January 20, 2014

SDN essentials: Why network orchestration and virtualization?
SDN orchestration tools have emerged from startup Anuta Networks and Alcatel-Lucent's Nuage Networks. These tools target cloud providers that need to automate the creation of network services for their customers, although each company attacks the problem in a different way. Anuta's solution focuses on working with the network infrastructure many providers already have in place, while Nuage introduces a distributed software router and overlay network to create multi-tenant friendly network containers.


The PoSh DBA - Reading and Filtering Errors
Both the SQL Server Error Log and the Event Viewer are designed to be used via their respective graphic user interface. This is fine for one or two servers, but painfully slow for the average DBA who has to read and filter information in many servers. Even when you’re focusing down on a problem with a single busy server, the added weight of the graphical tool in terms of resources can slow troubleshooting down considerably. It is very important in the day-to-day life of a DBA to have a mechanism to read and filter error messages quickly and unintrusively; a technique for "mining errors".


E-book: IAM for the Real World: Simplifying Complexity
The world of identity and access management (IAM) is one of constant change, shrinking deadlines, minuscule budgets, overtaxed staff and unmerciful regulations. Unfortunately, the historical approach to IAM involves piecing together “half solutions,” in hope that tomorrow’s solutions will address real-world needs. The e-book “IAM for the Real World: Simplifying Complexity” evaluates what IAM for the real world would, should and can look like. It delves into the most pressing IAM issues faced by virtually every organization and offers actionable, affordable and sustainable approaches to the IAM challenges you face.


The smartest cars may need 5G, Ericsson says
Connected to a 5G network, cars could warn drivers of an impending collision or even be guided through traffic automatically with no driver behind the wheel, Ewaldsson said. Demonstrations at CES showed off both of those types of capabilities. But making those kinds of services work would require guaranteed performance all the way from the cloud that runs the service to the car, and back again. "The networks that we have today have nowhere near that quality-of-service guarantee," Ewaldsson said.


Which mobile cloud approach is right for your company?
Most companies are still trying to find the appropriate mobile cloud computing strategy to make sure their employees are more productive and their data (and their customers' data) is secure. Doing so could mean that remote workers have a combination of mobile apps, remote access to other systems and secure email, for example. Business leaders and IT managers need to think about their enterprise architecture and how to make their employees more productive in the mobile era.


The 24 most exciting new gadgets coming soon
CES has come and gone: we now have a long list of new and notable products coming in 2014. What follows are the ones we're most looking forward to. Let's start by stating the obvious: in 2014, we're going to see a lot of "sequel" products building on the success -- or attempting to fix the shortfalls -- of their predecessors. We've broken out some of the more notable ones on the pages that follow. This story was originally published on January 1, 2014, and has been updated extensively with additional products announced at CES 2014.


Build big data adaptability through rapid experimentation
Adaptable organizations experiment rapidly with their offerings (products, services, and relationships) and build strong discovery capabilities. There's no better way to accelerate discovery than to embrace big data in your strategy -- the key is to attack this with purpose and vigor. To dramatically increase adaptability, you must build an organization that experiments in a big data fashion: with high volume, velocity, and variety.


What Executives Should Know About Open Data
Not all data that’s valuable is internal and proprietary. New initiatives by governments as diverse as those of the United States, Mexico, and Singapore are opening the spigots of readily usable public data. Corporate information too is becoming more “liquid,” moving across the economy as companies begin sharing data with their business partners and, sometimes, consumers. Also surging is the richness of the information from data aggregators, which are assembling, rendering anonymous, and selling (to interested third parties) a wide range of data flows.


Rapid Diffusion of New Technologies Stumps IT Managers
IT managers allowing these technologies to enter the workplace must also take into consideration wireless security. Currently, emerging technologies use either their own WiFi capability to connect to a network or Bluetooth to tether themselves to a tablet or smartphone to access the Internet via a 3G/4G network. There are several issues to consider; the first is using public, unsecured networks. As these devices become more widely deployed they will be a target for the cybercriminal community just like today’s mobile devices.


Considering Going Remote? Here’s What Managers Need to Know
Telecommuting comes with challenges. From a manager’s perspective, there can be security concerns about sensitive company data on a remote device. Remote employees can burn out more easily as they work longer than they would have if they were in the office, research shows. Working from home can also be isolating and lonely. “The worst part about being remote is the feeling of being disconnected. We always wonder if we’re doing OK, if we’re remembered, if we’re sufficiently connected to the home office,” said Scott Hanselman, a programmer at Microsoft who works remotely.



Quote for the day:

"Successful people make the right decisions early and manage those decisions daily." -- John Maxwell

January 19, 2014

The models of data stewardship: how to run a data governance program
In this video interview from the fall 2009 TDWI World Conference, Dyche, partner and co-founder of Baseline Consulting, and Nevala, a senior consultant at Baseline, give tips on how to manage data governance programs and detail what they've defined as the five models of data stewardship. In addition, they discuss the benefits that BI teams can get from data governance programs, the need to measure the success of governance initiatives and the importance of giving data stewards the authority and accountability that's required to succeed in that role.


The 5 Keys to Effective Vulnerability Assessment
The bad news here is that too many organizations are not taking care of the basics that they need to in order to secure their systems. The good news: there are many straightforward steps these organizations can take to dramatically improve the security of their systems. One of these steps is having an effective vulnerability risk management program. In fact, a vulnerability assessment to scan for and remedy security flaws and weak configurations within your infrastructure is one of the most effective things you can do to increase the security of your enterprise.


