<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: transform]]></title>
    <link>http://securityratty.com/tag/transform</link>
    <description></description>
    <pubDate>Sun, 17 Feb 2008 04:51:11 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[A horse's ass approach to virtualization security - The four horsemen]]></title>
      <link>http://securityratty.com/article/8fa3354e9fe6c665bdd3e918f53590e1</link>
      <guid>http://securityratty.com/article/8fa3354e9fe6c665bdd3e918f53590e1</guid>
      <description><![CDATA[I opinioned a bit about the current approaches to virtualization security and how they might be failing to address current and future threats - let me explain further what I mean

In this blog I want...]]></description>
      <content:encoded><![CDATA[I opinioned a bit about the <a href="http://bitarmor.blogspot.com/2008/10/horses-ass-approach-to-virtualization.html">current approaches to virtualization security</a> and how they might be failing to address current and future threats - let me explain further what I mean.<br /><br />In this blog I want to talk about the four elements that make up every computing environment<br />(i.e. the four horsemen :)):<br /><ul><li><span style="font-weight: bold;">Devices</span>: These are the hardware and operating system combinations that host or store the execution environment.</li><li><span style="font-weight: bold;">Applications</span>: Applications execute on host environments (devices + OS) and transform data into information useful for the business.</li><li><span style="font-weight: bold;">Data</span>: Digital representation of information that is acted upon by applications.</li><li><span style="font-weight: bold;">Networks</span>: Enable collaboration and the sharing of information across multiple devices and/or applications.</li></ul><img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-1.jpg" alt="" /><img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-2.jpg" alt="" />All four are abso<img src="file:///C:/Users/manun/AppData/Local/Temp/moz-screenshot-3.jpg" alt="" />lutely essential to complete any transaction in the modern business world. However, to gain competitive advantage, organizations are looking to optimize the usage of these four elements. Technology, flexibility, and agility are becoming increasingly important in a fast-changing business world and have therefore led to the rise of virtualization.<br /><br />In my next post I will discuss how these elements are being changed in a virtual environment and what impact it has on security.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/BitArmor1?a=LbtfM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=LbtfM" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=h9Dmm"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=h9Dmm" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/BitArmor1?a=lnMVM"><img src="http://feeds.feedburner.com/~f/BitArmor1?i=lnMVM" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/BitArmor1/~4/428570711" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 22 Oct 2008 09:31:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/business world">business world</category>
      <category domain="http://securityratty.com/tag/modern business world">modern business world</category>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization security">virtualization security</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/environment">environment</category>
      <category domain="http://securityratty.com/tag/execution environment">execution environment</category>
      <category domain="http://securityratty.com/tag/applications">applications</category>
      <source url="http://feeds.feedburner.com/~r/BitArmor1/~3/428570711/horses-ass-approach-to-virtualization_22.html">A horse's ass approach to virtualization security - The four horsemen</source>
    </item>
    <item>
      <title><![CDATA[Integrating Event/Incident and Problem Management]]></title>
      <link>http://securityratty.com/article/fbba6395d7eaad30dc65321fe9f0fd16</link>
      <guid>http://securityratty.com/article/fbba6395d7eaad30dc65321fe9f0fd16</guid>
      <description><![CDATA[Change, Change, Change. What needs to change as IT organizations move towards sophisticated virtualized infrastructure ? Event/Incident and Problem Management integration of course
We have been...]]></description>
      <content:encoded><![CDATA[<p>Change, Change, Change. What needs to change as IT organizations move towards sophisticated <a href="http://blog.taragana.com/index.php/archive/virtualization-technologies-full-virtualization-versus-para-virtualization/" target="_blank">virtualized infrastructure</a>? Event/Incident and Problem Management integration of course!</p>
<p>We have been conducting polls of our customers and of IT professionals at technology trade shows for the past two years and the results are in: Pulling together all of the management pieces and processes is even more crucial in a virtualized environment.</p>
<p>So what does this mean for you? You will need to refine your <a href="http://blog.evergreensys.com/2008/01/10/meeting-tough-customers-over-incident-management/" target="_blank">incident and problem management</a> processes with new technologies in order to reduce downtime and maintain end user performance. But of course even the most basic technologies are not well integrated even in today’s world.</p>
<p>I recently participated in a <a href="Gartner%20Conference" target="_blank">Gartner Conference</a> and watched to my amazement a real-time electronic survey of the audience. To my disbelief, the audience, filled with 300+ people from Fortune 2000 companies provided real-time responses to the question:</p>
<p><em>What level of integration does your IT org have between event management and service desk applications?</em></p>
<ul>
<li>None: 10%</li>
<li><strong>Manual Phone call from IT ops to IT service desk staff member: 46%</strong></li>
<li>Manual click button on event manager to open trouble ticket: 20%</li>
<li>Automated event management system automatically opens trouble ticket without requiring human oversight or approval: 24%</li>
</ul>
<p>Unbelievable… still very few of the survey respondents have yet to formalize problem management systems with event management systems. For 56% of the audience the process is still manual!</p>
<p>Another interesting real-time survey question at the Gartner Conference was:</p>
<p><em>Who in your organization is responsible for critical problem processes and resolution?</em></p>
<ul>
<li>IT Service Desk 13%</li>
<li>IT Operations 49%</li>
<li>Process Team 12%</li>
<li>Other 9%</li>
<li>Responsibility not formalized 17%</li>
</ul>
