<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: sector]]></title>
    <link>http://securityratty.com/tag/sector</link>
    <description></description>
    <pubDate>Sun, 28 Sep 2008 17:45:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Gartner Data Center Conference 2008]]></title>
      <link>http://securityratty.com/article/9a247228428224b9e36fa0f0db8d1d84</link>
      <guid>http://securityratty.com/article/9a247228428224b9e36fa0f0db8d1d84</guid>
      <description><![CDATA[The Gartner Data Center Conference kicked off this morning in Las Vegas. Despite the completely packed plane coming out here, Vegas seems quieter and not so crowded. The bartender at Wolfgang Pucks...]]></description>
      <content:encoded><![CDATA[<p><img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="96" alt="clip_image002" src="http://blog.sciencelogic.com/wp-content/uploads/2008/12/clip-image002.jpg" width="439" border="0" /></p>
<p>The <a href="http://www.gartner.com/it/page.jsp?id=627607" target="_blank">Gartner Data Center Conference</a> kicked off this morning in Las Vegas. Despite the completely packed plane coming out here, Vegas seems quieter and not so crowded. The bartender at Wolfgang Puck&#8217;s Bistro told me they were looking <a href="http://www.datacenterknowledge.com/archives/2008/12/02/at-the-gartner-data-center-conference/" target="_blank">forward to the 1800 people coming</a> to this show to fill the hotel up. As we&#8217;ve noted, the economic crisis is impacting business travel all around.</p>
<p>22% of the attendees at Data Center come from the public sector and government, with 44% coming from very large enterprises of 20K+ employees.</p>
<p>During the <a href="http://www.gartner.com/it/page.jsp?id=603107" target="_blank">Gartner IOM conference</a> in June, some of the most interesting info coming out of it was the quick polls of the audience on a variety of infrastructure and operations management topics. What are enterprises doing? Where are they headed? What&#8217;s important to them? Here are some quick takes from the opening session:</p>
<p>1) What is the largest data center challenge that you currently face?</p>
<ul>
<li><b>Smaller Budgets: 21%</b></li>
<li><b>Power &amp; Cooling: 20%</b></li>
<li>Dealing with the Rate of Technology Change: 15%</li>
<li>Aligning Activities with the Business: 15%</li>
<li>Modernizing Legacy Applications: 10%</li>
<li>Lack of Data Center Space because of Equipment Spread: 9%</li>
<li>How to Source IT Services: 5%</li>
<li>How to Find and Retain Talent: 5%</li>
</ul>
<p>Well, it&#8217;s taken almost a year to be &#8220;official&#8221;, but the National Bureau of Economic Research just announced that <a href="http://www.msnbc.msn.com/id/27999557/" target="_blank">the US has been in a recession since December of 2007</a>. It should come as a surprise to no one that dealing with smaller budgets is top of mind, even for the predominantly larger enterprises attending here. </p>
<p>2) What projects will receive the most funding in 2009?</p>
<ul>
<li><b>Virtualization/Consolidation: 31%</b></li>
<li>Data Center Facilities &#8211; new builds: 17%</li>
<li>IT Operations Process Improvement: 12%</li>
<li>IT Modernization: 7%</li>
<li><b>Green IT: 5%</b></li>
</ul>
<p>Virtualization and (server) consolidation projects are clearly a priority for larger enterprises in 2009. What&#8217;s interesting here is the relatively very low priority of <a href="http://www.devx.com/IT_Innovation/Article/40073?trk=DXRSS_LATEST" target="_blank">Green IT projects</a> &#8211; in spite of the importance to attendees of getting power and cooling costs under control. Perhaps there&#8217;s a gap here between what&#8217;s often the hype of Green IT and practical considerations for data center managers when it comes to power and cooling management.</p>
<p>3) Where are you with server consolidation projects?</p>
<ul>
<li>No Plans: 3%</li>
<li>Looking at it now and will start in next 2 years: 13%</li>
<li><b>In process now: 58%</b></li>
<li><b>Have already completed server consolidation project: 26%</b></li>
</ul>
<p>Larger enterprises are consolidating servers with a quarter of attendees already having gone through the process at least once. And according to poll #2, this trend will definitely continue.</p>
]]></content:encoded>
      <pubDate>Tue, 02 Dec 2008 15:55:49 +0000</pubDate>
      <category domain="http://securityratty.com/tag/data center">data center</category>
      <category domain="http://securityratty.com/tag/enterprises">enterprises</category>
      <category domain="http://securityratty.com/tag/predominantly larger enterprises">predominantly larger enterprises</category>
      <category domain="http://securityratty.com/tag/server">server</category>
      <category domain="http://securityratty.com/tag/server consolidation projects">server consolidation projects</category>
      <category domain="http://securityratty.com/tag/data center managers">data center managers</category>
      <category domain="http://securityratty.com/tag/consolidation projects">consolidation projects</category>
      <category domain="http://securityratty.com/tag/data center facilities">data center facilities</category>
      <category domain="http://securityratty.com/tag/larger enterprises">larger enterprises</category>
      <source url="http://blog.sciencelogic.com/gartner-data-center-conference-2008/12/2008">Gartner Data Center Conference 2008</source>
    </item>
    <item>
      <title><![CDATA[Online Finance Flaws: An Awareness Campaign]]></title>
      <link>http://securityratty.com/article/1aabc5edbe215010d8c71b5aa4aa7551</link>
      <guid>http://securityratty.com/article/1aabc5edbe215010d8c71b5aa4aa7551</guid>
      <description><![CDATA[Here begins a series regarding web application security inadequacies in online financial service offerings. The services to be discussed will include banks, credit unions, credit card companies, and...]]></description>
