OPENWORLD

2010-09-17T04:27:00.001-07:00

Get RSS Buttons

2010-09-17T04:24:00.001-07:00

R|Mail

Get RSS Buttons

SaaS Increasingly Popular Among Small Businesses, Survey Finds - Midmarket from eWeek

2010-08-30T04:08:00.000-07:00

SaaS Increasingly Popular Among Small Businesses, Survey Finds - Midmarket from eWeek

OPENWORLD CDCS TRAINING

2010-08-30T04:01:00.000-07:00

Benefits Of Linux Training & Certification

2010-08-16T05:09:00.000-07:00

http://www.openworld.co.ke
Those IT professionals who can describe themselves as fans of open source operating systems and wish to enhance their skills by learning technologies other than Microsoft, will find that exploring the Linux world may be quite of interest to them.

Linux operating systems have their growing market share, there's no doubt about that; at least that is what the tendency in the past decade has been. The popularity of the Linux server operating systems has experienced a considerable growth. A Linux certification may seem unfeasible, because there are many variants of Linux. However, the Linux+ certification offered by CompTIA is feasible and vendor neutral.

Experience with Linux+ and a Linux certification can provide better IT positions for professionals, as well as building their knowledge within a framework that is vendor neutral. A Linux certification can also serve as basis for further certifications, such as Fedora and LPI. Linux also lies at the core of numerous Novell products, which makes a Linux certification all the more valuable for those who are interested in such technologies.

In recent years, Linux+ has experienced some changes and improvements over the years, just like any other technology product, and therefore, a new set of objectives has been developed in 2004, which is the one that Linux+ is currently under. In order to be eligible for the Linux certification, candidates must have Linux support experience of at least six months. Holding a Linux certification demonstrates that the IT professional has knowledge in installation, configuration, troubleshooting, file permissions, open source licensing, network protocols, and local storage devices. The latest update, which is also the current exam for the Linux certification, emphasizes security and documentation, as additional requirements to the previous set of objectives.

The importance of systems security in the IT world is no secret to anyone, and the demand for ability in configuring and supporting systems security is overwhelming. The documentation of support activity and its understanding can have a major influence on the level of effectiveness that an IT support department has. These are the reasons why the new set of objectives for the Linux+ exam focus on documentation and security, along with the topics mentioned above.

The exam for Linux+ consists of six domains, installation, configuration, management, security, documentation and hardware. Most of the exam questions are concerned with management of Linux server and client systems, about twenty-five percent, whereas documentation represents the topic for the smallest number of exam questions, about six percent.

Successful completion of the exam and earning the Linux certification are more likely to happen should the candidate register for a Linux training program, which can prove extremely helpful. Linux training is concerned with providing access to high quality materials, so that candidates to a Linux certification can receive all the benefits available. Free materials for Linux training are available online, and these can be accessed by both students and commercials providers.

As the demand for skilled professionals who can work to the advantage of their organization by exploiting this powerful platform is increasing, the benefits of Linux training and certification are obvious.
http://www.openworld.co.ke/index.php/contact

E-Tourism Meet for Nairobi

2010-08-13T04:01:00.000-07:00

Aug 10, 2010 (East African Business Week/All Africa Global Media via COMTEX) -- The East African tourism sector is set to benefit from faster online speeds, the dominance of e-commerce and the rise of social networking websites.

This is more so because of the global interest in Africa that was generated by the 2010 FIFA World Cup that was held in South Africa.

In an interview with the East African Business Week via E-mail, Mr. Damian Cook, the chief executive officer of E-Tourism Frontiers said: "Online sales have experienced major growth in the past year." "Travel is now the number one selling commodity online and is generating over US $110 billion annually in sales. We must get more African tourism products available to the online travel shopper, especially following the massive interest in Africa after the World Cup." E-Tourism Frontiers will be holding a two-day conference, with a Travel Technology Exhibition in Nairobi on the September 2nd and 3rd this year where East African Community (EAC) member states are expected to attend and to promote EAC as tourism destination.

The conference will help the sector understand and leverage the online opportunities and the new technologies available in the EAC region.