<p><a href="http://blogs.technet.com/virtualization/archive/2008/10/10/Guest-post_3A00_-virtualization-requires-the-proper-perspective-.aspx" target="_blank">Virtualization adoption</a> and the speed with which things change in a virtualized environment require automation and will transform <a href="http://servicexen.wordpress.com/2008/07/02/implementing-service-management-processes-in-small-and-medium-companies/" target="_blank">Incident and Problem Management</a>. Clearly with <a href="http://tarrysingh.blogspot.com/2008/10/microsoft-to-train-thousands-in.html" target="_blank">this new technology we are required to re-think</a> Organizational, Behavioral and Cultural Challenges required to take advantage of the opportunities that virtualization provides.</p>
<p>Incident and problem management processes and metrics must bridge organizational silos that have been the norm within IT. With virtualization, people have to work more closely together in the different silos than ever before. IT leaders need to break down the walls between the technology-centric silo mentalities.</p>
<p>Business Imperative Action Plan:</p>
<ol>
<li>What can you do<strong> today</strong>? &#8211;Understand the impact of virtualization on incident and problem mgt. workload, provide technology training for helpdesk/service desk staff.</li>
<li>What can you do in the <strong>next 12 months</strong>?</li>
</ol>
<p>Formalize problem management processes, metrics and personnel.<br />
Invest in tools and processes for systems on virtualized servers.<br />
Long term: On the Radar Screen!<br />
Instill teamwork into all groups responsible for the <a href="http://servicexen.wordpress.com/2008/07/02/implementing-service-management-processes-in-small-and-medium-companies/" target="_blank">virtualized environment</a> service and support. Map components and configuration items directly to end user services.</p>
<p>Final Thoughts: Know the management pieces and ensure that they fit together. It’s great to buy new technology, but be demanding to ensure that your vendors show you have they will help to link all these pieces together - Change, Inventory, Incident, Problem, Server, Capacity, Performance, Configuration, Event, and Integrated Workflow.</p>
]]></content:encoded>
      <pubDate>Tue, 14 Oct 2008 14:00:59 +0000</pubDate>
      <category domain="http://securityratty.com/tag/management">management</category>
      <category domain="http://securityratty.com/tag/event management systems">event management systems</category>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/management processes">management processes</category>
      <category domain="http://securityratty.com/tag/management pieces">management pieces</category>
      <category domain="http://securityratty.com/tag/management systems">management systems</category>
      <category domain="http://securityratty.com/tag/management integration">management integration</category>
      <category domain="http://securityratty.com/tag/event management system">event management system</category>
      <category domain="http://securityratty.com/tag/systems">systems</category>
      <source url="http://blog.sciencelogic.com/integrating-eventincident-and-problem-management/10/2008">Integrating Event/Incident and Problem Management</source>
    </item>
    <item>
      <title><![CDATA[Interop NY Keynotes: Cisco]]></title>
      <link>http://securityratty.com/article/c55a3293fe594f4363a5830f6da4d48c</link>
      <guid>http://securityratty.com/article/c55a3293fe594f4363a5830f6da4d48c</guid>
      <description><![CDATA[After some rousing introduction music, Marie Hatter , Vice President, Network Systems and Security Solutions Marketing / CMO of Cisco began her presentation on virtualization
Introduction...]]></description>
      <content:encoded><![CDATA[<p>After some rousing introduction music, <a href="http://blogs.cisco.com/authors/bio/83" target="_blank">Marie Hatter</a>, Vice President, Network Systems and Security Solutions Marketing / CMO of Cisco began her presentation on virtualization.</p>
<p><strong>Introduction</strong></p>
<p>Virtualization is a word used by consumers and also by IT. But, do we all mean the same thing?</p>
<p>A very cool video from Cisco provided answers to &#8220;what is virtualization&#8221; from an  engineering perspective, data center perspective, IT perspective and the user perspective (virtual world).</p>
<p>Virtualization is about breaking the bonds between applications and server hardware, nodes and networks, applications and operating systems.</p>
<p>Why is this interesting? Virtualization holds the promise to transform the way we work, live, learn and play.</p>
<p><strong>Why virtualize?</strong></p>
<p>The real estate boom over the last 30 years has driven people to the suburbs. People didn&#8217;t mind commuting for an hour with lower gas prices. Today, we have a weak economy and gas prices are high. Something has to change.</p>
<p>Many are opting to stay at home. Businesses are trying out telecommuting, some (like Cisco) are even offering telepresence. This helps by reducing carbon footprint. Corporations are breaking free from physical requirements. The global workforce is also having an impact on the network. These changes are having a huge impact on the network.</p>
<p>We are on the cusp of transitioning from virtualization to VIRTUALIZATION.</p>
<p><strong>&#8220;One to many&#8230;.many to one.&#8221;</strong></p>
<p>This is Cisco&#8217;s idea of virtualization.</p>
<p>Consider the different roles we play in life - one to many. Spouse, executive, friend, parent, gym rat. This would be &#8220;one to many&#8221;. This is exactly what virtualization does. It allows you to partition resources off that you can use on the fly.</p>
<p><strong>Where do I start?</strong></p>
<p>Virtualization starts with server and storage. But, it&#8217;s the network that touches everything - it spans the physical, the virtual, and the cloud. This provides the connectivity to all these resources. The network brings transparency to the picture. It allows you to better monitor performance and better implement security - great benefits!</p>
<p><strong>Why do I need this?</strong></p>
<p>At Cisco, we saw that we were only using 20% of our storage utilization. We wanted to virtualize our datacenters. When we did that, we were able to get 68% storage utilization. For each year that we were able to defer buildup, we saved $40 million.</p>
<p>From a business standpoint, virtualization helps you differentiate and work faster. Provisioning in minutes, improved productivity and competitive differentiation, using less power (environmental impact), and up the ante of business continuity. If VMWare fails? It&#8217;s OK. You can reprovision it on the fly.</p>
<p><strong>Is it for everyone?</strong></p>
