A scalable SIEM correlation engine and its application to the Olympic Games IT infrastructure

The security event correlation scalability has become a major concern for security analysts and IT administrators when considering complex IT infrastructures that need to handle gargantuan amounts of events or wide correlation window spans. The current correlation capabilities of Security Information and Event Management (SIEM), based on a single node in centralized servers, have proved to be insufficient to process large event streams. This paper introduces a step forward in the current state of the art to address the aforementioned problems. The proposed model takes into account the two main aspects of this ?eld: distributed correlation and query parallelization. We present a case study of a multiple-step attack on the Olympic Games IT infrastructure to illustrate the applicability of our approach.

Rechenzentrum als Produktionsstätte für IT-Dienstleistungen : Kapazitätswirtschaft in virtualisierten Rechenzentren

Magdeburg, Univ., Fak. für Informatik, Diss., 2009

Business IT Alignment from Business Model to Enterprise Architecture

In this paper, we show how business model modelling can be connected to IT infrastructure, drawing parallels from enterprise architecture models such as ArchiMate. We then show how the proposed visualization based on enterprise architecture, with a strong focus on business model strategy, can help IT alignment, at both the business model and the IT infrastructure level.

Deviations of Governance In IT Multi-Sourcing: A Case Study

IT outsourcing (ITO) refers to the shift of IT/IS activities from internal to external of an organization. In prior research, the governance of ITO is recognized with persistent strategic importance for practice, because it is tightly related to ITO success. Under the rapid transformation of global market, the evolving practice of ITO requires updated knowledge on effective governance. However, research on ITO governance is still under developed due to the lack of integrated theoretical frameworks and the variety of empirical settings besides dyadic client-vendor relationships. Especially, as multi-sourcing has become an increasingly common practice in ITO, its new governance challenges must be attended by both ITO researchers and practitioners. To address this research gap, this study aims to understand multi-sourcing governance with an integrated theoretical framework incorporating both governance structure and governance mechanisms. The focus is on the emerging deviations among formal, perceived and practiced governance. With an interpretive perspective, a single case study is conducted with mixed methods of Social Network Analysis (SNA) and qualitative inquiries. The empirical setting embraces one client firm and its two IT suppliers for IT infrastructure services. The empirical material is analyzed at three levels: within one supplier firm, between the client and one supplier, and among all three firms. Empirical evidences, at all levels, illustrate various deviations in governance mechanisms, with which emerging governance structures are shaped. This dissertation contributes to the understanding of ITO governance in three domains: the governance of ITO in general, the governance of multi-sourcing in particular, and research methodology. For ITO governance in general, this study has identified two research strands of governance structure and governance mechanisms, and integrated both concepts under a unified framework. The composition of four research papers contributes to multi-sourcing research by illustrating the benefits of zooming in and out across the multilateral relationships with different aspects and scopes. Methodologically, the viability and benefit of mixed-method is illustrated and confirmed for both researchers and practitioners.

Outsourcing and acquisition models comparison related to IT supplier selection decision analysis

This paper presents a comparison of acquisition models related to decision analysis of IT supplier selection. The main standards are: Capability Maturity Model Integration for Acquisition (CMMI-ACQ), ISO / IEC 12207 Information Technology / Software Life Cycle Processes, IEEE 1062 Recommended Practice for Software Acquisition, the IT Infrastructure Library (ITIL) and the Project Management Body of Knowledge (PMBOK) guide. The objective of this paper is to compare the previous models to find the advantages and disadvantages of them for the future development of a decision model for IT supplier selection.

Starting from Scratch: Creating an Information Technology Infrastructure for MEMS-Related Research and Development

Micro Electro Mechanical Systems (MEMS) have already revolutionized several industries through miniaturization and cost effective manufacturing capabilities that were never possible before. However, commercially available MEMS products have only scratched the surface of the application areas where MEMS has potential. The complex and highly technical nature of MEMS research and development (R&D) combined with the lack of standards in areas such as design, fabrication and test methodologies, makes creating and supporting a MEMS R&D program a financial and technological challenge. A proper information technology (IT) infrastructure is the backbone of such research and is critical to its success. While the lack of standards and the general complexity in MEMS R&D makes it impossible to provide a “one size fits all” design, a systematic approach, combined with a good understanding of the MEMS R&D environment and the relevant computer-aided design tools, provides a way for the IT architect to develop an appropriate infrastructure.

A vállalati informatika szerepe a versenyképesség alakításában a pénzügyi és gazdasági válság időszakában (Corporate IT in shaping the competitiveness of the Hungarian enterprises in the financial and economic crisis)

A cikk az informatika és a versenyképesség kapcsolatát vizsgálja. A Budapesti Corvinus Egyetem Versenyképesség Kutatási Programjának korábbi felmérései óta számos új technológia bukkant fel, illetve hazánkat is elérte a világméretű pénzügyi és gazdasági válság hatása. E kihívások tükrében érdemesnek tűnt újra megvizsgálni az információtechnológia (IT) szerepét a versenyképesség alakításában. / === / In this paper the relationship between information technology (IT) and competitiveness is tackled. Since the authors’ previous surveys within their Competitiveness Research Program several new technologies have emerged, and the influence of the word wide financial and economic crisis has reached Hungary as well. In the face of these challenges it is worth reexamining the role of IT in shaping the competitive position of companies. The structure of the paper is as follows. A brief theoretical introduction is provided before their research questionsare presented. After that, the paper contains an analysis on selected fields of the corporate IT function, namely IT infrastructure, IT applications, IT management and IT strategy. Based on this, conclusions are made both at the end of the main parts, and in the final section of the paper. As far as the final conclusions are concerned, the majority of respondents do not regard IT today as a source of sustainable or contestable competitive advantage, though the dominant opinion underlines that IT is a strategic necessity. Besides this, their research results suggest a kind of association between corporate performance and the maturity level of the IT function. However, even the best performing companies are not prepared yet to effectively respond to their own prediction that forecasts the strengthening role of IT as a competitive factor.