      <content:encoded><![CDATA[Here begins a series regarding web application security inadequacies in online financial service offerings. The services to be discussed will include banks, credit unions, credit card companies, and others. As the economy struggles profoundly, and much of the blame points at the financial sector, I believe it important to point out the false sense of security so many brand-name financial services wrongly instill in their customers.<br />Often this sense of security is coupled with a typical "security badge" provider, helping drive conversions rather than security, as we will also legitimize how often the badge providers miss the mark on their promises.<br />Accountability in loan making decisions and practices might have prevented the sub-prime market collapse and the subsequent credit crunch that has hogtied our economy. <br />Accountability with regard to web application security while providing online financial services is now all the more important as <a href="http://securitywatch.eweek.com/exploits_and_attacks/as_economy_dives_underground_thrives.html" target="_blank">cybercrime</a> will continue to increase at a pace proportionate to economic woes.<br />Each post relevant to this campaign will include Online Finance Flaw in its title for tracking purposes. <br />Look forward to surprising flaws in financial services brands you'll recognize.<br />Perhaps, the more attention we draw to services that should place security above all else, the more likely it is they'll commit to improving their security posture.<br />Feel free to comment or contribute; we'll begin in a day or two.]]></content:encoded>
      <pubDate>Sat, 29 Nov 2008 19:08:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/web application security">web application security</category>
      <category domain="http://securityratty.com/tag/financial services brands">financial services brands</category>
      <category domain="http://securityratty.com/tag/security badge">security badge</category>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/security posture">security posture</category>
      <category domain="http://securityratty.com/tag/online financial services">online financial services</category>
      <category domain="http://securityratty.com/tag/economy">economy</category>
      <category domain="http://securityratty.com/tag/economy struggles profoundly">economy struggles profoundly</category>
      <source url="http://holisticinfosec.blogspot.com/2008/11/online-finance-flaws-awareness-campaign_29.html">Online Finance Flaws: An Awareness Campaign</source>
    </item>
    <item>
      <title><![CDATA[Another link spammer]]></title>
      <link>http://securityratty.com/article/4dd72baf5933c49893c38cadde935c82</link>
      <guid>http://securityratty.com/article/4dd72baf5933c49893c38cadde935c82</guid>
      <description><![CDATA[Yet another link spammer is cluttering up my in-box. Youd think that after exposing this one , and this one , and this one , theyd know better
The latest set of miscreants operates under the brand...]]></description>
      <content:encoded><![CDATA[<p>Yet another link spammer is cluttering up my in-box. You&#8217;d think that after exposing <a href="http://www.lightbluetouchpaper.org/2007/01/07/human-rights-and-biophysics-strange-similarities/">this one</a>, and <a href="http://www.lightbluetouchpaper.org/2007/08/30/the-interns-of-privila/">this one</a>, and <a href="http://www.lightbluetouchpaper.org/2007/12/20/fatal-wine-waiters/">this one</a>, they&#8217;d know better.</p>
<p>The latest set of miscreants operates under the brand &#8220;<a href="http://www.goodeyeforlinks.com" rel="nofollow">goodeyeforlinks.com</a>&#8221; and claim to &#8220;use white hat SEO techniques in order to get high quality, do-follow links to your website&#8221;. They also claim to be &#8220;professional&#8221; which in this case must mean you pay for their services, since sending out bulk unsolicited email is anything but professional.</p>
<p>Nevertheless, although their long term aim may indeed be to make money from legitimate, albeit foolish, businesses seeking a higher profile, the sites they have been promoting so far are anything but legitimate. In fact they&#8217;ve been fake sites covered with Google adverts (so-called &#8220;<a href="http://www.sabahan.com/2006/06/26/how-mfa-made-for-adsense-sites-make-money/">Made for AdSense</a>&#8221; (MFA) sites).</p>
<p>They started by asking me to link to &#8220;<a href="http://www.entovation.net" rel="nofollow">entovation.net</a>&#8221; which they claim is &#8220;page rank 3&#8243;. In fact it is page rank 3 (!) and a blatant copy of <a href="http://www.acentesolutions.com/">http://www.acentesolutions.com</a> which appears entirely genuine (albeit only page rank 1). They have also been promoting &#8220;<a href="http://www.poland-translation-services.com" rel="nofollow">poland-translation-services.com</a>&#8220;, which claims to be a site offering &#8220;A large team of 2,500 translators specializing in each sector, located in over 30 countries&#8221; &#8230;</p>
<p>However, this site is clearly fake as well. I haven&#8217;t tracked down where it all comes from, but much of <a href="http://poland-translation-services.com/Translate-a-Document.html" rel="nofollow">this page</a> comes from <a href="http://www.intowords.com.ar/espanol/traducciones/traducciones-de-espanol-ingles.html">this Argentinian page</a>, the text of which has been pushed through <a href="http://www.google.com/language_tools?hl=en">Google&#8217;s Spanish to English translation tools</a>&#8230;  which sadly (for example) renders </p>
<blockquote><p>
Comentarios: Se considera foja al equivalente a 500 palabras. Si el documento a traducir es menor a una foja, se lo considerará como una foja.
</p></blockquote>
<p>into </p>
<blockquote><p>
Comments: foja is considered the equivalent of 500 words. If the document is translated to a lesser foja, we will consider as a foja.
