November 03, 2015

How The Internet Of Things Is Changing Work

Hooking up workplaces and environments to the world of IoT is often as easy as wiring a building up with IT cabling, says Justin Lee, CEO of real estate firm TheSquareFoot. So long as a workplace can be hooked up to the Internet, it can usually be effectively outfitted with an IoT system—i.e., sensors that generate data talking to each other and sending that data somewhere. Cost to outfit a workplace ramps up as the workforce increases in size, and while IoT solutions are becoming more common for smaller businesses, IoT solutions for large corporations over 1,000 people are not nearly as commercialized or streamlined yet, says Lee. But we're not yet at a place where real estate understands how to prepare an IoT-ready workplace.


10 tips to meet your project planning goals

If you’re a project manager, chances are your daily calendar is already filled from the moment you sit down at your desk to whatever time of day – or evening, most likely – you clock out. Many people at all levels of the enterprise rely heavily on you to have a solid grasp on all aspects of project management, including timing, status and direction of projects, at all times. ... Strategy should drive business activities, including projects, and not the other way around…otherwise the project is simply a pointless exercise. By ensuring strategic alignment, project managers can help organizations avoid ambiguous PMO direction, underutilized PMO resources, low company performance at a high cost, and declining project success rates. Alignment helps to establish a shared vision.


Instead of replacing individual desktops every year, companies only have to replace thin clients every 5 years. And when it comes time to do updates, the IT staff updates the one computer instead of spending time updating every individual workstation. VDI is a great solution for most companies. But if every employee in the company has to process large amounts of data, that one computer may not be powerful enough. If there are a large number of employees and each employee’s workstation requires multiple GPUs to process data quickly, switching to a Virtual Desktop Infrastructure may not be cost effective since there are still only a small number of open slots for GPUs in most computers.


To land a data center job in this evolving space, work relevant, change-focused terminology into your interviews for engineer, operations or manager positions. Simply rattling off DevOps and automation terms won't impress an interviewer, nor will a prevaricating job candidate who lacks the fundamentals to grow in a data center position. We've created fun visual cues in this slideshow of hot data center terminology to help you understand and describe modern data center operations. Establish your knowledge of IT infrastructure scalability and resiliency, culture and business trends as well as other defining developments while leaving a strong impression on your future employer.


What you need to do is get your head in the cloud in order to understand a new wave of threats and identify ways to strengthen defenses. I’m not just talking about the benefits of using the cloud for security – unlimited storage capabilities for global threat intelligence and historical data, powerful processing capabilities for security analytics, and the ability to deploy security technologies to even the most remote outposts. You also need think about how attackers are now banking on the increasing usage of Software as a Service (SaaS) apps and the advent of Shadow IT and resulting Shadow Data (as I discussed previously) to steal valuable digital assets. These attacks often incorporate basic tactics but with a modern twist.


Scaling Docker with Kubernetes V1

Kubernetes is an open source project to manage a cluster of Linux containers as a single system, managing and running Docker containers across multiple hosts, offering co-location of containers, service discovery and replication control. It was started by Google and now it is supported by Microsoft, RedHat, IBM and Docker amongst others. Google has been using container technology for over ten years, starting over 2 billion containers per week. With Kubernetes it shares its container expertise creating an open platform to run containers at scale. The project serves two purposes. Once you are using Docker containers the next question is how to scale and start containers across multiple Docker hosts, balancing the containers across them. It also adds a higher level API to define how containers are logically grouped, allowing to define pools of containers, load balancing and affinity.


Help Wanted: Security Analytics Unicorn

Today’s cyber attacks are increasing in sophistication and stealth. Malicious parties can infiltrate an organization’s network and rest undetected for weeks, months, even years, without raising a red flag. If targeted attackers have any virtues at all - patience tops the list. Because cyber criminals are willing to wait and collect sensitive information over time, rather than execute a flash attack, security analysts need to be able to identify and visualize user and activity patterns spanning longer periods of time. Understanding what “normal patterns” look like in a simple way enables security analysts to connect the dots at a higher level in order to detect important anomalies. Without the skills and tools to transform security analysts into entry-level data scientists, this is easier said than done.


Government as a platform, or a platform for government? Which are we getting?

