Daily Tech Digest - June 02, 2019

The future of system architecture

sdn software defined network architecture
So far, the primary effect of any API-first mandate has been to make developers ensure they document their APIs and publicize them. But a major thrust of the Amazon API-first mandate was to reduce the costs incurred from developing duplicate capabilities in multiple systems. Because most enterprises do not update all their systems every few years, any API-first mandate will take time to show real effects in the enterprise. But over time, those effects will make themselves felt, especially when an API-first mandate is combined with a reuse-before-build mandate that requires system developers to reuse capabilities available in the enterprise before building new ones. As more systems make their capabilities available through APIs, and development teams are tasked to reuse before building, there will come a point at which building new systems is replaced by recomposing existing capabilities into new capabilities. The amount of duplication across systems with widely varying purposes is surprising. Most systems need a way to store and retrieve data. Most systems need a way to authenticate and authorize users. Most systems need the ability to display text and render graphics.



Is this the future of retail? 7-Eleven launches checkout-free store

Australia’s largest convenience retailer is making a move on checkout-free, launching a “cashless and cardless” concept store in Richmond, Melbourne today. The store will allow customers to pair their cards with a smartphone app, scan items with their cameras, and then walk out. It’s a similar system to the one trialled by Woolworths in Sydney last year and follows the success of Amazon’s no-checkout grocery stores in the US. 7-Eleven chief executive Angus McKay said he’s on a mission to push the envelope on convenience retailing. “We’re trying to push the notion of ‘convenience’ to its absolute limit,” McKay said in a statement circulated on Wednesday morning. “In the new concept store, customers will notice the absence of a counter. The store feels more spacious and customers avoid being funnelled to a checkout location creating a frictionless in-store experience,” he said. The announcement follows a trial run out of an Exhibition Street store in Melbourne, although 7-Eleven hasn’t detailed plans for any further expansion of the concept as yet.


How to Move Beyond a Monolithic Data Lake to a Distributed Data Mesh


As more data becomes ubiquitously available, the ability to consume it all and harmonize it in one place under the control of one platform diminishes. Imagine just in the domain of 'customer information', there are an increasing number of sources inside and outside of the boundaries of the organization that provide information about the existing and potential customers. The assumption that we need to ingest and store the data in one place to get value from diverse set of sources is going to constrain our ability to respond to proliferation of data sources. I recognize the need for data users such as data scientists and analysts to process a diverse set of datasets with low overhead, as well as the need to separate the operational systems data usage from the data that is consumed for analytical purposes. But I propose that the existing centralized solution is not the optimal answer for large enterprises with rich domains and continuously added new sources. Organizations' need for rapid experimentation introduces a larger number of use cases for consumption of the data from the platform.


The Intersection of Innovation, Enterprise Architecture and Project Delivery

5 Questions to Ask of Enterprise Architecture
Peter Drucker famously declared “innovate or die.” But where do you start? Many companies start with campaigns and ideation. They run challenges and solicit ideas both from inside and outside their walls. Ideas are then prioritized and evaluated. Sometimes prototypes are built and tested, but what happens next? Organizations often turn to the blueprints or roadmaps generated by their enterprise architectures, IT architectures and or business process architectures for answers. They evaluate how a new idea and its supporting technology, such as service-oriented architecture (SOA) or enterprise-resource planning (ERP), fits into the broader architecture. They manage their technology portfolio by looking at their IT infrastructure needs. A lot of organizations form program management boards to evaluate ideas, initiatives and their costs. In reality, these evaluations are based on lightweight business cases without broader context. They don’t have a comprehensive understanding of what systems, processes and resources they have, what they are being used for, how much they cost, and the effects of regulations.


When algorithms mess up, the nearest human gets the blame


“While the crumple zone in a car is meant to protect the human driver,” she writes in her paper, “the moral crumple zone protects the integrity of the technological system, at the expense of the nearest human operator.” Humans act like a “liability sponge,” she says, absorbing all legal and moral responsibility in algorithmic accidents no matter how little or unintentionally they are involved. This pattern offers important insight into the troubling way we speak about the liability of modern AI systems. In the immediate aftermath of the Uber accident, headlines pointed fingers at Uber, but less than a few days later, the narrative shifted to focus on the distraction of the driver. “We need to start asking who bears the risk of [tech companies’] technological experiments,” says Elish. Safety drivers and other human operators often have little power or influence over the design of the technology platforms they interact with. Yet in the current regulatory vacuum, they will continue to pay the steepest cost.


The Death of Enterprise Architecture: defeating the DevOps, microservices, ...

Current application theory says that all responsibility for software should be pushed down to the actual DevOps-style team writing, delivering, and running the software. This leaves Enterprise Architect role in the dust, effectively killing it off. In addition to this being disquieting to Enterprise Architects out there who have steep mortgage payments and other expensive hobbies, it seems to drop out the original benefits of enterprise architecture, namely oversight of all IT-related activities to make sure things both don't go wrong (e.g., with spending, poor tech choices, problematic integration, etc.) and that things, rather, go right. Michael has spoken with several Enterprise Architecture teams over on the changing nature of how Enterprise Architecture help in a DevOps- and cloud-native-driven culture. He will share their experiences including what type of Enterprise Architecture is actually needed, tactics for transitioning and when it's best to just kill off Enterprise Architecture and let the DevOps cowboys run wild.


Address goals with various enterprise architecture strategies


Enterprise architecture can also revolve around important application decisions, rather than a diagram of software stacks. In the context of software architecture, decisions include the programming language, platform, type of cloud services used, CI/CD systems involved in deployment, unit tests, the data-interchange format for the API, where the APIs are registered and related systems. For some programmers, the term architecture means a look at just the highest level of design: a set of domain objects that interrelate, such as customer, order and claim. Another view of enterprise architecture in the technical realm revolves around quality attributes. These attributes must exist for the software to work, but are unlikely to fit in a specification document. Examples include reliability, capacity, scalability and security -- even things such as uptime, measuring and monitoring levels, rollback approach, delivery cadence, time to build and time to deploy. Quality elements are not functional requirements, per se, but are ways to determine acceptable operating conditions and necessary tradeoffs to get there.


What You Need to Know about Programmable Logic Controller (PLC)


Nowadays, dedicated pieces of software have been developed for the PC in order to help with PLC programming. Once the program is written, it is then downloaded from the computer to the PLC with a special cable. In the old days, up until the mid-1990s, PLCs were programmed by using either special purpose programming terminals or proprietary programming panels. Often times, they had function keys which represented the logical elements of PLC programs. As far as storing goes, programs would get put on cassette tape cartridges. A popular form of programming is ladder logic, which is the most widely used one. It features symbols (as opposed to words) in order to emulate relay logic control, with the symbols being interconnected by lines, representing the flow of current. As the years went on, the number of symbols available has increased, thus increasing the level of functionality that PLCs have.  


