download the show here</a> (MP3, 6MB) or <a href="http://feeds.feedburner.com/BlueBox">subscribe to the RSS feed</a> to download the show automatically.&nbsp; </p>

<p>You may also listen to this podcast right now:</p> 

<p><object width="200" height="20" type="application/x-shockwave-flash" data="http://www.blueboxpodcast.com/dewplayer.swf?son=http://media.libsyn.com/media/lodestar/BBP-SE025-SolegyOpenSBC.mp3"><param name="movie" value="http://www.blueboxpodcast.com/dewplayer.swf?son=http://media.libsyn.com/media/lodestar/BBP-SE025-SolegyOpenSBC.mp3&amp;bgcolor=#FFFFFF" /></object> </p> 

<p><strong>Show Content:</strong></p> 
<p><img width="222" height="87" border="0" align="right" alt="solegylogo.jpg" src="http://www.blueboxpodcast.com/images/solegylogo.jpg" />In this interview, I sat down with Eric Hernaez, CEO of <a href="http://www.solegy.com/">Solegy</a>, to talk about<a href="http://www.opensourcesip.org:8080/clearspacex/index.jspa"> the OpenSBC Project</a> and how it provides an open source implementation of a session border controller (SBC).&nbsp; We talked about how OpenSBC came about, who is using it, how scalable it is and where users can learn more.&nbsp; We also discussed <a href="http://www.solegy.com/">Solegy,</a> the company supporting the open source OpenSBC project and what they are doing. It was an enjoyable talk that really came about randomly when I met Eric near the press room at IT Expo in Los Angeles back in September 2007. We had been wanting to learn more about the OpenSBC project so I put my recorder on a table and we started talking.</p>

<p>More information about the OpenSBC project and other open source SIP-related projects can be found at <a href="http://www.opensourcesip.org">opensourcesip.org</a>.</p>

<p>Production assistance on this Special Edition was provided by Sergio Meinardi.

</p>

<p>Comments, suggestions and feedback are welcome either as replies to this post&nbsp; or via e-mail to <a href="mailto:blueboxpodcast@gmail.com">blueboxpodcast@gmail.com</a>.&nbsp; Audio comments sent as attached MP3 files are definitely welcome and will be played in future shows.&nbsp; You may also call the listener comment line at either +1-415-830-5439 or via SIP to '<a href="sip:bluebox@voipuser.org">bluebox@voipuser.org</a>' to leave a comment there.&nbsp; </p> <p>Thank you for listening and please do let us know what you think of the show. </p></div>
]]></content:encoded>
      <pubDate>Tue, 10 Jun 2008 18:53:28 +0000</pubDate>
      <category domain="http://securityratty.com/tag/opensbc">opensbc</category>
      <category domain="http://securityratty.com/tag/source opensbc project">source opensbc project</category>
      <category domain="http://securityratty.com/tag/opensbc project">opensbc project</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/eric hernaez">eric hernaez</category>
      <category domain="http://securityratty.com/tag/eric">eric</category>
      <category domain="http://securityratty.com/tag/solegy">solegy</category>
      <category domain="http://securityratty.com/tag/comments">comments</category>
      <category domain="http://securityratty.com/tag/audio comments">audio comments</category>
      <source url="http://www.blueboxpodcast.com/2008/06/blue-box-se025.html">Blue Box SE#025 - An interview with Eric Hernaez about Solegy and the OpenSBC Project</source>
    </item>
  </channel>
</rss>
