Category Archives: Security

Hybrid Cloud Model Security

Very nice illustration and explanation of hybrid cloud by VMwareDoug

The following figure depicts an evolving strategy and model for Federal cloud adoption. In this model of a hybrid and optimized Federal cloud, we see that at one end of the spectrum, [A], security requirements and service levels are relatively low. Such an environment is conducive to public facing workloads. Although still substantial, security requirements for public data are considerably less than other data types. Service levels, such as availability, hover at only three 9’s (e.g., 99.9%). At the other end of the spectrum, both security and service level requirements are extremely high [C], demanding the strictest confidentiality, integrity, availability, and service level performance (e.g. 99.999%).

VMworld Europe 2011: Penetration Testing the Cloud

I will be presenting the following Session in two weeks at VMworld Europe 2011:

Session ID: SEC1236
Title: Penetration Testing the Cloud
Twitter hashtag: #SEC1236
Track: Cloud Infrastructure: Security and Compliance
Day: Tuesday 09:00

Cloud computing is said to represent a fundamentally different approach to building IT environments. Lessons from common management tools and processes, which work with discrete processes across static computing stacks, often are not incorporated into the new virtual environments. Predictably, this causes gaps in security. This presentation shows where and how to test for weakness. You will also learn how to deploy controls and improve security when resources are pooled across multiple sources, provisioning and capacity are highly dynamic, and configurations are fluid

This is a repeat of the same session presented at VMworld in Las Vegas, which was scored overall at 4.63 (4.72 for effectiveness) out of 5.00 with nearly 500 in attendance.

Hope to see you there.

VMworld 2011

RSA Europe 2011: Virtual Compliance

I will be presenting the following Session next week at RSA Europe 2011:

Session ID: GRC-303
Title: Everything You Wanted to Know About Virtual Compliance (But Were Afraid to Ask)
Scheduled Session Times: Thursday, Oct 13, 11:10 AM
Room: Buckingham (East Wing)

The session will address the most common sticking points for virtual environments with their auditors. It will cover examples of cloud environments and virtual environments that have achieved compliance with common regulations. If you think the “Cookies Directive” or FISMA High is impossible for a cloud provider, or mulit-tenant multi-level workloads will never be accepted by a QSA for PCI DSS 2.0, this session is for you.

Hope to see you there.

Steam Car for Sale

An auction tomorrow will be for a four-seater steam “quadricycle” with a range of 20 miles on 40 gallons of water — the 1884 De Dion Bouton Et Trepardoux Dos-A-Dos Steam Runabout.

De Dion’s little quadricycle can claim to be the first family car, despite its arcane power source. What makes it different from road-going locomotives dating back to Cugnot’s 1770 tractor is its sophisticated boiler, which can be steamed in 45 minutes. It is also compact at only nine feet long and relatively light at 2,100 pounds. But, it has four wheels, seats four, and can be driven by one person — like a modern car.

Steam Car

One of the oldest still functioning vehicles, and a promising early design, but it is said to have been expensive even back in 1884.

By 1889 you could buy a tricycle for 2,800 francs ($540) and a quadricycle for 4,400 francs ($850).

Those prices were certainly out of the reach for the average enthusiast, when a French laborer might make five francs a day, and sales were confined to the very rich.

Hmmm, 5 francs a day x 365 days = 1825 francs. So a tricycle would be double an annual salary. An American laborer might make $120 a day x 365 days = $43,800. So a car today, in relative terms, is about half the price of one “confined to the very rich” in the 1890s? That’s like saying a $60,000 car today is confined to the very rich. Am I missing something?

Price was surely a factor but it seems the real reason for demise was the allure of gasoline.

By 1893 gasoline was the up-and-coming power source, and steam devotee Trepardoux left the firm and presumably went back to toys. A celebrated duelist and ladies’ man, De Dion was keen on animal welfare and made a few large steam trucks in an effort to free horses from hauling heavy carts, and then he and Bouton focused on gasoline automobiles. They patented their transmission in 1895 and dominated the early years of the 20th century, with De Dion engines powering some of the first great marques, like Renault, Pierce-Arrow and Delage.