tag:blogger.com,1999:blog-6412765593731357882011-11-28T03:03:59.827+02:00Internet 2010Future World Wide Web Technology Today.Instant Foolhttp://www.blogger.com/profile/01484701964802271256noreply@blogger.comBlogger1621100tag:blogger.com,1999:blog-641276559373135788.post-7799227780786724782008-11-01T07:23:00.000+02:002008-11-01T07:29:56.754+02:00Cryptography Operational Protocols and AlgorithmsLeaving aside for a moment the issues of protocols and algorithms, the first choices to be made are the cryptographic strength of the system, embodied by choices of algorithm and key length, and some of the key-management questions. It is most important to choose truly random keys that are sufficiently long, keep those keys secret, and change keys "often enough." Again, this all supposes that youarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-57050634401887395202008-11-01T07:16:00.000+02:002008-11-01T07:23:07.547+02:00Perfect Cryptosystem One-Time PadsIs there a perfect cryptosystem? Surprisingly, the answer is yes. It is called the onetime pad. The idea of the one-time pad is to have a completely random key that is the same length as the message. The key is never reused, and only the sender and the receiver have copies. To send, for example, a 100-bit message, the message is exclusiveORed' with 100 bits of the key. That portion of the key is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-10415298025771878472008-06-19T06:43:00.000+02:002008-06-19T06:45:46.082+02:00Putting New Data into SQLSpyNet with the DTS WizardThe DTS Wizard is a very flexible tool that allows us to import data from almost any data source, including Excel, DB2, Oracle, Access, and even Text files. Why do we need this? Many organizations have data spread throughout the company. Charles will have a spreadsheet of his customers, Mary will have a small Access database that has all her suppliers, and Jenny, the secretary, might have a text arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-1978599396108204372008-06-16T15:31:00.000+02:002008-06-16T15:36:06.529+02:00Debugging Stored ProceduresI have performed many tasks in numerous different roles, and one of the most frustrating has been debugging stored procedures. But no more! The ability to debug stored procedures as though we were debugging any development platform code is part of one of the enhancements to SQL Server 2000's Query Analyzer. We can insert break points, step into, step over, and so forth. This is wonderful for arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-24273477850560961742008-05-04T14:30:00.000+02:002008-05-04T14:31:34.385+02:00BadArticle Article RewriterBadArticle Article Rewriter (www.BadArticle.com) is a unique article rewriter which allows you to create two or more of the same article but with different synonyms and sentence structures. This helps your SEO go up dramatically as you can therefore have hundreds of “different” articles on the same topic which all have the same keywords. It is a brilliantly original idea and can save you hundredsInstant Foolhttp://www.blogger.com/profile/01484701964802271256noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-35685057094492883842008-04-26T15:23:00.000+02:002008-04-26T15:24:46.125+02:00Protocol Negotiation and Session Setup continue… Readingand Writing The SMB protocol uses the READ and WRITE message types to perform I/O operations on a file for the client. Using the READ request, a client can request that the server return information from the file by specifying a number of bytes and an offset into the file. The server returns the data, indicating the actual number of bytes returned, which can be less than requested if the arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-62836325748539144162008-04-25T17:03:00.000+02:002008-04-25T17:24:11.652+02:00Protocol Negotiation and Session SetupSMB has a built-in mechanism that is used by the client and server to determine the other's capabilities so that a common protocol version can be established that the two will use for the network con• nection. The first SMB message that the client sends to the server is one of the SMB_COM_NEGOTIATE type. The client uses this message to send the server a list of the dialects it understands. The arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-11208397991212527032008-04-25T16:54:00.000+02:002008-04-25T16:58:46.492+02:00NFS Client DaemonsOn the client side of the NFS process, there are actually three daemon processes that are used. The first is biod, which stands for block input/output daemon. This daemon processes the input/output with the NFS server on behalf of the user process that is making requests of the remote file system. If you use NFS heavily on a client, you can improve performance by starting up more than one bind arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-51749028397894197352008-04-24T12:49:00.000+02:002008-04-24T12:50:46.904+02:00Microsoft Distributed File System (DFS) continue... Creating a DFS Root Creating a DFS tree is not a complicated task when using a graphical interface such as the one provided by the MMC and by the wizards that walk you through setting up your file system. To create a new DFS root, use the following steps: Click Start, Programs (All Programs for Windows Server 2003), Administrative Tools, Distributed File System.When the management console arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-19533432279465868352008-04-24T12:46:00.000+02:002008-04-24T12:48:26.003+02:00Microsoft Distributed File System (DFS)Like NFS, DFS employs a tree structure for file systems. A directory that is being imported by a client is attached at a point somewhere in the local file system, where it is then made available to applications as if the directory and its files were local. The Windows Server family (both 2000 and 2003 versions) includes DFS as an integral part of the operating system. The interface is written as arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-14709659389900458132008-04-23T08:41:00.000+02:002008-04-23T08:43:40.612+02:00NetWare Core Protocol (NCP)NetWare is composed of several protocols. IPX is a connectionless delivery service that can be used by higher-level protocols (such as NCP or SPX) to create a connection-oriented, reliable transport service. Two other important protocols used in NetWare are the Service Advertising Protocol (SAP) and the Routing Information Protocol (RIP). It is through SAP that servers announce their presence arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-40579549047005884032008-04-23T08:31:00.000+02:002008-04-23T08:33:58.383+02:00Using the SMB/CIFS Protocol on Non-Microsoft Clients: SambaSMB/CIFS is a protocol that is highly entrenched in the Microsoft world of operating systems and networking products. It makes sense, then, that there would be a way in which these workstations and servers could be integrated into a Unix/Linux environment without a lot of difficulty. The answer to this problem is called Samba, which is a set of products that provide for SMB conversations between arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-66538643760460376412008-04-21T02:25:00.000+02:002008-04-21T02:27:42.480+02:00What is the Difference Between IPv4 and IPv6? continue...IPv6 Extension Headers In general, most protocols have header information followed by a payload that contains the actual data to be transmitted from one point to another. Some protocols include a trailer that usually is use to provide some type of integrity check, such as CRC, to ensure that the frame or datagram has arrived at the destination without corruption. Still other protocols, and we're arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-3578273209912562372008-04-21T02:04:00.000+02:002008-04-21T02:25:14.827+02:00What is the Difference Between IPv4 and IPv6?The IP protocol is a connectionless, unreliable protocol. TCP uses IP to establish sessions with remote computers and provides the reliability of the data transactions. IP, however, provides the hierarchical address space used by IPv4. Yet this address space is limited to fields in the IP datagram that are only 32 bits in length. When first created, it seemed like this address space would providearlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-17347240907308259102008-04-20T09:45:00.000+02:002008-04-20T09:48:07.798+02:00Windows NT Passwords and PoliciesWindows NT enables the administrator to set certain parameters that control passwords and accounts. This is called the account policy for the domain. To view the defaults or make changes, select Account from the Policies menu in the User Manager for Domains utility. The values you choose for these parameters should reflect the degree of security you want to enforce at your site. At the same time,arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-60994263026981024122008-04-19T04:50:00.000+02:002008-04-19T04:52:11.838+02:00Strategies to Minimize Logon ProblemsThe best way to solve a problem is to take all necessary measures to ensure that the problem doesn't happen in the first place. Although it is not possible to completely eliminate every source of failed logon problems, you can do a lot to keep your network users happy by taking a few precautions: Place a backup domain controller on every physical subnet—If a network link goes down, users can arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-39003509002045807572008-04-19T04:46:00.000+02:002008-04-19T04:50:14.972+02:00Windows 2000 User Groups continue… Built-In Groups There are several kinds of built-in groups, depending on where you look in the directory structure. The domain local scope built-in groups can include the following: Account Operators—Users placed into this group can perform account management duties, such as creating new users. Administrators—This is the most powerful group. Members of this group can do just about anything they arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-85741194530371766762008-04-18T03:36:00.000+02:002008-04-18T03:38:32.060+02:00Windows 2000 User GroupsYou need to understand several concepts about user groups in Windows 2000/.NET before you begin to create them. Groups are helpful because they simplify administrative tasks when you have groups of users that must be treated similarly when it comes to rights and permissions. Second, because groups can be limited in scope, they can be useful for security purposes, limiting the computers or domainsarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-16845886236073123792008-04-18T03:32:00.000+02:002008-04-18T03:36:28.334+02:00Using a Shadow Password File of Unix and LinuxTo plug the password security hole presented by the / etc / passwd file, a technique called a shadow password file is usually used. This file contains the actual passwords, also in encrypted format. However, the shadow password file is not world-readable, and permissions are set so that only the root account can access this file. On many systems, the name of the shadow password file is /etc/arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-79100147869910852732008-04-16T22:16:00.000+02:002008-04-16T22:21:18.851+02:00Internet Printing Protocol (IPP) continue… IPP Object Types In the first version of this protocol, two basic object types are defined: printer and print job. The printer object encompasses the functions that are accomplished by the actual physical printer, rendering the printed page, as well as some of the functions that are traditionally performed by the print server, such as spooling the print file and handling scheduling procedures. arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-53880169088530138542008-04-16T02:21:00.000+02:002008-04-16T02:26:06.572+02:00Assigning User Rights for Windows 2000, Server 2003, and XP continue...If you are familiar with the complete list of rights used by Windows NT, you'll see that the privileges that Windows Server 2003 uses are similar to those, with a few additions. These are the privileges you can use with Windows Server 2003: Act as part of the operating system—This right is usually granted to subsystems of the operating system, and for running services. It allows the holder to actarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-58229906481112476182008-04-16T02:17:00.000+02:002008-04-16T02:21:00.930+02:00Assigning User Rights for Windows 2000, Server 2003, and XPUsers who are logged in to a Windows 2000, Server 2003, or XP computer can be granted rights by the administrator of the computer. If the user logs in to a domain account instead of the local computer, a domain administrator can manage these rights. Rights granted to an account that resides on an individual Windows computer protect access to resources on that computer only. The security arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-40347268624973537922008-04-15T02:37:00.000+02:002008-04-15T02:39:14.731+02:00Internet Printing Protocol (IPP)The Internet Printing Protocol (IPP) has gained high visibility as more computers become dependent on LAN as well as Internet resources. Although most network servers and clients can be configured to use the 1pr/lpd, Telnet, or DLC protocols, there are still many other protocols that can be used to send data to printers, such as SPX/IPX. The driving force of the Internet is making many vendors arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-34764441785647881122008-04-15T02:34:00.000+02:002008-04-15T02:36:39.624+02:00Microsoft Windows Share-Level SecurityEarlier versions of Windows operating systems used the FAT (File Allocation Table) and FAT32 (similar to FAT, but for larger disk volumes, as well as other features) file systems. Beginning with Windows NT, the NTFS file system enabled a more secure file system. FAT and FAT32 don't provide the mechanisms to store security attributes, such as access control lists (ACLs), for files or directories, arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-52083680672187429702008-04-13T03:54:00.000+02:002008-04-13T04:01:05.362+02:00Printing Protocols and Printing LanguagesA printer language is not the same as a printer protocol. For example, PostScript and PCL (Printer