Zen 2.0

In March 2005, Forrester published data on US spending by small and medium-size businesses (SMBs) and enterprises in 2004. In this report, we extend our analysis to 2005. We are also updating our 2004 data to correct for: 1) a slight overstatement of IT spending by enterprises and by professional services firms of all sizes, [...]

SAN FRANCISCO – Micromuse Inc. (Nasdaq: MUSE), the leading provider of ultra-scalable, realtime business and service assurance software, announced today that it has entered into an agreement to acquire GuardedNet Inc., a privately-held software company based in Atlanta, Georgia, for $16.2 million in cash. GuardedNet is a SIM player and has raised a total of [...]

How to weed through the mounds of logs after a security breech to find out what went wrong. The problem is sorting through the pile of information to weed out the 95% you don’t want, to get to the 5% you want to see, and finally to the .10% where your answers lie.

I love these interview questions and 100% agree with them. It is difficult sometimes to find an engineer who would go that extra step. I often find engineers don’t have the curiosity to tinker with things to make them better. They often fall inline and satisfy with status quo. Anyways, great read.

Abe Singer, San Diego Supercomputer Centre’s open systems security expert, will discuss logging infrastructure analysis which describes how to build an infrastructure to collect, preserve, and extract useful information from computer operating systems and application logs. Log analysis helps system administrators learn more about what is happening on their systems and networks. article

Great article by Drew Robb on log management.

My article on computerworld.

These are scary figures that are sure to keep all CIOs, IT directors and managers up at night. According to the report, �The Cost of Enterprise Downtime, North America 2004,� conducted by Infonectics Research, network downtime is costing companies 3.6 percent of annual revenue. After studying over 80 large corporations, Infonectics Research found that companies [...]

OpenSIMS provides a way for tying together the open source tools used for security management into a common infrastructure. It leads toward the development of new SIMS technologies that allow different networks using risk metrics to collaborate on attacker profiling and remediation. Learn More >> Don’t know a whole lot about this, but if you [...]

My article, Insecurity through obscurity, has been posted on Computerworld. Opinion: Software developers should heed the writings of a 19th century cryptographer, who can teach them a thing or two about designing security into their products, says columnist Jian Zhen.