<p>IT organizations tend to be siloed. You have the IT side and the Operations side. Each has responsibility. For virtualization to work, these walls have to come down. The concept of virtualization depends on shared resources.</p>
<p><strong><a href="http://en.wikipedia.org/wiki/Metcalfe%27s_law" target="_blank">Metcalfe&#8217;s Law of the Network</a> Effect</strong></p>
<p>Everytime you add a node to the network, you increase the value. This is what happens with virtualization. Every device you virtualize increases the power of each device. More control of environment and more efficiency.</p>
<p>This leads to&#8230;</p>
<p><strong>Cloud computing.</strong></p>
<p>Wow, show of hands from the audience when Marie asked &#8220;how many are using cloud computing?&#8221; and &#8220;how many are using your own clouds?&#8221; - not a lot of hands were raised. Interesting considering the coverage cloud computing has and the focus of it.</p>
<p>Cloud computing has three possibilities at Cisco:</p>
<ul>
<li>Flexible infrastructure (hosting)</li>
<li>Abstract services (APIs)</li>
<li>Application services (SaaS)</li>
</ul>
<p>Automation is going to be key, and will need to integrate virtualization-aware elements.</p>
<p>Can you imagine if you wanted interoperability in the cloud? People haven&#8217;t even begun thinking about it.</p>
<p><strong>Conclusion</strong></p>
<p>As you virtualize, your role will change. You will think more about strategy. But keep in mind these &#8220;minefields&#8221; of virtualization:</p>
<ul>
<li>Insufficient planning</li>
<li>Lack of standards</li>
<li>Weak security</li>
</ul>
<p>Security cannot be an afterthought. It has to be planned. We&#8217;ve seen new forms of malware, hypervisor attacks, and root kit infections.</p>
<p>As higher expectations from end users evolve, we&#8217;re becoming not server oriented, but SERVICE oriented.</p>
<p><strong>Tips:</strong></p>
<ul>
<li>Think holistically</li>
<li>Consider IT culture - equipment and people</li>
</ul>
]]></content:encoded>
      <pubDate>Wed, 17 Sep 2008 10:11:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/virtualization">virtualization</category>
      <category domain="http://securityratty.com/tag/virtualization starts">virtualization starts</category>
      <category domain="http://securityratty.com/tag/virtualization helps">virtualization helps</category>
      <category domain="http://securityratty.com/tag/helps">helps</category>
      <category domain="http://securityratty.com/tag/virtualization depends">virtualization depends</category>
      <category domain="http://securityratty.com/tag/virtualization holds">virtualization holds</category>
      <category domain="http://securityratty.com/tag/network">network</category>
      <category domain="http://securityratty.com/tag/network brings transparency">network brings transparency</category>
      <category domain="http://securityratty.com/tag/cisco">cisco</category>
      <source url="http://blog.sciencelogic.com/interop-ny-keynotes-cisco/09/2008">Interop NY Keynotes: Cisco</source>
    </item>
    <item>
      <title><![CDATA[Supporting CEP with Solace Content Routers]]></title>
      <link>http://securityratty.com/article/8d902f5832f1d3b5efbfc1f409e130b5</link>
      <guid>http://securityratty.com/article/8d902f5832f1d3b5efbfc1f409e130b5</guid>
      <description><![CDATA[Interested in content routing and event preprocessingsupporting futureCEP applications? Check out Solace Systems . You can click on the image below for a better picture of the Solace architecture for...]]></description>
      <content:encoded><![CDATA[<p>Interested in content routing and event preprocessing supporting future CEP applications?  Check out <a href="http://wwww.solacesystems.com" target="_blank">Solace Systems</a>.  You can click on the image below for a better picture of the Solace architecture for event processing.</p>
<p style="text-align: center;"><a href="http://www.solacesystems.com/images/solutions/cep_architecture.gif" target="_blank"><img class="aligncenter" src="http://www.solacesystems.com/images/solutions/cep_architecture.gif" alt="" width="450" height="283" /></a></p>
<p>Solace provides <a href="http://www.solacesystems.com/solutions/fs_event_processing.asp" target="_blank">sophisticated middleware functionality</a> in hardware to monitor, filter, route, transform and secure very large volumes of events in real time and with minimal processing overhead.  Solace uses leading-edge FPGA, ASIC and network processor technology to increase throughput and lower latency of event processing. Applications such as fraud detection, algorithmic trading, compliance, insider trade monitoring, risk management and more can be tackled more effectively by separating the simple monitoring, filtering and normalization of raw events from the complex processing of select events. This event pre-processing takes the burden off CEP engines allowing individual engines to be much more effective. </p>
]]></content:encoded>
      <pubDate>Sat, 06 Sep 2008 07:42:30 +0000</pubDate>
      <category domain="http://securityratty.com/tag/solace">solace</category>
      <category domain="http://securityratty.com/tag/solace systems">solace systems</category>
      <category domain="http://securityratty.com/tag/events">events</category>
      <category domain="http://securityratty.com/tag/raw events">raw events</category>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/solace architecture">solace architecture</category>
      <category domain="http://securityratty.com/tag/network processor technology">network processor technology</category>
      <category domain="http://securityratty.com/tag/select events">select events</category>
      <category domain="http://securityratty.com/tag/applications">applications</category>
      <source url="http://www.thecepblog.com/2008/09/06/supporting-cep-with-solace-3230-and-solace-3260-content-routers/">Supporting CEP with Solace Content Routers</source>
    </item>
    <item>
      <title><![CDATA[MySpace And Facebook Users Targeted By New Worms]]></title>
      <link>http://securityratty.com/article/4d809174d365be423426ff372787f924</link>
      <guid>http://securityratty.com/article/4d809174d365be423426ff372787f924</guid>
      <description><![CDATA[Kaspersky Lab reports two new variants of a worm which attack MySpace and Facebook users. As part of their malicious payload, the worms transform victim machines into zombie computers to form botnets....]]></description>
      <content:encoded><![CDATA[Kaspersky Lab reports two new variants of a worm which attack MySpace and Facebook users. As part of their malicious payload, the worms transform victim machines into zombie computers to form botnets. New worms are labeled as Net-Worm.Win32.Koobface.a. and Net-Worm.Win32.Koobface.b.