Following the success of conferences held last year in South Africa and East Africa, the E-Tourism East Africa Conference, will be addressed by some of the world's leading experts on online tourism.

They will include Trip Advisor, Expedia, WAYN.com and Google to cover website development, e-commerce, online reservations and booking, e-marketing, multimedia, Web 2.0 marketing, user generated content, social networks and mobile marketing.

Cook said many companies that attended previous events had already reported experiencing major results and a revolutionized approach to marketing.

"We have seen many companies switch to online marketing and invest heavily in their digital presence after attending our events. We have received great feedback especially from small and medium entrepreneurs (SMEs) who have made the move online and then recorded a dramatic boost to their business," Cook said.

"Uganda Wildlife Authority (UWA) for example placed its Mountain Gorillas on Facebook last year, through the Friend a Gorilla programme. We also saw Expedia expand into East Africa as a result of our first conference in Nairobi in 2008." With recent polls from eyefortravel, a leading research company on internet-focused travel, suggesting that 7 out of 10 travelers use the internet as their primary source of travel information and almost half of the planet's travel being distributed and booked online, it is crucial that the tourism sector across Africa invests in online marketing and management.

According to Cook, the registration for the E-Tourism East Africa conference is open now and those interested can register at on the company website.

Tourism experts reckon there are about 1.2 billion internet users globally. There has been substantial growth in all world regions, particularly in Asia and the Pacific. Current forecasts suggest 1.5 billion people will have internet access in 2011.

In general, travelers are increasingly computer literate and tech aware, with two thirds of the over 100 million travelers who are online using the Internet to make travel plans.

Among online frequent travelers, over 70%use the internet for travel planning, and a recent poll of young UK travelers showed an 89 per cent preference for online booking.

SOFTWARE AS A SERVICE Illustration

2010-07-20T23:14:00.000-07:00

UNDERSTAND CLOUD COMPUTING

2010-07-20T01:03:00.000-07:00

Making sense out of all of the components of cloud computing confuses even many of the major analysts. It's easy to understand how Google, Amazon, or SalesForce.com fit into the picture. But who is Eucalyptus and what do they do? Does CohesiveFT compete with enStratus or does it complement enStratus? And what is this vCloud thing anyway?

I've identified seven major components to cloud computing that I call "the seven pillars of cloud computing". I call them pillars because, as cloud computing evolves, they will form the foundation of a complete vendor cloud computing strategy. I'm not suggesting that you aren't a real cloud vendor if you lack one of the pillars—in fact, no one currently has a solid strategy for all seven pillars. The companies that end up seeing the most success as vendors in cloud computing, however, will not only develop strategies for all seven pillars, but also a strategy for integrating them into a comprehensive cloud offering.
The Seven Pillars

Seven Pillars of Cloud Computing.
The seven pillars of cloud computing are:

* Virtualization
* Storage
* Cloud Orchestration
* Data Center Systems Management
* Cloud Infrastructure Management
* Hybrid Cloud Integration
* Public Cloud Services

As I mentioned above, there's no company that has offerings in all seven areas. If you are an enterprise looking for the complete cloud solution today, you may have to talk to as many as seven different vendors—though most likely fewer—before you find your answer.

Virtualization

Virtualization is absolutely not a requirement for cloud computing. Google and many others offer cloud services without using virtualization to make it happen.
From the complete cloud solution perspective, however, virtualization absolutely must be a strategic tool in the cloud vendor's arsenal.

Virtualization makes it possible to dedicated the minimum number of resources to a workload as is possible so you can more efficiently share real processing power among different workloads. It thus forms the backbone of many services we think of as cloud services today.

The number of players in this space is quite small. The significant ones are Citrix, KVM (Open Source), Microsoft, Oracle, and VMware.

Storage

From the cloud perspective, storage isn't about making the media on which data is stored. Instead, it's about providing the hardware and software for turning that media into a massive, abstracted storage tier available over a network and impervious to failure.

The current key players in this space are Compellent, EMC, Flexiant, HP, IBM, NetApp, Oracle, ParaScale, and a number of other smaller players.

