January 21, 2014

University lecturer reports bad news about your information governance program
The sad truth is that most information governance initiatives either fail or fall short. But there are some steps that companies can take to help increase the chances of success, according to Richard J. Self, a senior lecturer in informatics and business and information governance at the University of Derby in the U.K. SearchDataManagement caught up with Self in between sessions at the IBM Information on Demand conference. Self explained that achieving success with an information governance program means first getting buy-in from senior executives.


TempleOS: an educational tool for programming experiments
It's simple to understand, manipulate, and work within. In essence, it's an educational tool for programming experiments. Drawing a line onscreen in TempleOS and on the Commodore 64 is about as equally complex for the end user. It's barebones by design -- you have direct access to the hardware, and you can do what you like with it, within the limitations of the hardware. This is a laudable goal, and one solution to the complexity of programming modern computers that programmers, hardware designers, and educators are seeking to solve.


Automated penetration testing in the Microsoft stack with OWASP ZAP
"The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.  It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing as well as being a useful addition to an experienced pen testers toolbox."


Author Q&A: Patterns of Information Management
An “Information Centric Organization” drives its business on high quality and timely information that is aligned to its mission and goals. We have entered an era where information is now a key competitive resource, and those organizations focused on what they can do and learn with the information they have at hand are finding far greater success than those who do not have this focus. By making the management of information a strategic priority, and by developing systems and practices that nurture and exploit information to maximum effect, an “Information Centric Organization” can exploit analytics to spot new revenue opportunities, drive product innovation, identify patterns to reduce fraud, and mitigate risk.


The Big Data Edge for Hedge Funds
There are three major trends when it comes to big data. The first remains just information gathering. There’s a ton of information that is generated by everyone and basically everything is now tradable. There’s tradable news; there is information provided by Bloomberg, Reuters, and Dow Jones; and there are news feeds. There’s also the internet that is like a data mine of information -- there’s unlimited numbers of stuff. The number one trend is really to synthesize and gain an edge by having some custom understanding of how the news is incorporated into the market and be the first to synthesize the news from the global universe of news.


Enterprises facing shortage of cybersecurity experts: Cisco
According to the networking solutions major, overall vulnerability and threat levels reached their highest in 2013, ever since it began tracking in May 2000. Its 2014 Annual Security Report (ASR) reveals that 2013 was a "particularly bad year", with cumulative annual threat alert levels increasing by 14% since 2012. Organisations in India are also witnessing a huge growth in cyberattacks and intrusions and the country faces shortage of about 4 lakh trained cybersecurity professionals.


Appetite for disruption: Can Simple and the web reinvent banking?
The advent of Simple's ideology came from the idea that large banks have a revenue model that relies on customer confusion about hidden fees and money management. They decided to do away with fees and provide a solid customer service team to help make things as clear as possible for customers. Co-founder and CFO, Shamir Karkal, said the mission of Simple is, "to provide a banking experience to customers that helps them spend smarter and save more." So, how can Simple hope to compete in a land of giants?


Data Management Maturity Model points way to best practices
The DMM is being developed by the Enterprise Data Management Council, a group founded by financial services firms, to provide a way for organizations to assess where their data management programs stand on a five-level scale. The EDM council released an initial version of the model to its members in June 2012; updates have been made this year, and the group expects to release the DMM publicly in 2014 along with a self-assessment spreadsheet.


Pre-fabrication: A New Way of Architecting Data Centers
With business success relying heavily on an organization’s ability to connect with customers and provide services, data center downtime can not only be detrimental to an organization’s reputation, but can strain customer relationships and incur costs upwards of tens of thousands or millions of dollars. To avoid these problems, data center and facility managers should consider a recent innovation helping to mitigate these difficulties: pre-fabricated architecture. In contrast to traditional construction where components are installed separately onsite, pre-fabricated infrastructure is a pre-engineered, factory-integrated and pre-tested system of power, cooling and IT modules mounted on a skid or in an enclosure.


Risk and responsibility in a hyperconnected world: Implications for enterprises
There are multiple scenarios for how the cybersecurity environment could evolve over the next five to seven years. However, if attackers continue to get better more quickly than defenders, this could result in a world where a “cyberbacklash” decelerates digitization. In this scenario, a relatively small number of destructive attacks reduces trust in the economy, causing governments to impose new regulations and institutions to slow down the pace of technology innovation.