Control Language) are languages that describe how a document is to be rendered into the final printed product by the printer. When a printer is directly connected to a printer port on a computer, the printer language is important and is used by the software driver to format the information being arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-66898262988067949152008-04-13T03:08:00.000+02:002008-04-13T03:54:20.994+02:00System Daemons and Services continue…Delegating Authority In a network of any size other than a simple workgroup, it is usually necessary to delegate authority to other administrators or middle-level management personnel. When you find that you must create accounts that have privileges to perform administrative functions, do not give carte blanche access to every account. Keep track of the exact functions an account will be used forarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-17337937879472588952008-04-11T21:20:00.000+02:002008-04-11T21:23:30.383+02:00System Daemons and ServicesWindows servers have background processes that perform many functions, called services. Unix systems also have background processes that work in a similar manner that are called daemons. Regardless of what you call them, these processes, which are called background because they do not require interaction with the keyboard but instead execute on the computer waiting to perform some function, can arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-75595679995740255822008-04-11T21:17:00.000+02:002008-04-11T21:19:48.763+02:00What a Security Policy Should IncludeWhen writing a security policy, you should first perform an inventory of the resources you want to protect. Identify the users who need to access each resource, and determine the most likely place a threat to the resource might come from. With this information, you then can begin to construct a security policy that users will have to follow. The security policy should not be something that is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-77373848257076591642008-04-11T01:38:00.000+02:002008-04-11T01:40:39.405+02:00Physical Security Measures continue...Novell NetWare provides this functionality by giving the user a logon to the network that is controlled by the Novell Directory Services. Each user is represented in the directory by a User object, the properties of which specify information about passwords and connections. The Unix operating system does not use the concept of a domain. Instead, each Unix host maintain a password file that storesarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-91642753593022895412008-04-11T01:31:00.000+02:002008-04-11T01:38:36.024+02:00Physical Security MeasuresPreventing unauthorized access to resources means that you must first prevent unauthorized access the physical components that make up the network. This includes user workstations, servers, netwo cables and devices, and so on. After the network connection leaves your physical area, such as when you connect to an outside Internet provider, you lose control over the physical aspects of the network.arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-63547038007901854922008-04-09T19:17:00.000+02:002008-04-09T19:20:38.213+02:00Enforcing Passwords SecurityIt might not seem like an important thing to mention at this point, but you need to enforce a policy that makes users choose good passwords. And when you do that, you must decide what makes a good password for your environment. Simply put, a good password is one that is hard to guess. When you consider that a standard password-cracking technique used by hackers is to simply try every word in a arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-43347270888420803802008-04-09T19:13:00.000+02:002008-04-09T19:17:01.218+02:00Novell SecurityNovell's NetWare has been around for many years, though it is not the dominant network opera system anymore. Early versions were limited in their capability to keep track of events, but this changed with NetWare 4.x. The most useful tool for older systems is the AUDITCON tool, which canbe used to configure and audit a wide rang of system events. SYSCON and AUDITCON The SYSCON utility that was arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-6088477450344389602008-04-08T21:55:00.000+02:002008-04-08T21:56:16.474+02:00Network ProbesA network probe or sniffer is a very useful tool for troubleshooting network problems. You can find software and hardware network sniffers that collect data packets from the network and allow you to examine them to determine what is causing a problem on your network. Because the purpose of a network probe is to intercept packets and examine them, you can easily see how this could be very damagingarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-84744110581979650812008-04-08T21:53:00.000+02:002008-04-08T21:54:44.870+02:00Forged EmailEmail is probably the most popular application used on the Internet. All people can have an email account, whether or not they have a computer at home. You can sign up for email accounts at several sites, such as Microsoft's Hotmail or Yahoo's email service, and use a computer at your school, at a library, or even at work to access the account. Email messages, like Trojan horse programs, aren't arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-27128996334263743542008-04-08T01:26:00.000+02:002008-04-08T01:28:52.124+02:00The Network As Target continue...In this case, however, you need to be sure that the "hot spare" itself has not been compromised. Some malicious code can remain around for many months before causing problems. This is another good reason to use updated antivirus software on a regular, frequent basis. Another way to protect servers is to use the tools that the operating system provides to protect some services. For example, you'd arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-870943159212713042008-04-08T01:25:00.000+02:002008-04-08T01:26:19.500+02:00The Network As TargetThere are some problems for which there is currently no easy solution. When the entry points into your network are saturated with an overload of network traffic, there's not much you can do about it. The best actic you can use when such an attack occurs is to try to block out the address ranges from which the attack is coming. But when your network is being singled out by several hundred other arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-11905925444546205412008-04-07T04:32:00.000+02:002008-04-07T04:33:38.404+02:00Filtering on IP AddressesTo briefly review, the IP protocol is used by other higher-level protocols (such as TCP and UDP) to provide a connectionless best-effort data-delivery service. To do so, the IP datagram encapsulates the TCP or other protocol segment by adding source and destination addresses, port numbers, and other header information before sending the datagram farther down the protocol stack, where it is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-53580288592199302532008-04-07T04:27:00.000+02:002008-04-07T04:32:09.910+02:00Filtering Based on Port