Cloud & Telecom Security

1. Improving business processes
2. Attracting and retaining new customers
3. Creating new products and services (innovate)
4. Expanding into new markets or geographies
5. Reducing enterprise cost
6. Improving enterprise workforce effectiveness
7. Expanding current customer relationship
8. Increasing the use of information/analytics
9. Targeting customers and markets more effectively
10. Acquiring new companies and capabilities (M&A)
(Source : Gartner EXP Survey 2008)

1. Delivering projects that enable business growth
2. Linking business and IT strategies and plans
3. Attracting, developing and retaining IT personnel
4. Improving the quality of IT services
5. Implementing IT process improvements
6. Improving IT governance
7. Building business skills in the IT organisation
8. Using information/intelligence in operations, products or services
9. Reducing the cost of IT
10. Managing IT risk and exposure
(Source : Gartner EXP Survey 2008)

1. Business Intelligence (No. 1 for 2006 and 2007)
2. Enterprise applications (ERP, SCM, CRM)
3. Servers and storage technologies
4. Legacy modernisation, upgrade or replacement
5. Technical infrastructure
6. Security technologies
7. Networking, voice and data
8. Collaboration technologies
9. Document management
10. Service Oriented (SOA)
CIOs continue to invest core technologies that can drive distinctive solutions
(Source : Gartner EXP Survey 2008)

I changed the theme to “Clean Press“. It’s very simple, concise, crisp. As Dave said it focuses on content. I slightly modified it by changing the sidebar to right. If you like this one, Click to download Clean Press (right sidebar).

近日，央视接连两天对百度竞价排名的弊端进行了报道，各大媒体也没有放过这个机会，百度的媒体形象一度跌入低谷。联系到Google深入人心的“不作恶”形象，两形之下，给人高低立判之感。当公司发展到一定阶段，“民心所向”和“政治”就成为一个非常重要的环节。

虽然百度在国内市场占有率遥遥领先，但是由于其“竞价”方式的排名，搜索结果往往让人难以接受，从而放弃。尤其是专业人士，很依赖搜索结果的公正和客观，如果发现搜索出来的是一个报价的排名，还不如直接看广告了。

我在Google和百度上面分别搜索“信息安全”和”Security”，搜索结果大家一看就可以感觉到百度“竞价”排名对你的嘲弄： Read more…

VMware 提供移动终端上的虚拟化产品 – MVP (Mobile Virtualization Platform)。基于MVP，终端用户可以同时运行多个虚拟的移动操作系统， 例如一个作为公司业务使用，另外一个给自己娱乐游戏使用。这样的技术乍一听起来有点悬，就手机、PDA那么小、那么弱的计算能力，还虚拟呢，那计算能力不就更弱了。但实际上，移动终端的计算能力在近几年来已经获得了快速提升，开始有渐渐重复当年的笔记本电脑的态势。 Read more…

美国Computerworld报道一位被裁的系统管理员被逮捕，罪名是对前雇主-位于纽约的某基金公司勒索钱财。

这个前雇员叫Viktor Savtyrev,他对于裁员协议中的补偿条款不愿意，所以写邮件给公司的总顾问和管理层，威胁说如果不提高他的补偿，他将毁坏公司的计算机系统。并威胁说，在攻击服务器系统后，还会通知媒体曝光。

虽然这个故事在当前金融危机的大背景下，很有代表意义，对各大准备裁员的公司都有警示意义。但是这件事情本身并不新鲜，以前类似的“信息安全”案件还有不少。 Read more…

It’s reported that Rising damaged users‘ Outlook Express.

Rising is the largest anti-virus vendor based at China. It just began its globalization journey by tapping Japan market.

The incident was firstly report at Nov.7. The Rising anti-virus software – Kaka was found to kill the Outlook Express folders as virus files.

Rising has apologized to their users for this wrong operation and promised to correct this and help users to recover their files.

It’s another outstanding wrong operation of anti-virus vendors after Symantec at May.18, 2007.

At Oct. 30, China Telecom, a giant telecom operator of China, host the 6th meeting for its multinational company customer meeting at Nanjing, Jiangsu province, south China. Tens of their MNC customers, including Cisco, Nokia, Ford, Sony and etc. attended the meeting. I joined as well on behalf of Lenovo.