Quote for the day:

“You have to dig a well before you can draw water from it.” -- Richie Norton

January 20, 2014

SDN essentials: Why network orchestration and virtualization?
SDN orchestration tools have emerged from startup Anuta Networks and Alcatel-Lucent's Nuage Networks. These tools target cloud providers that need to automate the creation of network services for their customers, although each company attacks the problem in a different way. Anuta's solution focuses on working with the network infrastructure many providers already have in place, while Nuage introduces a distributed software router and overlay network to create multi-tenant friendly network containers.


The PoSh DBA - Reading and Filtering Errors
Both the SQL Server Error Log and the Event Viewer are designed to be used via their respective graphic user interface. This is fine for one or two servers, but painfully slow for the average DBA who has to read and filter information in many servers. Even when you’re focusing down on a problem with a single busy server, the added weight of the graphical tool in terms of resources can slow troubleshooting down considerably. It is very important in the day-to-day life of a DBA to have a mechanism to read and filter error messages quickly and unintrusively; a technique for "mining errors".


E-book: IAM for the Real World: Simplifying Complexity
The world of identity and access management (IAM) is one of constant change, shrinking deadlines, minuscule budgets, overtaxed staff and unmerciful regulations. Unfortunately, the historical approach to IAM involves piecing together “half solutions,” in hope that tomorrow’s solutions will address real-world needs. The e-book “IAM for the Real World: Simplifying Complexity” evaluates what IAM for the real world would, should and can look like. It delves into the most pressing IAM issues faced by virtually every organization and offers actionable, affordable and sustainable approaches to the IAM challenges you face.


The smartest cars may need 5G, Ericsson says
Connected to a 5G network, cars could warn drivers of an impending collision or even be guided through traffic automatically with no driver behind the wheel, Ewaldsson said. Demonstrations at CES showed off both of those types of capabilities. But making those kinds of services work would require guaranteed performance all the way from the cloud that runs the service to the car, and back again. "The networks that we have today have nowhere near that quality-of-service guarantee," Ewaldsson said.


Which mobile cloud approach is right for your company?
Most companies are still trying to find the appropriate mobile cloud computing strategy to make sure their employees are more productive and their data (and their customers' data) is secure. Doing so could mean that remote workers have a combination of mobile apps, remote access to other systems and secure email, for example. Business leaders and IT managers need to think about their enterprise architecture and how to make their employees more productive in the mobile era.


The 24 most exciting new gadgets coming soon
CES has come and gone: we now have a long list of new and notable products coming in 2014. What follows are the ones we're most looking forward to. Let's start by stating the obvious: in 2014, we're going to see a lot of "sequel" products building on the success -- or attempting to fix the shortfalls -- of their predecessors. We've broken out some of the more notable ones on the pages that follow. This story was originally published on January 1, 2014, and has been updated extensively with additional products announced at CES 2014.


Build big data adaptability through rapid experimentation
Adaptable organizations experiment rapidly with their offerings (products, services, and relationships) and build strong discovery capabilities. There's no better way to accelerate discovery than to embrace big data in your strategy -- the key is to attack this with purpose and vigor. To dramatically increase adaptability, you must build an organization that experiments in a big data fashion: with high volume, velocity, and variety.


What Executives Should Know About Open Data
Not all data that’s valuable is internal and proprietary. New initiatives by governments as diverse as those of the United States, Mexico, and Singapore are opening the spigots of readily usable public data. Corporate information too is becoming more “liquid,” moving across the economy as companies begin sharing data with their business partners and, sometimes, consumers. Also surging is the richness of the information from data aggregators, which are assembling, rendering anonymous, and selling (to interested third parties) a wide range of data flows.


Rapid Diffusion of New Technologies Stumps IT Managers
IT managers allowing these technologies to enter the workplace must also take into consideration wireless security. Currently, emerging technologies use either their own WiFi capability to connect to a network or Bluetooth to tether themselves to a tablet or smartphone to access the Internet via a 3G/4G network. There are several issues to consider; the first is using public, unsecured networks. As these devices become more widely deployed they will be a target for the cybercriminal community just like today’s mobile devices.


Considering Going Remote? Here’s What Managers Need to Know
Telecommuting comes with challenges. From a manager’s perspective, there can be security concerns about sensitive company data on a remote device. Remote employees can burn out more easily as they work longer than they would have if they were in the office, research shows. Working from home can also be isolating and lonely. “The worst part about being remote is the feeling of being disconnected. We always wonder if we’re doing OK, if we’re remembered, if we’re sufficiently connected to the home office,” said Scott Hanselman, a programmer at Microsoft who works remotely.