Currently the worms are only infecting MySpace and Facebook users but their design allows to upload [...]]]></content:encoded>
      <pubDate>Fri, 01 Aug 2008 06:51:19 +0000</pubDate>
      <category domain="http://securityratty.com/tag/facebook users">facebook users</category>
      <category domain="http://securityratty.com/tag/myspace">myspace</category>
      <category domain="http://securityratty.com/tag/worms">worms</category>
      <category domain="http://securityratty.com/tag/kaspersky lab reports">kaspersky lab reports</category>
      <category domain="http://securityratty.com/tag/attack myspace">attack myspace</category>
      <category domain="http://securityratty.com/tag/net-worm">net-worm</category>
      <category domain="http://securityratty.com/tag/worm">worm</category>
      <category domain="http://securityratty.com/tag/zombie computers">zombie computers</category>
      <category domain="http://securityratty.com/tag/form botnets">form botnets</category>
      <source url="http://cyberinsecure.com/myspace-and-facebook-users-targeted-by-new-worms/">MySpace And Facebook Users Targeted By New Worms</source>
    </item>
    <item>
      <title><![CDATA[NAPA Shows How the Government is Using Web 2.0]]></title>
      <link>http://securityratty.com/article/c2382eef0b0cdb073ef226ac74ecee5b</link>
      <guid>http://securityratty.com/article/c2382eef0b0cdb073ef226ac74ecee5b</guid>
      <description><![CDATA[Back in April, we attended a session at the FOSE conference that highlighted Web 2.0 usage in the public sector . We also found through a survey of government workers that 65% of government IT workers...]]></description>
      <content:encoded><![CDATA[<p>Back in April, we attended a session at the <a href="http://blog.sciencelogic.com/fose-session-web-20-for-the-public-sector/04/2008" target="_blank">FOSE conference that highlighted Web 2.0 usage in the public sector</a>. We also found <a href="http://blog.sciencelogic.com/web-20-adoption-by-the-federal-government-shouldnt-be-a-surprise/06/2008" target="_blank">through a survey of government workers</a> that 65% of government IT workers surveyed said that Web 2.0 tools are important to their operations. The overall message was that all IT, government included, have too many projects they could be taking on for the amount of resources they have. For much of the IT topics we covered in the survey, importance was high but actual deployment was lower.
<p>Dan Munz, project manager of the <a href="http://www.collaborationproject.org/" target="_blank">Collaboration Project</a> commented on <a href="http://www.collaborationproject.org/display/home/Collaboration+Project+Blog" target="_blank">the unique work</a> that the National Academy of Public Administration (NAPA) is doing to bring together government leaders. The Collaboration Project seeks to innovate across government not just down the silos and create a safe place for leaders to have discussions around innovation.
<p><strong><em>ScienceLogic:</em></strong> What is the National Academy of Public Administration?
<p><strong><em>Dan Munz:</em></strong> The Academy is an independent, non-partisan, non-profit organization dedicated to tackling government&#8217;s most complex challenges. We were founded in 1967 by James Webb, the NASA administrator who took us to the moon – he saw that he could consult the National Academy of Sciences for expert technical advice, but had no counterpart in government for expert management advice. That&#8217;s been our mission ever since.
<p><strong><em>ScienceLogic:</em></strong> What is the Collaboration Project? How long has it been around?
<p><strong><em>Dan Munz:</em></strong> The Collaboration Project is the Academy&#8217;s response to two parallel trends we see in government. The first is the government’s need to transform the way it does business. There is a strong demand for change out there driven by a number of challenges that are forcing the government to rethink its mission and structure. Challenges include a public disconnected from government; a multi-sector workforce and increasing reliance on contractors; financial instability; and new types of security threats, just to name a few. More and more, the challenges facing government reach across the traditional boundaries of agency and mission. But government isn&#8217;t configured to work that way.
<p>The second trend is the unprecedented opportunity collaborative technology offers to drive transformational change in government. Tools like blogs, wikis, and mashups are changing the way leaders think about problems. They&#8217;re focusing not on what they can do just within their offices or agencies, but what voices they need to pull together across government, non-profits, the general citizenry, and other stakeholders to solve these problems. The Collaboration Project’s goal is to encourage this type of thinking and empower leaders committed to use collaborative technology to:
<ul>
<li>strengthen citizen civic engagement;</li>
<li>enhance government transparency;</li>
<li>improve service delivery and operational efficiency; and</li>
<li>facilitate coordination and innovation within and between agencies.</li>
</ul>
<p><strong><em>ScienceLogic:</em></strong> Why focus on Web 2.0 in the government?
<p><strong><em>Dan Munz:</em></strong> The question of how web 2.0 will impact federal IT departments is a critical one. Our view is that &#8220;the era of big systems&#8221; is basically over. Things like disk space, bandwidth, and computing power are basically shifting from being assets to being commodities.
<p>There&#8217;s also a shift in expectations. People both inside and outside government – especially Gen-X and Gen-Y – are incredibly frustrated by being able to use lightning-fast apps like Flickr, YouTube, and Facebook <i>that don&#8217;t even live on their hard drives</i> while the government and other large organizations still operate clunky PCs, space-limited e-mail accounts, and sluggish e-mail servers.
<p>So aside from the opportunity for transformative leadership, the idea of web 2.0 at a government level is very appealing in terms of getting the most out of the IT infrastructure we already have, rather than embarking on costly, large-scale projects in an era of diminishing budgets.
<p><strong><em>ScienceLogic:</em></strong> How do you build a sense of community at the Collaboration Project?
<p><strong><em>Dan Munz:</em></strong> Some community feel emerges naturally, from a sense that mass collaboration really is a tool for &#8220;doing government&#8221; in a whole new way.
