Welcome!

@CloudExpo Authors: Elizabeth White, Yeshim Deniz, Liz McMillan, Pat Romanski, Zakia Bouachraoui

Blog Feed Post

DARPA to tackle Cloud Security, Transportation Worker Identification Credential program “doesn’t work” and more

By

DARPAHere are the top cyber news and stories of the day.

  • Malware Infects Two Power Plants Lacking Basic Security Controls - The most recent DHS Industrial Control System (ICS) CERT report has knowledge of two infected power plants via USB drive vectors. Updated antivirus software did find the malware, but not for some time. Via ThreatPost, more here.
  • Oracle says Java is fixed; feds maintain warning - Oracle said yesterday that they had fixed the vulnerabilities in the omnipresent Java code; however, DHS retorted that “This and previous Java vulnerabilities have been widely targeted by attackers, and new Java vulnerabilities are likely to be discovered,” in an update on their website. Oracle claims that all these vulnerabilities (and more) will be fixed when Java 7u11 is installed. Via Daily Record, more here.
  • NASA awards CSC $103 million contract - Computer Science Corporation has won a $103 million contract to provide support to NASA Goddard Space Flight Center’s Computational and Information Science Technology Office,according to the agency. Under the contract, CSC will provide high-end computing, data and general support services for CISTO, NASA said. CSC will also provide Goddard’s Sciences and Exploration Directorate with information technology and computational services. Via FedScoop, more here.
  • DARPA’s New Mission: Cloud Security – DARPA has started a new program, Mission-oriented Resilient Clouds (MRC), which should work with the federal cloud strategy to provide cloud services to DoD organizations in need. MRC is looking to extend cloud capabilities and strengthen defenses, while complying with FedRAMP standards. DARPA is looking to create “shared situational awareness and dynamic trust models.” Via Internet Evolution, more here.
  • $420 MILLION TSA PROGRAM DOESN’T WORK - The U.S. Department of the Army issued a Federal Register notice that the TWIC card will no longer be used to authenticate users for access to certain Department of Defense computer systems. Apparently, the PKIs used for the TWIC program cannot be used to authenticate. The TWIC program has been under fire since its inception, and this is nothing new. Via WND, more here.

Read the original blog entry...

More Stories By Bob Gourley

Bob Gourley writes on enterprise IT. He is a founder of Crucial Point and publisher of CTOvision.com

CloudEXPO Stories
Most DevOps journeys involve several phases of maturity. Research shows that the inflection point where organizations begin to see maximum value is when they implement tight integration deploying their code to their infrastructure. Success at this level is the last barrier to at-will deployment. Storage, for instance, is more capable than where we read and write data. In his session at @DevOpsSummit at 20th Cloud Expo, Josh Atwell, a Developer Advocate for NetApp, will discuss the role and value extensible storage infrastructure has in accelerating software development activities, improve code quality, reveal multiple deployment options through automated testing, and support continuous integration efforts. All this will be described using tools common in DevOps organizations.
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
SYS-CON Events announced today that DatacenterDynamics has been named “Media Sponsor” of SYS-CON's 18th International Cloud Expo, which will take place on June 7–9, 2016, at the Javits Center in New York City, NY. DatacenterDynamics is a brand of DCD Group, a global B2B media and publishing company that develops products to help senior professionals in the world's most ICT dependent organizations make risk-based infrastructure and capacity decisions.
Dynatrace is an application performance management software company with products for the information technology departments and digital business owners of medium and large businesses. Building the Future of Monitoring with Artificial Intelligence Today we can collect lots and lots of performance data. We build beautiful dashboards and even have fancy query languages to access and transform the data. Still performance data is a secret language only a couple of people understand. The more business becomes digital the more stakeholders are interested in this data including how it relates to business. Some of these people have never used a monitoring tool before. They have a question on their mind like "How is my application doing" but no idea how to get a proper answer.
DXWordEXPO New York 2018, colocated with CloudEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.