</p></blockquote>
<p>which makes the 2500 translators look more than a little bit <a href="http://www.cartoonbank.com/item/124224">foolish</a>!</p>
<p>The fake websites are hosted by <a href="http://www.euroaccess.nl/">EuroAccess Enterprises Ltd.</a> in The Netherlands (which is also where the email spam has been sent from). I&#8217;m not alone in receiving this type of email, further examples can be found <a href="http://archives.neohapsis.com/archives/openbsd/2008-09/1548.html">here</a>, and <a href="http://www.projecthoneypot.org/ip_89.248.172.66">here</a>, and <a href="http://dansdata.blogsome.com/2008/10/16/i-do-like-a-good-link-spam-in-the-morning/">here</a>, and <a href="http://avvoblog.com/2008/11/10/linkbrokers-gone-wild/">here</a>, and <a href="http://www.nabble.com/Link-exchange-with-page-rank-4--Hotel-site-td19973368.html">here</a>, and <a href="http://www.allvoices.com/contributed-news/1522559">here</a>, and even <a href="http://blogpintura.wordpress.com/#comment-5">here (in Spanish)</a>.</p>
<p>EuroAccess have a fine ticketing system for abuse complaints&#8230; so I&#8217;m able to keep track of what they&#8217;re doing about my emails drawing their attention to the fraudsters they are hosting. I am therefore fully aware that they&#8217;ve so far marked my missives as &#8220;Priority: Low&#8221;, and nothing else is recorded to have been done&#8230; However, the tickets are still &#8220;Status: Open&#8221;, so perhaps a little publicity will encourage them to reassess their prioritisation.</p>
]]></content:encoded>
      <pubDate>Sun, 23 Nov 2008 16:45:45 +0000</pubDate>
      <category domain="http://securityratty.com/tag/argentinian page">argentinian page</category>
      <category domain="http://securityratty.com/tag/page">page</category>
      <category domain="http://securityratty.com/tag/foja">foja</category>
      <category domain="http://securityratty.com/tag/lesser foja">lesser foja</category>
      <category domain="http://securityratty.com/tag/page rank">page rank</category>
      <category domain="http://securityratty.com/tag/considera foja">considera foja</category>
      <category domain="http://securityratty.com/tag/link spammer">link spammer</category>
      <category domain="http://securityratty.com/tag/link">link</category>
      <category domain="http://securityratty.com/tag/fake">fake</category>
      <source url="http://www.lightbluetouchpaper.org/2008/11/23/another-link-spammer/">Another link spammer</source>
    </item>
    <item>
      <title><![CDATA[National Security Perspectives A Post-Election Insider View]]></title>
      <link>http://securityratty.com/article/caa8257ee971993e58e1b834379f8c71</link>
      <guid>http://securityratty.com/article/caa8257ee971993e58e1b834379f8c71</guid>
      <description><![CDATA[Recently I participated in an event entitled National Security Perspectives held at the famous Congressional Country Club in Maryland . The featured panelists had impressive credentials from the NSA ,...]]></description>
      <content:encoded><![CDATA[<p>Recently I participated in an event entitled National Security Perspectives held at the famous <a href="http://www.ccclub.org/" target="_blank">Congressional Country Club in Maryland</a>. The featured panelists had impressive credentials from the <a href="http://www.nsa.gov/" target="_blank">NSA</a>, <a href="http://www.dhs.gov/" target="_blank">DHS</a> and the <a href="https://www.cia.gov/" target="_blank">CIA</a>. The topics of discussion ranged from Current Geopolitical Threats and Evolving Technology Demands to predictions about the New Administrations Intelligence, Defense and Homeland Security focus.</p>
<p>The panelists were:<br />
<a href="http://en.wikipedia.org/wiki/National_Security_Agency" target="_blank">William P. Crowell</a> – former Deputy Director of the National Security Agency<br />
<a href="http://www.whitehouse.gov/government/m_jackson-bio.html" target="_blank">Michael P. Jackson</a> – Deputy Secretary, Department of Homeland Security<br />
<a href="http://en.wikipedia.org/wiki/Jose_Rodriguez_(intelligence)" target="_blank">Jose A. Rodriguez, Jr</a>. – former Director CIA, National Clandestine Service &amp; CIA, DCI Counterterrorist Center</p>
<p>Overall, it was a very nicely arranged event on a brisk fall evening with about 100 CXO attendees; mostly large but some small government contractors and a few product companies like ScienceLogic that conduct business with military, intelligence and the public sector.</p>
<p>No surprise, given the financial crisis the economy is suffering from that the panelists said we also have a <a href="http://obsidianwings.blogs.com/obsidian_wings/2008/11/defictits-actua.html" target="_blank">crisis coming on the Federal budget front</a>. This will put enormous pressure on the way Administration thinks, and how and where to spend the $$.</p>
<p>Obama’s tone regarding the issues he will be confronting in the world during the election was encouraging. Make the world more non-partisan and take on the threats that we have in front of us head-on!</p>
<p>The panel was very upfront about current threats. William Crowell said,</p>
<blockquote><p>“It is highly imprudent to believe that there will not be another 9-11. We have to fund and support the work to stop other attacks. We can only mitigate risk but we can’t eliminate risk. We have to try to absorb the sense of urgency and wake up every day looking at the intelligence screens as if 9-11 happened within the last couple of months.”</p></blockquote>
<p>He added,</p>
<blockquote><p>“They (the intelligence community) need the innovation, sense of commitment and urgency that comes from the private sector – a sense of mutual commitment to that mission.”</p></blockquote>
<p>Predicted Priorities for investment for DHS:</p>
<ol>
<li>Cyber attack as the top issue</li>
<li>Nuclear threats including dirty bomb</li>
<li>Chemical and biological attacks</li>
<li>Explosive attacks against critical infrastructure with maximum # of lives and or financial disruption / loss.</li>
<li>Large scale natural disasters – hurricane + earthquakes</li>
<li>Border penetration - identity management and border management issues</li>
</ol>