<p>The more formal community building mechanisms we have include <a href="http://www.collaborationproject.org" target="_blank">our web page</a>, where we share insights, news, case studies, and other content – The virtual space serves as an anchor for people, whether they&#8217;re experts or beginners, to learn about what we do.
<p>Finally, we are conducting an ongoing series of in-person meetings, usually featuring a leader who has harnessed collaborative technology in what we think is a truly revolutionary new way.
<p><strong><em>ScienceLogic:</em></strong> How do you hear about cool new government Web 2.0 projects?
<p><strong><em>Dan Munz:</em></strong> That&#8217;s a key question, because part of our mission is to inspire action by finding leaders who have succeeded and highlight their accomplishments. We&#8217;ve done that with folks like Kip Hawley, TSA, Molly O&#8217;Neill, EPA, and Jim Walker, Alabama DHS.
<p>We also feel that the Academy&#8217;s position as a &#8220;safe space&#8221; for leaders means that we&#8217;re a place people can turn to when they hear about an emerging trend or project and want some help making sense of it.
<p><strong><em>ScienceLogic:</em></strong> What are the most innovative uses of Web 2.0 technology you&#8217;ve seen in the government?
<p><strong><em>Dan Munz:</em></strong> It&#8217;s important to distinguish between agencies that are simply adjusting to the reality of web 2.0, and those that are &#8220;using&#8221; it. Getting a YouTube account for your agency, or putting some photos on Flickr, is a great first step, but we want to inspire leaders to really transform their normal ways of doing business. At the moment a few that come to mind are the EPA Puget Sound Mashup, ODNI&#8217;s Intellipedia, TSA IdeaFactory, the PTO Peer-to-Patent Project, and Virtual Alabama, to name a few.
<p>The <a href="http://www.fcw.com/print/22_5/features/151791-1.html" target="_blank">TSA launched the IdeaFactory</a> in February 2008. TSA set up a collaboration platform with commenting, voting, etc. to form communities in a way to bring people to consensus and <a href="http://www.collaborationproject.org/pages/viewpage.action?pageId=5668923&amp;navigatingVersions=true" target="_blank">offer ways to improve the agency&#8217;s performance</a>.
<p><strong><em>ScienceLogic:</em></strong> Do you see a difference between state and local versus federal adoption of Web 2.0?
<p><strong><em>Dan Munz:</em></strong> That&#8217;s a hard generalization to make – at all levels you see leaders who recognize the potential in this technology to bring new voices into the governance process.
<p><strong><em>ScienceLogic:</em></strong> What are the obstacles to Web 2.0 adoption by government agencies?
<p><strong><em>Dan Munz:</em></strong> The three main challenges that we see are in the areas of technology, culture, and policy/governance.
<p>The technology issue is probably the simplest to solve – it&#8217;s important to choose a technology that fits the problem you&#8217;re trying to solve, but these technologies are usually inexpensive and almost never very complex.
<p>The question of culture is harder, particularly given the way that baby boomers, gen-xers, and millenials are beginning to interact in the workforce. How do you gain acceptance and buy-in among groups that have very different comfort levels with collaborative tools and environments?
<p>Finally, the most daunting challenge might be the questions of policy and governance, if only because those are the things that most commonly prevent leaders from even dipping a toe in the waters of collaboration. Most of the policies, regulations, and statutes governing the way government does business don&#8217;t anticipate things like wikis, blogs, or instant messaging. One of our most important missions is helping leaders who just want to get to action navigate these obstacles.
<p><strong><em>ScienceLogic:</em></strong> Is there any advice you can give to government employees getting started with Web 2.0? Or any places you would point them to for more info?
<p><strong><em>Dan Munz:</em></strong> It&#8217;s shameless plug time! I&#8217;d of course point them to our web page, <a href="http://collaborationproject.org/">collaborationproject.org</a>, where, among other things, we&#8217;ve collected a case library of over 40 instances of collaborative technology being used in the government and non-profit sectors. The library is growing every day and is a sort of &#8220;database of record&#8221; for what is and isn&#8217;t working in terms of collaborative government. I think that would be a great place to start for anyone looking to get started but not really knowing the way.
<p>In terms of advice, the best thing to say is that, once you&#8217;ve settled on a problem you want to solve and an audience you want to reach out to, <b>just do it</b>! We believe strongly that there are a lot of organizational and leadership issues that still need to be addressed regarding collaboration in government, but our biggest mantra is about getting leaders to action. The most successful projects we&#8217;ve seen are ones that try something daring and new, and discover the true power of what they&#8217;ve done as it catches on more and more widely.</p>
<p><a href="http://sharethis.com/item?&wp=abc&amp;publisher=ea11358c-69de-4e80-9804-e964a8930b70&amp;title=NAPA+Shows+How+the+Government+is+Using+Web+2.0&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Fnapa-shows-how-the-government-is-using-web-20%2F07%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Wed, 16 Jul 2008 16:45:37 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/government">government</category>
      <category domain="http://securityratty.com/tag/web page">web page</category>
      <category domain="http://securityratty.com/tag/government web">government web</category>
      <category domain="http://securityratty.com/tag/collaboration">collaboration</category>
      <category domain="http://securityratty.com/tag/mass collaboration">mass collaboration</category>
      <category domain="http://securityratty.com/tag/collaboration project seeks">collaboration project seeks</category>
      <category domain="http://securityratty.com/tag/government employees">government employees</category>
      <category domain="http://securityratty.com/tag/enhance government transparency">enhance government transparency</category>
      <source url="http://blog.sciencelogic.com/napa-shows-how-the-government-is-using-web-20/07/2008">NAPA Shows How the Government is Using Web 2.0</source>