Cloud Orchestration

There's actually nothing "cloudy" about virtualization. It simply facilitates the programmatic provisioning and de-provisioning of resources necessary for a cloud infrastructure. To make your virtualized infrastructure cloudy, you need an orchestration layer on top of it.

Orchestration layers hide the nuances of the underlying virtualization tier and exposes them to on-demand provisioning through web services APIs.

Companies with a footprint in this space include Amazon, CA (via their 3tera acquisition), Citrix, Enomaly, Eucalyptus, Flexiant, Rackspace, VMOps, and VMware.

Data Center Systems Management

Data center systems management is something most people forget about or ignore today when examining cloud services. It's the main tool a traditional IT operations staff uses to monitor provisioned resources, manage the provisioning, de-provisioning, and other IT workflows, and handle emergency situations.

The traditional data center management offerings are painfully "uncloudy" and the extent of the integration between traditional Data Center Systems Management and the cloud is largely limited to:

* BMC monitoring of RightScale
* enStratus pushing cloud health into Microsoft Systems Center
* IBM's limited support for AWS in Tivoli

Everything else in this space is currently about supporting traditional data center management, provisioning, and monitoring activities.

This space is a well established space with some heavy hitting incumbents: CA, BMC, IBM, EMC, HP, IBM, and Microsoft.

Cloud Infrastructure Management

Cloud infrastructure management is really a specialized version of data center systems management. Cloud infrastructure management tools enable an IT staff to manage, monitor, provision, and de-provision resources in a cloud environment. In a few years, it likely won't be a pillar distinct from data center systems management. I break it out separately because there is almost no overlap between the two pillars today.

Cloud infrastructure management is dominated by start-ups today. The traditional data center systems management tools are poorly suited to the task of managing highly elastic cloud computing infrastructures. This gaping hole has enabled startups to come in and fill the need. On the other hand, there's very little overlap among the different startups in this space.

The cloud infrastructure management space is a very crowded space with a few major players: CA (via Nimsoft), CloudKick, Elastra, enStratus, and RightScale. In addition, CloudSwitch and CohesiveFT have elements of cloud infrastructure management, but generally fit more into the hybrid cloud integration pillar.

Hybrid Cloud Integration

Another pillar dominated by startups is hybrid cloud integration. Hybrid cloud integration services enable a company to glue together the different kinds of clouds supporting their infrastructure (public and private, multiple public, combined SaaS and Paas) into a single, coherent infrastructure. With hybrid cloud tools, you can manage and automate the movement of workloads among clouds as well as communications between components in different clouds.

This space is the least mature space with a very small set of players: CloudKick, CloudSwitch, CohesiveFT, and enStratus. Among these four players, there's almost no overlap in functionality. CloudKick provides a unified console for managing resources in multiple clouds. CloudSwitch enables you to securely lift your private data center/private cloud enterprise applications and drop them into a public cloud without changing IP addresses. CohesiveFT provides technologies for enabling virtual VPNs among clouds and managing virtual private clouds. enStratus provides governance, provisioning, auto-scaling, and auto-recovery across clouds.

Public Cloud Services

The public cloud services are what most people have in their head when they think "cloud". These are the SaaS, PaaS, and IaaS vendors that leverage the other components of cloud computing to deliver a public cloud offering. As a customer, you procure public cloud services on-demand and stop using them when you no longer need them.

http://www.openworld.co.ke/index.php/openbiz

SECURING YOUR NETWORK

2010-07-08T23:36:00.000-07:00

In computer networks, a DMZ (demilitarized zone) is a computer host or small network inserted as a "neutral zone" between a company's private network and the outside public network. It prevents outside users from getting direct access to a server that has company data. A DMZ is a more secure approach to a firewall and effectively acts as a proxy server as well.

In a typical DMZ configuration for a small company, a separate computer (or host in network terms) receives requests from users within the private network for access to Web sites or other companies accessible on the public network. The DMZ host then initiates sessions for these requests on the public network. However, the DMZ host is not able to initiate a session back into the private network. It can only forward packets that have already been requested.