A Simple Model for Information Governance, Part 1 of 3
While both AIIM and ARMA cover the information portion of the topic well, they seem to struggle with bridging the discussion into “Governance.” Others, in the Governance, Risk Management and Compliance arena, make clear the linkage between “Governance” and risk management and compliance, but generally with little reference to “Information.” See OCEG’s “GRC Capability Model ‘Red Book’ 2.0.” (The current version, 2.1, doesn’t address this as well).


SQL Server Change Tracking: A Near Bullet-Proof ETL Solution (Part 1)
This multi-part series will concentrate primarily on the Extract portion of the data extraction, transformation, and loading (ETL) process using SQL Server Change Tracking (CT). The second part will concentrate more on design architecture with CT, and the last part also touch on the Translate and Load portions as well as a near-real world example using the AdventureWorks2012 database. This segment will introduce the concept of CT as well as provide a substantive demo (i.e., something better than a hello world example) of CT’s functionality.


Australian IT project failures spark new ICT governance standard
"The standard was prepared due to continuing failures of major IT projects to deliver expected value. The aim was to bring home the need for action from boards and senior business executives who are responsible for the overall governance of the organisation," said Standards Australia chief executive, Dr Bronwyn Evans. "If organisations want to obtain maximum value from their investment, governance of IT projects should not be left to the IT department alone."


Cloud computing faces a clear and present danger
The “war on terror” is a political reality for both Australia and the US, and business leaders clearly need to more broadly consider the risks involved in working with cloud service providers. Cloud services and offshoring style outsourcing arrangements can be a contractual minefield. They are made more complex when the provider is a multinational that operates infrastructure located in multiple legal jurisdictions. Contractual and legal complexities can clearly be simplified when services and infrastructure are located entirely in Australia, and provided by an Australian company.


Assessing Vulnerability, Strategy, and Cost
The pervasive use of virtualization, the consumerization of IT, and the adoption of Cloud solutions to support IT service delivery are drivers of "new infrastructure" innovation that require public sector technology managers to better identify and mitigate associated security risks. By leveraging a holistic approach to vulnerability, strategy and cost, IT managers can formulate sound plans and operative decisions relative to security and its management. This session will explore these considerations for new infrastructure, workforce mobility, and end-point application security.


Creating a SQL Server DBA's Library
DBAs - like any other information worker - creates, collects, shares and interacts with all different types of information to help him/her do their job. Some of these pieces of information may be needed repeatedly, some of the knowledge gathered over time may be better saved in a secure location. Some of the applications used should perhaps be available for everyone else in the team. This is the concept of a "DBA Library": it's not the library in traditional terms where you have books and journals stacked on your desk; rather it's a centralized and integrated repository of knowledge, information and applications for the DBA.


Obama unveils NSA reforms: 'Keep calm and carry on spying'
A senior White House official speaking to sister-site CBS News' Mark Knoller said the President wants to dance the delicate line between preserving the NSA's surveillance capabilities while addressing "privacy and civil liberties concerns." But Obama remained on the defensive, reiterating previous claims that the NSA was "not abusing authorities in order to listen to your private phone calls, or read your emails." Obama's comments will likely not appease everyone, considering the conflicting desires of the technology and telecoms industry, intelligence agencies, foreign diplomats and privacy advocates.


Minding the API Hierarchy of Needs with RAML and APIkit
The trend for the approach used in designing and building public APIs is towards a RESTful approach, and away from the SOAP web services approach, as shown by the following graph drawn from the directory of APIs within ProgrammableWeb.com. This trend also extends to the internal and partner APIs within the enterprise. ... Enter the RESTful API Modeling Language (RAML). As described on RAML.org, RAML “is a simple and succinct way of describing practically-RESTful APIs. It encourages reuse, enables discovery and pattern-sharing.”



Quote for the day:

"Do something. If it doesn't work, do something else. No idea is too crazy" -- Jim Hightower

January 18, 2014

Under-pressure CIOs fret about their digital project skills
There's a cultural tension between IT's desire to do things clearly and in a predictable way and the way you need to operate with digital projects, Gartner Fellow and vice president Dave Aron said. "Traditional IT people like certainly and clarity and there's not a lot of that in the digital world," he said. "What's happening now is CIOs have to continue to provide that really professional, solid core infrastructure but they also have to deal with their company's need to succeed in an increasingly digital world."


Fridge sends spam emails as attack hits smart gadgets
About 25% of the messages seen by Proofpoint researchers did not pass through laptops, desktops or smartphones, it said. Instead, the malware managed to get itself installed on other smart devices such as kitchen appliances, the home media systems on which people store copied DVDs and web-connected televisions. Many of these gadgets have computer processors onboard and act as a self-contained web server to handle communication and other sophisticated functions.


The Disruptive Potential of Artificial Intelligence Applications
AI is working across many different industries, but I have detailed three examples below of technologies that many people do not realize are already being enabled through artificial intelligence. These cases are also illustrated by examples of technology that you may be very familiar with, but unfamiliar with the data-gathering techniques and artificial intelligence technology behind these systems. This is very important for business leaders across industries to take note of, as the opportunity to differentiate in a mobile and digital world will become increasingly crucial.


REST Services - Security Best Practices
REST is an architectural principle and is not a standard by itself, but recommend the use of standards such as HTTP, URI, XML and JSON and formats such as GIF, MPEG, etc. ... REST services being based on HTTP specifications is prone to all the security vulnerabilities as that of a web application. Thus REST implementation while it is the easier choice due to its inherent advantages, should also be implemented with due considerations to a combination of compensatory security practices


Can we build an artificial superintelligence that won't kill us?
Another reason for a rapid transition from human control to machine control is the one first described by I.J. Good, what we now call recursive self-improvement. An AI with general intelligence would correctly realize that it will be better able to achieve its goals — whatever its goals are — if it does original AI research to improve its own capabilities. That is, self-improvement is a "convergent instrumental value" of almost any "final" values an agent might have, which is part of why self-improvement books and blogs are so popular.


