Sunday, January 29, 2012

Targeted Individual - persistent advance threat

The new security treat is advanced persistent threat (ADT) attack when an individual target is researched and the malware program is customized so the threat signature goes undetected. In the crime arena, we would consider this crime of opportunity.

The hacker crafts a malware program allowing back door entry into your computer system allowing theft of property, ideas, drawing, and various building and production plans at the corporate level. Today the targets go behind household zombies, but corporations with significant resource, both financially and technologically.

The latest and most sophisticated attacks involve installing remote administrator tools (RATS) on command and control servers on corporate networks. Many of these attacks are developed over months and years to infiltrate various systems.

To counter these attacks, the Open Information security Foundation (OISF) is building the next generation intrusion detection system / intrusion prevention system (IDS/IPS) engine. One protection strategy is to use a layered security technology in addition to user training and education.

Since hackers often find ways to get around perimeter protections, the focus becomes controlling out bound data and communications used to steal information. We need to use best practices to secure data and control the fact that information cannot leave the network or be off loaded.

Implementing security initiatives by protecting mission critical systems via network segmentation and virtual local networks can limit damage. Additional security can be enhanced by limiting peer to peer sharing.

Prevailing wisdom suggest all networks will be potentially compromised so the appropriate response is critical. Currently it can be difficult to find a compromised system which makes correcting issues difficult. One approach is to analyze logs to look for indicators of an intrusion. This usually take the form of internal traffic being redirected to an unauthorized domain name system (DNS) server.

Security top ten

1. Improve security awareness and training among staff

2. Enforce security controls during concept phase

3. Encrypt data on removable media devices

4. Protect passwords change cycle

5. Develop social media program to enhance and protect assets and reputation

6. Review access to key assets frequently (limit privileged access)

7. Develop application white list for employees who manage sensitive data

8. Conduct risk assessments

9. Engage complex authentication

10. Limit access to sites or warn about potential spyware and malware issues



Thursday, December 29, 2011

Future network on my Vizio 48'' HDTV

I purchased my first true flat screen TV which is my new Vizio 48"" HDTV 1080P. I did my research on Plasma, LCD, and LED technology. The LED technology provides a superior picture in all lighting situations. The picture clarity and definition is amazing. The LED technology is a little more expensive, but well worth it.

While doing my product evaluation, I was not sure how much value Wi-Fi and and web applications would provide. After using the web applications, they are definitely worth having. The applications I like the best is Netflix. Watching movies is seamless and you do not experience the drag and disconnects you see on the Xbox. Early morning leisurely movies on the week end are fantastic. After using web applications, you can see how how media is moving towards web content and personal media libraries.

The pre-installed applications that I really like include: Netflix, Twitter, Facebook, Web Videos that include content from Fox, WB, TMZ, SHOWTIME,  4O additional channels.  The is a widget Gallery that includes additional web applications that can be down loaded at any time. Media outlets are writing applications to publish content over the web on a continuous basis. Here is an example of applications available for download: Fox5 Las Vegas, Snap (share your life),  Live Traffic, Movies Demand, etc. I recommend the Vizio LED HDTV. By the way, set up and installation was a breeze.

I am currently interested Vizio the company!




Wednesday, December 7, 2011

Google maps GPS navigation

Use your Android phone for GPS navigation via Google maps.


Google maps is built into Android devices so the set up is relatively simple. To use Google maps as your GPS, complete the following:

  1. Turn on local Stand alone GPS service (settings, locations, security)
  2. Select Google maps on home screen
  3. Accept Google service agreement
  4. Google maps will typically calculate your location based on GPS signal availability
  5. Select options button                           
  6.       You will be prompted to enter start (my location GPS) and End point (destination)
  7.    Google maps will give you directions, miles, time based on traffic (you can switch to transit, walk, bike mode)
  8.    Finally you can view directions base on map or navigation (voice and turn navigation)

This can be quite handy if you want to save on purchasing separate GPS system.