Scanning the fintech landscape
Tala and Branch both seek to offer microlending over mobile devices in developing countries. The US-based companies make real-time loan decisions dynamically by using every piece of information they can gather from the customer’s mobile phone; public reports note that the companies use text messages, contacts, and hundreds of other data points to make underwriting decisions. A new set of companies are developing demographically-focused products. They segment not only from a brand and marketing perspective, but from a product innovation perspective as well. For example, True Link Financial’s elder fraud protections, Finhabits’ saving focus for Latino’s, Camino Financial’s lending for Latino-owned small and medium size businesses, or Ellevest’s product design for women all go beyond branding to design products from scratch with unique use cases and features in mind. Similarly, Brex offers cards tailored individually for startups, for ecommerce companies, and (reportedly) for other small business segments.


Five-Step Action Plan for DevOps at Scale

To give you a practical example of how these steps come together, consider the story of a large manufacturing enterprise with which we had the opportunity to work. They began their enterprise DevOps adoption with a pilot project in which they migrated their database to an AWS data lake. The project quickly showed how DevOps could create greater scalability to support the data demands of the manufacturer’s IoT applications. The manufacturer’s Center of Excellence leveraged this initial success to apply DevOps and digital transformation across company’s various departments, applying the model above to departments like enterprise architecture, application development and even business units like credit services. With the initial pilot project focused on a well-defined migration to AWS, the outcome has been the company’s agile adoption of DevOps for greater security, cost efficiencies and reliability. The idea of enterprise DevOps at scale can be daunting -- especially for large enterprises with complex systems, complicated processes and a great deal of technical debt.



Quote for the day:


"Leadership does not depend on being right." -- Ivan Illich


Daily Tech Digest - June 01, 2019


This challenge will only be amplified as the amount of data available to retailers increases: The market for retail Internet of Things (IoT) sensors, RFID tags, beacons and wearables is projected to grow 23% annually through 2025, which will generate data needed for targeted customer experiences and optimized operations. As retail consumers increasingly live and shop across multiple channels, a new strategy for analytics is needed to take advantage of all that additional data. Single data pipelines that slow learning abstraction and decision-making based on those insights are not the right fit for this new paradigm. A single data pipeline prevents analytics from delivering insights at the pace needed by line-of-business decision makers. In an SVOT world, employees often lose patience with the process and attempt do-it-yourself strategies with data. An environment where marketing, sales, demand planning, supply chain, operations and finance each apply their own tools, filters and data-modeling decisions will result in a multitude of interpretations, even if they start from the same pile of data.


Despite mounting evidence of the substantial benefits provided by analytics, most companies have barely scratched the surface of what is possible. The good news is that the tide is turning. The field is increasingly attracting new talent, who are introducing new skills such as data science and statistics to the realm of HR. This helps to further progress, as does the advance in technologies enabling real-time data collection and analysis of unstructured, as well as structured, data. Consequently, the growth of these skills is set to continue to rise exponentially. Building a people analytics function coupled with capitalizing on technologies that collect, store, and dynamically visualize data enables companies to put information at the fingertips of the business leaders to support decision-making. Moreover, this democratization of data can also help managers by providing data on their own behaviors, as well as providing them with insights that support employee engagement, development, and performance.



PCI Express 5.0 finalized, but 4.0-compatible hardware is only now shipping  

virtualizationistock-894624056natalyayudina.jpg
On its own merits, PCIe 5.0 is impressive, doubling the transfer rates from PCIe 4.0, which in turn doubled transfer rates from PCIe 3.0. In terms of practical deployments, a PCIe 5.0 x1 slot delivers the same bandwidth (~4GB/s) as a full-size, first-generation PCIe x16 slot from 2003, commonly used in graphics cards. In terms of practical deployment, it is likely to be some time before PCIe 5.0 devices arrive, though it is possible that Intel may skip PCIe 4.0 entirely, as their Compute Express Link (CXL) technology for connecting FPGA-based accelerators is based on PCIe 5.0. This should be taken with a grain of salt—rumors indicated that Intel planned to skip a 10nm manufacturing process, in favor of moving to 7nm, following low yields on 10nm parts. Intel's Computex announcements show 10nm plans for mobile systems, though desktop-class CPUs have yet to be announced. From an implementation standpoint, the technical complexity between 4.0 and 5.0 is lower than 3.0 and 4.0, making it likely to see a quick upgrade for existing 4.0 designs.


Sustainable Operations in Complex Systems With Production Excellence


Production excellence is a set of skills and practices that allow teams to be confident in their ownership of production. Production-excellence skills are often found among SRE teams or individuals with the SRE title, but it ought not be solely their domain. Closing the feedback loop on production ownership requires us to spread these skills across everyone on our teams. Under production ownership, operations become everyone's responsibility rather than “someone else's problem”. Every team member needs to have a basic fluency in operations and production excellence even if it's not their full-time focus. And teams need support when cultivating those skills and need to feel rewarded for them. There are four key elements to making a team and the service it supports perform predictably in the long term. First, teams must agree on what events improve user satisfaction and eliminate extraneous alerts for what does not. Second, they must improve their ability to explore production health, starting with symptoms of user pain rather than potential-cause-based exploration.


A Quantum Revolution Is Coming

uncaptioned
Now, individuals and entities across NGIOA are part of an entangled global system. Since the ability to generate and manipulate pairs of entangled particles is at the foundation of many quantum technologies, it is important to understand and evaluate how the principles of quantum physics translate to the survival and security of humanity. If an individual human is seen as a single atom, is our behavior guided by deterministic laws? How does individual human behavior impact the collective human species? How is an individual representative of how collective systems, whether they be economic to security-based systems, operate? Acknowledging this emerging reality, Risk Group initiated a much-needed discussion on Strategic Impact of Quantum Physics on Financial Industry with Joseph Firmage, Founder & Chairman at National Working Group on New Physics based in the United States, on Risk Roundup.