UK Government Takes Control Freak Approach To Tech
“The big spenders are still under control and only work with the big systems integrators,” Chan says. “The small guys can’t get a foothold in big government contracts, and while we still think of multimillion pound contracts and big gesture politics, rather than things that can work in a small way, this will always happen.” Speaking on digital rights, Loz Kaye, leader of the Pirate Party UK, tells Forbes that it would be political suicide to actually legislate for something as unpopular as Cameron’s web filter. But this filter itself is just the tip of the iceberg when it comes to a deep misunderstanding or mistrust of technology.


New China-developed OS takes aim at Android, Windows
The Linux-based COS, which stands for China Operating System, is just the latest OS to come out from the nation, at a time when Android and Windows are found on most smartphones and PCs in the country. The makers of the software have been vocal in wanting to break the U.S. hold over China's software market. "The operating system has already risen to become a national security matter," said Shanghai Liantong Network Communications Technology in a statement on its website.


Machine to machine communications and the security of things
If someone compromises a physical device, then its contents, software, and settings are also compromised. Before you purchase an IoT solution or devices, you have to ask the question, "What information is available to a tech savvy thief?" Hopefully the answer is "none" but don't expect that to be the answer you get. Expect that any of your devices can be compromised and any data on them can be accessed. Be sure that your device vendor is aware of physical security and that you've covered the bases with him or her.


CIO considerations for digital transformation in 2014
Now is a golden age for pioneering CIOs to work in close collaboration with their C-suite counterparts to innovate corporate business models and processes using disruptive technologies to transform how work gets done. As we move swiftly into 2014, what are the top considerations for CIOs in terms of embarking upon their digital transformation agendas? Does the mission just require the powerful elements of the disruptive trends, and a strategy for leveraging their combination, or will it require more? How does one begin the digital transformation process and where’s the best place to start?


Non-functional Requirements in Architectural Decision Making
In software engineering, a tight relationship exists between nonfunctional requirements (NFRs) and software architectures (SAs). As early as 1994, Rick Kazman and Len Bass asserted that SA is intimately connected to NFR achievement. This idea has pervaded software development over the years and explains why development projects invest a lot into fulfilling NFRs. This general statement becomes more concrete when we consider how the concept of SA has evolved from a simple structural representation to a decision-centric viewpoint.



Quote for the day:

"A business of high principle attracts high-caliber people more easily, thereby gaining a basic competitive and profit edge." -- Marvin Bower

January 17, 2014

Cooling Strategies for Ultra-High Density Racks
The simple answer to this problem would be to provision a data center so that it is capable of providing 20kW of redundant power and cooling to every enclosure. Unfortunately, this is simply not technically feasible or economically practical in almost any case. Making the wrong choices when specifying a data center for high density operation can needlessly increase the lifetime cost of the physical infrastructure by many times. The purpose of this paper is to outline practical and effective strategies for deployment of high density enclosures and blade servers.


Google unveils 'smart contact lens' to measure glucose levels
It uses a "tiny" wireless chip and a "miniaturised" glucose sensor embedded between two layers of lens material. The firm said it is also working on integrating tiny LED lights that could light up to indicate that glucose levels have crossed certain thresholds. But it added that "a lot more work" needed to be done to get the technology ready for everyday use. "It's still early days for this technology, but we've completed multiple clinical research studies which are helping to refine our prototype," the firm said in a blogpost.


How Natural Language Processing Makes Our Lives Easier and Improves Your Business
Talking to computers still requires programming languages but the ultimate goal of NLP is “to do away with computer programming languages altogether. Instead of specialized languages such as Java or Ruby or C, there would only be “human.”” The better a computer is capable of understanding natural language, the more applications there will be, but already NLP offers a lot of possibilities to help grow your business, save money and stay ahead of your peers.


The Year Ahead According to Rackspace
There’s a tacit agreement that many traditional security solutions just aren’t cutting it in our ever changing world of technology innovation. The NSA revelations and general scaremongering does not drive the market away from outsourcing, or from US companies, it drives them into wanting to do more on security, demanding more for their providers. 2014 will see continued investment in new security technologies especially around encryption. This will undoubtedly result in better security in the cloud and address some of those lingering doubts around the security of cloud-based platforms and systems.


Predictive Analytics Can Boost Enterprise Performance
"Using historical measures to gauge business and process performance is a thing of the past," said Samantha Searle, research analyst at Gartner. "To prevail in challenging market conditions, businesses need predictive metrics — also known as "leading indicators" — rather than just historical metrics (aka "lagging indicators")." Predictive risk metrics are particularly important for mitigating and even preventing the impact of disruptive events on profitability.


What makes innovation go wrong
Stephen Di Biase says innovation is "in our DNA. We evolved to get here." Di Biase, a longtime R&D executive, is now president of Premier Insights LLC, which provides consulting services about innovation to science-and-technology-based companies. He is on the advisory board of Clean Energy Trust, and he convenes a Chicago-area network of chief technology officers from companies that range from family-held firms to Fortune 500 companies. He spoke with Blue Sky Innovation about leadership, innovation in larger companies and thoughts for managers to consider when looking for new solutions.


IT mobility trend continues in 2014
It's pretty easy to conceptualize any software component as a resource, an element that does something for us. The problem with that very general approach is that it can lead to over-specifying. If you want to expose the functions of a programmable light switch, it's tempting to have verbs like On and Off and maybe status verbs like ReadState. These are nice, but they force an API into being not only functionally specific, but also limited in terms of what technologies can be used to implement it.