The distinction here – and government’s choice – between a blueprint for GaaP that supports participation versus one that supports mere access, is critical. The former is about democratic re-invigoration, and the latter is about – well, just technology. Participation is much more disruptive to existing modes of organising within government. ... At one point, Chi Onwurah MP, who ably led the review, mentioned that she was comfortable with a notion that she coined as “platform for government” – let’s call this PfG – but less happy with “government as a platform”. Her distinction between GaaP and PfG is useful in helping to think through the dimensions, and thus the significant implications, of what is at stake. The table below summarises some of the most important issues.


How can you tell if your Web application has been hacked? “When your Web application is compromised, it will start to do things out of the ordinary,” says Steve Durbin, managing director of Information Security Forum. The key is to gain a thorough understanding of what constitutes normal behavior for your application, then keep your eyes peeled for aberrations. ... Don’t be so focused on what’s moving outside the network that you ignore lateral movement. If the Web server is communicating with other internal network resources, such as user file shares and individual user computers, that can be a sign attackers have gained entry and are moving around the network. If the application lets users upload files, then make sure it uses a dedicated file server and not a general one employed within the enterprise, for example.


Confusing the ends and the means

What everyone gets wrong is that innovation isn't the "ends" that executives seek. They seek growth, differentiation, inordinate profits. If those factors come from following the existing processes more efficiently, they will be ecstatic. But we all know that doing things more efficiently rarely creates new products or services, so they are frequently disappointed. When executives are clear with their expectations, when they communicate exactly what they want from innovation teams, when they provide appropriate scope and time frames, when they apply appropriate resources, they establish that innovation is a set of tools to help achieve profits, growth and differentiation through the creation of new products and services.



Quote for the day:


"This idea that robots, AI, can eventually encroach on creativity is pretty daunting" -- Hod Lipson


November 02, 2015

Software Development Estimation: A Controversial Best Practice

It’s like discussing politics or religion at a social gathering. Too controversial. Too inflamed. It’s one of those third rails of software development. Be careful if you touch it—you may get shocked. What makes this topic such a hot button one? For one thing, it seems like developers are really bad at it. Ask for an estimate on a feature, get the answer that it will be done by the end of the week, and discover that two weeks later it’s still work in progress. Or ask a developer for an estimate and the answer is, “I don’t know. Two to two hundred hours.” What are you supposed to do with that? For another thing, developers seem to resent being asked for estimates. Whether they are or aren’t good at estimating, they seem to find the whole activity to be a time waster.


How Skyport Systems wants to redefine security in the enterprise

To build security into the fabric of your organization, it can't be an afterthought. Gourlay said that money spent on tools like perimeter security is money wasted, as there is no guarantee that it can always be done the right way. "If you don't do it perfectly once, you've left the door open for somebody to get in that shouldn't be there," Gourlay said. So, their approach is to re-platform for security, with an architecture designed from the get-go to be hardened and secure by default. The Skyport system is composed of a two major components: An on-premise server and a management system. "The reality is that any mid-size company and larger is going to have a blend of on-premises compute and cloud-based compute," 


Social exclusion, IoT and data privacy the biggest issues facing digital economy

Onwurah said the default government position was to do nothing, and called for a more progressive “interventionist industrial strategy”. Asked what she might include in a hypothetical communications white paper, were she sitting on the government benches, Onwurah picked on three themes – digital exclusion, the IoT and data privacy and security. She said that, in her constituency of Newcastle-upon-Tyne Central, she saw people come to her surgeries who were unable to get online to conduct their mandatory job searches to continue to claim benefits, so were sanctioned and had to resort to food banks. Onwurah challenged the secretary of state for work and pensions, Iain Duncan Smith, to consider the impact of digital exclusion in his controversial welfare reforms.


Come the AI legal armageddon, what’s in it for me?

Lawyers must wake up to the possibility and likelihood that the machine will evolve from dealing solely with commoditised and research related legal work and move into the realm of reasoning and judging too; it already can, but we're only using this brilliant technology currently as a carthorse rather than its true calling as a thoroughbred. It’s also inevitable that more of the Top 100 firms that have been sniffing around the AI technology suppliers will tip, eventually. They will have no choice. They too will deploy IBM Watson or RAVN or another alternative AI software tech start-up provider perhaps for commoditised and/or high end complex due diligence work or a bespoke niche offering. The AI Armageddon is only a puff away.