CIO interview: Sam Shah, director for digital development, NHS England


Shah believes the effective use of standards across emerging technology will help break forms of supplier lock-in that have previously characterised much of the provision of NHS systems and services. To help encourage providers generate innovative solutions to business challenges in the health service, Shah says the sector needs to be a more attractive place for IT suppliers. “We’re keen to help – we want to generate grants to help innovators in the UK work in partnership with the NHS,” he says. “We have an entire network of academics and scientists that support our work. And we have a much more open approach to development, so that suppliers can start working with the NHS in a more meaningful way. “As we amass more data and connect more datasets, we have an opportunity to bring about precision public health to reduce inequalities and to reduce the burden on society. We can create precision medicine that allows clinicians to prescribe much more precisely around the needs of the patient and their optimal needs. Our world is becoming more data-driven, but we need help from suppliers to deliver these services.”



Put simply, location intelligence is the ability to derive business insights from geospatial information. Those with well-developed location intelligence abilities use GIS, maps, data, and analytical skills to solve real-world problems, specifically business problems. This is an important distinction. Location intelligence is primarily a business term that refers to solving business problems. GIS may be the technical foundation of location intelligence, but it’s not the same thing. ... In reality, when you factor location into analysis, you open up a world of opportunity. Specifically, you make it possible to tackle a unique set of problems. Think about an offshore oil company trying to predict and monitor sea ice activity. Rogue icebergs or shifting ice floes, driven by global climate change, pose a tremendous risk to the safe operation of offshore oil rigs and shipping vessels. Mitigation of sea ice risk is inherently about predicting and its monitoring the location of sea ice: its size, shape, and speed and the consequences if it impacts an oil platform.


European Union Votes to Create a Huge Biometrics Database


The identity records will include names, dates of birth, passport numbers, and other ID information. The biometrics details meanwhile include the fingerprints and facial scans. The primary aim of the biometric database is to make it easier for EU border and law enforcement personnel to search for people’s information faster. This is an upgrade to the current system of going through different databases when looking for information. The interoperability of the CIR will ensure that the law enforcement officers have fast, seamless, systematic and controlled access to the information that they need to perform their tasks. It would also detect multiple identities linked to the same set of biometric data and facilitate identity checks of third-country nationals (TCNs), on the territory of a Member State, by police authorities. The CIR for third-country citizens would enable identification of TCNs that lack proper travel documents. 


uncaptioned
With regards to a blockchain platform that offers a space for content creators to go about their business unheeded, there is a lot of potential, and already some use-cases of a decentralised content platform that has an incentivisation program already attached. Many are aware of Steemit, within the blockchain sphere, which is a blogging and social networking website that uses the Steem blockchain to reward publishers and curators. It is a useful service as because of its decentralised nature, there should be no censorship - but that is in question because there is still Steemit Inc heading up the entire operation. But in principle, a fully decentralised content platform allows for free reign regarding posting, and because of the token economy associated with it, there is monetisation, as well as crowd sentiment driving the content. Many will worry about hate speech and other dangers being pronounced on these decentralised platforms, but in quite a libertarian viewpoint, this will only be as successful as the demand for it.


WebAssembly and Blazor: A Decades Old Problem Solved

In mid-April 2019, Microsoft gently nudged a young framework from the "anything is possible" experimental phase to a "we're committed to making this happen" preview. The framework, named Blazor because it runs in the browser and leverages a templating system or "view engine" called Razor, enables the scenario .NET developers almost gave up on. It doesn't just allow developers to build client-side code with C# (no JavaScript required), but also allows developers to run existing .NET Standard DLLs in the browser without a plugin. ... HTML5 and JavaScript continued to win the hearts and minds of web developers. Tools like jQuery normalized the DOM and made it easier to build multi-browser applications, while at the same time browser engines started to adopt a common DOM standard to make it easier to build once and run everywhere. An explosion of front-end frameworks like Angular, React, and Vue.js brought Single Page Applications (SPA) mainstream and cemented JavaScript as the language of choice for the browser operating system.



Quote for the day:


"Great spirits have always encountered violent opposition from mediocre minds." -- Albert Einstein


Daily Tech Digest - May 31, 2019

How To Identify What Technologies To Invest In For Digital Transformation

How To Identify What Technologies To Invest In For Digital Transformation
There are many aspects of the experience, but if you look at the central pillars of a great experience, it comes down to the acronym “ACT.” The “A” pillar of ACT is anticipation. The platform must anticipate what the customer or employee needs when using the platform. A second pillar, C, reminds that their experience must be complete. The platform should not put the burden of tasks on the customer or employee; it should run the activity to its completion and deliver a satisfying, complete result back to the customer or employee. The third pillar, T, represents the timeliness factor. The experience needs to be performed in a time frame that is relevant and consistent with customer or employee expectations. An example is in sales where the company has 45 minutes (or perhaps two days) to complete the stakeholder’s need. The time is not about response time; it’s about the appropriate amount of time that the individual gives the company to get to a complete answer. It could be seconds, hours or days.




The digital twin is an evolving digital profile of the historical and current behavior of products, assets, or processes and can be used to optimize business performance. Based on cumulative, real- time, real-world data measurements across an array of dimensions, the digital twin depends on connectivity—and the IIoT—to drive functionality. Amid heightened competition, demand pressures, inaccurate capacity assumptions, and a suboptimal production mix, one manufacturing company sought ways to drive operational improvements, accelerate production throughput, and promote speed to market. At the same time, however, the manufacturer was hampered by limited visibility into its machine life cycles, and knew relatively little about resource allocation throughout the facility. To gain deeper insight into its processes—and to be able to simulate how shifts in resources or demand might affect the facility—the manufacturer used sensors to connect its finished goods and implement a digital twin.



How iRobot used data science, cloud, and DevOps

irobot-terra-hero.jpg
The core item in the new design language is the circle in the middle of the robots. The circle represents the history of iRobot, which featured a bevy of round Roomba robots. "The circle is a nod back to the round robots and gives us the ability to be more expansive with geometries," he explains. But iRobot 2.0 also represents the maturation of iRobot. "Innovation at iRobot started back in the early days with a toolkit of robot technology. Innovation was really about market exploration and finding different ways for the toolkit to create value," Angle says. Through that lens, iRobot explored everything from robots for space exploration to toys to industrial cleaning and medical uses. "Our first 10 to 15 years of history is fraught with market exploration," Angle says. Ultimately, iRobot, founded in 1990, narrowed its focus to defense, commercial and consumer markets before focusing solely on home robots. iRobot divested its commercial and its military robot division, which was ultimately acquired by FLIR for $385 million.