    Saturday, November 12, 2011

    Personal justice, pursuit of happiness

    As I headed past the Boston financial district heading to serve as a federal juror, I could not help but ponder if justice would been served, would I have to determine someone fate? I hurried past  an unhappy group of occupy Boston people who had obviously felt justice had not been served.  The signs and sentiment was corporate greed and  government mistrust was prevalent in this camp?  This was a big wow, and how did these people get to this point?

    There was a distinct feeling of sadness for the unemployed and many hurting people. Still I had to rush to jury duty to complete my civic duty. Once settle among my peers, I walked out to the lobby and viewed a spectacular view of the Boston harbor. I distinctly imagined sitting on the deck of a beautiful boat enjoying a cup of coffee,the sunrise, and simplistic happiness. Hopefully soon rather than later.


    Life, liberty, and the pursuit of happiness, after all was what made America great. As I completed my civic duty and headed homeward bound, I realized that each person should try to make the world a better place. Life can become so hectic and the pressure intense, we neglect to enjoy simplistic happiness. May the road to justice lead us to a better place!

    Happy Thanksgiving!

    Wednesday, October 19, 2011

    Life’s Bucket list review

    1.       Be happy -- find a way to achieve happiness and peace. “Money cannot by happiness”
    2.        Challenge yourself physically and mentally. Everyone needs a reason to get out of bed.
    3.     Strive for perfection, but do not be hard on yourself if you fall short.

    4. Find and develop hobbies:    My hobbies and  challenges include: Kite boarding, surfing, wake boarding, sailing, golf, snowboarding , snow mobile in the clouds, landscaping, etc.
    5. Travel and see the world and make some friends along the way. Destination list: Hawaii, Miami, Aruba, Bermuda, Hilton Head, new destinations I have not seen yet.
    6. Make the world a better place.

    Saturday, July 30, 2011

    American Economics according to the left and right, my solution

    American economics and balancing the federal budget  appears to be a distant pipe dream. Regardless of which political ideology you follow:
    Left, Right, or Independent, balancing the budget has never been a priority. The financial markets and confidence have diminished as the economy has been shaky and lay offs of USA workers have continued.

    The Left has always lived by the motto of raising taxes and spending to support increased social programs to help solve society's issues.  This policy worked great when we had economic growth and subsequent high tax revenues. We were able to make historic reductions in the federal deficit during unprecedented economic growth.

    The Right has always lived by the motto of lower taxes, lower spending on social programs, but increased spending on defense and the military. This policy works well during economic growth, but seems to do very little to reduce the federal deficit.  The posturing and political wrangling has usually resulted in congressional gridlock.

    Both ideologies do not work well when we are in an economic recession.  The combination of sending USA jobs overseas by many corporatiosn, hand outs and wasteful spending, have caused many hardships for the average American.

    Both the Left and Right must move toward the center where we have the correct balance of spending, tax reductions, elimination of hand outs and wasteful spending. It may be time for us to make a run at correcting issues that are important to us. So, who is with me?

    Tuesday, July 5, 2011

    Writing applicaions on a modern platform

    As cloud computing evolves, developing application interfaces is an emerging niche. The cloud service become a valuable tool when it improve service and decreases cost. This is difficult to accomplish but companies must be able meter usage and charge for services provided.

    Some of the more popular cloud offerings are: Google business applications, Microsoft Azure Office 365, connectivity applications for iPad, Playbook, and the many tablets that are being introduced in to the market.

    Here is a review of the Platform: iOS SDK and available tools: The tool set to develop on Mac, iPhone, iPad uses Xcode 4.02, iOS SDK 4.3 Integrated developer  Environment. The cost is $99 per year. The developer program allows for writing, testing/debugging, and distributing apps through iTunes App store.

    Goal is write first application for iPad solving a business problem.

    Once the application is completed Apple must approve placement on App store which is a long time consuming process.

    The Apple platform has a unique advantage in applications can run on desktops, notebooks, tablets and smart phone which is great for the customer base you server.