<p>An <a href="http://www.barackobama.com/index.php" target="_blank">Obama administration</a> will spend dollars around these threat vectors. They will want to spend $$ to help state and local governments. Grants to state and local governments should significantly increase with the Obama administration, so think about how you will increase your focus on the state and local government spending initiatives.</p>
<p><a href="http://lawprofessors.typepad.com/immigration/2008/11/pressure-on-oba.html" target="_blank">Secure border investments</a> – the panelists believe that the new administration will feel compelled to invest here. Michael P. Jackson bluntly said, “You have to make investments in border tools to get meaningful immigration reform.”</p>
<p>Panelists agreed that the 1<sup>st</sup> year will be an intense period of scrutiny about fundamental directions. We can’t afford it all at DHS; it is dramatically under budgeted. At TSA/DOT and then at DHS, we spent about $4 Billion on technology investments since 9-11; those investments are now reaching the end of the original service life.</p>
<p>One gripe from the panel that I found humorous: “We don’t have a group of people who think like entrepreneurs.” It is insane how long things last when you buy things in the government. As an example, we are still replacing vacuum tubes in some of the very old FAA gear… this is well beyond what any reasonable person would think these initial investments should/would last.</p>
<p>Final Thoughts:<br />
I actually think that the Obama Administration will be quite favorable to COTS software products, SaaS offerings, and creative financing initiatives from the private sector. The government just won’t have the capital budget to do everything it wants to accomplish. I would say if you look at how intelligently and aggressively <a href="http://www.concurringopinions.com/archives/2008/11/obama_and_techn.html" target="_blank">Obama used technology</a> to assist his campaign, the odds are good that this new breed of IT talent (which is already really comfortable with SaaS products, blogs, wiki’s, hosted/outsourced Cloud solutions… this team really understands the latest technology trends) will quickly work to bring these new IT paradigms to the Federal marketplace. Clearly the private sector can help the Government achieve more with lower capital budgets – beginning to provide services rather than transaction-based selling. Another clear idea is to think about leasing as a better way to work with the government which going forward will have increased budgets restrictions.</p>
<p>They will likely be in confrontation with members of Congress that won’t change fast enough, however the future of our nation’s ability to fight terror lies in becoming more efficient and effective. It requires the government be flexible enough to figure out what <a href="http://blogs.techrepublic.com.com/hiner/?p=880" target="_blank">jobs and IT functions to outsource</a> in a nimble and smart way. My prediction: this is great news for Service Providers. Overall the next 4 years should be great for our business as well as the Managed Service Provider/SaaS industry!</p>
<p><em><span style="color: #333333;"> </span></em></p>
]]></content:encoded>
      <pubDate>Tue, 18 Nov 2008 11:13:25 +0000</pubDate>
      <category domain="http://securityratty.com/tag/secure border investments">secure border investments</category>
      <category domain="http://securityratty.com/tag/investments">investments</category>
      <category domain="http://securityratty.com/tag/government contractors">government contractors</category>
      <category domain="http://securityratty.com/tag/government">government</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/government achieve">government achieve</category>
      <category domain="http://securityratty.com/tag/initial investments shouldwould">initial investments shouldwould</category>
      <category domain="http://securityratty.com/tag/obama administration">obama administration</category>
      <category domain="http://securityratty.com/tag/current threats">current threats</category>
      <source url="http://blog.sciencelogic.com/national-security-perspectives-a-post-election-insider-view/11/2008">National Security Perspectives A Post-Election Insider View</source>
    </item>
    <item>
      <title><![CDATA[Hosting Meets the Cloud Debate Part II]]></title>
      <link>http://securityratty.com/article/3a3393b304f09ea17d212e2f5b730d65</link>
      <guid>http://securityratty.com/article/3a3393b304f09ea17d212e2f5b730d65</guid>
      <description><![CDATA[I have to say that Part II of this session was much anticipated after the lively interaction yesterday. It turned out to be less of a debate and more like a fireside chat. (image from pro.corbis.com...]]></description>
      <content:encoded><![CDATA[<p><img style="border-top-width: 0px; border-left-width: 0px; border-bottom-width: 0px; border-right-width: 0px" height="220" alt="clip_image002" src="http://blog.sciencelogic.com/wp-content/uploads/2008/11/clip-image0024.jpg" width="323" align="left" border="0" />I have to say that Part II of this session was much anticipated after the lively interaction yesterday. It turned out to be less of a debate and more like a fireside chat. <a href="http://pro.corbis.com/images/CB042667.jpg?size=572&amp;uid=%7bDA13F798-FDA1-4B54-BFA9-4B15492E024F%7d" target="_blank">(image from pro.corbis.com)</a></p>
<p>The analysts paired up today:   <br />Antonio Piraino (<a href="http://www.t1r.com/" target="_blank">Tier1 Research</a>)    <br /><a href="http://the451group.com/about/bio_detail.php?eid=113" target="_blank">William Fellows</a> (<a href="http://the451group.com/" target="_blank">The 451 Group</a>)</p>
<p><em>My usual disclaimers on live-blogging: doesn&#8217;t include everything covered (just what was most interesting to me) and had to paraphrase some answers because I simply cannot type that fast. </em></p>