The Defining Role of Open Source Software for Managing Digital Data


Open source use is accelerating and driving some of the most exciting ventures of modern IT for data management. It is a catalyst for infusing innovation. For example, Apache Hadoop, Apache Spark, and MongoDB in big data; Android in mobile; OpenStack and Docker in Cloud; AngularJS, Node.js, Eclipse Che, React, among others in web development; Talend and Pimcore in data management; and TensorFlow in Machine learning. Plus, the presence of Linux is now everywhere—in the cloud, the IoT, AI, machine learning, big data, and blockchain. This ongoing adoption trend of open source software, especially in data management, will intensify in the coming time. The capability of open source has a certain edge as it does not restrain IT specialists and data engineers to innovate and make the use of data more pervasive. In my experience, successful data management depends upon on breaking down data silos in the enterprise with a consolidated platform in place for rationalizing old data as well as deploying new data sources across the enterprise.


DevOps security best practices span code creation to compliance


Software security often starts with the codebase. Developers grapple with countless oversights and vulnerabilities, including buffer overflows; authorization bypasses, such as not requiring passwords for critical functions; overlooked hardware vulnerabilities, such as Spectre and Meltdown; and ignored network vulnerabilities, such as OS command or SQL injection. The emergence of APIs for software integration and extensibility opens the door to security vulnerabilities, such as lax authentication and data loss from unencrypted data sniffing. Developers' responsibilities increasingly include security awareness: They must use security best practices to write hardened code from the start and spot potential security weaknesses in others' code.Security is an important part of build testing within the DevOps workflow, so developers should deploy additional tools and services to analyze and evaluate the security posture of each new build.
Chief artificial intelligence officer
The CAIO might not be at the Executive Committee level, but beware the various other departments reaching out to own the role. AI often gets its initial traction through innovation teams – but is then stymied in the transition to broader business ownership. The IT function has many of the requisite technological skills but often struggles to make broader business cases or to deliver on change management. The data team would be a good home for the CAIO, but only if they are operating at the ExCom level: a strong management information (MI) function is a world away from a full AI strategy. Key functions may be strong users of AI  –  digital marketing teams or customer service teams with chatbots, for example  – but they will always be optimising on specific things.  So, who will make a good CAIO? This is a hard role to fill — balancing data science and technology skills with broader business change management experience is a fine line. Ultimately it will be circumstances that dictate where the balance should be struck. Factors include the broader team mix and the budget available, but above all the nature of the key questions that the business faces.


Researcher Describes Docker Vulnerability

Researcher Describes Docker Vulnerability
Containers, which have grown in popularity with developers over the last several years, are a standardized way to package application code, configurations and dependencies into what's known as an object, according to Amazon Web Services. The flaw that Sarai describes is part of Docker's FollowSymlinkInScope function, which is typically used to resolve file paths within containers. Instead, Sarai found that this particular symlink function is subject to a time-to-check-time-to-use, or TOCTOU, bug. ... But a bug can occur that allows an attacker to modify these resource paths after resolution but before the assigned program starts operating on the resource. This allows the attack to change the path after the verifications process, thus bypassing the security checks, security researchers say. "If attackers can modify a resource between when the program accesses it for its check and when it finally uses it, then they can do things like read or modify data, escalate privileges, or change program behavior," Kelly Shortridge, vice president of product strategy at Capsule8, a security company that focuses on containers, writes in a blog about the this Docker vulnerability.


JDBC vs. ODBC: What's the difference between these APIs?

Many people associate ODBC with Microsoft because Microsoft integrates ODBC connectors right into its operating system. Furthermore, Microsoft has always promoted Microsoft Access as an ODBC-compliant database. In reality, the ODBC specification is based upon the Open Group's Call Level Interface specification, and is supported by a variety of vendors. The JDBC specification is owned by Oracle and is part of the Java API. Evolution of the JDBC API, however, is driven by the open and collaborative JCP and Java Specification Requests. So while Oracle oversees the API development, progress is largely driven by the user community. Despite the separate development paths of ODBC and JDBC, both allow support of various, agreed-upon specifications by RDBMS vendors. These standards are set by the International Standards Organization's data management and interchange committee, and both JDBC and ODBC vendors work to maintain compliance with the latest ISO specification. 


LinkedIn Talent Solutions: 10 tips for hiring your perfect match

Best practices for hiring and recruiting on LinkedIn
The product uses AI to recommend relevant candidates that could be a good fit for an available role, and it leverages analytics to make recommendations in real time as you’re crafting your job description. LinkedIn Recruiter and Jobs also allows companies to target open roles using LinkedIn Ads to reach relevant candidates. In the new Recruiter and Jobs, talent professionals no longer have to jump back and forth between Recruiter and Jobs; the update puts search leads and job applicants for an open role within the same project, viewable on a single dashboard. Candidates can then be saved to your Pipeline, where they’ll move through the later stages of the hiring process. ... Finally, LinkedIn Pages allows organizations of any size to showcase their unique culture and employee experience by posting employee-created content, videos and photos. Candidates can visit and organization’s page to see what your organization has to offer, as well as get personalized job recommendations and connect with employees like them, according to LinkedIn. Real-time page analytics can identify who’s engaging with your organization’s page and which content is making the greatest impact.


Sidecar Design Pattern in Your Microservices Ecosystem

Segregating the functionalities of an application into a separate process can be viewed as a Sidecar pattern. The sidecar design pattern allows you to add a number of capabilities to your application without additional configuration code for third-party components. As a sidecar is attached to a motorcycle, similarly in software architecture a sidecar is attached to a parent application and extends/enhances its functionalities. A sidecar is loosely coupled with the main application. Let me explain this with an example. Imagine that you have six microservices talking with each other in order to determine the cost of a package. Each microservice needs to have functionalities like observability, monitoring, logging, configuration, circuit breakers, and more. All these functionalities are implemented inside each of these microservices using some industry standard third-party libraries. But, is this not redundant? Does it not increase the overall complexity of your application?