NumbersThe TCP and UDP protocols use port numbers in their header information to identify applications. Although filtering based on IP addresses blocks all network traffic from a particular source, you can use filtering rules that block only specific ports. Thus, you might allow customers to interact with Web servers inside your network using the ports set aside for WWW activity—port 80, for typical WWWarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-72777408429520710652008-04-06T00:21:00.000+02:002008-04-06T00:32:55.650+02:00What to Expect from a FirewallA common mistake is to assume that a firewall will do more than it can because of its name. In the building trade, a firewall that is used to protect individual units in an apartment complex or a condominium is designed according to rules laid down by the local authorities. In the networking trade, no authorities specify what a product must do to carry the "firewall" label. In fact, several kindsarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-43655914879385143742008-04-05T23:51:00.000+02:002008-04-06T00:21:19.263+02:00Using Both Hardware and Software FirewallsAlthough the Windows Firewall built into Windows XP starting with Service Pack 2 provides stateful packet inspection, it only protects against inbound threats. Consequently, you should not count on it as the only protection between your computer and the Internet. To provide a greater deal of security, you might want to use both a hardware and a software solution. Use the hardware firewall arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-11182640052680595152008-04-04T15:38:00.000+02:002008-04-04T15:42:56.620+02:00Computers and Privacy part 3 RSA Public Key Cryptography Several algorithms are used today for public-key asymmetric encryption. The most widely known is called the RSA algorithm, named after its inventors, Ronald Rivest, Adi Shamir, and Len Adleman. This method is based on multiplying two prime numbers to come up with the key pair. Further mathematical functions are performed after the multiplication to create the actual arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-74441323233946681872008-04-03T15:50:00.000+02:002008-04-03T15:51:47.939+02:00Protocols, Protocols, and More Protocols!Because the functions provided by a VPN include tunneling, data integrity, and authentication, it makes sense that a VPN is not created using a single protocol. Instead, several protocols can be used to create a VPN, each performing a particular function. In this section the following protocols are briefly examined: Internet Protocol Security (IPSec)Point-to-Point Tunneling Protocol (PPTP)Layer arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-18045360727835102412008-04-03T15:46:00.000+02:002008-04-03T15:50:10.795+02:00What Is a VPN?Basically, a VPN is nothing more than a secure path through a shared network or WAN that connects two computers, or two networks, so that from the point of view of each endpoint of the connection, they are on the same network. The connection is private because some means have been taken to secure the payload information of the data carried through this virtual tunnel. A VPN can be a good solutionarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-10023332856692870132008-04-03T01:02:00.000+02:002008-04-03T01:04:32.082+02:00Computers and Privacy Part 2The New Standard: AES AES is the name given to the encryption algorithm that was selected by NIST as the new standard for encryption. NIST set the requirements necessary for this new standard, and many candidates submitted algorithms hoping to qualify. The selection that was made is called Rijndael, a block cipher developed by Joan Daemen and Vincent Rijmen from Belgium. This encryption algorithmarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-39788159069872554542008-04-03T00:38:00.000+02:002008-04-03T01:02:16.446+02:00Computers and Privacy Part 1When computers were standalone systems that were easily controlled by a central administrative group, keeping data out of the hands of those who didn't need to see it was already difficult. Usernames and passwords were designed to restrict individual users and their actions, as well as track the actions they performed. File and resource protections enforced by operating systems made it simple to arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-59483404295274324302008-04-01T20:07:00.000+02:002008-04-01T20:09:25.172+02:00Network and Protocol Analyzers Part 4Capture Triggers After you create a capture filter, you can begin to capture data based on it by selecting Capture, Start. When using a narrow filter to look for a specific problem that doesn't occur often, you can set up an event to notify you when a matching frame is finally detected instead of having to sit at the console and wait. To set a capture trigger, select Capture, Trigger. The Networkarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-79006277408378830082008-04-01T20:06:00.000+02:002008-04-01T20:07:41.286+02:00Network and Protocol Analyzers Part 3Protocol Decoding The capability to take the raw bits that travel on the network and present them on a frame-by-frame basis is a powerful feature of the analyzer. Looking at a stream of byte values isn't very useful when troubleshooting a network problem. Looking at each frame, and understanding what kinds of frames are being generated by devices on the network, is a necessary component of a arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-40605405011096701342008-03-31T22:14:00.000+02:002008-03-31T22:16:58.380+02:00Documentation and Maintenance Keeping Things Up-to-DateDocumentation is an ongoing process. Networks rarely stay the same for a long time. It has been my experience that the larger the network, the faster the rate of change, as users or departments are relocated and new equipment replaces older equipment. So when you consider what means you'll use to create network documentation, be sure to take into consideration that it will need to be updated and arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-70302946376833518162008-03-31T22:11:00.000+02:002008-03-31T22:14:30.575+02:00Handheld Cable CheckersA cable-checker device is usually a small battery-operated unit that is used to check STP or UTP cables. This simple test is usually done when cables are first installed as a quick check to be sure that the process of pulling the cables through the ceiling or walls has not damaged them. If the cable is already attached to a network device, you have to disconnect it and attach it to the unit. A arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-12605155630601444182008-03-30T15:54:00.000+02:002008-03-30T15:55:15.666+02:00Network and Protocol Analyzers Part 2 Establishing a Baseline Before you begin to perform monitoring or analysis of the network usage and utilization, you need to establish a set of baseline data. To interpret the statistical data that you can collect using LAN analyzers, you need to have something with which to compare future measurements. Baseline data is used to define the normal operating