<p><strong>Quick definition of Cloud Computing     <br /></strong><strong>WF:</strong> The cloud is a continuum of grid, virtualization and utility done right. It is about provisioning services instead of servers; flexible computing instead of fixed assets. Done right, the cloud abstracts users from the complexity of grid. <a href="http://www.the451group.com/images/content/ice/ice_iceberg.jpg">Cloud computing is IT as a service</a>. Cloud computing is the Third Way &#8211; not entirely in-house or outsourced, but an optimized hybridized version of both. In light of the Goldman Sachs report out resetting IT spending forecast from up 6% to down 1%, don&#8217;t underestimate the ability for enterprises to move from capex to opex by buying cloud computing instead of building it themselves.</p>
<p>The 451 Group conducted a survey on cloud computing in March, and then revisited it a month ago. Some interesting results:</p>
<ul>
<li>84% have no plans to develop an internal cloud. 5% had no answer to this question. And for the 10% who did answer &#8211; the uses for a private/internal cloud were the same as those for a public cloud. </li>
<li>Top 6 vendors they look to help them develop an internal cloud: <a href="http://www.alleyinsider.com/2008/11/microsoft-s-smart-cloud-catch-up-plan-three-years-of-free-software-msft-" target="_blank">Microsoft</a>, <a href="http://topnews.in/ibm-expand-its-cloud-computing-efforts-285364" target="_blank">IBM</a>, Cisco, HP, Oracle, VMware </li>
</ul>
<p><strong><em>Is it all &#8220;upside&#8221; when it comes to cloud computing?       <br /></em></strong><strong>     <br />WF:</strong> Watch out for the Trojan horse, the red flag. What about the software needed to manage all this stuff? Any management software needs to take a holistic approach to solve the problem.</p>
<p><strong>AP:</strong> Increased management requirements and capability &#8211; this is actually a great story for managed hosters who can hold your hand while getting you up into the cloud. Hosters alleviate the pain points, and this is why we&#8217;re going to see continued growth and focus in the managed hosting sector.</p>
<p><strong>WF:</strong> I would argue that they&#8217;re too expensive. <a href="http://tech.blorge.com/Structure:%20/2008/10/25/amazons-ec2-cloud-moves-into-production/" target="_blank">Look at Amazon</a> &#8211; 10 cents a hit adds up.</p>
<p><strong>AP:</strong> It&#8217;s almost impossible to do an apples-to-apples comparison between cloud providers. One reason is that they charge differently. I&#8217;d say that when you&#8217;re talking about the big cloud providers, you are right &#8211; that they are expensive over the long-term, but for use in the short-term, they can be optimal.</p>
<p><strong>WF:</strong> The cloud is setting big expectations. Can IT deliver? It&#8217;s nice to talk about &#8220;shared resources for the greater good&#8221; but in any organization, you will still run into issues of power and control! Plus it&#8217;s still early days for resolution of regulatory issues and compliance around the cloud.</p>
<p><strong>Final Thoughts</strong></p>
<p><strong>AP:</strong> Think of the opportunities of using cloud computing resources in the areas of testing and pre-production &#8211; short-term use/environment (quick up/quick down), inexpensive, opex not capex. We&#8217;re already seeing the cloud fostering much innovation.</p>
<p><strong>WF:</strong> &#8220;It&#8217;s okay to fall in love with the term.&#8221; It is real but keep the expectations lower and realistic.</p>
<p><strong>AP:</strong> I agree with you. The reality is that the cloud is driving a very fundamental underlying platform change. This is not just a term or something that will fall out of fashion. There&#8217;s a real need to build trust in the cloud and leveraging shared resources in this way &#8211; so use the cloud computing term cautiously; don&#8217;t abuse it and make the cloud seem like IT&#8217;s new toy.</p>
]]></content:encoded>
      <pubDate>Wed, 12 Nov 2008 18:35:55 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cloud">cloud</category>
      <category domain="http://securityratty.com/tag/public cloud">public cloud</category>
      <category domain="http://securityratty.com/tag/cloud providers">cloud providers</category>
      <category domain="http://securityratty.com/tag/cloud abstracts users">cloud abstracts users</category>
      <category domain="http://securityratty.com/tag/privateinternal cloud">privateinternal cloud</category>
      <category domain="http://securityratty.com/tag/internal cloud">internal cloud</category>
      <category domain="http://securityratty.com/tag/term">term</category>
      <category domain="http://securityratty.com/tag/pre-production short-term useenvironment">pre-production short-term useenvironment</category>
      <category domain="http://securityratty.com/tag/short-term">short-term</category>
      <source url="http://blog.sciencelogic.com/hosting-meets-the-cloud-debate-part-ii/11/2008">Hosting Meets the Cloud Debate Part II</source>
    </item>
    <item>
      <title><![CDATA[Combating Cyber Threats Around the Globe -- A More Collaborative Approach?]]></title>
      <link>http://securityratty.com/article/8df2d8ecd4971660aba1b9067cdcd17d</link>
      <guid>http://securityratty.com/article/8df2d8ecd4971660aba1b9067cdcd17d</guid>
      <description><![CDATA[Governments and law enforcement agencies from North America and Europe continue to increase cooperation and coordination to combat the growing threats of cyber-crime and e-espionage. That was quite...]]></description>
      <content:encoded><![CDATA[<p>Governments and law enforcement agencies from North   America and Europe continue to increase   cooperation and coordination to combat the growing threats of cyber-crime and   e-espionage. &nbsp;That was quite evident at the recent RSA Conference Europe that   was held in London as a significant number of   representatives from governments participated in panels and other events. &nbsp;&nbsp;I   moderated one of those sessions, which was titled &ldquo;<strong>Tackling Cyber-crime and Protecting Critical   Information Infrastructure &ndash; Public Sector Approaches</strong>&rdquo...]]></content:encoded>
      <pubDate>Tue, 11 Nov 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/law enforcement agencies">law enforcement agencies</category>
      <category domain="http://securityratty.com/tag/europe continue">europe continue</category>
      <category domain="http://securityratty.com/tag/north america">north america</category>
      <category domain="http://securityratty.com/tag/governments">governments</category>