Web steps closer to baking-in support for NFC payments and data swapping
When implemented the spec would allow web pages and apps to read and write to NFC tags; to send and receive messages between NFC-enabled devices and provide a way to initiate a wireless connection via wifi or Bluetooth. The API would enable a range of capabilities for web sites and apps such as tapping two devices together to initiate a two player game; tapping devices to share data such as coupons or contacts; and tapping a device to read a message from an NFC tag.


Better software testing and improved quality starts with the culture
A testing expert who really knows his stuff adds enormous value to the project for the customer—and for the whole team by making their job easier rather than harder. Sadly, too many companies still view testing as more of a necessary evil than an opportunity. That's an attitude that Jim Holmes, Director of Engineering for Test Studio at Telerik, is doing everything he can to change.


Spy agencies around the world use radio signals to tap data from targeted systems
The technology, which has to be physically installed in most cases, has been available since at least 2008. It "relies on a covert channel of radio waves that can be transmitted from tiny circuit boards and USB cards inserted surreptitiously into the computers," according to the Times report. Data captured by the devices are sent to small briefcase-sized relay stations often set up miles away from the target system. The software has apparently allowed the NSA to do an end-run around whatever cybersecurity controls are installed on the compromised systems.



Quote for the day:

"Success is determined by those whom prove the impossible, possible." -- James W. Pence

January 16, 2014

How to make an HTML5 developer smile: A Google Web Designer wish list
Of course, exactly what Google Web Designer will be when it is released is still a mystery. At it's core, Google is a company that is interested in advertising dollars, and every project they promote has padding the bottom lineas the primary, if not sometimes obfuscated, directive. Despite what the development community might be wishing for in a new web design studio from Mountain View, Google Web Designer may be nothing more than a cross-platform plugin that simply makes it easier to drop DoubleClick ads into Android and iPhone applications


The 26 UX Axioms
The set of UX axioms has gone through an evolution over the last year as we iterated through the concepts, refined and combined ideas. We started with 150 concepts and ideas that were combined and synthesized into an initial set of 50 axioms presented to IxDA Grand Rapids in Nov 2012. Over the course of 2013, Erik presented the UX Axioms several times and further synthesized the set down to 21 Axioms. We recently added a few more axioms to the set we felt were missing. The current set stands at 26 UX axioms.


When did Passion for Your Work Become Passé?
Is it out of style to be vocal about your passion for your work, your profession or your firm? Perhaps. At least when it comes to articulating how excited you are to be doing what you are doing, it’s better to show than tell. And while the use of the term may generate a bit of a cringe factor for a variety of reasons, including the suspicion that someone is making it up, showcasing your passion for your work never goes out of style!


Reaping The Benefits Of Diversity For Modern Business Innovation
Diversity is critical for organization’s ability to innovate and adapt in a fast-changing environment. Some of the most successful entrepreneurs and most admired leaders will tell you the same thing. Diversity is essential to growth and prosperity of any company: diversity of perspectives, experiences, cultures, genders, and age. Why? Because diversity breeds innovation. And innovation breeds business success. Don’t believe me? Take a look:


Google stages coup against Windows 8 with Chrome OS-like update for 'Metro'
Google has made no secret of its push to subvert devices running rivals' operating systems and turn them into pseudo Chromebooks by shifting features from Chrome OS to Chrome the browser. A year ago, for example, Google started baking parts of QuickOffice, a popular iOS and Android app substitute for Microsoft Office, into both Chrome OS and the Chrome browser. Analysts have viewed the strategy as part and parcel of Google's desire to insert itself and its core services -- search, mapping, email and others -- onto as many systems, both PCs and mobile devices, as possible to optimize traffic and associated ad revenue.


Our CIO Is Leaving — Now What?
Confronting CIO succession in this competitive environment is rarely easy. Approaching the problem strategically and systematically helps identify priorities, issues to be mitigated and options that may not have been readily apparent at the outset. Furthermore, such an approach maximizes the chances that the widest pool of appropriate candidates will be considered and that once a candidate is chosen, he or she will be able to meet and surpass the expectations of the CEO and the board.


Data visualization tools may be glamorous, but focus on business value
Data visualizations are about more than just how pretty the information looks, according to Cindi Howson, founder of BI Scorecard. At their best, visualizations help users retain information and make better-informed decisions. Graphic displays can be understood much more quickly than simple data dumps, and well-designed visualizations do this even better, enabling collaborative data discovery.


Massive denial-of-service attacks pick up steam, new nefarious techniques
Today, Prolexic issued its quarterly global DDoS attack report, noting that even Android-based mobile devices are being spotted as instruments to launch DDoS attacks. In the report, Prolexic says its response team “uncovered evidence of the use of mobile applications launching DDoS attacks against enterprise clients, including one of the world’s largest financial firms.” Prolexic says signatures matching AnDOSid, a DDoS attack tool for Android devices, were observed in DDoS attack campaigns.


18 great uses for an old Android device
As we move multiple generations into mobile technology, more and more of us are building up collections of old, dated devices. And more often than not, those devices do little more than take up space and gather dust. Here's a little secret, though: Your abandoned Android gadgets are actually virtual gold mines. You just have to find the right way to tap into their potential and give them new life. So grab the nearest DustBuster and get ready: Here are 18 ways to make your old phone or tablet useful again.


Discover and Diagnose Java Concurrency Problems Using Contemplate's ThreadSafe
Contemplate's ThreadSafe Solo is a commercial static analysis plugin for Eclipse, designed specifically to discover and help diagnose difficult concurrency bugs lurking within Java programs. By being focussed on concurrency bugs, ThreadSafe can find bugs that other static analysis tools, both commercial and freely available, often miss or are not designed to look for. As far as we have been able to determine, none of the defects in the examples below are caught by any other Java static analysis tool.