Quote for the day:


"The essential question is not, "How busy are you?" but "What are you busy at?" -- Oprah Winfrey


Daily Tech Digest - May 30, 2019

GDPR - Data Privacy And The Cloud

GDPR - Data Privacy and the Cloud - CIO&Leader
The recent and rapid transition to multi-cloud networks, platforms, and applications complicates this challenge. To meet data privacy requirements in such environments, organizations need to implement security solutions that span the entire distributed network in order to centralize visibility and control. This enables organizations to provide consistent data protections and policy enforcement, see and report on cyber incidents, and remove all instances of PII on demand. Achieving this requires three essential functions: Security needs to span multi-cloud environments. Compliance standards need to be applied consistently across the entire distributed infrastructure. While privacy laws may belong to a specific region, the cloud makes it easy to cross these boundaries. ... Compliance reporting requires centralized management. Compliance reporting needs to span the entire distributed infrastructure. As with other requirements, this also demands consistent integration throughout the cloud and with the on-premise security infrastructure. Achieving this requires the implementation of a central management and orchestration solution


Disruption, data and the changing role of the CIO

This paradigm shift is a necessary result of the accelerated pace of technological change and increased pressure to adopt emerging technologies to avoid falling behind competitors. One possible response is to cling to the old ways, that is, to slow down adoption of 4IR technologies, and to resist the democratization of technology. But the risks of this approach, tempting as it might be given the sometimes overwhelming challenges, are high. First, a rigid or cumbersome process for adopting technologies will surely mean that competitors are moving forward faster. Second, a company that resists the democratization of technology may discourage potential employees who are intellectually curious. Further, such resistance to change may limit the potential of employees by signaling that compliance is more important than creativity. While having a heavy foot on the brake is a problem, a CIO who is pushing too hard on the accelerator isn’t the solution. The temptation is understandable.


Top 10 Future Trends In Android Development You Cannot Miss In 2019

IOT apps future trends in android development
Yes! People can now command the smart devices to perform basic routine activities and these devices will interact with the machine to run, stop, and function through the internet connection. Internet of Things (IoT) refers to the increased interconnectedness among different smart devices through the internet. It is one step ahead in device-to-machine interaction. For this, the smart devices should feature internet connection and sensors in order to allow the device to gather, receive, and transfer the information. It’s very much easy to operate and control the smart TV or a toaster in the kitchen or an air conditioner in the living room or a treadmill in the gym area through the smart devices. ... It’s fascinating that the wearables market is thriving and alive. Smart wearables are basically the use of technology which is worn on the body, close to the body or in the body. There’s no doubt about the trends in Wearables will go a step ahead to get many tasks done from a single smart device. Be it playing a game from a VR glass, from a smartwatch or from other Android wearables. Be it having a moving nurse with you to track your health through a smart belt, smartwatch or smart glasses.


Hackers targeting UK universities a threat to national security


In light of this, and the threat research programmes are under, 10% of 75 senior IT leaders polled by Vanson Bourne research “strongly agree” that a successful attack could have a harmful impact on the lives of UK citizens. Findings also show that nearly a quarter (24%) of UK universities polled believe their security and defence research may have already been infiltrated, while over half (53%) say a cyber attack on their institution has led to research ending up in foreign hands. “British universities have long been celebrated around the world for their academic excellence, and the role they play in not only driving technological and social innovation through research, but also advances in defence and security,” said Louise Fellows, director, public sector UK and Ireland, at VMware. “Keeping pace with today’s sophisticated cyber threats is an enormous challenge. Those responsible for protecting universities and the data they hold must examine how they can evolve practices and approaches in line with an increasingly complex threat landscape, including cyber security as a consideration at every stage of the research process by design,” she said.


Natural language processing explained

Natural language processing explained
Like any other machine learning problem, NLP problems are usually addressed with a pipeline of procedures, most of which are intended to prepare the data for modeling. In his excellent tutorial on NLP using Python, DJ Sarkar lays out the standard workflow: Text pre-processing -> Text parsing and exploratory data analysis -> Text representation and feature engineering -> Modeling and/or pattern mining -> Evaluation and deployment.  Sarkar uses Beautiful Soup to extract text from scraped websites, and then the Natural Language Toolkit (NLTK) and spaCy to preprocess the text by tokenizing, stemming, and lemmatizing it, as well as removing stopwords and expanding contractions. Then he continues to use NLTK and spaCy to tag parts of speech, perform shallow parsing, and extract Ngram chunks for tagging: unigrams, bigrams, and trigrams. He uses NLTK and the Stanford Parser to generate parse trees, and spaCy to generate dependency trees and perform named entity recognition. 


Baltimore Ransomware Attack Triggers Blame Game

The Times reports that the exploit was used numerous times, and proved very valuable for intelligence operations over a five-year period, before the agency lost control of it. Only then did the NSA alert Microsoft to the flaw, leading to it quickly issuing patches. And now Baltimore is one of the latest victims of attackers exploiting the flaw, the Times reports. The short list of who to potentially blame for the Baltimore incident now includes: the National Security Agency, for building the exploit and holding onto it for five years, without alerting Microsoft, before losing control of it; the shadowy group - maybe foreign, maybe domestic - calling itself the Shadow Brokers, which leaked the exploit in April 2017; Microsoft, for not building bug-free operating systems; the city of Baltimore, for having failed to apply an emergency Windows security update more than two years after it was released in March 2017 - and two months later for older operating systems - which blocked EternalBlue exploits in every Windows operation system from XP onward; and, of course, the attackers, whoever they might be.


Code Linux binary
In a technical report published today, Nacho Sanmillan, a security researcher at Intezer Labs, highlights several connections and similarities that HiddenWasp shares with other Linux malware families, suggesting that some of HiddenWasp code might have been borrowed. "We found some of the environment variables used in a open-source rootkit known as Azazel," Sanmillan said. "In addition, we also see a high rate of shared strings with other known ChinaZ malware, reinforcing the possibility that actors behind HiddenWasp may have integrated and modified some MD5 implementation from [the] Elknot [malware] that could have been shared in Chinese hacking forums," the researcher added. ... Hackers appear to compromise Linux systems using other methods, and then deploy HiddenWasp as a second-stage payload, which they use to control already-infected systems remotely.


Going beyond basic cyberhygiene to protect data assets

Skills and career development can start on a small scale, through free, vendor-sponsored programs, convenient online courses, or even at the library. ... By investing in learning as a lifestyle, common challenges such as finding time to sit down and complete a training module become easier to overcome. ... The scale and scope of cybercrime grows every day—new technologies introduce new vulnerabilities faster than they can be secured, and cybercriminals continue to find new ways to attack organizations. By understanding the pattern of evolution in the cyberlandscape and adopting an intelligence-based approach, technology and security professionals can arm themselves for anything that comes their way. As tech pros continue building security skills in daily operations, they take steps beyond basic cyberhygiene. Understanding their IT environment to uncover hidden risks, educating business leaders, leveraging data to show the value of IT efforts, implementing the “right” tools, and investing in training are key to going beyond basic cyberhygiene.