      <category domain="http://securityratty.com/tag/threats">threats</category>
      <category domain="http://securityratty.com/tag/increase cooperation">increase cooperation</category>
      <category domain="http://securityratty.com/tag/cyber-crime">cyber-crime</category>
      <category domain="http://securityratty.com/tag/coordination">coordination</category>
      <category domain="http://securityratty.com/tag/held">held</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1385">Combating Cyber Threats Around the Globe -- A More Collaborative Approach?</source>
    </item>
    <item>
      <title><![CDATA[Ex-Pentagon Geek Plots Disaster Relief 2.0]]></title>
      <link>http://securityratty.com/article/86d205862d5745877a8f1cd004eb2ed7</link>
      <guid>http://securityratty.com/article/86d205862d5745877a8f1cd004eb2ed7</guid>
      <description><![CDATA[Linton Wells used to be one of the Pentagon geeks-in-chief. Now, he's trying to encourage the Defense Department to network with relief agencies, civic organizations and the private sector in order to...]]></description>
      <content:encoded><![CDATA[Linton Wells used to be one of the Pentagon geeks-in-chief. Now, he's trying to encourage the Defense Department to network with relief agencies, civic organizations and the private sector in order to reboot disaster recovery.<br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=35c874083dabfe5100866e3f87af9c66" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=35c874083dabfe5100866e3f87af9c66" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=nuupM"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=nuupM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=PKODm"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=PKODm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=CpZUm"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=CpZUm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=XABnM"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=XABnM" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=SELYM"><img src="http://feeds.wired.com/~f/wired/politics/security?i=SELYM" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=TjgXm"><img src="http://feeds.wired.com/~f/wired/politics/security?i=TjgXm" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=c1UUm"><img src="http://feeds.wired.com/~f/wired/politics/security?i=c1UUm" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=S3HRM"><img src="http://feeds.wired.com/~f/wired/politics/security?i=S3HRM" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/423093477" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/423093481" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 16 Oct 2008 14:04:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/reboot disaster recovery">reboot disaster recovery</category>
      <category domain="http://securityratty.com/tag/pentagon geeks-in-chief">pentagon geeks-in-chief</category>
      <category domain="http://securityratty.com/tag/civic organizations">civic organizations</category>
      <category domain="http://securityratty.com/tag/relief agencies">relief agencies</category>
      <category domain="http://securityratty.com/tag/defense department">defense department</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/sector">sector</category>
      <category domain="http://securityratty.com/tag/linton">linton</category>
      <category domain="http://securityratty.com/tag/encourage">encourage</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/423093481/fast-cheap-and.html">Ex-Pentagon Geek Plots Disaster Relief 2.0</source>
    </item>
    <item>
      <title><![CDATA[Cost-cutting, greater efficiencies to be topics at SNW]]></title>
      <link>http://securityratty.com/article/a7a46462950a5916ed38006e1df4a2bf</link>
      <guid>http://securityratty.com/article/a7a46462950a5916ed38006e1df4a2bf</guid>
      <description><![CDATA[As the Storage Networking World conference opens in Dallas this week, it's likely that the recent stock market and financial sector upheavals will have attendees more interested than ever in cost...]]></description>
      <content:encoded><![CDATA[As the Storage Networking World conference opens in Dallas this week, it's likely that the recent stock market and financial sector upheavals will have attendees more interested than ever in cost savings.<br style="clear: both;"/>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:68fd8a846196cc69cb2d4ce44501d7b6:XhfhVnqTAhup%2BWrj5UuIW%2FteKvJUpjOWobxHxx%2FDPYJRn6tBQxS2A7lqrjSnFqro0Yj5gW8VRroW'><img border='0' title='Add to digg' alt='Add to digg' src='http://www.pheedo.com/images/mm/digg.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:d9ea74fa5ca73babb7fe1e5c3edf7d7a:bGst3Qb9THSVag3rfxGyiWK5ZOE9nulcrMhExrAgRKG0OB1tgzm80%2BMSQvkX8AvTo%2BluRXe0oxO0Og%3D%3D'><img border='0' title='Add to StumbleUpon' alt='Add to StumbleUpon' src='http://www.pheedo.com/images/mm/stumbleit.gif'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:31ef83bdaed2413f299dfcfe5d698624:hbnP1VFouTEfTiDvuPYwBwonh3BHcLimiyRdbkIN1CGV95aP%2FSEOolx%2FZa8QK2YcEFFvopjwDO8t4A%3D%3D'><img border='0' title='Add to Twitter' alt='Add to Twitter' src='http://www.pheedo.com/images/mm/twitter.png'/></a>
    <a style='font-size: 10px; color: maroon;' href='http://www.pheedo.com/hostedMorselClick.php?hfmm=v3:3e556c79f0df1583fddfdc96b6ffa3bb:q%2F%2FV8eoV8ptA9x6zAJwRBA5ampZIJsY6U0ZX1%2Bfsm8YJepfnGZdAH%2BPZV7%2BSiY5shptg5wuyELRLKw%3D%3D'><img border='0' title='Add to Slashdot' alt='Add to Slashdot' src='http://www.pheedo.com/images/mm/slashdot.png'/></a>
<br style="clear: both;"/>  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=e1bcb74820b293c9982efcc8da808d9c" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=e1bcb74820b293c9982efcc8da808d9c" style="display: none;" border="0" height="1" width="1" alt=""/>]]></content:encoded>
      <pubDate>Mon, 13 Oct 2008 00:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/financial sector upheavals">financial sector upheavals</category>
      <category domain="http://securityratty.com/tag/recent stock market">recent stock market</category>
      <category domain="http://securityratty.com/tag/cost savings">cost savings</category>