Why tech isn’t poised for another huge bust

The most important change brought by cloud computing, however, might be in spending. The dot-com bubble was fueled by a hardware and software buying explosion as companies built and grew computer networks, but that spending was cyclical, and after people and companies bought what they needed, it crashed: U.S. technology spending by companies grew at a compound annual growth rate of 13% from 1995 to 2000, before falling to -3.5% over the next three years. Since the end of 2003, however, technology spending growth has smoothed — the 2009 economic crash notwithstanding — and generally come in line with economic growth. Over the past 11 years, the mean growth rate has been about 4.3%, topping 7% only once and falling below 3% only in 2009.


Public Policy Considerations for Recent Re-Identification Demonstration Attacks

The more complicated reality is that, while this recent re-identification demonstration provided some important warning signals for future potential health privacy concerns, it was not likely to have been implemented by anyone other than an academic re-identification scientist; nor would it have been nearly so successful if it had not carefully selected targets who were particularly susceptible for re-identification. As I’ve written elsewhere, from a public policy standpoint, it is essential that the re-identification scientists and the media accurately communicate re-identification risk research; because public opinion should, and does, play an important role in setting priorities for policy-makers. There is no “free lunch”.


Despite Best Intentions, Most Organizations Misinterpret, Misuse Data

Organizations for the most part agree on the great value of corporate date. Unfortunately, for the most part data professionals believe their organizations do a poor job of interpreting and using that data. A new study from Dimensional Research reveals this disconnect, and concludes that “data professionals have little confidence in the way business stakeholders within their organizations use corporate data when making important business decisions.” The study finds a number of areas in which those that capture and manage data, and those that act on it, are out of sync. ... Data models are also valued, but not used effectively, at many organizations. Again, the vast majority of data professionals see the value of data models, but only 20 percent of IT leaders fully understand that value. And, conversely, a majority of business users complain about data professionals on the same point.


Google makes Symantec an offer it can’t refuse

"It’s obviously concerning that a CA would have such a long-running issue and that they would be unable to assess its scope after being alerted to it and conducting an audit," Ryan Sleevi, a software engineer on the Google Chrome team, wrote in the blog post. He went on to require that, beginning in June, Symantec publicly log all certificates it issues or risk having Chrome flag them as potentially unsafe. Currently, under the Chrome certificate transparency policy, Symantec and all other Chrome-trusted CAs must log all extended validation certificates—that is, TLS credentials that certify a site is owned by a specific organization, such as PayPal, Microsoft, or Bank of America. Beginning June 1, Symantec will be required to log all certificates, not just those with the extended validation flag.


What is the status of OPNFV?

While the Arno release is a nice start, OPNFV has a way to go before establishing itself as the de facto open source NFV platform. Looking at the project list for OPNFV's next release, Brahmaputra, we can start to get a sense of which problems OPNFV will soon target. A couple of exciting examples include service function chaining, as well as group-based policy, so we will hopefully have the ability to orchestrate the insertion of virtualized network functions into service chains on an open-source platform. In the meantime, there is plenty more to learn and glean from the existing Arno release.


The Mathematics of Adaptive Security

Given the fundamental disconnect between how a security policy is described and how the security policy is implemented, the question has to be asked: “Is the perfect security policy even achievable? And if it is possible, what is the probability of introducing an error once the security policy is inevitably changed?” For that matter, what is the perfect security policy? The “ideal” security policy marries the current state (running context) of all workloads in a data center, the applications that those workloads take part in, the environment the applications run in (for instance, development, PCI, production), and the minimum of ports that need to be open to make the application work. This would effectively reduce the exposure of each workload and every application to the bare minimum.



Quote for the day:


"Machines will gain common sense when we master unsupervised learning" -- Yann LeCun


November 01, 2015

A Framework to Research the Social Determinants of ICTs for E-Health

We define the term access beyond broadband connectivity (material access), to also include motivation, skills and different type of usages, which in e-health ranges from accessing online healthcare information, services and clinical treatment, to self-support. Around the globe, e-health has continued to expand with the expectations that it will both reduce healthcare expenditure and improve quality and access to healthcare for all citizens. However, emerging evidence suggests that, if not managed carefully, e-health will further exacerbate health inequities because those with poorer health are often those with lower or no information and communication (ICT) use


How do I become an Enterprise Architect?