IoT > Internet of Things > network of connected devices
The technology itself has pushed adoption to these heights, said Graham Trickey, head of IoT for the GSMA, a trade organization for mobile network operators. Along with price drops for wireless connectivity modules, the array of upcoming technologies nestling under the umbrella label of 5G could simplify the process of connecting devices to edge-computing hardware – and the edge to the cloud or data center. “Mobile operators are not just providers of connectivity now, they’re farther up the stack,” he said. Technologies like narrow-band IoT and support for highly demanding applications like telehealth are all set to be part of the final 5G spec. ... That’s not to imply that there aren’t still huge tasks facing both companies trying to implement their own IoT frameworks and the creators of the technology underpinning them. For one thing, IoT tech requires a huge array of different sets of specialized knowledge. “That means partnerships, because you need an expert in your [vertical] area to know what you’re looking for, you need an expert in communications, and you might need a systems integrator,” said Trickey.


Business Associates Reminded of HIPAA Duties

Business Associates Reminded of HIPAA Duties
"Business associates still struggle with their HIPAA Security Rule obligations, in many of the same ways as do covered entities, including with regard to risk analysis, risk management and encryption, for example," says privacy attorney Iliana Peters of the law firm Polsinelli. "Business associates struggle with understanding their obligations to flow down the requirements of their business associate agreements with their own vendors that have access to protected health information." Covered entities and business associates alike must understand the lifecycle of their data so that appropriate HIPAA-required security safeguards are applied, Peters adds. And business associates should periodically conduct "mini-audits" of their security practices to ensure they are meeting obligations spelled out in their BA agreements, she says. Even though business associates became directly liable for HIPAA compliance nearly six years ago, confusion about their duties persists. "Some BAs fail to understand the full scope of their compliance responsibilities," says Kate Borten, president of privacy and security consultancy The Marblehead Group.




Quote for the day:


"If you truly love life, don’t waste time because time is what life is made of." -- Bruce Lee


Daily Tech Digest - May 29, 2019

Is Lean IT Killing Your Digital Transformation Plans?

Image: Olivier Le Moal - stock.adobe.com
The first thing to keep in mind is that IT should not be in any huge hurry to significantly trim down in terms of time and technology waste. A proper framework must first be put in place that clearly outlines and categorizes technology services, how they should be implemented, supported and spun down at the end of the lifecycle. These processes should be broad enough to encompass things like technical staff/management roles, service provider requirements, lifecycle planning, quality control and lines of communication. Also keep in mind that unlike Lean manufacturing, Lean IT must take into consideration the speed at which technology advances and the volatility in what the business needs. Manufacturing is far more static in nature – and major changes can be planned for well in advance. Yet, with IT, that’s not the case. The need to adopt disruptive digital technologies can strike at lightning speed. Added to this is the fact that DX is about converting all business processes to a digitized state under the operational umbrella of the IT department. Thus, even a minor pivot in business strategy requires IT to change or add new technologies to accommodate for shifting business processes.


10 years from now your brain will be connected to your computer

BMIs (Brain Machine Interfaces) are an intriguing area of research with huge potential, offering the ability to directly connect the human brain to computers to share data or control devices. Some of the work on BMI is one step away from science fiction. Probably the best-known company working on this technology today is Neuralink, the Elon Musk-backed firm that aims to develop ultra high bandwidth 'neural lace' devices to connect humans and computers. At least part of the reason for Musk's interest in the idea of mind brain-computer connections is that such technology could stop humans getting left behind by a (still to emerge) super-intelligent artificial intelligence. The idea is that connecting our minds directly to the AI with high bandwidth links would at least give us a chance to keep up with the conversation. However, more basic forms of BMI technology have been used in medicine for years, like cochlear implants which provide a sense of sound to a person who is profoundly deaf or severely hard of hearing. 


blockchain world
Regardless of which solution is chosen, the current underlying structure of blockchain is simply not sustainable. If cryptocurrencies and the myriad of other applications of the technology are to be used reliably and at scale, the system has to change. Ethereum has taken tangible steps towards doing this, but the chance of blockchain feasibly replacing central authorities – like banks and energy companies – remains slim. That doesn’t mean, however, that blockchain can’t be used to gradually improve transparency and trust in industries where there are environmental and ethical concerns. The tricky relationship between blockchain and sustainability demonstrates just how complex sustainable solutions can be. While blockchain has the potential to improve supply chain sustainability, it also necessitates the mammoth energy consumption required by cryptocurrencies – particularly Bitcoin. Perhaps the evolution of blockchain won’t come from the financial sector, but from the governments, organisations, and communities that use it to support sustainability.


No real change a year into GDPR, says privacy expert

Since the implementation of the GDPR, Room said there has been a “fixation” among privacy practitioners on the idea that the regulatory system needs to deliver pain and punishment to deliver change, with a great deal of discussion and focus on the potentially huge fines under the GDPR. “We are deluding ourselves about the power to change that comes from enforcement action such as fines. We should not be investing our hopes in pain if we want to deliver change,” he said, adding that already this has led many to believe GDPR is about US tech giants. “One year on, many organisations are thinking the fight is against US technology companies and not really about them. Not only is that distortion troubling, but so too is the view that pain is key to change because that suggests a fundamental failure to understand the significance and importance of the subject matter in its own right,” said Room. The focus should not be on the fines and other enforcement actions, he said, but on the fact that the GDPR is about fundamental rights and freedoms.


Deploying RPA: why DevOps and IT need more control

Deploying RPA: why DevOps and IT need more control image
“Non-IT departments have targets and ambitions to transform their business and feel frustrated that IT is just trying to keep the lights on,” he said. “So when a technology like RPA comes along and it’s pitched and marketed to a business audience and they can see positive results almost immediately, it’s a no brainer for them that they’re just going to try and run it themselves; rather than have a lengthy conversation with IT over how to best implement it or how it fits within their technology roadmap.” But should DevOps be worried? According to O’Donoghue, no. He said: “Ultimately, RPA does not take away the bulk of what DevOps and IT services teams do. There’s a whole spectrum of tasks their busy with from on-the-spot patching and service development. RPA can only do a very tiny part of this. So we’re never going to see a direct competition between RPA and DevOps, which is more of a cultural methodology for IT development and operations.