      <category domain="http://securityratty.com/tag/world conference">world conference</category>
      <category domain="http://securityratty.com/tag/attendees">attendees</category>
      <category domain="http://securityratty.com/tag/week">week</category>
      <category domain="http://securityratty.com/tag/storage">storage</category>
      <category domain="http://securityratty.com/tag/dallas">dallas</category>
      <source url="http://feeds.computerworld.com/click.phdo?i=e1bcb74820b293c9982efcc8da808d9c">Cost-cutting, greater efficiencies to be topics at SNW</source>
    </item>
    <item>
      <title><![CDATA[Links List 10.10.08]]></title>
      <link>http://securityratty.com/article/e68ccc27eb670a14c5008d0e963a10e2</link>
      <guid>http://securityratty.com/article/e68ccc27eb670a14c5008d0e963a10e2</guid>
      <description><![CDATA[You cannot turn around without bumping into another bad news story about the economy. From layoffs (10% of eBays workforce, 7.5% of HPs ) to the bailouts to the $7 billion loan the state of California...]]></description>
      <content:encoded><![CDATA[<p>You cannot turn around without bumping into another bad news story about the economy. From layoffs (10% of <a href="http://www.webguild.org/2008/10/ebay-layoffs-announced.php" target="_blank">eBay&#8217;s</a> workforce, 7.5% of <a href="http://www.pcworld.com/businesscenter/article/151102/hp_announces_24600_layoffs_in_wake_of_eds_acquisition.html" target="_blank">HP&#8217;s</a>) to the bailouts to the <a href="http://www.businessweek.com/bwdaily/dnflash/content/oct2008/db2008103_878150.htm?chan=top+news_top+news+index+-+temp_news+%2B+analysis" target="_blank">$7 billion loan</a> the state of California needs to make payroll this month. Really, 7 beeeellllyon dollars? How many people shook their heads and felt sorry for the people working at financial services companies, all the while thinking that the tech sector was a pretty secure place to be (as long as you weren&#8217;t in the IT department at a financial services company)? Well, now apparently comes the wake up call for tech. Oh yeah, a bunch of those startups and not-so-young-anymore startups are FUNDED. They&#8217;re not making MONEY &#8211; or at least certainly not enough to actually be PROFITABLE, given the way they&#8217;ve been spending on payroll, sales and marketing to grow as quickly as possible. To get to that visibility and magic number of customers which means a big payoff for the investors and the founders. From the reports, it&#8217;s back to basics time, or at least that&#8217;s what the <a href="http://valleywag.com/5061391/its-always-darkest-before-its-pitch-black" target="_blank">VCs are telling their portfolio companies</a>. Cut costs. Layoff people. Focus on selling. And get profitable. Duh.</p>
<p>So can <a href="http://blogs.zdnet.com/open-source/?p=2972" target="_blank">open source weather out the economic storm</a>? Emerging from the dot-com bust, open source has matured, its legal framework and values are established, and serious players are in the game. But as this post on ZDNet points out, consolidation is on the way. &#8220;IDC renamed its LinuxWorld Show in San Francisco next year Open Source World &#8211; a clear shot across the bow at O&#8217;Reilly&#8217;s OSCON.&#8221; Will open source (from free to lower-cost alternatives to commercial software) flourish in a time of tightening budgets or will projects quietly go away for lack of funding (VC and that pesky business model thing) and, let&#8217;s face it, the &#8220;extra time&#8221; of IT pros tasked yet again to do more with less?</p>
<p>It&#8217;s October 2008 and Charles Babcock writes, &#8220;<a href="http://www.informationweek.com/news/software/server_virtualization/showArticle.jhtml?articleID=210800267" target="_blank">CA Embraces Virtualization As Future of Data Center Management</a>&#8221;. Beyond keeping up with what competitors are doing, I enjoy this article for the masterful way it depicts the nightmare that is working with traditional frameworks. Too slow, too expensive, too complex, too many modules &#8211; it&#8217;s all in here. And somehow, I don&#8217;t think that was the point of it. So, $154,000 for CA Data Center Automation Manager &#8211; which can &#8220;consult&#8221; the CA CMDB (pricing starting at what do you think, something like $500K to a million &#8211; don&#8217;t forget those services) plus CA Wily APM (Introscope 8 and Wily Customer Experience Manager 4.2; pricing anyone?) metrics that get fed back into Data Center Automation Manager to help determine the virtual machine resources that are needed. Plus can also integrate info from CA Endeavor&#8217;s software change management tracking and CA SysView and in future with CA Management Suite for Mainframe Linux, potentially. I am not kidding about this list. And, we&#8217;ve been hearing this for a while &#8211; &#8220;Unicenter&#8221; the brand goes away and is replaced by &#8220;CA NSM&#8221;. The brand goes away. Why retire a successful brand? Ah.</p>
<p><img style="border-right: 0px; border-top: 0px; margin: 5px; border-left: 0px; border-bottom: 0px" height="110" alt="joe_tucci" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/joe-tucci1.jpg" width="170" align="left" border="0" />I love this post on EMC, &#8220;<a href="http://www.eweek.com/c/c/Data-Storage/Eleven-Things-You-Didnt-Know-about-the-Worlds-Largest-External-Disk-Storage-Company/?kc=EWKNLNAV10102008STR2" target="_blank">Eleven Things You Didn&#8217;t Know About the World&#8217;s Largest External Disk Storage Company</a>.&#8221; Although I guess I really don&#8217;t know much about Joe Tucci, since #11 says:</p>
<blockquote><p>&#8220;Contrary to conventional thought, it is not true that the EMC President/CEO is the older, gentler brother of the fictional patriarch of HBO&#8217;s hit television series.&#8221; Hunh. I just googled him, thinking maybe it was a resemblance thing. Nope.&quot;</p>
</blockquote>
<p> And on a much lighter note. A funny from Dell. 2 years later, I just stumbled across this Proprietaryville , Jibjab-ish video, called <a href="http://www.youtube.com/watch?v=LOAunpk54PA&amp;eurl" target="_blank">Dell the Journey</a>. Legacy systems being escorted onto the Retirement Home bus. Michael Dell as knight in shining armor, singing no less. Joe Tucci and Larry Ellison showing up as heroes leading the charge against Proprietaryville (yes, funny in and of itself). And my favorite, &#8220;Now let&#8217;s go kick some proprietary apps.&#8221;</p>