environment for a system and provides a arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-55403960664496893092008-03-30T15:49:00.001+02:002008-03-30T15:54:01.819+02:00Network and Protocol Analyzers Part 1The first level of network testing consists of making sure that the underlying physical cabling structure is performing as expected. The next level is to monitor and test the network traffic and messages generated by the network protocols to be sure that you have a healthy network. Network analyzer products operate by monitoring the network at the Data Link and Transport layers in the OSI arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-37511107348884712952008-03-28T15:48:00.000+02:002008-03-28T15:50:00.208+02:00RMON (Remote Monitoring) continue...As this list shows, RMON provides a greater deal of functionality compared to SNMP. It allows for the collection of statistical data from all levels of the OSI reference model, including applications at the top in RMON2. Because Ethernet and Token-Ring networks operate in a fundamentally different way, additional groups are defined in RFC 1513 that are specific to Token-Ring networks: Token-Ringarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-28428245103435004812008-03-28T15:45:00.000+02:002008-03-28T15:48:00.540+02:00RMON (Remote Monitoring)RMON (which stands for Remote Monitoring) is a data-gathering and analysis tool that was developed to help alleviate some of the shortcomings of SNMP. RMON works in a similar manner, and its objects are defined in an MIB. RMON can also be thought of as a specialized SNMP MIB for use with remote monitoring devices. It was designed to work much like the LAN analyzer discussed RFCs 1757, "Remote arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-53284404047734249022008-03-27T19:58:00.000+02:002008-03-27T20:01:06.655+02:00Power ProblemsAs basic an issue as power might seem, it should be your starting point when you have a device that is not functioning correctly. For example, you might get up one morning and find that although your computer is working just fine, nothing prints. You check the printer and find that it's turned on and has paper loaded; you just can't figure out what the problem might be. Check your hub or switch. arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-62811866918546934972008-03-27T19:45:00.001+02:002008-03-27T19:53:40.723+02:00Upgrading from 10BASE-2 or 10BASE-TTwisted-pair wiring pretty much replaced 10BASE-2 many years ago and was, for a long time, the networking solution of choice. Hubs allowed for centralization of wiring and switches helped localize errors due to faulty cables or network adapter cards. 100BASE-T and gigabit Ethernet solutions are now the de facto standards for creating a new network. If you're creating a network from scratch, it's arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-2767859831314905042008-03-26T23:43:00.000+02:002008-03-26T23:45:30.190+02:00Firewall ProblemsIf you have installed a router/switch device between your network and a broadband Internet connection, be sure to read the manual thoroughly and understand how the device should be configured. Many come with default settings, but you need to fill in some information, such as the address of the broadband lint, if your service provider gives you a static address. In most cases, the provider will arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-23941346735000657432008-03-26T00:38:00.001+02:002008-03-26T00:40:18.633+02:00From Bridges to Routers continue...Using a Router to Segment the Network Like bridges, routers can be used to isolate traffic between network segments. Unlike bridges, routers further reduce network bandwidth use because they do not pass broadcast messages from one segment to another unless programmed to do so. A router also does not have to take time to learn which nodes are connected to each segment. The information it needs is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-72002464129243552172008-03-26T00:37:00.000+02:002008-03-26T00:38:32.079+02:00From Bridges to RoutersRouters are inherently slower than bridges when it comes to forwarding network packets. This is because a router must read further into each network frame to get Network layer addressing information, whereas a bridge merely looks at a fixed location for the MAC address. Hubs, bridges, and switches can be set up in a short amount of time and usually require little or no configuration. Routers arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-61124998241607482122008-03-25T03:52:00.001+02:002008-03-25T03:54:20.240+02:00Growing Beyond a Small LAN continue...Segmenting the Network Can Improve Performance You might need to segment devices on the network for many different reasons. These include the following: 1. Topology limitations—You need to add more nodes to the network but the expansion will break distance limitations or maximum nodes-per-segment rules. This is usually the case only in older Ethernet LANs where the broadcast domain was arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-5666400891204933302008-03-25T03:49:00.000+02:002008-03-25T03:51:33.765+02:00Growing Beyond a Small LANThe basic devices used to interconnect network segments: repeaters, bridges, switches, and routers. Each of these devices builds on the one previous to it so that together they span a continuum of functionality that you can use to solve problems with a LAN or WAN. Standard bridges were developed to enable you to extend the reach of a LAN and to limit traffic to local segments, therefore building arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-76762253288063419642008-03-24T02:11:00.000+02:002008-03-24T02:12:34.781+02:00Build Your Digital Command Canter Part 1The popularity of Star Trek is based, in part, upon our fascination with advanced technology. We're excited when Captain Picardorders his crew to take The Enterprise to another galaxy with the simple command "Make it so." In the distant future, it seems, we'll be able to entertain our merest whim by pushing a button or by telling a computer what we want done. Powerful machines will do the rest. arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-56736390361761516092008-03-22T01:38:00.000+02:002008-03-22T01:40:16.308+02:00Network File SystemThe NFS client allows Windows clients to connect to NFS file systems hosted on Unix servers. The client can connect to the file system exported by a Unix server using several methods. The simplest methodis to use the Windows Explorer Accessory; click on My Network Places, and select the server you want to connect to from the right-side pane. Then use Tools, Map Network Drive to make a drive arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-66098856115649855522008-03-21T03:37:00.000+02:002008-03-21T03:40:12.097+02:00The File Transfer ProtocolLike the Telnet server, Windows NT/2000/2003/XP comes through Windows Server 2003, the FTP server is providedwith an FTP client. For Windows NT 4.0 by installing Internet Information Services The FTP Client The FTP client can be utilized easily