Posted on June 25th, 2009 by Tim Bass
It is not common knowledge, but we began discussing the need for a cyber command in the mid-1990s; but it was the Langley Cyber Attack in 1997 that started the momentum toward making a future cyber command a reality. I don’t want to rehash well-documented historical events in this post. Instead, I will focus [...]
Filed under: Cybersecurity, Cyberstrategics, Intrusion Detection, Network Monitoring, Requirements, Threats and Vulnerabilities | No Comments »
Posted on June 25th, 2009 by Tim Bass
As someone who, as a consultant, proposed a Cyber Command for the USAF over a decade ago, it is good to see the DOD moving in that direction with the proposed US Cyber Command. Cyberspace is a critical operational dimension. I first referred to this in a 1997 MILCOM paper co-authored with Lt. Col. [...]
Filed under: Cybersecurity, Cyberstrategics, Requirements, Threats and Vulnerabilities, Use Cases | No Comments »
Posted on June 23rd, 2009 by Tim Bass
Back in the days when I was happily spending time on the operations floor in computing centers, we always observed that the greatest security threats to our systems were well-intended operators who make simple mistakes. No hacker or criminal ever brought down a network like the bored network guy on the late shift who decided [...]
Filed under: Cloud Computing, Cybersecurity, Cyberstrategics, Detection Theory, False Positives and Negatives, Risk Management, Security Event Management, Simple Event Processing, Threats and Vulnerabilities, Use Cases | No Comments »
Posted on April 19th, 2009 by Tim Bass
One year ago I penned Event Processing in Twitter Space, and today parts of the net are buzzing about Twitter.
In a nutshell, Twitter is a one-to-many communications service that uses short messages (140 chars or less). Following on the heels of the blogging phenomena, Twitter has been primarily used for microblogging and group communications.
Twitter, and [...]
Filed under: Cybersecurity, Cyberstrategics, False Positives and Negatives, Network Monitoring, Risk Management, Threats and Vulnerabilities, Use Cases | 1 Comment »
Posted on March 1st, 2009 by Tim Bass
Recently Peter Lin was kind enough to stop by and post this comment to our post, CEP Software Saves the Universe!
Here’s my [Peter Lin's] bias perspective as a user and developer of expert system shell[s]. A business rule engine, expert system shell or CEP engine at best provide[s] a foundation for creating an expert system, [...]
Filed under: Advanced Event Processing, Business Optimization, Business Process Management, CEP Terminology, CEP Tutorials, Complex Event Processing, Cybersecurity, Event Cloud, Event Processing, Predictive Business, Process Optimization, Risk Management, Scheduling, Security Event Management, Sensor Fusion, Simple Event Processing, Situation Models, Systems Engineering, Threats and Vulnerabilities, Use Cases | 14 Comments »
Posted on February 2nd, 2009 by Tim Bass
Over the years most of us who have “been around the block” in IT operations have always said, based on experience, that one of the biggest looming threats to IT operations is always a well intended employee who makes an honest mistake. I can recall discussing this topic almost daily with my honorable USAF colleagues, [...]
Filed under: Complex Event Processing, Threats and Vulnerabilities | No Comments »
Posted on February 1st, 2009 by Tim Bass
Following up on the excellent discussion in Predicting Events with Logistic Regression I think it is time to talk a bit about the importance of classification in complex event processing. CEP is, by definition, about detecting business opportunities and threats in real-time. It follows, that by definition, CEP is centered around classifying and discriminating complex [...]
Filed under: Analytics, Apache Mahout, CEP Terminology, Complex Event, Complex Event Processing, Cybersecurity, Event Processing, False Positives and Negatives, Intrusion Detection, Performance, Simple Event Processing, Situation Models, Systems Engineering, Threats and Vulnerabilities, Virtualization | 2 Comments »
Posted on January 5th, 2009 by Tim Bass
Here is my draft list of the Top Ten Cybersecurity Threats for 2009. Your comments are greatly appreciated. I will publish the final list later this month, based on comments received.
— Constant negative news reporting and adverse analysis undermining public and business confidence in leadership, business management and economic recovery efforts.
— Criminal manipulation, fraud and [...]
Filed under: Complex Event Processing, Cybersecurity, Threats and Vulnerabilities | 17 Comments »