Posted on June 25th, 2009 by Tim Bass
It is not common knowledge, but we began discussing the need for a cyber command in the mid-1990s; but it was the Langley Cyber Attack in 1997 that started the momentum toward making a future cyber command a reality. I don’t want to rehash well-documented historical events in this post. Instead, I will focus [...]
Filed under: Cybersecurity, Cyberstrategics, Intrusion Detection, Network Monitoring, Requirements, Threats and Vulnerabilities | No Comments »
Posted on June 25th, 2009 by Tim Bass
As someone who, as a consultant, proposed a Cyber Command for the USAF over a decade ago, it is good to see the DOD moving in that direction with the proposed US Cyber Command. Cyberspace is a critical operational dimension. I first referred to this in a 1997 MILCOM paper co-authored with Lt. Col. [...]
Filed under: Cybersecurity, Cyberstrategics, Requirements, Threats and Vulnerabilities, Use Cases | No Comments »
Posted on June 23rd, 2009 by Tim Bass
Back in the days when I was happily spending time on the operations floor in computing centers, we always observed that the greatest security threats to our systems were well-intended operators who make simple mistakes. No hacker or criminal ever brought down a network like the bored network guy on the late shift who decided [...]
Filed under: Cloud Computing, Cybersecurity, Cyberstrategics, Detection Theory, False Positives and Negatives, Risk Management, Security Event Management, Simple Event Processing, Threats and Vulnerabilities, Use Cases | No Comments »
Posted on May 22nd, 2009 by Tim Bass
Here is one of my favorite news stories of the week, Guilty Plea for Man Behind Creative E-Trade Scam.
In this funny story, Michael Largent, 23, of Plumas Lake, CA, wrote a simple Internet script that opened more than 58,000 online accounts at places like E-trade and Schwab. Largent used fake names to automatically open [...]
Filed under: Complex Event Processing, Cybersecurity, Detection Theory, Financial Services, Fraud Detection, Use Cases | 1 Comment »
Posted on April 19th, 2009 by Tim Bass
One year ago I penned Event Processing in Twitter Space, and today parts of the net are buzzing about Twitter.
In a nutshell, Twitter is a one-to-many communications service that uses short messages (140 chars or less). Following on the heels of the blogging phenomena, Twitter has been primarily used for microblogging and group communications.
Twitter, and [...]
Filed under: Cybersecurity, Cyberstrategics, False Positives and Negatives, Network Monitoring, Risk Management, Threats and Vulnerabilities, Use Cases | 1 Comment »
Posted on April 2nd, 2009 by Tim Bass
Yesterday Amazon announced the public beta of Amazon Elastic MapReduce, a web-based service that enables businesses, researchers, data analysts, and developers to easily and cost-effectively process vast amounts of data. Amazon Elastic MapReduce utilizes a hosted Hadoop framework running on the web-scale infrastructure of Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simple Storage [...]
Filed under: Advanced Event Processing, Apache Mahout, Artificial Intelligence, CEP News and Events, Cloud Computing, Complex Event Processing, Cyber-Trading Technologies, Cybersecurity, Event Cloud, Event Processing, Modelling and Simulation, Network Monitoring, Predictive Business, Process Optimization, Scheduling, Security Event Management, Sensor Fusion, Simple Event Processing, Systems Engineering, Use Cases | 4 Comments »
Posted on March 23rd, 2009 by Tim Bass
In A Review of Zabbix - Zabbix Rules! (Part 1) we provided a brief introduction to Zabbix in the context of network and security management. In this post I will discuss Zabbix as an event processing platform.
Zabbix is like most event processing platforms. Zabbix provides both agent-initiated events as well as server-requested events. [...]
Filed under: Advanced Event Processing, Agents, Analytics, Apache Mahout, CEP Tutorials, Cloud Computing, Complex Event, Complex Event Processing, Cybersecurity, Development and Evaluation, Event Cloud, Event Processing, Event Processing Language, Event Processing Modelling, Event Stream Processing, Intrusion Detection, Network Monitoring, Open Source, Performance, Predictive Business, Process Optimization, Requirements, Security Event Management, Sensor Fusion, Simple Event Processing, Situation Models, Standards, Systems Engineering, Use Cases, Visualization | 1 Comment »
Posted on March 20th, 2009 by Tim Bass
It was 1992, the Internet was still an uncertain “dream technology” by scientists, and I was working at SprintLink. My role was the lead systems engineer to set up the network and security management center for SprintLink and Managed Router Network (MRN) team.
We used HP Open View Network Node Manager (NNM) for our core network [...]
Filed under: Agents, Analytics, CEP Terminology, Complex Event Processing, Cybersecurity, Event Processing, Event Stream Processing, Network Monitoring, Systems Engineering, Use Cases, Visualization | Comments Off