from the Command Prompt and uses the standard syntax that's common to other FTP clients, with a few exceptions that you might not notice. For example, arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-49651127112578579872008-03-19T23:28:00.000+02:002008-03-19T23:31:57.018+02:00File Migration Utility (FMU)This is the second tool that Services for NetWare 5.0 provides that you can use only on Windows 2000 Server. FMU is used to migrate files and directories from NetWare volumes to Windows 2000 disks, while keeping intact security permissions. You can use this tool with both the IPX/SPX and TCP/IP protocols. When you migrate files from NDS to Windows 2000, the MSDSS utility discussed in the arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-83939136574117107572008-03-19T06:09:00.000+02:002008-03-19T06:10:57.231+02:00Telnet continue...The Log On tab functions the same as for other services. You should be familiar with how services work on Windows Server before using this tab or the Recovery tab. For example, using the Log On tab, you can select the user account that the service is run under. The AUTHORITY \ LocalService account is typical for the Telnet service as well as many other services for Windows Server 2003. For arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-87304040615044650562008-03-19T06:08:00.000+02:002008-03-19T06:09:32.853+02:00TelnetWindows comes with a Telnet client. Although Windows XP does not come with a Telnet server application, you can add this functionality by installing Services for Unix (SFU version 3). SFU can be installed on Windows NT, 2000, 2003, and XP. So, for those who operate a small LAN, you can install a Telnet server on Windows XP Professional, along with many other Unix utilities and commands, for a arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-4189287856275626092008-03-18T03:11:00.000+02:002008-03-18T03:13:12.694+02:00Sun Network Information SystemNIS is used on Unix networks to keep important system files, such as the password file, synchronized among a group of servers. Remember that on Unix systems, each server has a password file, a user group file, and other important files that are managed locally on each server by default. This is similar to using a Windows computer in a standalone manner where each Windows computer has its own userarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-91037591995227426172008-03-17T16:50:00.000+02:002008-03-17T16:52:01.277+02:00Do You Need to Upgrade the Operating System or Applications? continue...There's one good reason to go ahead with the upgrade to the Windows 2003/XP platforms: support. This issue can be a minor one if you've already prepared your own support infrastructure, such as keeping personnel trained. One inexpensive way to do this is to subscribe to Microsoft's MSDN (Microsoft Developer's Network). MSDN gives you a superset of the documentation and knowledge articles that youarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-56731829569084358852008-03-17T16:48:00.000+02:002008-03-17T16:50:20.661+02:00Do You Need to Upgrade the Operating System or Applications?Although Microsoft still sells licenses for Windows 2000 Professional and Windows 2000 Server, these versions of Windows are no longer the latest Windows versions. In fact, as of June 30, 2005, Microsoft has moved the Windows 2000 family from Mainstream to Extended Support. Extended Support will continue through June 2010 (at least). What does the change in support mean for your organization? Thearlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-24268834913584593552008-03-15T06:31:00.000+02:002008-03-15T06:32:08.927+02:00Implementing a Migration to the Active Directory for Windows 2000As with any major network upgrade project, you should be sure to carefully plan ahead. Develop a written master plan and schedule for the migration and review it on a frequent basis. Some of the items to consider in a migration plan include Back-out procedures—For any big changes you make on a particular server, be sure that you plan a method to back out of the change if it doesn't function as arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-27351425727169945222008-03-15T06:27:00.000+02:002008-03-15T06:30:24.845+02:00Start by Upgrading Primary Domain ControllerWhen you decide to upgrade your network to a Windows 2000 Active Directory-based network, you'll need to plan the order in which servers and workstations will be upgraded. The Active Directory-based Windows 2000 domain controller is backward compatible with Windows NT 4.0 domain controllers, so upgrading the PDC is transparent to the users and domain controllers that are still operating under arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-30480742126557567892008-03-15T06:24:00.000+02:002008-03-15T06:26:15.052+02:00Modeling the Directory Structure After Your Business OrganizationThe main points to consider when grouping users and resources are how you want to administer them and what this will do to affect the network traffic associated with logon authentication and directory information replication. Do you want to create a network that allows centralized or decentralized control? In Windows NT, domains were used to enable you to group users and resources into convenientarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-88544410872120568142008-02-28T22:03:00.001+02:002008-02-28T22:04:49.571+02:00Other IDS Features to Consider continue...Monitoring and Privacy Keystroke monitoring has not been a fruitful approach to intrusion detection. As with many other computer science endeavors, context-sensitive analysis of data is one of the most difficult reasoning challenges for a program. Therefore, no commercial IDSs rely on keystrokes for determining misuses or intrusions. If such a tool were to exist, how would you handle privacy arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-17120750494896433062008-02-28T22:00:00.000+02:002008-02-28T22:03:17.879+02:00Other IDS Features to ConsiderSo far you've seen that Stalker and CMDS are complementary system-level IDSs that catch a number of attacks which scanners and network sniffers cannot The next few sections summarize some other important issues to consider about system intrusion detection. Ease of Set Up Both Stalker and CMDS are distributed, client-server products. Depending on your network configuration, the installation and arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-25537647054683891662008-02-27T15:18:00.001+02:002008-02-27T15:21:57.181+02:00Outline marketing plan for Asuk Creative Limited a B2B provider of Internet services continue...Objectives The objectives are each built around the SMART criteria (specific, measurable, actionable, realistic and timed). Increase market share. ASUK Creative Limited currently holds 2 per cent (200 servers) of the UK dedicated server market (approx immediately 10,000 dedicated servers). ASUK should plan to increase this steadily to 16.7 per cent after four years. Since the market share has arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-88023961709765048252008-02-27T15:14:00.000+02:002008-02-27T15:18:03.965+02:00Outline marketing plan for Asuk Creative Limited a B2B provider of Internet servicesThis subsection was kindly supplied by Craig Martin and Spencer Tarring, ASUK Creative and Brunel University respectively. Background ASUK Creative Limited (www.asuk.com) was formed in 1998 to provide a complete set of services, from consultancy to hosting, in the business-to-business Internet industry. After introducing a small range of low-cost dedicated servers in 1999, this small Internet arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-91082933936396738332008-02-23T04:35:00.000+02:002008-02-23T04:37:36.300+02:00NT Security continue...A final choice for directory objects is whether to audit only the current directory or to enable auditing for all of its subdirectories. This simplifies the administrators task when auditing is being configured. Caution is necessary, though. If you turn auditing on for the NT system directories and subdirectories, your event- logging activities will slow down the computer. Because all major arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-16418847329694559682008-02-23T04:27:00.000+02:002008-02-23T04:34:57.865+02:00NT SecuritySubjects in NT are processes and threads. Each process and thread is associated with an access token that is a complex data structure defining characteristics of the subject. One of the most important attribute lists in the access token is its privileges. Any time a process or thread is able to increase its privileges, that subject is able to access other resources that might normally be off arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-77324864065872022232008-02-23T04:22:00.000+02:002008-02-23T04:27:15.779+02:00Writing into Another User’s Special FilesDepending on the version of UNIX you are using, the system will run a login script for you during the login process just before you are given control of a shell. If this script file is world writable, other users can insert commands that run automatically when you log in. This attack is another way to trick you into running commands without knowing your password. An attack such as this is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-6071636682023276782008-02-23T04:20:00.000+02:002008-02-23T04:21:51.927+02:00Body copyThe main copy is for those readers who want to know more — those who haven't lost interest, and those that haven't clicked the initial call-to-action already. The person who gets this far likely wants detail and reassurance. Since we have a fair amount of detail here, this is often the place to use bullets with bold headings so that it can be taken in by readers who are scanning. The main copy arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-55815217639100541262008-02-21T22:07:00.000+02:002008-02-21T22:09:44.711+02:00E-NEWSLETTERS - DEFINING AND REFINING Part 10 3. Some content in e-mail, full content on web site (multiple pages). This is similar to approach (1), but here the e-mail newsletter is longer since it contains a short extract from each article. Typically a more >> option link will be available to take the user through to the web site. This makes it easier for the reader to decide whether the content is relevant to them. This is a common arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-3160848549884021032008-02-21T22:05:00.000+02:002008-02-21T22:07:23.512+02:00E-NEWSLETTERS - DEFINING AND REFINING Part 11For a great example from IBM of how to explain the proposition, see https://isource.ibm.com/ world. Finally, remember to try to capture the primary e-mail address. The Doubleclick Sixth Annual Consumer E-mail Survey (Doubleclick, 2005) showed that almost half of all consumers reported maintaining at least three e-mail accounts, an increase from 2004. Nearly 95 per cent considered one of their arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-71158427460057609432008-02-21T22:03:00.000+02:002008-02-21T22:05:06.980+02:00E-NEWSLETTERS - DEFINING AND REFINING Part 12Decision 20 - listening While the clickthrough and web-site outcome data can be used to second guess how well an e-newsletter is working, and what customers think of the company, there is no substitute for asking the question 'what do you think?', either face to face or through a structured survey, with recruitment of respondents through the e-newsletter or via a separate e-mail. Since arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-64126924391797159332008-02-21T00:28:00.000+02:002008-02-21T00:31:38.419+02:00E-NEWSLETTERS - DEFINING AND REFINING Part 9 Decision 15 — marketing communications integration There is a tendency to plan our e-mail newsletters with blinkers on. If this happens, we lose opportunities to leverage the strengths of different media for different purposes. Here are some ideas on how to avoid this: Use the e-newsletter to preview future offers and product developments before other media. Highlight unique web offers — this arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-10441307237918389452008-02-21T00:26:00.000+02:002008-02-21T00:27:32.084+02:00E-NEWSLETTERS - DEFINING AND REFINING Part 1Many web sites now have a prominently placed `Sign-up to our newsletter' box. But is this enough? How many e-mail newsletters do you subscribe to? If you're anything like me, the number is well into double figures — and most weeks I will opt in to yet another. The trouble is, the more I subscribe to, the less likely I am to have time to look at them, so some are never opened. I think we all have arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-75356727262709551792008-02-21T00:22:00.000+02:002008-02-21T00:25:48.411+02:00Rich Media E-mailsRich media e-mails go one step beyond the use of static or animated graphics in HTML e-mails, and give a richer experience through more complex animation, video and/or sound. Some refer to HTML as rich media, but more commonly the term is used to refer to e-mails with more dynamic or interactive content. A video can be streamed when the user opens the e-mail, or the message displayed in the arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-80175936414085591552008-02-20T03:27:00.001+02:002008-02-20T03:30:40.010+02:00Managing Inbound E-mail House ListThere will be a high turnover of your e-mail addresses or 'gone-aways' (in traditional direct mail speak). Research by MercerMC (2001) showed that, on average, 20 per cent of customers in a typical database will change their contact information over the course of a year. Changes vary from 16 per cent for the address and 17 per cent for the job to 25 per cent for the e-mail address and 33 per centarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-29811744914122671732008-02-20T03:24:00.000+02:002008-02-20T03:27:34.685+02:00Building Brand AwarenessPowerful companies with large promotional budgets are reinforcing their competitive advantage through strong advertising offline as well as online. In 1998, the rage cost of building a national online brand was about $5-10 million. In 000, it cost $50-100 million, a tenfold increase. In 1999, 40 per cent of web-development budget was going on towards marketing, with more than 80 per of all arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-6274639478933208762008-02-20T03:16:00.000+02:002008-02-20T03:23:53.447+02:0002 AND THE GENIE INTERNET PORTALIn order to set the context for this case study, it is important to bear in mind that mobile phones now have a 60 per cent market penetration in the UK, and usage increased by over 1,500 per cent between 2000 and 2002. The rate of industry growth and product innovation therefore has been — and continues to be — phenomenal. 