The role of EA is a challenging one, requiring a broad set of knowledge and skills. EAs have been described as generalists, and “a mile wide and an inch deep”. This has a degree of truth, but is also deceptive. The reality is that an EA requires very strong understanding of both business and technology, and has several areas of deep expertise. However, EAs are often assigned broad domains defined by business segments or technology categories, and must therefore initiate, review, align, integrate and communicate the work of a broad range of specialists. This requires very strong soft skills, which enable EAs to interact effectively with people. Soft skills cannot simply be studied. They require an accumulation of experience with a variety of people and circumstances.


The technology behind bitcoin could transform how the economy works

Bitcoin itself may never be more than a curiosity. However blockchains have a host of other uses because they meet the need for a trustworthy record, something vital for transactions of every sort. Dozens of startups now hope to capitalise on the blockchain technology, either by doing clever things with the bitcoin blockchain or by creating new blockchains of their own. One idea, for example, is to make cheap, tamper-proof public databases—land registries, say, (Honduras and Greece are interested); or registers of the ownership of luxury goods or works of art. Documents can be notarised by embedding information about them into a public blockchain—and you will no longer need a notary to vouch for them.


Tech giants take a break to reload in spending war

The companies don't typically disclose the components of their capital expenditures, but each of the Big Three has ramped up spending to support their own Web and mobile services and to build out operations to rent computing horsepower to other companies. While Amazon's spending also includes the mega warehouses for its e-commerce business, the company has singled out its growing Amazon Web Services cloud-computing operation as a chief reason for the spending jump in recent years. Capital expenditures have become a big component in the tech companies' jockeying for digital superiority.


Enterprise Architecture: Ripe for Digital Disruption

The key to Agile Architecture is emergence. In fact, business agility is the emergent property we seek from the Complex Adaptive System (CAS) we call the enterprise. Agile Architecture is a set of intentional acts we as individuals should take in order to get our enterprises to exhibit this most important of emergent properties. The question of the day, therefore, is what are these intentional acts? How do we actually go about architecting an enterprise to be agile? At this point many of the enterprise architects reading this will want to argue over whether the Agile Architecture I’m discussing is actually Enterprise Architecture (EA). Frankly, I don’t give a damn what you call it.


Balancing Complexity and Continuous Improvements – A Case Study

Within the IT department, TOGAF provided an ontology for discussing IT issues, and it also provided a foundation for the Enterprise Architecture repository. However, it was seen within the organization primarily as an IT architecture concern, not a framework for transformational change. The EA team decided that in order to really benefit from TOGAF and address the complexity challenges throughout the enterprise, they would need to prove that TOGAF could be used to add value throughout the entire organization and influence how changes were delivered to the IT landscape, as well as prove the value of a structured approach to addressing internal issues.


Your Data is Speaking. But are you Listening?

During the planning, leaders should use data to better understand the current organizational situation. Where are we succeeding? Where are we not succeeding? Where is our current corporate business definition working or requiring change? Where is digital transformation changing the basis of competition and possibly requiring new business capabilities? Additionally, leaders may request qualitative and quantitative data for existing and planned new products. How big is the market? What features do different segments want? And the list goes on and on. The important thing is they let the data speak to them and hear what it means to them and their business.


Digital transformations will spur software quality measurement

The move to digital products and services will mean that the failure of a system can become public knowledge very quickly indeed. System outages in industries like banking damage credibility and deter customers. “Software is becoming life-critical to businesses,” Delaroche declared. “In the past CIOs could deal with problems behind closed doors. But because many systems will be market-facing after digital transformations, problems will be public,” he said. One result of this will be to heap pressure on CIOs. “Today we hear about a major software outage every week, but in a few years there will be one every day,” Delaroche said.


Performance Testing without Requirements

In the absence of feedback and constructive input from those charged with this responsibility, you have work to do. The first challenge is to identify those responsible and elicit their system/application performance goals, expectations, and non-functional requirements. If requirements are still not forthcoming and you elect to stay the course, state in your test plan or formal communications your predicament in order to protect yourself. Concede that you are in exploratory mode and, for now, have committed yourself to waive formal requirements. You’ll have to create makeshift requirements and goals. (I’ve got some examples later in this blog as a start.) At a minimum, document what you are going to do during your performance testing effort.