Users of the public network outside the company can access only the DMZ host. The DMZ may typically also have the company's Web pages so these could be served to the outside world. However, the DMZ provides access to no other company data. In the event that an outside user penetrated the DMZ host's security, the Web pages might be corrupted but no other company information would be exposed. OPENWORLD, the leading company specialized in products designed for setting up a DMZ.

TECHNOLOGY POSIBILITIES

2010-06-25T02:53:00.000-07:00

CYBERCRIME IS AFFECTING YOUR BUSINESS

2010-06-24T00:21:00.000-07:00

A new study reveals spam, viruses, phishing and credit-card fraud have become serious issues for small- to medium-sized businesses in Ireland, costing approximately $300 million yearly, according to the Irish Examiner.
After conducting a survey of more than 600 companies, the Irish Small & Medium Enterprises Association concluded cyber crime has become a growing problem. Unless something is done to address the situation, companies will continue seeing a dramatic rise in business costs.
Nearly 70 percent of companies reported being a victim of cyber crime in the last year. Nearly all respondents had been affected by spam, almost half (54 percent) by phishing, 51 percent from virus infection, and 13 percent had experienced credit-card fraud.

Kenya and Africa at large are not far from this. Cybersecurity experts estimate that 80 percent of computers on the African continent are already infected with viruses and other malicious software, according to Foreign Policy. The combination of housing the world’s most vulnerable computers and a majority of a population lacking basic knowledge of IT makes the computers easy targets for skilled botnet operators and hackers.

Also, with the exception of Egypt and South Africa, most African countries lack the legal infrastructure to prosecute, or even stop the rise in cyber crime. Despite commitments made at a Regional Cybersecurity Forum for Africa and Arab states held last year, there is little coordination between countries on how to deal with cybersecurity.

While the continent as a whole is lagging behind in cybersecurity, there are a few countries that have made advancements. Tunisia, for example, has created the first national security institute in Africa, and Nigeria has developed a national cybersecurity initiative aimed at raising awareness and battling online fraud.

It is thus important to boost security in your cyber world using anti-virus software , spam-filtering software and hardware firewalls. It is also important for companies to hire IT professionals for guaranteed security.

2010-06-19T04:28:00.000-07:00

http://www.youtube.com/watch?v=NgYE75gkzkM

SOFTWARE AS A SERVICE

2010-06-19T02:11:00.000-07:00

FIFA WORLD CUP AND CYBERCRIME (BEWARE)

2010-06-15T02:47:00.000-07:00

cybercriminals have already started showing their interest in taking advantage of the event, by launching targeted malicious PDFs/malware serving campaigns, blackhat SEO and fraudulent propositions, followed by lottery winning notifications/letters of claim themed scams.

Considering that, these threats and exploitation tactics are prone to intensify throughout the entire event, let’s review some of the most commonly used attack vectors, and discuss the risk mitigation strategies for each and every one of them.