02 is the holding company for the BT division formally known as Cellnet. arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-17158307766537540942008-02-18T23:39:00.000+02:002008-02-18T23:41:07.087+02:00What to Monitor on NT part 2Impersonation In earlier chapters, you learned that a critical component of computer systems is the capability for a process to act on behalf of another user. NT refers to this as impersonation. Recall that after a user logs into NT, an access token is created. In addition to containing a list of privileges and other fields, the token has a setting that defines the impersonation level for that arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-72263724799069696102008-02-18T23:29:00.001+02:002008-02-18T23:32:15.181+02:00What to Monitor on NT part 1How do you know what to monitor on an NT system? First, you definitely want to watch for any well-known hacks. Most NT IDSs do this today. The next kind of event you want to know about is anything that might affect the security of your system. No doubt that sounds a bit broad. Unfortunately, this description is vague and does encompass a number of events. Here are some examples: A new user is arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-52209771374981206152008-02-18T23:26:00.001+02:002008-02-18T23:36:29.670+02:00Responding to IntrusionsGarfinkel and Spafford (1996) recommend two important responses. First, remain calm and don't panic. Psychological research shows that humans do not perform well under stressful conditions, unless the task is one that the human already executes exceptionally well. Professional athletes often perform well under stressful conditions because they already are very good at running, kicking, shooting, arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-87541530649168335502008-02-18T01:22:00.000+02:002008-02-18T01:23:28.603+02:00Multidimensional Evaluation Based on Story Telling and ScenariosThe interest in narratives has a long tradition. Bruner (1990) considers narrative a primitive function of human psychology, lying at the heart of human thought. The representation of experience in narratives provides a frame which enables humans to interpret their experiences. In this way narrative is a fundamental aspect in the construction of meaning. Although narratives have been studied in arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-17317175207767807962008-02-18T01:20:00.000+02:002008-02-18T01:22:13.473+02:00Multiple Levels of Interaction, Multiple Levels of Performance MeasureThe evaluation of such a system was quite complex because of installation problems within the museum's infrastructure, specific features of the system, and its particular context of use. For these reasons and in order to address the multi-faceted components of the HIPS system, we decided to adopt a multidimensional approach based on storytelling and scenarios. Specifically, we assessed user arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-72050950697003673362008-02-18T01:14:00.000+02:002008-02-18T01:20:07.364+02:00Preparation of Test Material, Equipment and Test ProcedureWe needed four staff people to perform the test: a technician who took care of the correct system functioningand the data log;an observer who took notes using an observation grid and recorded user comments on an audio tape;an interviewer who recruited the visitors, introduced the system, supported during the test and facilitated during the storytelling;a video operator who video recorded the testarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-55672733277090699362008-02-16T01:33:00.000+02:002008-02-16T01:34:36.957+02:00Being FlexibleWhen given the choice between creating a perfect product that is never released and an imperfect project that benefits its customers, we must consistently choose the latter. There is a point at which our insistence on a complete usability process becomes counterproductive. The most successful usability engineers can quickly assess a situation and impose the parts of the process that make the mostarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-56386200049624503562008-02-16T01:32:00.000+02:002008-02-16T01:33:33.937+02:00Caught Between Real and Virtual WorldsWhile agreement was breaking out at this workshop, so too were some concerns. As most HCI practitioners would agree the distinction between design and evaluation in HCI is often blurred, indeed design and evaluation have been described as the different sides of the same coin. The design of the DISCOVER system proved to be no different. As we elicited requirements and undertook early design we arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-81618627750202384402008-02-14T06:55:00.000+02:002008-02-14T06:56:37.050+02:00Building the "Right" Project TeamThe best usability engineer for a project is one who is intelligent and flexible, and one who is not controlled by ego. The usability engineer should have excellent negotiation skills, and should be able to present a compelling case for the work. The right project team includes members with a variety of roles and hard and soft skills. Equally important, the right project team includes at least arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-25188182735500334272008-02-14T06:53:00.000+02:002008-02-14T06:55:01.642+02:00Develop a Highly Usable VR System - and Do It Yesterday!" Continue...Phase 2: Hello, I'm Your Avatar A prototype system was created and demonstrated to trainers and prospective trainees at all three maritime training sites. In use each trainee begins by adopting a role - captain, chief engineer, first mate and so forth. They then put on a lightweight set of combined headphones and microphone to afford communication with other avatars and the trainer. Once a arlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0tag:blogger.com,1999:blog-641276559373135788.post-52814377402013650612008-02-14T06:51:00.000+02:002008-02-14T06:53:31.839+02:00Develop a Highly Usable VR System - and Do It Yesterday!"The project had identified a number of key areas which needed specialist attention. These were to: Produce a definitive statement of requirements on the DISCOVER system from the training organization. This involved understanding the methods used in current training, which ranged from state-of-the-art physical simulators costing tens of millions of pounds, to simple role playing, and their methodsarlenehttp://www.blogger.com/profile/01999506545344254861noreply@blogger.com0