Quote for the day:

"Education is more than a luxury; it is a responsibility that society owes to itself." -- Robin Cook

January 15, 2014

Continuous security monitoring: What enterprises can learn from CDM
With the CDM program, DHS is focusing on getting agencies to implement a six-step CSM process: installing and updating network scanning sensors, automating the search for known system flaws, collecting the scanning results, triaging and analyzing the results, initiating mitigation of the biggest or worst flaws, and reporting progress. The objective is to enable civilian agencies to fully diagnose their networks within 72 hours of sensor deployment.


Computer science: The learning machines
With triumphs in hand for image and speech recognition, there is now increasing interest in applying deep learning to natural-language understanding — comprehending human discourse well enough to rephrase or answer questions, for example — and to translation from one language to another. Again, these are currently done using hand-coded rules and statistical analysis of known text. The state-of-the-art of such techniques can be seen in software such as Google Translate, which can produce results that are comprehensible (if sometimes comical) but nowhere near as good as a smooth human translation.


Why Cognition-as-a-Service is the next operating system battlefield
CaaS will enable every app to become as smart as Siri in its own niche. CaaS powered apps will be able to think and interact with consumers like intelligent virtual assistants — they will be “cognitive apps.” You will be able to converse with cognitive apps, ask them questions, give them commands — and they will be able to help you complete tasks and manage your work more efficiently. For example your calendar will become a cognitive app — it will be able to intelligently interact with you to help you manage your time and scheduling like a personal assistant would — but the actual artificial intelligence that powers it will come from a third-party cloud based cognitive platform.


Geraldine Hamilton: Body parts on a chip
It's relatively easy to imagine a new medicine, a better cure for some disease. The hard part, though, is testing it, and that can delay promising new cures for years. In this well-explained talk, Geraldine Hamilton shows how her lab creates organs and body parts on a chip, simple structures with all the pieces essential to testing new medications -- even custom cures for one specific person. TEDTalks is a daily video podcast of the best talks and performances from the TED Conference, where the world's leading thinkers and doers give the talk of their lives in 18 minutes (or less)


Why you should care about Net neutrality (FAQ)
The basis for the Net neutrality regulation that the FCC implemented is predicated on a centuries-old legal concept known as "common carriage." This concept of "common carriage" has been used not just to regulate telecommunications but other industries as well. It was developed to ensure that the public retained access to fundamental services that use public rights of way. In the case of the Internet, it means that the infrastructure used to deliver Web pages, video, and audio-streaming services, and all kinds of other Internet content, should be open to anyone accessing or delivering that content.


The future of shopping: When psychology and emotion meet analytics
Welcome to the future of retail, which is quickly moving beyond somewhat silly questions about whether tablets will run on Android, iOS, or Windows, and becoming much more focused on actual applications and sales. The best part about the retail sector is that it combines four fun areas: Business, technology, and human behavior and psychology. Here's a brief tour of technologies that range in maturity from those that are implemented today to ones that'll take awhile to be adopted.


Financial malware focuses on hiding malicious traffic, localization
The battle between security professionals and cybercriminals has become a cat-and-mouse game in recent years, Baylor said, as Microsoft and other botnet trackers have had success taking down malware by targeting the command-and-control (C&C) infrastructure used to relay instructions to infected machines. Microsoft led a major operation against the Citadel malware in June 2013, and reportedly took down up to 88% of the Citadel botnets, though it has since rebounded.


Of Internet-connected Crock-pots, cars, smartwatches
The Crock-pot uses Belkin's WeMo technology to connect the slow cooker's IP address to the Internet through a home Wi-Fi router. The company also showed a Wi-Fi-ready Mr. Coffee automatic coffee maker. ... Users can control both devices over the Internet, to turn on the coffee or heat up Irish stew from pretty much anywhere in the world, just as can already be done with a Nest thermostat and other devices. The Wi-Fi capability allows an office manager to turn on the morning coffee pot in the break room before arriving or a catering firm to fire up the cooker at a remote location.


Fifth of enterprise BYOD projects doomed to fail by 2016, claims Gartner
“Whether via a formal BYOD programme, or just via devices coming in the back door and being configured to access corporate systems, the use of consumer technologies in the work environment presents a threat to IT control of endpoint computing resources,” said Dulaney. “Given the control that IT has exercised over personal computers by developing and deploying images to company-managed PCs, many IT organisations will implement strong controls for mobile devices.”


R, the Integration Language?
Integration with R now appears to be a sine qua non strategy for analytics tool vendors. I’m currently investigating KNIME, an open source “user-friendly graphical workbench for the cradle-to-grave analysis process: data access, data transformation, initial investigation, powerful predictive analytics, visualisation and reporting.” KNIME is architected as a visual workflow metaphor and has much the look of a data integration tool, with drag-and-drop node folders such as IO, Database, Data Manipulation, Mining, Reporting, Statistics, etc. An R node is easily added.



Quote for the day:

"Leadership is the wise use of power. Power is the capacity to translate intention into reality and sustain it." -- Warren G. Bennis

January 14, 2014

Enterprise master data management and big data: A well-matched pair?
"Applying MDM against raw, unstructured content is of questionable value," said Evan Levy, vice president of business consulting at analytics and data management software vendor SAS Institute Inc. "But distilling that content down to have some sort of meaning and then linking it to a specific customer -- that's where MDM can come into play." Companies are starting to see -- or picture, at least -- a connection between enterprise MDM and big data, according to survey results published in November 2012 by The Information Difference Ltd.


C++ String Toolkit (StrTk) Tokenizer
Tokenization in the context of string processing, is the method by which a sequence of elements are broken up or fragmented into sub-sequences called tokens. The indices in the original sequence that determine such breaks in the sequence are known as delimiters. There are two types of delimiters, normal or thin delimiters which are of length one element and thick delimiters which are of length two or more elements. Even though tokenization is primarily used in conjunction with strings, any sequence of types that can be iterated in a linear fashion can be tokenized, examples may be list of integers, a vector of person classes or a map of strings.