Quote for the day:

"Successful people make the right decisions early and manage those decisions daily." -- John Maxwell

January 19, 2014

The models of data stewardship: how to run a data governance program
In this video interview from the fall 2009 TDWI World Conference, Dyche, partner and co-founder of Baseline Consulting, and Nevala, a senior consultant at Baseline, give tips on how to manage data governance programs and detail what they've defined as the five models of data stewardship. In addition, they discuss the benefits that BI teams can get from data governance programs, the need to measure the success of governance initiatives and the importance of giving data stewards the authority and accountability that's required to succeed in that role.


The 5 Keys to Effective Vulnerability Assessment
The bad news here is that too many organizations are not taking care of the basics that they need to in order to secure their systems. The good news: there are many straightforward steps these organizations can take to dramatically improve the security of their systems. One of these steps is having an effective vulnerability risk management program. In fact, a vulnerability assessment to scan for and remedy security flaws and weak configurations within your infrastructure is one of the most effective things you can do to increase the security of your enterprise.


A Simple Model for Information Governance, Part 1 of 3
While both AIIM and ARMA cover the information portion of the topic well, they seem to struggle with bridging the discussion into “Governance.” Others, in the Governance, Risk Management and Compliance arena, make clear the linkage between “Governance” and risk management and compliance, but generally with little reference to “Information.” See OCEG’s “GRC Capability Model ‘Red Book’ 2.0.” (The current version, 2.1, doesn’t address this as well).


SQL Server Change Tracking: A Near Bullet-Proof ETL Solution (Part 1)
This multi-part series will concentrate primarily on the Extract portion of the data extraction, transformation, and loading (ETL) process using SQL Server Change Tracking (CT). The second part will concentrate more on design architecture with CT, and the last part also touch on the Translate and Load portions as well as a near-real world example using the AdventureWorks2012 database. This segment will introduce the concept of CT as well as provide a substantive demo (i.e., something better than a hello world example) of CT’s functionality.


Australian IT project failures spark new ICT governance standard
"The standard was prepared due to continuing failures of major IT projects to deliver expected value. The aim was to bring home the need for action from boards and senior business executives who are responsible for the overall governance of the organisation," said Standards Australia chief executive, Dr Bronwyn Evans. "If organisations want to obtain maximum value from their investment, governance of IT projects should not be left to the IT department alone."


Cloud computing faces a clear and present danger
The “war on terror” is a political reality for both Australia and the US, and business leaders clearly need to more broadly consider the risks involved in working with cloud service providers. Cloud services and offshoring style outsourcing arrangements can be a contractual minefield. They are made more complex when the provider is a multinational that operates infrastructure located in multiple legal jurisdictions. Contractual and legal complexities can clearly be simplified when services and infrastructure are located entirely in Australia, and provided by an Australian company.


Assessing Vulnerability, Strategy, and Cost
The pervasive use of virtualization, the consumerization of IT, and the adoption of Cloud solutions to support IT service delivery are drivers of "new infrastructure" innovation that require public sector technology managers to better identify and mitigate associated security risks. By leveraging a holistic approach to vulnerability, strategy and cost, IT managers can formulate sound plans and operative decisions relative to security and its management. This session will explore these considerations for new infrastructure, workforce mobility, and end-point application security.


Creating a SQL Server DBA's Library
DBAs - like any other information worker - creates, collects, shares and interacts with all different types of information to help him/her do their job. Some of these pieces of information may be needed repeatedly, some of the knowledge gathered over time may be better saved in a secure location. Some of the applications used should perhaps be available for everyone else in the team. This is the concept of a "DBA Library": it's not the library in traditional terms where you have books and journals stacked on your desk; rather it's a centralized and integrated repository of knowledge, information and applications for the DBA.


Obama unveils NSA reforms: 'Keep calm and carry on spying'
A senior White House official speaking to sister-site CBS News' Mark Knoller said the President wants to dance the delicate line between preserving the NSA's surveillance capabilities while addressing "privacy and civil liberties concerns." But Obama remained on the defensive, reiterating previous claims that the NSA was "not abusing authorities in order to listen to your private phone calls, or read your emails." Obama's comments will likely not appease everyone, considering the conflicting desires of the technology and telecoms industry, intelligence agencies, foreign diplomats and privacy advocates.


Minding the API Hierarchy of Needs with RAML and APIkit
The trend for the approach used in designing and building public APIs is towards a RESTful approach, and away from the SOAP web services approach, as shown by the following graph drawn from the directory of APIs within ProgrammableWeb.com. This trend also extends to the internal and partner APIs within the enterprise. ... Enter the RESTful API Modeling Language (RAML). As described on RAML.org, RAML “is a simple and succinct way of describing practically-RESTful APIs. It encourages reuse, enables discovery and pattern-sharing.”