The threats and the fraudulent schemes

The following list doesn’t aims to achieve conclusiveness, instead it would discuss the most prevalent threats based on the historical “performance” of malicious attackers, and scammers in general.
Targeted malware attacks serving client-side exploits -The combination of a recently announced zero day flaw affecting Adobe’s most popular products, and the global proportions of the FIFA World Cup, clearly offer a malicious attacker the opportunity to capitalize on the event. According to Symantec, based on the campaigns analyzed since April, malicious PDFs continue representing the highest percentage of malicious attachments - .pdf 41%.exe 18%.doc 14%.xls 7%.scr 4%.ppt 1%. Their findings confirm the findings from a related report, indicating that outdated Adobe flaws for which patches are available, represented 80% of all exploits for 2009. What’s driving the success of these malicious campaigns? With or without the recent Adobe zero day, the malicious attackers have realized that just because a patch is available, it doesn’t necessarily mean that hundreds of thousands of Internet users are patching themselves. And they should.
419/Lottery Scams - According to the 2009’s IC3 Internet Crime Report, advance fee fraud represented 9.8% of all complaints. The percentage is naturally much higher due to the unknown number of people that didn’t report the fraud. Largely underestimated as a serious threat, lottery scams usually cost a small fortune to the affected victim. And due to their targeted nature — the majority are sent manually and usually originate from Africa based IPs — the scammers often succeed in tricking the gullible user. Once the user, now victim, is hooked, the “Winning Notification” slowly transforms into a advance fee based fraud, where in order to obtain the millions that you never really won, you would need to send back a decent amount of money. Don’t.
Blackhat SEO (Search Engine Optimization) campaigns serving scareware - Blackhat SEO, involves the process of on purposely hijacking trending buzz story across the web, in order to capitalize on the hijacked traffic by serving client-side exploits, or most commonly scareware. There’s a common misunderstanding regarding blackhat SEO campaigns these days, with a large number of users thinking that a cybercriminal is manually monitoring these trending topics in order to hijack them. Which is not true, since the process is semi-automatic, in fact on the majority of occasions they aren’t even aware that they’re targeting a particular topic.
Spamvertised fraudulent offers, phishing attempts - According to the 2009’s IC3 Internet Crime Report, non-delivery of merchandise and/or payment represented 11.9% of all the complaints. Moreover, the scammers are also well known for keeping track of different promotions, which they can easily brandjack and attempt to obtain sensitive data from the affected users. One of these examples is Visa’s “Go Fans” campaign - “Phishing samples spammers are targeting the Visa brand, which is one of the six global FIFA partners. Visa announced a “Go Fans” promotion offer in which card holders get the chance to win a trip to South Africa to experience the 2010 World Cup matches. Aware of the fan frenzy involved with watching live World Cup games, phishers are in the right (albeit criminal) business of trying to make money out if it.“

Risk mitigation strategies
Targeted malware attacks serving client-side exploits - With malicious PDFs representing such a high percentage of the exploits used, perhaps an alternative PDF reader such as the Foxit Reader, is worth considering. As well as: taking care of outdated third-party applications in combination with NoScript and least privilege accounts, or complete sandboxing/isolated web browsing, in order to ensure that what happens in the sandbox, stays in the sandbox.
419/Lottery Scams - Although the professional layout of these messages is improving, perhaps the single most important mitigation strategy, one that no software vendor can provide you with, is the lack of gullibility when someone tells you that you’ve just won 1 million dollars. Don’t be naive, and once you spot the scam, consider reporting it.
Blackhat SEO (Search Engine Optimization) campaigns serving scareware - The protection tips for mitigating client-side exploits serving campaigns, fully apply to the scareware threat. For additional information on what exactly scareware/rogue security software is, and how to protect from it, consider going through the “The ultimate guide to scareware protection“.
Spamvertised fraudulent offers, phishing attempts - despite the fact that millions of people admit they click and interact with spam/phishing emails, these emails are not longer 100% fraud oriented, but often as the first touch point for a targeted client-side exploits serving campaign. Therefore, avoiding any interaction with them, next to reporting them as spam, is highly recommended.

CYBER CRIME AND THE WORLD CUP

2010-06-11T06:00:00.000-07:00

Head butts and elbows to the face aren’t the only things getting red cards during the 2010 World Cup. Cybercriminals are taking advantage of the global popularity of the tournament by preying on computer users surfing the Internet for updates on their favorite teams. So, Symantec is interested in learning a little more about your Internet surfing and anything suspicious online you may have encountered involving the World Cup. A short survey on the subject can be found here: http://www.zoomerang.com/Survey/WEB22AS6UQSGEW.

To provide some perspective on what kinds of cons are circulating around, Symantec recently identified a new scam in which e-mails purporting to be from the promotions manager of the South Africa World Cup Lottery 2010 are making the rounds. Recipients are informed in an attachment that their e-mail address has been randomly selected by a specially designed computer program and that they have won US$2.5 million. Of course, none of it is real.

Our survey should only take one to two minutes to complete and is completely anonymous. So, if you’re up for it, please take just a couple minutes to answer our questions and help us understand a little more about how you’re planning on using the Internet to follow the World Cup and what kinds of nefarious activities you’ve encountered. By the way, stay tuned to this space as we’ll be reporting on the anonymous survey results as soon as everything is wrapped up.