14 Creepy Ways To Use Big Data

"So much information that consumers deem personal is, in fact, quite readily accessible," said Yoram Golandsky, CEO of cyber-risk consultancy and solution provider CybeRisk Security Solutions, in an interview. "There isn't one repository that can't be broken into. Eventually we find a way in." "It's a massive problem. Personal information is being disseminated far and wide. I don't think people appreciate how far and wide," said Rogers, in an interview. "It's getting to the point where you have to assume your data is not safe with anybody." While the warnings may sound alarmist or even paranoid, consider the sources: A world-class hacker and security expert, another sought-after security expert, and a Dark Web expert.



Quote for the day:


"Technology means the systematic application of scientific or other organized knowledge to practical tasks." - J. K. Galbraith


October 31, 2015

Without the proper amount preparedness and clear-headed foresight, a digital life left forsaken might cause a lot of ... inconvenience. Not only are there risks of fraud and identity theft with an unkempt digital afterlife, but there's also the possibility of exposing our darkest, digital secrets to unsuspecting (or overly curious) loved ones. OK, maybe we don't all have secrets lurking in our various inboxes. But anyone hoping to maintain some degree of privacy after death needs to take action before the reaper comes knocking. Google, Facebook, Twitter and other sites have various policies in place to deal with deceased users, so being aware of some of the options will help you maintain control over your information -- even from the grave.


Common Sense Software Engineering – Part IV; Life Cycles & Agile

All a life-cycle represents, is a way to get from the start of a project to a successful conclusion. It is a fairly straight-forward concept. Yet, today when reading anything about current variations on such techniques we are provided instead with a wealth of arcane terminology that really doesn’t mean much except to those who are using it. “Sprints”, “Stand-up Meetings”, “Scrum” and others appear to hide the simplicity of Agile’s foundations instead of allowing new-comers to easily understand it’s potential. Life-Cycles are also not to be taken as hard and fast rules of development as there are a number of standardized models that can be applied as the development situation warrants. Agile is just one among many such life-cycles but it appears increasingly that its promoters believe that it is more or less a panacea for all software development related issues.


Walmart undermines its online strategy — again

Walmart's online and mobile teams aren't ever given free rein. Sure, they can dream up great products and services for generating the most revenue and profits for online sales. But, it seems, they absolutely are not allowed to do anything that would truly threaten in-store revenue and profits. Result: Those services never go nearly far enough. Walmart's top bean-counters never forget on which side their bread is buttered. With that reality, buy-online-pickup-in-store made a lot of sense for Walmart. It makes the sale online, but it then finishes the transaction in a brick-and-mortar outlet, where the customer just might pick up a few more items before leaving. That takes advantage of all those locations staffed with personable, customer-facing employees, something that a sterile digital retailer can't match.


Could 5G networks make Brazil’s traffic mobile?

The most promising area of improvement could be transport. Brazil's has some of the worst congestion problems in the world. On Friday evenings in Sao Paulo, according to local traffic engineers, there are tailbacks for 112 miles on average but 183 miles at worst. At the moment, mobile phones actually make the traffic worse, because the first thing many drivers do at the traffic lights, in these days of screen addiction, is interact with their handset. There are systems in place already that try to improve the flow. Sao Paolo has a station dedicated to reporting traffic conditions and alternative routes, 24 hours a day, seven days a week. SulAmerica Traffic Radio gathered a large following of listeners who also act as reporters, calling in to update other motorists or to vent their frustrations.


It is time for CIOs to shift gears to multi-speed IT

CIOs are recognizing that they need to juggle orienting IT to maintain reliable legacy systems while also quenching the organization’s thirst for innovation. Of the C-level executives we surveyed in a 2015 Accenture Strategy survey of more than 900 executives around the world, 81 percent said the IT organization has reached a fork inthe road, and the choice before them is whether they will accelerate the digital agenda or move out of the passing lane to allow others in the organization to lead. Either way, 88 percent of executives believe that the IT organization needs to broaden its scope and keep pace with evolving needs of the business.


5 Steps from Business Analyst to Data Scientist

What’s the difference, you might ask? While the end result of these two jobs is often similar, a business analyst and a data scientist use different tools to get there. In general, data scientists have much greater technical expertise, especially in computer programming, systems engineering, and statistics. Business analysts, by their very nature, rely on intuition and have human biases that are starting to be seen as flaws that put them at a disadvantage compared to the cold hard facts that data scientists can produce. In addition, business analysts are often concerned with the single truth of what did happen in the past, while data scientists are working in a much more fluid version of what might happen in the future.