Quote for the day:

"Do something. If it doesn't work, do something else. No idea is too crazy" -- Jim Hightower

January 18, 2014

Under-pressure CIOs fret about their digital project skills
There's a cultural tension between IT's desire to do things clearly and in a predictable way and the way you need to operate with digital projects, Gartner Fellow and vice president Dave Aron said. "Traditional IT people like certainly and clarity and there's not a lot of that in the digital world," he said. "What's happening now is CIOs have to continue to provide that really professional, solid core infrastructure but they also have to deal with their company's need to succeed in an increasingly digital world."


Fridge sends spam emails as attack hits smart gadgets
About 25% of the messages seen by Proofpoint researchers did not pass through laptops, desktops or smartphones, it said. Instead, the malware managed to get itself installed on other smart devices such as kitchen appliances, the home media systems on which people store copied DVDs and web-connected televisions. Many of these gadgets have computer processors onboard and act as a self-contained web server to handle communication and other sophisticated functions.


The Disruptive Potential of Artificial Intelligence Applications
AI is working across many different industries, but I have detailed three examples below of technologies that many people do not realize are already being enabled through artificial intelligence. These cases are also illustrated by examples of technology that you may be very familiar with, but unfamiliar with the data-gathering techniques and artificial intelligence technology behind these systems. This is very important for business leaders across industries to take note of, as the opportunity to differentiate in a mobile and digital world will become increasingly crucial.


REST Services - Security Best Practices
REST is an architectural principle and is not a standard by itself, but recommend the use of standards such as HTTP, URI, XML and JSON and formats such as GIF, MPEG, etc. ... REST services being based on HTTP specifications is prone to all the security vulnerabilities as that of a web application. Thus REST implementation while it is the easier choice due to its inherent advantages, should also be implemented with due considerations to a combination of compensatory security practices


Can we build an artificial superintelligence that won't kill us?
Another reason for a rapid transition from human control to machine control is the one first described by I.J. Good, what we now call recursive self-improvement. An AI with general intelligence would correctly realize that it will be better able to achieve its goals — whatever its goals are — if it does original AI research to improve its own capabilities. That is, self-improvement is a "convergent instrumental value" of almost any "final" values an agent might have, which is part of why self-improvement books and blogs are so popular.


UK Government Takes Control Freak Approach To Tech
“The big spenders are still under control and only work with the big systems integrators,” Chan says. “The small guys can’t get a foothold in big government contracts, and while we still think of multimillion pound contracts and big gesture politics, rather than things that can work in a small way, this will always happen.” Speaking on digital rights, Loz Kaye, leader of the Pirate Party UK, tells Forbes that it would be political suicide to actually legislate for something as unpopular as Cameron’s web filter. But this filter itself is just the tip of the iceberg when it comes to a deep misunderstanding or mistrust of technology.


New China-developed OS takes aim at Android, Windows
The Linux-based COS, which stands for China Operating System, is just the latest OS to come out from the nation, at a time when Android and Windows are found on most smartphones and PCs in the country. The makers of the software have been vocal in wanting to break the U.S. hold over China's software market. "The operating system has already risen to become a national security matter," said Shanghai Liantong Network Communications Technology in a statement on its website.


Machine to machine communications and the security of things
If someone compromises a physical device, then its contents, software, and settings are also compromised. Before you purchase an IoT solution or devices, you have to ask the question, "What information is available to a tech savvy thief?" Hopefully the answer is "none" but don't expect that to be the answer you get. Expect that any of your devices can be compromised and any data on them can be accessed. Be sure that your device vendor is aware of physical security and that you've covered the bases with him or her.


CIO considerations for digital transformation in 2014
Now is a golden age for pioneering CIOs to work in close collaboration with their C-suite counterparts to innovate corporate business models and processes using disruptive technologies to transform how work gets done. As we move swiftly into 2014, what are the top considerations for CIOs in terms of embarking upon their digital transformation agendas? Does the mission just require the powerful elements of the disruptive trends, and a strategy for leveraging their combination, or will it require more? How does one begin the digital transformation process and where’s the best place to start?


Non-functional Requirements in Architectural Decision Making
In software engineering, a tight relationship exists between nonfunctional requirements (NFRs) and software architectures (SAs). As early as 1994, Rick Kazman and Len Bass asserted that SA is intimately connected to NFR achievement. This idea has pervaded software development over the years and explains why development projects invest a lot into fulfilling NFRs. This general statement becomes more concrete when we consider how the concept of SA has evolved from a simple structural representation to a decision-centric viewpoint.