<p> <img style="border-right: 0px; border-top: 0px; border-left: 0px; border-bottom: 0px" height="146" alt="delljibjab" src="http://blog.sciencelogic.com/wp-content/uploads/2008/10/delljibjab1.jpg" width="240" border="0" /></p>
]]></content:encoded>
      <pubDate>Fri, 10 Oct 2008 17:15:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/services">services</category>
      <category domain="http://securityratty.com/tag/financial services company">financial services company</category>
      <category domain="http://securityratty.com/tag/source">source</category>
      <category domain="http://securityratty.com/tag/source weather">source weather</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/extra time">extra time</category>
      <category domain="http://securityratty.com/tag/successful brand">successful brand</category>
      <category domain="http://securityratty.com/tag/joe tucci">joe tucci</category>
      <category domain="http://securityratty.com/tag/dell">dell</category>
      <source url="http://blog.sciencelogic.com/links-list-101008/10/2008">Links List 10.10.08</source>
    </item>
    <item>
      <title><![CDATA[Female Bodyguards Get the Job Done.]]></title>
      <link>http://securityratty.com/article/732503f31e4a0e42349e8fe161ff34fd</link>
      <guid>http://securityratty.com/article/732503f31e4a0e42349e8fe161ff34fd</guid>
      <description><![CDATA[Those who think that Bodyguarding is a job best left to men - think again


The Dublin City Herald recently ran a story about Lisa Baldwin, from Dublin, who is a female Personal Protection/Close...]]></description>
      <content:encoded><![CDATA[Those who think that Bodyguarding is a job best left to men - think again.<br /><span id="fullpost"><br /><br />The Dublin City Herald recently ran a <a href="http://www.herald.ie/national-news/city-news/brain-not-brawn-size-10-bodyguard-lisa-proves-that-being-in-security-doesnt-mean-you-have-to-be-big-and-burly-1484410.html">story about Lisa Baldwin,</a> from Dublin, who is a female Personal Protection/Close Protection Specialist based in the U.K.  Ms. Baldwin is in high demand by Middle Eastern clients who wish to have their women and children protected by female agents.<br /><br /></span><br />That is exactly why SEXTON EXECUTIVE SECURITY(<a href="http://www.sextonsecurity.com/">www.sextonsecurity.com</a>)designed a <a href="http://www.sextonsecurity.com/training.html">Middle East E.P./C.P. course </a>that will be held in the U.A.E. from the 11th of October through the 18th.  The President, John Sexton summed it up as follows; "We saw the need for agents from all over the world to be able to train in the Middle East and to experience the culture,tradition and religion first hand".  "Middle Eastern clients are extremely important to our industry", he added "and it behooves all agents involved in providing safety for these families to become conversant with every aspect of their lives in order to be able to offer the best protection possible". <br /><br />SEXTON will also have a group of female trainees attending their Executive Protection course in San Diego, California in December.  <a href="http://www.herald.ie/national-news/city-news/brain-not-brawn-size-10-bodyguard-lisa-proves-that-being-in-security-doesnt-mean-you-have-to-be-big-and-burly-1484410.html">Lisa Baldwin is described in the Herald</a> as being "one of the world's few female bodyguards".  Many women around the world now recognize that by undergoing professional training like Ms. Baldwin, they can be assigned to prestigious contracts and make a very lucrative living.    <br /><br />Ms. Baldwin's petite stature does not prevent her from succeeding in a mostly male-dominated industry.  "You realise you're not in Iraq, you're in London", she advises.  Very true.  Smart protectors understand that the Art of Personal Protection is about using your mind and not your brawn.  The differences between working in Iraq and London/New York/Dubai are like night and day.  <br /><br />Unfortunately, if the agent does not receive proper training, they may very well fail to realise the difference.  There is one type of training needed for a Hostile environment such as Iraq or Afghanistan and a completely different one for the corporate/private sector.  A security contractor coming fresh out of a hostile environment will often find it extremely difficult providing protection in a covert, "grey man" style.  <br /><br />Fortunately for them, Sexton Executive Security's focus is on private clients and their E.P./C.P. corporate training program can help those returning form overseas contracts to make the transition smooth and profitable.<br /><br />In the corporate/private family world, you don't have heavy weaponry to rely upon but as Ms. Baldwin states; "Its all about the mind and prevention".  Like the old saying goes; "an ounce of prevention is worth a pound of cure".<div class="blogger-post-footer">Visit Sexton Executive Security at www.sextonsecurity.com</div>]]></content:encoded>
      <pubDate>Sun, 28 Sep 2008 17:45:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/john sexton">john sexton</category>
      <category domain="http://securityratty.com/tag/sexton">sexton</category>
      <category domain="http://securityratty.com/tag/lisa baldwin">lisa baldwin</category>
      <category domain="http://securityratty.com/tag/baldwin">baldwin</category>
      <category domain="http://securityratty.com/tag/sexton executive security">sexton executive security</category>
      <category domain="http://securityratty.com/tag/middle eastern clients">middle eastern clients</category>
      <category domain="http://securityratty.com/tag/clients">clients</category>
      <category domain="http://securityratty.com/tag/protection">protection</category>
      <category domain="http://securityratty.com/tag/executive protection">executive protection</category>
      <source url="http://www.thebulletproofblog.com/2008/09/female-bodyguards-get-job-done.html">Female Bodyguards Get the Job Done.</source>
    </item>
  </channel>
</rss>