This is also a good opportunity to reflect upon a few related online security best practices:

Don’t open unsolicited e-mails or social media messages purporting to contain special offers or extraordinary deals related to the World Cup, and especially don’t click on any links in such messages.
If an online offer appears to be too good to be true, it probably is. Scammers often try to make their bogus offers sound so great that they would be nearly impossible to pass up…if they were real that is.
Be careful about what “official” social networking accounts you follow, such as those that appear to be created by World Cup teams or players. Often, cybercriminals will create accounts posing to be someone they’re not.
When searching for online video of the World Cup, avoid sites you’ve never heard of before and if you’re told you must update your media player before viewing a video, be very cautious as this might be a ploy by attackers to get you to download malware.

And last, but not least…enjoy the tournament!

ADVERNTAGES OF ENTERPRISE RESOURCE PLANNING

2010-06-11T05:26:00.000-07:00

INFORMATION SYSTEMS have played an increasingly visible role for several years in improving the competitiveness of business. More than just tools for handling repetitive tasks, these are used to guide and advance all of a company’s daily activities. Today, integrated management software is very often the key source of significant competitive advantage.

The standard response to the need for responsiveness, reliability, and rapidly increasing expectations is to create an organisation based on departments with a clear linear structure, but integrated around your operating processes. To promote efficiency amongst your salespeople, accountants, logistics staff and everyone else you should have a common understanding of your problems.

For this you need a common language for shared references, policies and communication. An ERP (Enterprise Resource Planning) system makes the ideal platform for this common reference point.

Risks and integration costs are important counterweights to all the advantages you gain from such systems. That’s why, today, few small- and medium-sized companies use ERP. In addition, the larger ERP vendors such as SAP, Microsoft and Oracle haven’t been able to reconcile the power and comprehensive cover of an ERP system with the simplicity and flexibility wanted by the users. But this is exactly what small and medium enterprises are looking for.

OPEN ERP

The development processes of open source software, and the new business models adopted by its developers, provide a new way of resolving such problems of cost and quality for this kind of enterprise software.

To make an ERP system fully available to small and medium enterprises, cost reduction is the first priority. Open source software makes it possible to greatly reduce development costs by aggressive reuse of open source software libraries; to eliminate intermediaries (the distributors), with all of their expensive sales overhead; to cut out selling costs by free publication of the software; and to considerably reduce the marketing overhead.

Since there is open interaction among thousands of contributors and partners working on the same project, the quality of the resulting software benefits greatly from the scrutiny. And you can’t be everything at once: Accountant, software developer, salesperson, ISO 9001 quality professional, specialist in agricultural products, expert in the customs and habits of pharmaceutical vendors, just as a start.

The results are quite impressive. Tiny ERP, now OpenERP, is a management software that is downloaded more than any other in the world, with more than 600 downloads per day. It’s available today in 18 languages and has a world network of partners and contributors. More than 800 developers participate in the projects on the collaborative development system of Tiny Forge.

To our knowledge, Tiny ERP is the only management system, which is routinely used not only by big companies but also by very small companies and independent companies. This diversity is an illustration of the software’s flexibility: A rather elegant coordination between people’s functional expectations from the software and great simplicity in its use.

And this diversity is also found in the various sectors and trades, which use the software, including agricultural products, textiles, public auctions, IT, and trade associations.

Lastly, such software has arisen from the blend of high code quality, well-judged architecture and use of free technologies. In fact, you may be surprised (if you’re an IT person) to find that the size of Tiny ERP is less than four MB when you’ve installed the software. We’ve moved a long way from the days when the only people who could be expected to benefit from ERP were the owners of a widget factory on some remote industrial estate.

OPEN OBJECT

OpenObject allows you to develop, design or customise business applications within a few minutes. It can be used as a complete application framework for developers or a rapid application development tool for end-users. Each application or business module made with OpenObject is completely different from another and all those modules can be connected together to perform a powerful and complete application.