    </item>
    <item>
      <title><![CDATA[Links List 6.13.08]]></title>
      <link>http://securityratty.com/article/0b0ff8a848238747fbf053dae5ed4898</link>
      <guid>http://securityratty.com/article/0b0ff8a848238747fbf053dae5ed4898</guid>
      <description><![CDATA[Nothing to do with monitoring, but completely funny. I have not been following the Broadcom ex-CEO Henry Nicholas exploits , and now I think I should have been. Not only did this bad boy add a...]]></description>
      <content:encoded><![CDATA[<p>Nothing to do with monitoring, but completely funny. I have not been following the <a href="http://weblog.infoworld.com/robertxcringely/archives/2008/06/geek_week_broad.html" target="_blank">Broadcom ex-CEO Henry Nicholas&#8217; exploits</a>, and now I think I should have been. Not only did this bad boy add a<b> </b><a href="http://www.infoworld.com/article/08/06/05/Broadcom-co-founder-drugged-drinks-indictment-says_1.html" target="_blank">fictional $2.2 billion</a> worth of revenue to his company&#8217;s bottom line, a second indictment also charges him with a slew of stuff including &#8220;spiking customer and employee drinks with ecstasy and other drug-related charges&#8221;. The best one: during a trip to Vegas on his private plane, Nicholas and others smoked so much pot that the pilot had to put on an oxygen mask. </p>
<p>Sevcik and Wetzel have a consistently interesting column on Application Performance Management at NetworkWorld. This week, they unveiled the results of a benchmarking survey that tells them <a href="http://www.networkworld.com/community/node/28639" target="_blank">mid-sized enterprises have it harder</a> when it comes to deploying such solutions.</p>
<p>We agree; it&#8217;s why we exist. Mid-sized enterprises have the same IT problems but not nearly the same amount of resources as the really big guys to throw against solving them.</p>
<p>VMWare&#8217;s acquisition of B-hive continues to generate buzz for <a href="http://servervirtualization.blogs.techtarget.com/2008/06/10/performance-management%e2%80%99s-next-frontier/" target="_blank">performance management and virtualization</a>. I love this quote from the CEO of Aternity, &#8220;The next big frontier is the ability to transform huge amounts of data into actionable business intelligence that correlates across platforms.&#8221; Um, we&#8217;re already doing this. What would be the purpose of collecting hundreds of millions of data points if you couldn&#8217;t actually present the data in a meaningful way? Maybe his comment was taken out of context and it&#8217;s more about the fact that it&#8217;s often difficult to get consistent and accurate info on virtualization resource utilization stats in particular. That we totally agree with. Another take on the B-hive acquisition: <a href="http://blogs.vmware.com/vmtn/2008/06/what-does-b-hiv.html" target="_blank">VMTN blog gives a quick overview</a> of what it means for infrastructure groups and virtual environments.</p>
<p><a href="http://sharethis.com/item?&wp=2.3.3&amp;publisher=f8a81d13-50d0-4a5c-833d-8e5f2341e305&amp;title=Links+List+6.13.08&amp;url=http%3A%2F%2Fblog.sciencelogic.com%2Flinks-list-61308%2F06%2F2008">ShareThis</a></p>]]></content:encoded>
      <pubDate>Fri, 13 Jun 2008 09:01:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/application performance management">application performance management</category>
      <category domain="http://securityratty.com/tag/performance management">performance management</category>
      <category domain="http://securityratty.com/tag/actionable business intelligence">actionable business intelligence</category>
      <category domain="http://securityratty.com/tag/data">data</category>
      <category domain="http://securityratty.com/tag/transform huge amounts">transform huge amounts</category>
      <category domain="http://securityratty.com/tag/companys bottom line">companys bottom line</category>
      <category domain="http://securityratty.com/tag/quick overview">quick overview</category>
      <category domain="http://securityratty.com/tag/vmtn blog">vmtn blog</category>
      <category domain="http://securityratty.com/tag/agree">agree</category>
      <source url="http://blog.sciencelogic.com/links-list-61308/06/2008">Links List 6.13.08</source>
    </item>
    <item>
      <title><![CDATA[In Next-Gen Bullets and Bombs, Even the Casing Explodes]]></title>
      <link>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</link>
      <guid>http://securityratty.com/article/d0a5d9866a8d1cba92fde9bc4208e745</guid>
      <description><![CDATA[The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with &quot;reactive materials,&quot; normally harmless matter that combines to release explosive amounts...]]></description>
      <content:encoded><![CDATA[<p>
The Pentagon has quietly been working on a new arsenal of advanced weaponry that replaces metal casings with "reactive materials," normally harmless matter that combines to release explosive amounts of energy on impact, tearing targets apart with violent fury. 
</p><p>
In development for more than 30 years, the research is beginning to bear fruit, and may soon spawn more powerful bombs, warheads that tear apart stone and concrete, mines that can be set to stun or kill, and grenades that can swat rockets or mortar rounds out of the sky like flies. 
</p><p>
"You can get effects that are more precisely tailored to a particular target," says John Pike, director of Washington military research group <a href="http://www.globalsecurity.org/">GlobalSecurity.org</a>. "And you're able to get a greater effect out of a smaller munition."
</p><p>
Reactive materials are combinations of materials that are normally stable, but, when subjected to sudden shock -- such as striking a target -- release a large amount of energy. Depending on the composition and warhead design, the energy can be released as heat, a blast or a combination of the two. Unlike conventional explosives, RMs cannot be set off by fuses. Technically, they are classified as flammable solids, and they are less hazardous to transport and store than explosives.
</p><p>
While they're more energetic than explosives, RMs are not intended to be a substitute. Instead, they will replace warhead components normally made of metal.
</p><p>
An analysis of U.S. military procurement papers and defense contractor presentations, as well as interviews with companies working on the technology, suggests that a wave of munitions using reactive materials may be headed for a battlefield near you.