NVIDIA Launches Edge Computing Platform to Bring Real-Time AI to Global Industries

NVIDIA EGX was created to meet the growing demand to perform instantaneous, high-throughput AI at the edge — where data is created – with guaranteed response times, while reducing the amount of data that must be sent to the cloud. By 2025, 150 billion machine sensors and IoT devices will stream continuous data that will need to be processed(1) — orders of magnitude more than produced today by individuals using smartphones. Edge servers like those in the NVIDIA EGX platform will be distributed throughout the world to process data in real time from these sensors. ... EGX combines the full range of NVIDIA AI computing technologies with Red Hat OpenShift and NVIDIA Edge Stack together with Mellanox and Cisco security, networking and storage technologies. This enables companies in the largest industries — telecom, manufacturing, retail, healthcare and transportation — to quickly stand up state-of-the-art, secure, enterprise-grade AI infrastructures.


DevOps for networking hits chokepoints, tangled communications


While NetOps still lags behind DevOps, major market players look to bridge that gap. Red Hat, for example, brought network automation into Ansible configuration management to enable DevOps and network teams to automate the deployment of network devices and connections in the same way they would with OSes and cloud services. Ansible Tower, a management console for Ansible Engine, can store network credentials and scale network automation, among other tasks. Collectively, these networking features are referred to as Ansible Network Automation. DevOps teams should watch to see if, or how, they evolve in light of IBM's acquisition of Red Hat. In another move, this time by an established networking vendor, F5 Networks invested in NetOps via its acquisition of Nginx, an open source app delivery platform, early in 2019. With Nginx, F5 aims to blend network management with DevOps practices, as well as strengthen its multi-cloud presence. At the time of the deal, F5 said it will meld its app and network security services with Nginx's app delivery and API management portfolio.


Perfect storm for data science in security


Another key contribution by data science is in describing the extent of an attack as well as possible through automated methods. “Detection and response go hand in hand, and so the more we can detail the extent of an attack in terms of detection, the more we can accelerate the response.” Data scientists are also working in the field of automated response, but Neil said in this regard, it is “still early days” and automated response remains highly dependent on detection capability. “You need to be very sure of your detection before you start shutting machines down because a false positive here is quite expensive for the enterprise, so this is a real challenge. “However, progress is being made, and Microsoft has some of these automated response systems deployed. But we are very careful about this. Automated response is a very long-term goal. Regardless of the hype, it is going to take us years to realise this fully.” That said, Neil believes a lot of the manual, human-driven cyber attacks by teams of well-funded attackers will start to be replaced. “I think we are going to start seeing attackers using automated decision making.”


How researchers are teaching AI to learn like a child


One of the most challenging tasks is to code instincts flexibly, so that AIs can cope with a chaotic world that does not always follow the rules. Autonomous cars, for example, cannot count on other drivers to obey traffic laws. To deal with that unpredictability, Noah Goodman, a psychologist and computer scientist at Stanford University in Palo Alto, California, helps develop probabilistic programming languages (PPLs). He describes them as combining the rigid structures of computer code with the mathematics of probability, echoing the way people can follow logic but also allow for uncertainty: If the grass is wet it probably rained—but maybe someone turned on a sprinkler. Crucially, a PPL can be combined with deep learning networks to incorporate extensive learning. While working at Uber, Goodman and others invented such a "deep PPL," called Pyro. The ride-share company is exploring uses for Pyro such as dispatching drivers and adaptively planning routes amid road construction and game days. Goodman says PPLs can reason not only about physics and logistics, but also about how people communicate, coping with tricky forms of expression such as hyperbole, irony, and sarcasm.


Effective Risk Analysis in Cybersecurity, Operational Technology and the Supply Chain


From a cybersecurity perspective, Open Standards can be used to provide a proven, consensus-based methodology for the application of quantitative risk analysis, allowing for effective measurement that offers more validity. In supply chain security, for example, the Open Trusted Technology Provider Standard exists to help providers of IT products to utilize a quantitative approach to risk analysis. This enhances the manufacturers ability to identify how much risk is present and determine which third party is the weakest link within their supply chain.  In OT environments, however, risk evaluation methodologies like Bow-tie are often used to relate hazards, threats and mitigating controls. To enhance this technique, the addition of quantitative risk measurement will enable OT decision makers to more accurately evaluate which risks are worthy of mitigation. Although the measurement and management of risk has long been recognized as an important organizational responsibility, the hyper-complexity of today’s business environment has catapulted it to the forefront of the minds of senior executives.



Quote for the day:


"It is the responsibility of leadership to provide opportunity, and the responsibility of individuals to contribute." -- William Pollard


Daily Tech Digest - May 28, 2019

How Mindfulness Drives Better Design And Innovation

Photocredit: Getty
Mindful by Design draws its ideas from fields of neuroscience, evidence-based mindfulness practices, design and storytelling exercises, and more, in which it’s important to emphasize, with intention, that there is no one right way. I work with a variety of clients, including founders of small startups, CEOs of large multinational companies, school principals, researchers, artists, inventors and educators, guiding them to use a designer mindset. ... Mindful by Design is a toolkit with approaches that invite you to become the agent of change and action, to involve yourself in the moment and to learn to appreciate the quality of what is unfolding when we fully connect. ... Mindful by Design encourages each person to connect with their deeper sense of purpose, to trust, and to go beyond perceived boundaries and divisions, creating connection and bridges. Each individual is involved and empowered as a designer of personal and collective experience, also documenting and reflecting at each stage. This is a mindfulness saying: each moment is an invitation to learn and grow.


Five industries outside of tech being changed by DevOps

Five industries outside of tech being changed by DevOps image
Today’s warehouses are substantially more high-tech than the ones from past eras. For example, it’s common for such facilities to use a warehouse management system (WMS) that allows keeping track of all items from the time they arrive on-site to when those products get packaged and shipped to their destinations. A WMS can keep track of stock numbers, product categories and more, telling warehouse workers precisely where to find a desired item within a sprawling warehouse. Implementing a WMS into a facility for the first time is not always easy, but it can become more straightforward with help from DevOps. ... The internet has drastically changed how people research hotels, book rooms, hire special events managers and more. It’s not surprising, then, that many of the companies in the sector turned to DevOps to maintain their competitiveness. ... Depending on DevOps shortens the time required to develop and test new offerings and speeds up the time to market for those products.


Leading your organization to responsible AI

Leading your organization to responsible AI
The best solution is almost certainly not to avoid the use of AI altogether—the value at stakecan be too significant, and there are advantages to being early to the AI game. Organizations can instead ensure the responsible building and application of AI by taking care to confirm that AI outputs are fair, that new levels of personalization do not translate into discrimination, that data acquisition and use do not occur at the expense of consumer privacy, and that their organizations balance system performance with transparency into how AI systems make their predictions. It may seem logical to delegate these concerns to data-science leaders and teams, since they are the experts when it comes to understanding how AI works. However, we are finding through our work that the CEO’s role is vital to the consistent delivery of responsible AI systems and that the CEO needs to have at least a strong working knowledge of AI development to ensure he or she is asking the right questions to prevent potential ethical issues. In this article, we’ll provide this knowledge and a pragmatic approach for CEOs to ensure their teams are building AI that the organization can be proud of.