Engineering Internet of Things systems

Machine sensing and feedback loops, which have long been integral parts of control theory, have become possible on an enormous scale through the connection of low-cost sensors to cloud-based platforms providing analytics and security. The availability of operational and maintenance data that results has changed conventional wisdom about engineering practices and tools. Data has transformed industries such as retail, banking and insurance, giving rise to concepts such as business intelligence, the single customer view, multichannel marketing and financial market technical analysis. These and other such concepts have been made possible by the ability to monitor, analyze and react to business data generated by millions of transactions.


Nokia greenlights intelligent transportation system that uses drivers' smartphones

Until now, ITS systems have used short-range comms. But Nokia's navigation division, HERE - which is about to be sold to a group of German car makers - is preparing a pilot with Finnish traffic agencies to test a system that uses existing commercial mobile networks. "Transportation is one, or maybe the only, industry sector where the internet and modern mobile technologies haven't yet made a huge impact," Mika Rytkönen, Nokia HERE's head of digital transport infrastructure and business development for the EU, says. "What we are building now is a system where standard mobile networks can be used to connect road traffic to the cloud and traffic-management centres. This C-ITS [cooperative ITS] can be used to introduce new digital services to increase safety and sustainability and ease traffic jams."


Four and a Half Types of NoSQL Databases, and When to Use Them

System performance (throughput and latency) is achieved by simplifying how data is retrieved, and time-to-value is achieved by bypassing a lot of data modeling effort that is typically done for relational databases, especially on data formats that have complexity or a lot of variation. ... Any application that currently runs slower than you want or need, and does not require the core RDBMS capabilities—such as multi-row transactions, full SQL querying support, or integration with commercial applications—can likely use a NoSQL database. There are four main types of NoSQL databases, plus one type of “database” that should also be considered in the mix. In this blog post, I’ll provide a brief description of these types of NoSQL databases and when they can be used.


How Applications of Big Data Play a Vital Role in Industries

The goals of organizations have also evolved into visualizing Big Data into the larger scheme of things. With the spike in allocated budgets and inclusion, the participation of Big Data to apply itself into industry verticals is also rising. Implementation of Big Data has indeed brought results and the applications of big data have also evolved with time. This infographic presents how applications of Big Data are driving Industries and bringing innovative practices of growth in respective industries. Big Data provides solutions to overcome challenges faced by Industries who’ve ventured into the field. The infographic details challenges faced in 10 different Industries and how certain practices are being revolutionaized because of Big Data.



Quote for the day:

"Technology made large populations possible; large populations now make technology indispensable." -- Joseph Wood Krutch

October 30, 2015

Preventing cyber attacks: making successful attacks unaffordable for cyber criminals

One of the negative consequences of an increasingly digital world is cyber criminals’ ability to launch numerous, sophisticated attacks at lower and lower costs. These adversaries continue to develop and use unique tools that cause great damage to businesses, governments, and organizations. As technology becomes less expensive, the cost of launching automated attacks decreases, which allows the number of attacks to increase at no net increase in cost. In the face of this increasing onslaught, the defenders generally rely on decades-old security technology, “often cobbled together in multiple layers of point products; there is no true visibility of the situation, nor are the point products designed to communicate with each other.”


Robots Can Now Teach Each Other New Tricks

The work is part of an effort to figure out how robots might share information in useful ways. That could reduce the need for meticulous reprogramming, and it could allow robots to adapt to quickly when faced with a new task or an unfamiliar setting. “It’s pointing in an interesting direction,” says Stefanie Tellex, an assistant professor at Brown University, whose group enabled the Baxter robot to learn. “When you put a robot in a new situation—and in the real world it happens in every room the robot goes into—you somehow want that same robot to engage in autonomous behaviors.” Speaking last week at the Bay Area Robotics Symposium, held at the University of California, Berkeley, Ashutosh Saxena, who led the development of TellMeDave and RoboBrain, said that robots will increasingly share information in the future.


SDN will play key role in mobile network security

Fortunately, today's organizational networks can address many of these issues, with centralized authentication, VPNs and mobile network security policy enforcement capabilities. But a major challenge remains: Security threats are not static -- they change and evolve with frightening regularity. So, traditional network-centric security is going to have to evolve to meet these new challenges. Again fortunately, though, we have at least a conceptual framework for the future of mobile network security: software-defined networking (SDN). SDN's most visible appeal is that it extends the traditional mix-and-match interoperability that has defined networking to date with a degree of programmability and adaptability that brings new cost, management and operational benefits.