Quote for the day:

"A business of high principle attracts high-caliber people more easily, thereby gaining a basic competitive and profit edge." -- Marvin Bower

January 17, 2014

Cooling Strategies for Ultra-High Density Racks
The simple answer to this problem would be to provision a data center so that it is capable of providing 20kW of redundant power and cooling to every enclosure. Unfortunately, this is simply not technically feasible or economically practical in almost any case. Making the wrong choices when specifying a data center for high density operation can needlessly increase the lifetime cost of the physical infrastructure by many times. The purpose of this paper is to outline practical and effective strategies for deployment of high density enclosures and blade servers.


Google unveils 'smart contact lens' to measure glucose levels
It uses a "tiny" wireless chip and a "miniaturised" glucose sensor embedded between two layers of lens material. The firm said it is also working on integrating tiny LED lights that could light up to indicate that glucose levels have crossed certain thresholds. But it added that "a lot more work" needed to be done to get the technology ready for everyday use. "It's still early days for this technology, but we've completed multiple clinical research studies which are helping to refine our prototype," the firm said in a blogpost.


How Natural Language Processing Makes Our Lives Easier and Improves Your Business
Talking to computers still requires programming languages but the ultimate goal of NLP is “to do away with computer programming languages altogether. Instead of specialized languages such as Java or Ruby or C, there would only be “human.”” The better a computer is capable of understanding natural language, the more applications there will be, but already NLP offers a lot of possibilities to help grow your business, save money and stay ahead of your peers.


The Year Ahead According to Rackspace
There’s a tacit agreement that many traditional security solutions just aren’t cutting it in our ever changing world of technology innovation. The NSA revelations and general scaremongering does not drive the market away from outsourcing, or from US companies, it drives them into wanting to do more on security, demanding more for their providers. 2014 will see continued investment in new security technologies especially around encryption. This will undoubtedly result in better security in the cloud and address some of those lingering doubts around the security of cloud-based platforms and systems.


Predictive Analytics Can Boost Enterprise Performance
"Using historical measures to gauge business and process performance is a thing of the past," said Samantha Searle, research analyst at Gartner. "To prevail in challenging market conditions, businesses need predictive metrics — also known as "leading indicators" — rather than just historical metrics (aka "lagging indicators")." Predictive risk metrics are particularly important for mitigating and even preventing the impact of disruptive events on profitability.


What makes innovation go wrong
Stephen Di Biase says innovation is "in our DNA. We evolved to get here." Di Biase, a longtime R&D executive, is now president of Premier Insights LLC, which provides consulting services about innovation to science-and-technology-based companies. He is on the advisory board of Clean Energy Trust, and he convenes a Chicago-area network of chief technology officers from companies that range from family-held firms to Fortune 500 companies. He spoke with Blue Sky Innovation about leadership, innovation in larger companies and thoughts for managers to consider when looking for new solutions.


IT mobility trend continues in 2014
It's pretty easy to conceptualize any software component as a resource, an element that does something for us. The problem with that very general approach is that it can lead to over-specifying. If you want to expose the functions of a programmable light switch, it's tempting to have verbs like On and Off and maybe status verbs like ReadState. These are nice, but they force an API into being not only functionally specific, but also limited in terms of what technologies can be used to implement it.


Web steps closer to baking-in support for NFC payments and data swapping
When implemented the spec would allow web pages and apps to read and write to NFC tags; to send and receive messages between NFC-enabled devices and provide a way to initiate a wireless connection via wifi or Bluetooth. The API would enable a range of capabilities for web sites and apps such as tapping two devices together to initiate a two player game; tapping devices to share data such as coupons or contacts; and tapping a device to read a message from an NFC tag.


Better software testing and improved quality starts with the culture
A testing expert who really knows his stuff adds enormous value to the project for the customer—and for the whole team by making their job easier rather than harder. Sadly, too many companies still view testing as more of a necessary evil than an opportunity. That's an attitude that Jim Holmes, Director of Engineering for Test Studio at Telerik, is doing everything he can to change.


Spy agencies around the world use radio signals to tap data from targeted systems
The technology, which has to be physically installed in most cases, has been available since at least 2008. It "relies on a covert channel of radio waves that can be transmitted from tiny circuit boards and USB cards inserted surreptitiously into the computers," according to the Times report. Data captured by the devices are sent to small briefcase-sized relay stations often set up miles away from the target system. The software has apparently allowed the NSA to do an end-run around whatever cybersecurity controls are installed on the compromised systems.



Quote for the day:

"Success is determined by those whom prove the impossible, possible." -- James W. Pence