Scaling Storage Is Hard To Do
How do you add capacity and performance without drastically re-architecting storage systems? For the last decade, enterprise storage vendors have relied on clustering as a means to scale. Each clustered controller is locked in a “mind meld” with every other, sharing precious data maps and caches in real time, enabling customers to add whole arrays for greater capacity and performance.


Bridging Big Data and the Personal Data Ecosystem Through Privacy by Design
In order to make the interactions between Big Data and individuals more sustainable—in other words, to effectively transform this “new oil” into a renewable resource—the concept of the personal data ecosystem (PDE) has been proposed.4 The PDE is the emerging landscape of companies and organizations that believe individuals should be in control of their personal information and directly benefit from its use, making available a growing number of tools and technologies to enable such control.


Intel Announces Death of McAfee Brand. Will it be That Simple?
The decision is not entirely unexpected despite the fact that it has taken Intel longer than normal after the acquisition to resolve to drop what remains one of the two or three most famous security brands in existence. Intel is banking that attaching its own brand to the word 'security' will more than offset any loss in recognition. McAfee cost Intel $7.68 billion (at the time around APS5 billion) in August 2010, still a record price for a pure security firm so it might feel it has the right to impose its own identity.


Defining Responsiveness
When people say that something is responsive, what do they mean? I’m not being facetious. I think many of us think we know what is meant, but when you dig deeper, there is disagreement about what it means for something to be responsive. ... So by definition, Google Plus is not a responsive web design. It may look like one, but it doesn’t contain the three technical pieces necessary to be a responsive web design.


Considerations for Data Center Owners When Partnering With Modular Builders
Modular data center companies appear in all forms, from modularity at rack levels to modularity at building levels to modularity at infrastructure levels. A data center owner needs first to decide at what level they would like to engage in modular deployment. If the path chosen is a fully modular data center, it becomes significantly more important to engage your potential partner at the very early stages of concept and design.


Don't panic: The Internet is not collapsing, despite a spike in global 'attack' traffic
The Internet isn't about to collapse or crumble, despite two long threads on popular technology site Hacker News and news-sharing site Reddit suggesting (in some cases) that it might. Pointing to Akamai's Real-time Web Monitor, which tracks "global Internet conditions around the clock," many drew concern from the meter showing that attacks were — at the time — up as much as 98 percent. At the time of writing, the meter showed attacks were up by close to 107 percent above normal.


All About TransactionScope
In the real world any one you will find exceptional scenarios, exceptional issues where only a knowledge of how to useTransactionScope is not good enough. To resolve transactional issues like deadlocks, timeouts, etc., you must know each and every concept directly/indirectly related to a transaction. There is no alternative. So the concepts of a transaction and its related components need to be clear.


Intelligent Evolution: Making Change Work
When these organizations try to change, they frequently fail because we forget that they are complete creatures and need to be changed in depth. Trying to improve the practices of the engineering department without paying attention to the rest of the organization is similar to trying to change an organ within a body without understanding the impact on the rest of the body. Imagine that a surgeon performs a liver transplant without considering whether there is a potential difference between the livers of different people. We would have a high probability of organ rejection and potentially death of the patient.



Quote for the day:

"Everything I've ever done was out of fear of being mediocre." -- Chet Atkins

January 13, 2014

MDM program needs business sense to be successful
Companies pursue MDM as a technology-driven affair. "There are far too many efforts where the IT team is pushing the MDM idea, and there isn't enough pull from the business side because there isn't a clear articulation of what the business outcomewill be," said Gartner analyst Ted Friedman. "Somewhere along the way, the project fizzles out." Aaron Zornes, chief research officer at The MDM Institute, a consultancy in Burlingame, Calif., made the same point.


5 Methods for Visualizing Unstructured Data
What can anyone possibly do with so much data? It's not even a question of quantity anymore - it's more a question of feasibility. One can put up a thousand powerful computers in parallel and crunch huge data sets to derive results. But what if the data is also unstructured? What if the problem is not in finding the solution but in finding the correct questions to be asked in the first place? Everybody can obtain a huge data set, and almost anybody can acquire the right set of tools to analyze that data, but very few “somebodies” possess the right mindset to use the data to begin solving business problems.


Hyping Artificial Intelligence, Yet Again
A.I. is, to be sure, in much better shape now than it was then. Google, Apple, I.B.M., Facebook, and Microsoft have all made large commercial investments. There have been real innovations, like driverless cars, that may soon become commercially available. Neuromorphic engineering and deep learning are genuinely exciting, but whether they will really produce human-level A.I. is unclear—especially, as I have written before, when it comes to challenging problems like understanding natural language.


Agile Database Development
Agile database development is particularly hard because databases contain state and must ensure data integrity. They are harder to upgrade or roll back than the front end of a website and so are more amenable to up-front design than continual refinement. Lastly, database developers and DBAs tend to have less experience in Agile practices, leading to additional struggle in the early stages. This article will explore the history and principles of Agile development with an emphasis on how we can apply Agile practices successfully to databases.


Demand For Fully Automated Static Analysis Solutions To Grow In 2014 Says Asaph Schulman
Application Security has become a key aspect for all organizations assessing their overall risk exposure. The reality is that due to significant historical investments made by enterprises to bolster their network security, the easier way for attackers to hack these days is through the "main door" – the application layer. By pretending to be regular users of the attacked web or mobile application, hackers abuse insecure application coding to gain unauthorized information such as the administrator's or user's credentials. This can lead to some disastrous results, including the hacking of entire networks.


