Showing posts with label compliance. Show all posts
Showing posts with label compliance. Show all posts

Thursday, 25 March 2010

OpSource SLA Ensures Dependability in the Cloud

Taking a cue from legacy network providers, cloud infrastructure provider OpSource has launched an uptime guarantee to help reduce customer fears of reliability when working in the cloud.

The OpSource Cloud SLA offers users 100 percent network uptime, 100 percent server uptime, less than 1-millisecond latency between devices, and 30-minute support response time for emergency cases, all guaranteed. If in the event a customer experiences any downtime or latency issues, or has to wait longer than 30 minutes for support, the customer would receive a credit.

As more enterprises move their networks to the cloud, SLAs are becoming more important. OpSource’s SLA is not the first, but it points to a growing demand for reliability in the emerging space.

In fact, in a recent survey conducted of OpSource Cloud customers, 74 percent said that a 100 percent uptime SLA was extremely important in their purchase decision-making.

OpSource service providers can point to the OpSource Cloud SLA as a commitment that the applications they’re providing are guaranteed to be available when and where the end user needs access — and are as reliable as legacy dedicated services.

“OpSource Cloud has enjoyed great momentum, growing 44 percent per month since we introduced the public beta back in October,” said Treb Ryan, CEO of OpSource. “We’re proud to offer a product that is enterprise-class not only in features and functionality, but also in its service level agreement. Cloud users have to be confident in their cloud and our new SLA is intended to build that confidence.”

OpSource offers public and virtual private clouds. Users can pay by the hour or for what they use, depending on their preference, and the have access to community resources for sharing and collaboration, third-party add-ins and configurations, as well as a Web interface and complete set of APIs.

Enteprise security and compliance within the OpSource cloud includes customizable security for firewalls, user-level login/password and access controls, and SAS 70 audits.

Join Us: http://bit.ly/joincloud

Tuesday, 14 April 2009

Beyond Security Called In By Government To Defend Banking Systems

It sounds like a nightmare scenario, but yes, there is a war going on between China and the USA. Chinese military strategists understood that this would be an important aspect in the future of international warfare as long ago as 1996, and more recently Major General Wang Pufeng of the Chinese military said that it was their opinion that, "In the near future, information warfare will control the form and future of war."

China has a massive military force, but moving it overseas would be a logistical nightmare; so why bother when you can muster 300 million Internet users to attack the other country's vital technological system and stop them in their tracks?

The Chinese operation started with them trying to hack into the Pentagon's internal communications, but is now much more sophisticated. In moves which make the recent 'cyber wars' between Russia and Estonia, and Arab and Israel look puny, the Chinese have used 'botnets' to infest its other countries' computers with viruses - making them continuously re-send useless information to each other, and rapidly clogging the system and bringing it to a standstill.

These tactics aren't just used against the opposing military; Russian servers were used to attack Estonia's press websites, banking system and Internet service providers. There was a real possibility of the country grinding to a halt. Why bother about conventional warfare when you bring another nation to its knees electronically, without a shot being fired.

Aviram Jenik, the CEO of Beyond Security, was one of the experts in countering this sort of cyber warfare called in by the Estonian authorities to help fight off the assault. As Aviram says, 'It took us several days to get to the bottom of the problem, but the attack began to fade once we started to fight back. In the meantime it cost Estonia billions of euros.'

In recent days the British press has carried stories about the Chinese attacking the technological infrastructure of a total of 103 countries, with the USA being - unsurprisingly - its prime target. As Aviram says, this sort of warfare makes sense for an attacker - for several reasons: 'It's a form of 'clean warfare' which doesn't damage the essential infrastructure; it's very fast and easily reversed; it's very cheap, especially compared with conventional warfare; and, incredibly, it's deniable - the Chinese are blaming Tibetan activists abroad for the current attacks.

So what, if anything, can be done? 'Specialist companies such as Beyond Security can find and help eliminate the weak links that let attackers successfully compromise web sites and communications links', Aviram says, 'But democracies can't order organizations to comply, so there could always be a gap in the defenses, giving an unfriendly power a way in.

'There are measures which can be taken, but they are complex, and there is certainly no single solution; no 'silver bullet'.

'We have to think strategically. First, we have to be aware of the problem, and appreciate the damage which can be done. Second, we must be aware of the potential scope of these attacks; for example, there are dormant 'time bombs' which can be secreted in systems, and are then triggered by date or by event - and we would have no knowledge of them until it's too late.

'Third, we must have a CERT - a Computer Emergency Response Team - in place, as some countries have already. And last, we must be constantly testing our digital defenses. It can be done and it must be done. Countries unfriendly to our own are already attacking us, and to do nothing would be to court Armageddon.'

About Beyond Security
Beyond Security, a privately-held company, develops leading vulnerability assessment and self-management solutions that facilitate preemptive, real-time and continuous network, server, database and application security. The company was founded in 1999 by the founders of SecuriTeam portal (www.securiteam.com), a leading source for vulnerability alerts and solutions serving 1.5 million monthly page views to IT security professionals. Beyond Security's founders are great believers in automation, which is why the company sells tools instead of using them to provide services. Beyond Security's goal is to decrease the number of security holes in products to manageable levels and empower software vendors to release secure products. For more information, visit www.beyondsecurity.com.

Original Press Release - http://www.beyondsecurity.com/press/2009/press20090414.html