</p><p>
The material can dramatically magnify the yield of conventional bombs, and do away with the waste embodied by a bomb's inert metal skin. The U.S. Air Force's 5,000 BLU-122 bunker buster, for example, contains just 780 pounds of explosives; the other 80 percent is the bomb's thick steel casing. DARPA's <a href="https://www.fbo.gov/files/f0a/f0accb88909eadb4ace790fe731eb03b.doc?i=1482beb061c1dbdbc36c23683d85e170">Reactive Munition program</a> (.doc) aims to replace that steel with RMs, to create a bomb with a blast four times as powerful. Alternatively, a new bomb could be half the size of existing weapons but twice as powerful.
</p>

<p>Conventional warheads could also benefit from an RM makeover. For centuries, shells have blasted out steel shrapnel, small pieces of metal that cause damage with their high speed. Defense contractor Alliant Techsystems is developing a warhead called <a href="http://atk.mediaroom.com/index.php?s=press_releases&item=801"> BattleAxe</a> for the Air Force that uses fragments made of RM instead of metal. Those fragments will explode on impact, making the warhead far more effective against soft targets like trucks.
</p>

<p>
RM shrapnel is also being touted as the ideal way of <a href="http://www.virtualacquisitionshowcase.com/docs/2007/DETech-Brief.pdf ">shooting down incoming rockets and mortar bombs</a> (.pdf).
</p>

<p>
A radar-guided defense pod can automatically engage incoming rockets or other threats using RM-based grenades. Weapons designers suggest that RMs can be five to ten times as effective as the existing inert shrapnel for this task. Moreover, RM shrapnel can be engineered to burn out at a set distance, so there is no hazard to nearby friendly forces.
</p>


<!--pagebreak-->

<p>
Bullets can even be made of RM. The Navy's new 
<a href="http://www.onr.navy.mil/emrg/electromagnetic-railgun.asp">electromagnetic railgun</a> has been criticized because it can only fire solid slugs, not the usual explosive shells. However, documents reveal that <a href="http://www.psicorp.com/preleases/0105tungsten.shtml">tungsten-based RM</a> rounds are being developed for the weapon. These will explode on impact, making the railgun effective against buildings, ships and vehicles.
</p><p>
Shaped charges are another application where RMs can increase the effectiveness of existing designs. In a shaped charge, a hollow metal cone is surrounded by explosive material, which is then detonated, forcing the blast through the small end of the cone.
</p><p>
"The action is analogous to stamping on an open toothpaste tube, ejecting the liquid contents," says Douglas Millard of British defense contractors <a href="http://www.qinetiq.com/">QinetiQ</a>. 
</p><p>
Replace the metal liner with RM, and the explosive power of that jet will increase dramatically.
</p><p>
"Such reactions are highly exothermic and therefore lead to the release of large amounts of energy, which is in addition to the kinetic energy within the jet," Millard says. "An increase in the energy coupled into the target occurs and this results in the creation of greater damage to the target."
</p><p>
QinetiQ is marketing an RM-based shaped charge called <a href="http://www.qinetiq.com/home/newsroom/news_releases_homepage/2007/2nd_quarter/qinetiq__shell_and.html">Connex</a> for oil-well perforation in the civil market. Meanwhile, the U.S. Army is developing a demolition charge called Bam Bam that blasts a jet of RM deep into stone or concrete, producing massive damage
</p><p>
One version of the Bam Bam charge is intended for demolishing bridges and other structures. An alternative version blasts broader, shallower craters in roads or runways, making them useless.
</p><p>
RMs will also transform another mutation called the Explosively Formed Penetrator, a modified version of the shaped charge. Instead of producing a narrow, short-range jet, the Penetrator fires an aerodynamic slug of metal over a long distance. It's best known as a favored weapon of insurgents in Iraq. Again, replacing the metal with RM makes a much deadlier weapon -- after punching through armor, the slug releases energy like a grenade going off.
</p><p>
If you're a weapons designer, RMs also offer amazing flexibility. Alliant Techsystems is building a <a href="http://proceedings.ndia.org/3500/Cvetnic_Demo_NDIA.pps">variable landmine</a> (.pps) -- a so-called "dial-a-yield" weapon that can produce a range of different effects.
</p><p>
At the lowest setting, most of the output would be light -- a dazzling warning that would be impossible to miss. A higher setting would produce intense heat, creating a "discomfort zone" to drive off intruders. The third setting produces a nonlethal blast, like the concussion stun grenades used by Special Forces. If lethal force is called for, the mine could be set to produce either inert shrapnel or reactive shrapnel that explodes on impact.
</p><p>
RM munitions may face legal challenges. Under the St. Petersburg Declaration of 1868, the use of explosive projectiles with a weight of less than 400 grams is forbidden, as is using incendiary ammunition, like napalm, against personnel. But RMs are not technically explosive or incendiary, and although the effect on human targets might cause protests from some groups, they are likely to be accepted, human rights experts say.
</p><p>
"Like any weapon, it would have to go through a lengthy effectiveness and then legal review, " says Marc Garlasco, senior military analyst at <a href="http://www.hrw.org/">Human Rights Watch</a>. "If used in the open against military targets, it does not seem to have any obvious problems at first blush." 
</p><p>
However, there may be technology issues too. Although the developers sound very upbeat in all their descriptions of RM munitions, producing material that will reliably release energy only when required is extremely challenging.
</p><p>
"The fact that they've been working on it so long and don't seem to have fielded anything yet suggests that there may be a problem with the technology," GlobalSecurity's Pike says.
</p><p>
Normally new weapons are fielded rapidly if there is a military demand -- assuming they work. So far, RMs have not made it into the field, and the technology may not be as mature as developers suggest.
</p><p>
But Pike also notes that there has been an unprecedented surge in munitions development over the last few years, with "all kinds of weird stuff" being developed.
</p><p>
So after decades of being kept very quiet, reactive materials may soon be making a lot of noise.
</p><p>
---
</p><p>
Check out <a href="http://blog.wired.com/defense/">Danger Room</a> for more on reactive materials.