Brainlike Computers, Learning From Experience
Designers say the computing style can clear the way for robots that can safely walk and drive in the physical world, though a thinking or conscious computer, a staple of science fiction, is still far off on the digital horizon. “We’re moving from engineering computing systems to something that has many of the characteristics of biological computing,” said Larry Smarr, an astrophysicist who directs the California Institute for Telecommunications and Information Technology, one of many research centers devoted to developing these new kinds of computer circuits.


What the Heck Is a RAM Scraper?
First it’s helpful to remember that payment systems — the cash registers and credit card terminals you see in stores and restaurants every day — have a lot of strong requirements for encrypting data, pretty much end-to-end during the transaction process, as well as any records that are stored afterward. But there’s one particular moment when that data is vulnerable, and it occurs during the milliseconds that it is stored in the system memory — a.k.a. random access memory, or RAM — of the back-end server that processes the transaction.


Android vs Windows: Now the battle for the desktop really begins
As ZDNet's Larry Dignan points out, Android could break through on the desktop as it has on mobile if the cost is right and security improves. There are plenty of hurdles in the way of Android becoming a real threat to Windows on the desktop, but it's still a headache for Microsoft. If people don't buy Windows, they probably won't buy Office either, and they're less likely to buy into the whole ecosystem from Windows Phone to Azure. And the desktop is Windows' redoubt: that Android dares to advance upon it is reflection of how the battle of the tech ecosystems has gone so far.


Why innovators need a word other than failure
An experiment is an attempt to test a hypothesis, and gain new learning. The problem with the word "experiment" is that experiments are not meant to be permanent solutions, but rather short trials in which we test a solution, hopefully with a hypothesis, and then compare the results to expected or anticipated results. But what we are often talking about when we talk about "failure" is more akin to experimenting - testing, learning, reworking, testing again and finally implementing.


Emergent Change: Shifting to a complexity paradigm
The traditional approach to organizational change has been a tightly planned process with objectives established by top management. This planned approach to organizational change is reinforced with the publication of numerous best practice case studies for change, detailed guides for leading the neophyte through the change wilderness, and studies of what is needed to remove barriers (mainly employee resistance) to proposed change. Yet the majority of these change efforts fall far short of the objectives that were set by the proponents of the change



Quote for the day:

"A healthy attitude is contagious but don't wait to catch it from others. Be a carrier." -- Tom Stoppard

January 12, 2014

The Ever-Increasing Importance of Predictive Analytics
Pretty much anywhere you look, you can find countless examples of how this trend is manifesting itself. As just one, Forbes recently reported that Google is making numerous changes to its Google Analytics platform and a number of other search guidelines and algorithms, which will have a colossal impact on the operations of content creators in 2014. However, few things in the big data and analytics space are likely to have the overall weight that predictive analytics are expected, by many experts, to possess.


Tablets Get More Sophisticated, with Bigger Screens, Dual OSes and Car Access
German car maker Audi unveiled an Android device that it plans to bundle with its cars. The Audi Smart Display connects to a car via Bluetooth and can be used to remotely access and control the vehicle's music, radio, and navigation systems. The 10-inch tablet can also become a typical Android device with access to the Google Play app store. Audi is calling the tablet a next-generation in-car entertainment device that Audi buyers can choose to purchase as an additional feature. However, the company wouldn't name a ship date, only saying the device would arrive in the near future.


The Relationships between MOOD/QMOOD Metrics and External Software Quality Attributes
Empiricalstudies have been conducted to evaluate these metrics as indicators of external software quality attributes (ESQAs). However,there has been no attempt to systematically review and report these empirical evidences. To identify the relation ofMOOD/QMOOD metrics with ESQAs, we have performed a systematic review of empirical evidences published in the literaturethat support or reject MOOD/QMOOD metrics as indicators of ESQAs. Our search strategy identified 413 papers, out of which15 papers were identified as reporting empirical evidence showing relation between CK metrics and ESQAs.


Using Scenario-Based Architecture Analysis to Inform Code Quality Measures
Scenario-based architecture analysis offers a broad understanding of how a software-reliant system evolves over time and can form a basis for assessing the amount of rework that may be necessary in the foreseeable future. Using the architectural risks identified during scenario-based architecture analysis, we clarified the level of system decomposition where code quality metrics reveal relevant information


Reasoning and Improving on Software Resilience against Unanticipated Exceptions
Exceptions are widely used in prac- tice [6]. To us, the resilience against exceptions is the ability to correctly handle exceptions that were never foreseen at specification time neither encountered during development. Our motivation is to help the developers to understand and improve the resilience of their applications. This sets a three-point research agenda: (RQ#1) What does it mean to specify anticipated exceptions? (RQ#2) How to characterize and measure resilience against unantic- ipated exceptions? (RQ#3) How to put this knowledge in action to improve the resilience?


The Internet of Things outlook for 2014: Everything connected and communicating
IoT isn't just a fancy buzzword that describes how your refrigerator can let you know when you need to replace your spoiling milk or your rotting vegetables (although it can), it is so much more. How much more is only left to your imagination and to your budget. You can do as little or as much with IoT as you want. For example, if you operate food distribution business, you could install sensors in your trucks that send temperature, humidity, and dock-to-dock travel times back to your home office for analysis.


Naming and Classifying: Text Analysis Vs. Text Analytics
Analysis is an examination of structure, composition, and meaning that provides insight to advance some purpose. Analysis may be heuristic, informal, and/or qualitative. Contrast with analytics, which is algorithmic rather than heuristic. I define analytics as the systematic application of numerical and statistical methods that derive and deliver quantitative information, whether in the form of indicators, tables, or visualizations. Analytics is formal and repeatable.


