Archive for category Security
Splunk Makes Its Platform Play
Posted by Jeff Kelly in Analytics, Big Data, Enterprise Applications, Security on January 25, 2013
A Massachusetts company called Prelert released a new application yesterday that combines machine learning and predictive analytics to detect and report anomalous behavior emanating from IT infrastructure. If that sounds a lot like what Splunk does, you’re right.
In fact, Anomaly Detective is a downloadable app that runs on top of Splunk Enterprise. The release ties into Splunk’s push to position Splunk Enterprise as a Big Data application development platform as much as a suite of Big Data applications itself. Splunk released a software development kit for JavaScript to GA in October, followed by two new SDKs, one for Java and another for Python, in December.
Stealth IT | The Consumerization of IT
Posted by David Vellante in CIO Perspectives, Security on June 19, 2012
The mobile transformation is at the intersection of every large IT trend including cloud, big data and application modernization. Think about the major changes IT will face over the next five to ten years.
As more people become comfortable with technology, new strains will be placed on the IT group, which will have to adapt to meet evolving business demands. Tablets and smart phones will continue to be white-hot technologies that spans between the consumer and business worlds.
CIOs needs to tackle issues such as BYOD and the consumerization of IT so they can build a stronger partnership with the workforce in order to tackle future transformational projects.
Unhackable Encryption
It’s not news that quantum mechanics can be used to send secret messages without concern of them being intercepted. For years, physicists have been using this technology to do so. However, a true quantum link has only recently been successful. Originally, the messages were sent using quantum mechanics, but then had to be decoded at each node in order to continue the message. Since the nodes weren’t quantum mechanical, this left the information vulnerable to hacking at each node. A quantum link means the message never has to be decoded. By combining many quantum links, a true quantum network could be created. This would mean a completely unhackable telecommunications network.
VDI still on the rise
Posted by jcasaretto in CIO Perspectives, Infrastructure 2.0, Security, Virtualization on May 3, 2012
Virtual Desktop Infrastructure or VDI has long been kind of the lesser flashy sidekick to server virtualization and the cloud. We often hear so much about virtualization, and especially the cloud, because they are flashy, they do have that element of consumerization of IT. VDI however has been making consistent increased presence in the enterprise for a number of years now. For some organizations, it can be complicated to ingest the kind of changes that VDI introduces and the advantages it brings about. VDI products typically build on virtualization platforms, and that is one sure advantage. It also delivers improvements and efficiencies to the enterprise environment that is changing the ways a lot of environments are conducting business. 
The case for Network Security Forensics
Posted by jcasaretto in Infrastructure 2.0, Security, Wikibon on April 24, 2012
Network security forensics is often overlooked or lightly regarded when composing an overall security strategy. Be it forecasting a budget for forensic tools, or planning of an all-new green-field environment, the protection that proper forensics strategy provides in an environment can save countless resources when it comes to restoring a stable state, ensuring integrity, analyzing an intrusion or outage event, and learning information that can be used in the future. Forensic concepts also aid in reinforcing that secure data remains confidential. Forensic tools buttress the elements of a network that ensure integrity and availability. Sometimes this means a secure chain of custody or access, touching on the administrative model, it is often affected or in compliance with legal assertions or mandate.
Making the case for Network Security
Posted by jcasaretto in Enterprise Applications, Infrastructure 2.0, Security, Wikibon on April 19, 2012
As we continue this journey into the age of big data, cloud, mobility, social media and so forth, vast amounts of data are being generated daily. The volume of digital information continues to grow with no end in sight. More and more, personal and company information are becoming more and more digitized, both in storage and transfer. Securing this information is a growing challenge, and is becoming more complex by the day. Protecting digital assets means utilizing the best of available technologies and methodologies to achieve security goals. Not only must they ensure that the quality and performance of the solution is maintained, they must also assure undoubtedly that the information they seek to protect stays uncompromised. 
Hacker #FAIL
With an abundant array of ways to hack and numerous reasons to do so, it’s no wonder that hacking has come such a long way since the old school hackers of yesterday. While a good number of today’s hackers are untouchable geniuses, some of them have yet to overcome the first rule of hacking– don’t get caught! Here is a list of the greatest Hacker #FAILS:
Busted by Boasting
Rise of the Hacktivist [Infographic]
Hacktivism was intended to refer to the development and use of technology to foster human rights and the open exchange of information (via Wired). Hacktivism could also be defined as “the nonviolent use of legal and/or illegal digital tools in pursuit of political ends.”
The tools used in Hacktivism include web site defacement, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, typo-squatting, and virtual sabotage.
The team at SiliconANGLE and Wikibon have been following and reporting on the rise of several significant hacktivist groups over the past year plus. Here is a visual representation of the most recent Hacktivist Timeline, with links and additional references below.
Top 5 No-Skill Hackers
There are plenty of people out there who want to break systems, gain secret information, and edit the world to their fancy. There are some who accomplish this by hacking the world’s most guarded data systems, then there are those who take a slightly less code-genius approach to hacking the world. Take a look at some of the best no skill hackers.
The Jealous Girlfriend
No-Skills required: sticky fingers
2012 Hacker Events To Look Forward To
Whether you go to hone your black hat hacker skills, white hat hacker skills, or just to get on the good side of some of the world’s most powerful system security experts, hacker events are where it’s hat… errr at. Hacker events provide hackers a chance to gather, learn, and compete with each other. Events often include lectures from world renowned hackers, break off groups, and hacker games such as Capture the Flag where teams hack and defend systems or Hackathons– 24 hours of collecting hacked systems. Word to the wise, undercover FBI agents attend hacker events by the drove, trying to recognize creative code and learn new faces in the hacker world. Even with the Fed presence, hacker events are notorious for extracurricular hacker pranks outside of the scheduled rubric. A quick synopsis of such pranks include hijacked hotel wifi, gaining access to hotel billing systems, and even an instance of hacking an ATM in the hotel lobby. Here’s a list of hacker events to look forward to in 2012.




Recent Comments