12 Important Lessons Learned by Experienced Scrum Masters

So simple, yet powerful. The conversation is the most often used tool by the Scrum Masters we interviewed. Conversations are a simple tool, but often forgotten. One way to improve your conversation skills is to read How to win friends and influence people, by Dale Carnegie. The author talks about a list of things you must have in mind when you want to grow a relationship with people you work every day. You should always start talking about something other person cares about, don´t judge or argue, be interested in what their opinions are. ... Scrum Masters do not get successful unless the team succeeds too. For that Scrum Masters must learn to work with the team. That means they must enable the team and their work, not do the work for them or solve their problems for them.


DevOps and security, a match made in heaven

The promise of DevOps for advancing the information security objective is phenomenal, but unfortunately, the way most information security practitioners react to DevOps is one of moral outrage and fear. The fear being verbalized is that Dev and Ops are deploying more quickly than ever, and the outcomes haven't been so great. You're doing one release a year, what will happen if they are doing 10 deploys a day? We can understand why they might be just terrified of this. Yet, what Ashish described is that DevOps represents the ideal integration of testing into the the daily work of Dev and Ops. We have testing happening all the time. Developers own the responsibilities of building and running the test.


Millennials and the Retail Revolution

As Millennials shift toward online research and purchasing, the physical presence of their preferred brands under immense pressure to keep people coming to their store. The movement towards online retail has created a disparity in physical retail, causing many brands to shut down low-performing stores and rally their efforts to maintain consistent traffic in other stores. Retailers like Walmart and Target are getting ahead of this trend by launching smaller urban stores that target high-demand needs of their customers. Similarly, brands are adopting more pop-up retail strategies, where they set up shop for short periods of time and offer exciting limited time deals, enticing shoppers to take advantage of the temporary offerings. These trends are catching fire as more retailers make these strategic changes to adopt the "Millennial style".


50+ Data Science and Machine Learning Cheat Sheets

There are thousands of packages and hundreds of functions out there in the Data science world! An aspiring data enthusiast need not know all. Here are the most important ones that have been brainstormed and captured in a compact few pages.  Mastering Data science involves understanding of statistics, Mathematics, Programming knowledge especially in R, Python & SQL and then deploying a combination of all these to derive insights using the business understanding & a human instinct—that drives decisions.  Here are the cheatsheets by category:


Three baseline IT security tips for small businesses

"A lot of companies rely on the idea of 'security through obscurity,'" said Crellin. "They're focused on running their business and probably don't spend a lot of time thinking about hackers." These attackers probably aren't interested in any one particular small business, said Crellin, but they tend to rely on a shotgun strategy. "Small and middle-market businesses are targets because there are so many of them. It's like a thief in a parking lot looking for one unlocked car." If your organization is unlocked, he said, you're a likely target. Common methods of hacking—phishing, brute-force password attacks,keylogging spyware, and social engineering—can cost small and medium businesses thousands of dollars.


Steps For Getting an IoT Implementation Right

“While the research uncovered some intriguing differences across geographies and industries, the generally held consensus is that the opportunities will be met with challenges,” Janet Jaiswal, vice president of enterprise marketing at Aeris, noted in a statement. “As the number of connected devices grows, organizations will not only be under increased pressures to better manage their devices and obtain data-generated insights to improve operational efficiencies, but they will also need a deeper understanding of how best to address the complexities associated with connectivity and data consumption to lower operational costs,” Jaiswal says. Big data and application development are other significant concerns within the enterprise, the study notes.


Better late than never? Samsung IT arms push into autos

"There are two trends: the car becomes a connected software device, and the entire mobile and ICT ecosystem is getting very interested in playing a part in that evolution," Bonte said. That is particularly welcome as demand for smartphones, TVs and computers slows, but Samsung is arriving late at a party where some of the best partners are already taken. ... Samsung patent filings show a wide range of technologies including a drowsy-driving detection system, an alert system for break-in attempts and a transparent display for directions and traffic information. Samsung Electro-Mechanics Co Ltd recently formed a dedicated team to sell components such as camera modules to new auto clients and says it would consider acquisitions to boost car-related businesses.



Quote for the day:

“Stories are the single most powerful weapon in a leader’s arsenal” -- Howard Gardner