Cloud & Telecom Security

主流运营商的基础设施上已很少在ATM/FR继续投资，而是更多转向更新的IP/MPLS，表现在市场上，ATM/FR不再是运营商的主推产品，传统的点到点专线价格已呈上升趋势，而MPLS产品则逐渐取得价格优势，成为市场上广域网解决方案的主要选择。这一点在北美地区体现的尤其明显，欧洲运营商也有类似的特征。但是北美和欧洲并不代表世界，中国日本亚太印度中东很多地区传统的专线仍然具备价格优势，依然还是运营商的主要产品构成，而MPLS则处于市场推广阶段。Gartner的技术趋势分析认为大约在2010年，全球的运营商将普遍转向MPLS，帧中继将会彻底退出市场。在未来两三年里，主要的MPLS接入产品将包括专线、xDSL以及以太网。

另外还有一个显而易见的趋势就是Internet正在开始承载越来越多的企业应用，IP VPN被广泛用以企业内部、企业间数据交互以及其他关键度较低的数据业务，例如内容分发以及电子邮件、及时消息等，而将IP话音、ERP/CRM等依然运行在专线和MPLS上面。这时，专线和MPLS则和IP VPN一起构成了一个混合的企业广域网，通过相互间的业务分担和备份，企业可以大幅度降低广域网络的费用。

相对于帧中继和ATM，MPLS的主要优势体现在同一张IP网络上面提供不同应用和不同服务水平的能力， 能够为运营商提供更大程度的灵活性和产品多样性，从而降低运营成本、提高市场反应速度和竞争力。现在越来越多的企业已经或者正在准备将自己的骨干网迁移到MPLS上面来。此时，合理正确的收集用户业务的网络需求，对流量设计合理的优先级(CoS/CDR)以及QoS非常重要。

CNCERT released their annual report on the overall security status at China for 2007. You can download this report at their website. This report is in Chinese.

At this report, some numbers and trends are highlighted.

Compared against those numbers at 2006, security incidents and botnet(zombie) hosts at China increased rapidly, or even upsoared.

• website phishing – 1.4 times
• malicious code at web pages – 2.6 times
• defaced websites – 1.5 times
• Trojaned hosts – 22 times….

where the Trojaned hosts are estimated to up to one million (995,154) IPs compared against 44717 IPs at 2006.

据NetworkWorldAsia报导，HP近日承认在所售的USB盘中携带了蠕虫，给客户带来安全威胁。

HP所售的USB软盘(HP USB Floppy Drive Key)是用在HP的Proliant服务器产品线上的，集成了软驱和USB盘，有256M和1GB两种型号。SANS的一位安全专家怀疑蠕虫是在HP的某个工厂感染上的。

If a compromised drive is plugged into a USB port on any machine on the network, the worms may spread “to any mapped drives on the server,” HP’s alert said.

Up-to-date anti-virus software should detect the malware, but HP didn’t specify which of the many available programs would find and then delete the worms. Symantec Corp., for example, has signature definitions in its collection for both pieces of malicious code, which it identifies as “Fakerecy” and “SillyFDC.”

一些最新的杀毒软件已经可以检测出感染的蠕虫。

When I worked at CA as principal consultant,  I often present to customers on the value and benefits of a “end to end” application level network monitoring system. It helps IT guys build up the capability to pinpoint the the incidents and evaluate the business impact at the first glance. It helps the IT service providers show their service levels and KPIs and charge to their customers. It helps telco companies to enhance its product portfolio and expand its edge into customers’ premise…  However, in the real world, it has more meanings.

Typically, IT has different function groups or departments, e.g. enterprise applications(ERP, CRM, and etc.) development team, application operations team, and infrastructure IT team. They have different missions and services. When ever an incident or bad performance user compliant occurs, no team can confirm it’s not their ball to solve this. A virtual team or a SWAT team is always kicked-off for no matter small an incident and complaint. The root cause analysis and responsibility often become a very touch job.

End to end application level network monitoring system can help on this greatly. Particularly for infrastructure IT and application operations team. This kind of system can build up the baseline for each site, each key operations and sensitive time slots. Any departure might lead to easier analysis on the “root cause”, and as a result, the solution and resolvement could be quickened.

给大家拜个早年！恭喜发财！祝愿南方遭受冰雪灾害的同胞早日成功！恢复祥和生活！和大家分享一下这个改编小品，祝大家天天心情愉快！

小 崔：大叔大妈，好久不见，股票炒得挺好吧？
宋丹丹：好啊，那是相当得好！

小 崔：买的都是啥股票？

赵本山：都是中石油嘛。

宋丹丹：不说话还能把你憋死？

赵本山：我看中石油得先把你憋死！

小 崔：大妈，我听说中石油最近跌得很厉害啊？

宋丹丹：假象，绝对的假象！不会下蹲的股票是跳不高的。股评家说了，买了中石化，生活不用怕；买了石油，生活不用愁。 Read more…

今日，各大媒体争相报道英国数据光盘丢失事件，该事件是历史上罕见的数据泄漏事件。目前为止，税务和海关总署署长保罗.格雷已辞职，首相布朗的信任度也受到极大的伤害…参看新华网的报道。

又据Gartner的估计，在银行方面的直接经济损失（关闭帐号、另开帐号、更换信用卡等） 就可能高达5亿美元（500M$）。Gartner的专家Avivah Litan估计每个帐号20美元应该属于保守的估计…

以下是新浪的报道.http://www.sina.com.cn 2007年11月23日09:58 央视《今日关注》 Read more…

美国贸易委员会发表的白皮书”保护个人信息-商业指南”,ftc.gov,指出,一个好的数据安全计划应建立在下面五个关键原则之上:

1.Take stock. 要求收集整理计算机和文件中到底有那些个人信息

2.Scale down. 说起来也简单,就是尽可能少地保留个人信息。

3.Lock it

4.Pitch it

5.Plan ahead

这几点看起来不难,可是想全部作到,可真不容易。

这个白皮书特别针对数据的收集、整理、裁减、保护、消毁、计划等环节,使用非技术语言、深入浅出地讲解了各个环节的要点。