The Future of Business Intelligence: An Impending Realization
What once appeared as two opposing trends that could potentially cancel each other out has merged into a synthesis in which formal education in the field – in addition to developments in automation, Data Discovery tools, Cloud computing and Big Data – is readily used to simplify the process of leveraging BI for laymen. BI’s crossroads has become a solitary path paved by the consumerization of (and burgeoning familiarity and comfort with) IT, which Gartner describes as “how enterprises will be affected, and how they can take advantage of new technologies and models that originate and develop in the consumer space, rather than in the enterprise IT sector.”


Windows Azure Security Guidance
In cloud applications more responsibility lays on the shoulders of the application developers to design, develop, and maintain their cloud applications to high security standards to keep attackers at bay. Consider the following diagram (from J.D. Meier's Windows Azure Security Notes PDF): notice how the infrastructure part is being addressed by the cloud provider--in our case by Windows Azure--leaving more security work to the application developers:


Data Integrity, Physical Security and REST APIs Contribute to Tape's Ongoing Relevance
Other benefits which tape still holds strong are its security and reliability. Data backed up to tape is typically more secure than data stored on disk or on the cloud because, in part, tape can make data more difficult to access and then retrieve. The average hacker is more likely to spend time trying to hack data stored in a cloud or on disk than to go to the trouble of breaking into a storage facility where tape backups are stored, retrieve those tapes, load them into a tape library, and then go through them linearly to find and access the data they store.



Quote for the day:

"There is only one thing more painful than learning from experience and that is not learning from experience." -- Archibald McLeish

January 11, 2014

Watch out for these 10 common pitfalls of experienced Java developers & architects
There is a ton of information on how to get a wide perspective on a large enterprise project: scaling your architecture, message busses, database interconnections, UML diagrams and other high-level stuff is well documented. But what about those of us who are just experienced, professional Java developers? This area is lacking coverage, and programming advice for the senior developer, team leader or the junior architect is hard to find.


Intel Has Its Eyes Fixed on Networking
You know Intel’s long history of supplying the main chips that run personal computers and servers. And you probably know that it supplies some chips for mobile phones and tablets, though not quite as many. But did you know that Intel is also getting into the business of supplying chips for networking gear? The way the chip giant sees it, there’s a $16 billion business of supplying processors for gear that moves data, whether it’s in a corporate data center or on a telco carrier’s network — or anywhere in between. And it reckons that it already has about a five percent share of that business.


How to Cultivate Senior Management Skills
Edward T. Reilly, chief executive officer of American Management Association International, assembled a book for new and experienced leaders titled AMA Business Boot Camp. Let me share with you some of the helpful advice to be found in the book. Here are some “Action Items” assembled to help managers cultivate senior management skills, like:


No Brain Drain in Bulgaria as IT Experts Stay Put
Kiril Karaatanasov is typical of the experienced developers and their success. He owns a house and a flat, and is about to buy his third property, something unthinkable among his foreign contacts. “A friend of mine in Silicon Valley can hardly afford to pay the rent for a house smaller than my flat,” Karaatanasov says. “Silicon Valley is better than most of the older EU countries and most of my German friends and French friends move there for money.”


The 7 best habits of effective security pros
The role of the security professional has evolved beyond that of mere technical savvy, and now includes consultant, educator, investigator, and defender of the data. To understand the traits and habits that matter the most, we reached out to a number of security professionals by phone, email, and social media, who are successful in their respective areas in the field. If there's one thing that screamed out from the interviews it was this: security knowledge alone is only the beginning of the skills and habits one needs to succeed.


Big Data Strategy: s+b’s Strategy of the Year
Big data strategy is the latest example of how a particular something-strategy can suddenly win rapt attention on the runways of corporate fashion. Businesses are drowning in an explosion of data unleashed by the convergence of low-cost, high-volume computing; ubiquitous wireless telecommunication; and the Internet’s continued penetration into more and more aspects of our daily lives.


IBM’s Watson to Help Rich DBS Clients With ‘Jeopardy’ Smarts
The Singapore-based bank plans to begin using the tool, which can answer questions in conversational language and learn from responses, to aid financial planners in guiding its wealth-management unit’s affluent customers, IBM said today. Watson will analyze large volumes of financial data to help DBS, Southeast Asia’s largest lender, offer more customized service. The agreement gives IBM a proving ground as it tries to show clients the value of its Watson technology.


Just Say No to Tech Purchases That Won’t Yield ROI
Paying for that new computer, software, mobile device, or peripheral is only the first expense you’ll incur with most technologies. Smartphones have voice and data plans. Laser printers tend to eat up expensive ink and toner. And pretty much everything you buy for your employees needs tech support. That support could be as simple as having your resident geek run a virus scan or as complicated as bringing in a technician to troubleshoot your network.


The Sustainability Agenda in Kanban
Kanban is the humane, start with what you do now approach to change. That humane side is captured in a system of nine values. These explain the motivations of the method and they provide a helpful starting point for exploring how it actually works. Each value identifies a goal of one or more of Kanban’s principles or practices and suggests some of the benefits to be derived from following them. Conversely, they suggest that the pursuit of those goals and benefits may be well served by the adoption of their respective method elements.


Beyond Piracy: Software Publishers Battle Greater Threats to Their Intellectual Property
In today’s market, it’s essential for software publishers to solidify their competitive advantage by securing their innovative and unique products against reverse-engineering, which can lead to duplication by competitors looking to fast-track their development efforts and time to market with a competitive alternative. With competitive espionage becoming more and more common, valuable software IP containing code, algorithms, application data files and trade secrets is at risk of prying eyes, reverse engineering, theft, and copycatting by competitors.



Quote for the day:

"Be careful the environment you choose for it will shape you;be careful the friends you choose for you will become like them" -- W. Clement