</p><br style="clear: both;"/>
  <img alt="" style="border: 0; height:1px; width:1px;" border="0" src="http://www.pheedo.com/img.phdo?i=6c55edcd405de4222b72dd8dc1e1e502" height="1" width="1"/>
<img src="http://www.pheedo.com/feeds/tracker.php?i=6c55edcd405de4222b72dd8dc1e1e502" style="display: none;" border="0" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=kwlINH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=kwlINH" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=oApXnh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=oApXnh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=UEVYAh"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=UEVYAh" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/wired/politics/privacy?a=BEUokH"><img src="http://feeds.feedburner.com/~f/wired/politics/privacy?i=BEUokH" border="0"></img></a>
 <a href="http://feeds.wired.com/~f/wired/politics/security?a=IBZcBH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=IBZcBH" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=ijOkQh"><img src="http://feeds.wired.com/~f/wired/politics/security?i=ijOkQh" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=kWK2Ph"><img src="http://feeds.wired.com/~f/wired/politics/security?i=kWK2Ph" border="0"></img></a> <a href="http://feeds.wired.com/~f/wired/politics/security?a=E6CgpH"><img src="http://feeds.wired.com/~f/wired/politics/security?i=E6CgpH" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/wired/politics/privacy/~4/285018670" height="1" width="1"/><img src="http://feeds.wired.com/~r/wired/politics/security/~4/285018672" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 06 May 2008 21:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/amounts">amounts</category>
      <category domain="http://securityratty.com/tag/release explosive amounts">release explosive amounts</category>
      <category domain="http://securityratty.com/tag/release">release</category>
      <category domain="http://securityratty.com/tag/metal">metal</category>
      <category domain="http://securityratty.com/tag/hollow metal cone">hollow metal cone</category>
      <category domain="http://securityratty.com/tag/explosive">explosive</category>
      <category domain="http://securityratty.com/tag/energy">energy</category>
      <category domain="http://securityratty.com/tag/reliably release energy">reliably release energy</category>
      <category domain="http://securityratty.com/tag/metal liner">metal liner</category>
      <source url="http://feeds.wired.com/~r/wired/politics/security/~3/285018672/reactive_revolutions">In Next-Gen Bullets and Bombs, Even the Casing Explodes</source>
    </item>
    <item>
      <title><![CDATA[Your Suggestions to Transform Security from a Roadblock to a Catalyst for Business Innovation]]></title>
      <link>http://securityratty.com/article/cabc6609dbd690744290a3864610e2e3</link>
      <guid>http://securityratty.com/article/cabc6609dbd690744290a3864610e2e3</guid>
      <description><![CDATA[Yesterday at the RSA Conference Art Coviello addressed how security fears have stifled innovation at organizations large and small around the world. IDG Research reports that 80 percent of IT,...]]></description>
      <content:encoded><![CDATA[Yesterday at the RSA Conference Art Coviello addressed how security fears have stifled innovation at organizations large and small around the world. IDG Research reports that 80 percent of IT, security, and business executives surveyed admit that their organizations have shied away from business innovation opportunities because of information security concerns.
<P>
RSA is committed to countering this trend by starting an industry-wide conversation about smart ways to manage information risk. As we mentioned in yesterday's blog posting, we were able to pick the brains of 10 top security executives from global enterprises in a variety of industries and get THEIR suggestions. <B>But we'd like to hear from you...</b>]]></content:encoded>
      <pubDate>Tue, 08 Apr 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/top security executives">top security executives</category>
      <category domain="http://securityratty.com/tag/innovation">innovation</category>
      <category domain="http://securityratty.com/tag/security fears">security fears</category>
      <category domain="http://securityratty.com/tag/information security concerns">information security concerns</category>
      <category domain="http://securityratty.com/tag/business innovation opportunities">business innovation opportunities</category>
      <category domain="http://securityratty.com/tag/manage information risk">manage information risk</category>
      <category domain="http://securityratty.com/tag/idg research reports">idg research reports</category>
      <category domain="http://securityratty.com/tag/global enterprises">global enterprises</category>
      <source url="http://www.rsa.com/blog/blog_entry.aspx?id=1271">Your Suggestions to Transform Security from a Roadblock to a Catalyst for Business Innovation</source>
    </item>
    <item>
      <title><![CDATA[Checklists -The Preserve of the Intelligent]]></title>
      <link>http://securityratty.com/article/6c4d47cc81a1826a38bc9f17399f0dc5</link>
      <guid>http://securityratty.com/article/6c4d47cc81a1826a38bc9f17399f0dc5</guid>
      <description><![CDATA[As the New Yorker says If something so simple can transform intensive care, what else can it do?. Dennis Groves sent me this article a week ago and I read it twice. Each time I couldnt stop myself...]]></description>
      <content:encoded><![CDATA[As the New Yorker says &#8220;If something so simple can transform intensive care, what else can it do?&#8221;. Dennis Groves sent me this article a week ago and I read it twice. Each time I couldn&#8217;t stop myself thinking about how many people in the information security industry shun checklists and considering why this is. [...]]]></content:encoded>
      <pubDate>Sun, 17 Feb 2008 04:51:11 +0000</pubDate>
      <category domain="http://securityratty.com/tag/transform intensive care">transform intensive care</category>
      <category domain="http://securityratty.com/tag/dennis groves">dennis groves</category>
      <category domain="http://securityratty.com/tag/week ago">week ago</category>
      <category domain="http://securityratty.com/tag/yorker">yorker</category>
      <category domain="http://securityratty.com/tag/people">people</category>
      <category domain="http://securityratty.com/tag/stop">stop</category>
      <category domain="http://securityratty.com/tag/time">time</category>
      <category domain="http://securityratty.com/tag/simple">simple</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <source url="http://securitybuddha.com/2008/02/17/checklists-the-preserve-of-the-intelligent/">Checklists -The Preserve of the Intelligent</source>
    </item>
  </channel>
</rss>