The future of self-service is customer-led automation — Gartner

The future of self-service is customer-led automation — Gartner image
According to Gartner, organisations are turning to naturalistic engagement methods, such as voice and other AI-powered technologies, to give customers what they want and achieve higher operational efficiency. In fact, 91% of organisations are planning to deploy AI within the next three years. And, by 2030, a billion service tickets will be raised automatically by customer-owned bots. “What’s interesting is that when we begin to look at the dynamics of self-service and continued automation by organisations over a longer time frame, cracks begin to appear,” continued Mullen. “The burden of managing and supporting self-services is being taken from today’s support staff and being pushed into customers’ hands. This level of delegation, from ‘DIY’ to customer-led AI, will be a major force shaping customer self-service.” ... “As customers embrace these DIY mindsets, they will choose providers that allow them to interact easily with these consumer-controlled touchpoints, like smart speakers and VPAs. Enterprise-provided user interfaces will increasingly play second fiddle to customer-controlled experiences,” added Mullen.



Data storage: Everything you need to know about emerging technologies

hpe-synergy-12000-frame.jpg
With the rapid growth of data volumes at the edge and in data centers, it is increasingly difficult to move data to processors. Instead, processing is moving to the storage. There are two different ideas covered under the rubric of intelligent storage. At the edge, data pre-processing and reduction, perhaps using machine learning, reduces bandwidth requirements to data centers. In big data applications, sharing a pool of storage and/or memory allows as many processors as needed to share the data needed to achieve required performance. These concepts are currently labeled intelligent storage by HPE, Dell/EMC, and NGD Systems. It goes beyond the optimizations built into storage array controllers that manage issues with disk latency or access patterns. Call it storage intelligence v2. Consider a petabyte rack of fast, dense, non-volatile memory, attached to dozens of powerful CPUs in the next rack. With proper synchronization and fine-grained locking thousands of VMs could operate on a massive data pool, without moving hundreds of terabytes across a network.


What new collaborations will you be doing in Microsoft's Fluid Framework?


Patton describes the Fluid framework as "A new distributed data structure platform that allows for hyper-performant scenarios with AI included. Think about it as the ability to have, say, simultaneously 18 different people that are around the world in different geographies with not just real-time collaboration, but AI translations happening at the same time in sub milliseconds." In other words, don't think of SharePoint as slow or clunky, or just an intranet site and document library: think of it as "a new hyper-fast and performant cloud platform that has AI built into it." What you work with through that SharePoint storage layer and distributed data structure isn't just a standard Office document; it's an Office document broken up into pieces — "components that can then be shared across other apps that have the ability to collaborate within the end points [with the changes] coming back to the original file." So a 'compound' Word document might include a component that's a table someone can be editing in the Word document, but that can also be shared into a Teams conversation where someone else can be adding more information.


When event-driven messaging is the right choice


With cloud integration, APIs are the prevailing mechanism. But let's say you deploy your CRM, such as Salesforce, in the cloud. First, you need to upload data, such as customer data, into the new CRM system. This is typically a batch process because you can't call an API a million times to populate the customer database in the CRM. So batch data integration is used frequently. We also see varied event-based scenarios where an application sends out a notification and all the applications [that integrate with it] receive the information in parallel. Instead of using the classic request-reply paradigm that [exists] when you use APIs, event technology lets you implement what is called a fire-and-forget mechanism: I send you a message and you receive it when you receive it. A good example of these event processes are the notifications that you get on your mobile device. Occasionally, a notification pops up to tell you, for example, that your plane is delayed. This is classic event processing -- I send you a message and you do whatever you want with my message. But when I send you the message, I'm done.


Amazon Is Working on a Device That Can Read Human Emotions

The notion of building machines that can understand human emotions has long been a staple of science fiction, from stories by Isaac Asimov to Star Trek’s android Data. Amid advances in machine learning and voice and image recognition, the concept has recently marched toward reality. Companies including Microsoft Corp., Alphabet Inc.’s Google and IBM Corp., among a host of other firms, are developing technologies designed to derive emotional states from images, audio data and other inputs. Amazon has discussed publicly its desire to build a more lifelike voice assistant. The technology could help the company gain insights for potential health products or be used to better target advertising or product recommendations. The concept is likely to add fuel to the debate about the amount and type of personal data scooped up by technology giants, which already collect reams of information about their customers. Earlier this year, Bloomberg reported that Amazon has a team listening to and annotating audio clips captured by the company’s Echo line of voice-activated speakers.


US Senate passes anti-robocalling bill


If the bill makes it through the House and is signed into law, it will empower the Federal Communications Commission (FCC) to inflict hefty new fines – as much as $10,000 per call – for illegal robocalls. The legislation would also increase the statute of limitations for bringing such cases, thereby giving FCC regulators more time to track down offenders. The act would also create an interagency task force to address the problem, and it would push carriers like AT&T and Verizon to deploy call authentication systems, such as the pending STIR/SHAKEN call identification protocols, into their networks. That’s now in the works: in September 2018, the Alliance for Telecommunications Industry Solutions (ATIS) announced the launch of the Secure Telephone Identity Governance Authority (STI-GA), designed to ensure the integrity of the STIR/SHAKEN protocols. That move paved the way for the remaining protocols to be established. 


Goodbye Passwords: Hello Identity Management


By 2022 there will be an estimated 29 billion connected devices, of which 18 billion will be related to IoT, according to a recent report by telecommunications firm Ericsson. Many of those connected things, plus the mobile apps and autonomous processes that drive them, will need new IAM solutions. “Identity and access management can depend on a lot of different things,” said Noam Liran, director of customer success at CyberArk. “It used to be just based on [the question of], does that identity have a password. Now, companies need to manage identities of microservices, cloud containers and mobile apps seeking access to privileged data in the cloud.” Liran added that even a website with a simple chat system needs access management. “A customer-service chatbot can be another form of identity to manage,” he said. “We have customers who are using a chatbot to grab tracking numbers from UPS or FedEx deliveries and then push the shipping data into a database.” Each one of those interactions requires a privileged relationship.



Quote for the day:


"True leaders bring out your personal best. They ignite your human potential" -- John Paul Warren