At the meeting, China Telecom introduced its C+W strategy and demonstrate its new product offereing, e.g. global eye service, video conference service, remote training platform and etc.

Read more…

从Richard Bejtlich的博客上发现一个有趣的演讲，演讲的题目是”Cyberwar is Bullshit”, 演讲人是Marcus J. Ranum，此君目前是Tenable Network Security公司的CSO，名字很熟悉，内容更有趣。他给几个常见的安全术语下了个定义，并逐一做了分析和预测： Read more…

我们知道电磁辐射总是显示着它不好的一面，在国家和军事层面的信息安全都要考虑电磁泄露的，通常在商业领域和个人层面就不再考虑电磁泄漏和相关的Hacking。下面的报道带来了一些忧虑，一旦这样的设备或者技术变得普及，就得烦请大家在铁丝网、电磁屏蔽室中工作了！

几个来自洛桑联邦理工学院安全和密码学实验室的家伙，对劣质有线键盘的键击信息进行偷听，他们最大的帮手就是电磁辐射。他们发现了四种不同的偷听方式，从2001-2008年生产的，11款包含PS/2，USB接口乃至笔记本键盘的键盘中他们都至少找到一种攻击方法。这些攻击方法可以穿透65英尺的墙壁。

点击看报道视频，点击看Hack Eye的报道。

F-Secure is now reporting on a worm which exploits the critical vulnerability addressed in Microsoft’s MS08-067 bulletin which target English versions of Windows XP (SP2 and SP3) and Windows 2003 SP2. The exploit payload downloads a dropper that they detect as Trojan-Dropper.Win32.Agent.yhi. The worm component is detected as Exploit.Win32.MS08-067.g and the kernel component as Rootkit.Win32.KernelBot.dg. IBM X-Force will continue to monitor the situation for further developments while the threat level remains at AlertCon 1. Users are advised to patch any remaining systems which may remain vulnerable and, in compliance with recommended best common practices, block ports 139/tcp and 445/tcp from untrusted networks.

Click here for more information.

Riverbed is a widely used appliance that can help accelerate the Wide Area Network (WAN) performance of mission critical applications. At the same time, it can help compress the traffic so that the cost savings of your expensive backbone network.  However, before this release, it can not support Domino Notes, which means typically the biggest segment of the backbone traffic.   This new release is a good news for the customers that have deployed Riverbed and with Domino applications at the same time.

San Francisco, CA, October 27, 2008 – Riverbed Technology (Nasdaq: RVBD), the technology and market leader in wide-area data services (WDS), today announced the upcoming release of enhanced versions of its Riverbed Optimization System (RiOS®), Steelhead Mobile and Riverbed Services Platform (RSP), which together will provide enterprises with the most comprehensive solution for application acceleration and cost savings across the data center, branch office, and mobile worker. With these releases, Riverbed enables enterprises to further consolidate IT infrastructure, enhance worker productivity and accelerate data protection, helping CIOs support a more efficient workforce and IT environment while reducing operational and financial investment.

Click here to read more.

AT&T, Lenovo and Ericsson have formed a new alliance to enable business PC users to access broadband-speed internet via their ThinkPad notebook PCs. The collaboration is expected to lower the price premium usually associated with built-in mobile broadband technology by up to $150 per PC from previous pricing.  Click to read more.

针对这次紧急的MS08-067, 我们在周五一早，就开始向管理层汇报，并动员了所有的安全团队和服务器、应用运行团队的服务器管理员：
1 在周末对Windows服务器打MS08-067补丁
2 另外，紧急更新了全球所有的病毒服务器代码，保证可以查杀相关蠕虫
3 加入了新的LANDesk对客户端的补丁auto-fix分发
4 重新检测全球所有的防火墙系统，内网隔离系统，确保封锁135/139/445端口
5 启动紧急响应流程，要求SOC保证监视和通知，相关人员保持24小时可联系。
至今，非常感谢各个团队的理解和辛苦工作，艰苦努力，进展良好。接下来的一周非常关键，我们还需努力。也祝各位同行同仁都能顺利过关。