Using the World Wide Web to revolutionise technology transfer and training in the water and wastewater industries

Industry professionals of the near future will be supported by an IT infrastructure that enables them to complete a task by drawing on resources and people with expertise anywhere in the world, and access to knowledge through specific training programs that address the task requirements. The increasing uptake of new technologies enables information to reach a diverse population and to provide flexible learning environments 24 hours a day, 7 days a week. This paper examines one of the key areas where the World Wide Web will impact on the water and wastewater industries, namely technology transfer and training. The authors will present their experiences of developing online training courses for wastewater industry professionals over the last two years. The perspective is that of two people working at the coalface.

An action research report on the Korean national digital library

This paper presents the results of my action research. I was involved in establishing and running a digital library that was founded by the government of South Korea. The process involved understanding the relationship between the national IT infrastructure and the success factors of the digital library. In building, the national IT infrastructure, a digital library system was implemented; it combines all existing digitized university libraries and can provide overseas information, such as foreign journal articles, instantly and freely to every Korean researcher. An empirical survey was made as a part of the action research; the survey determined user satisfaction in the newly established national digital library. After obtaining the survey results, I suggested that the current way of running the nationwide government-owned digital library should be retained. (C) 2002 Elsevier Science B.V. All rights reserved.

Explorador integrado de serviços de armazenamento na cloud: cloud cockpit

Projeto para obtenção do grau de Mestre em Engenharia Informática e de Computadores

Personalization platform for multimodal ubiquitous computing applications

Dissertação para obtenção do Grau de Mestre em Engenharia Informática

Transformació de dades pel comerç electrònic de Tous

Aquest projecte es tracta de la creació d'una aplicació que ens ajudarà a establir comunicació entre la web de comerç on-line de l'empresa “Joieria Tous”, que estarà administrat per “GSI Commerce” i el sistema informàtic de la nostra central logística. Observarem que el sistema actual és totalment propietari i fet a mida, llavors per poder tenir una comunicació amb les noves botigues on-line s'ha de crear una plataforma que transformi les dades d'entrada al sistema informàtic de la nostra empresa i les dades de sortida al sistema informàtic de la empresa externa que gestionarà el comerç on-line: “GSI Commerce”.

Service Management for Service Desk

Palvelunhallinnan kehittäminen Service Desk ympäristöön johtaa parempaan työnkulun hallintaan. Service Deskin päätehtävänä on toimia ainoana yhteyspisteenä asiakkaalta tietohallinto-osastolle. Jokainen yhteydenottopitää kirjata ja se pitäisi olla jäljitettävissä. Tapahtumien eli insidenttien kirjaaminen tapahtuu pääasiassa Service Desk -funktiossa, joka omistaa niistä jokaisen. Tapahtumien hallintaprosessin tehtävänä on etsiä loppukäyttäjän tai IT-infrastruktuurin monitorointityökalun ilmoittamalle insidentille mahdollisimman nopea ratkaisu. Insidentit saattavat johtaa ongelmiin, jotka käsitellään erillisessä prosessissa. Ongelmien hallintaprosessi yrittää etsiä vikatilanteen pohjimmaisen syyn. Kun pohjimmaisin syy on löytynyt, prosessi lähettää muutospyynnön muutosten hallintaprosessille. Jotta päästään mahdollisimman hyvään tehokkuuteen, pitää määrittää asiakasrajapinta sekä mittarit. ITIL-malli tarjoaa prosessit IT-palvelunhallinnan kehittämiselle. Kansainvälisesti tunnettuna 'de factO' standardina sitä voidaan soveltaa globaaleissa yrityksissä. Tässä työssä keskitytään erään lääkkeiden jakelussa toimivan yrityksen tietohallinto-osaston Help Deskin nykytilan määrittämiseen. Työssä myös kuvataan tietohallinto-osaston tavoitetila, jossa keskitytään Service Deskin IT palvelunhallinnan kehittämiseen. Muut prosessit ja mittarit on kuvattu niiltä osin, jotka tulee huomioida Service Deskin seuraamisen ja ohjaamisen kannalta.

Sähköisen liiketoiminnan kehittäminen konsernitasolla

This thesis studies the transformation to utilizing e-business in corporate business activities. This transformation is called e-transformation. The transformation requires changes in both the IT infrastructure, as in the way things are done within the company. In this thesis the most focal needs for change are evaluated and solutions are suggested for the utilization of e-business at the corporate level. E-business sets demands to the corporate level management of customers, users and products. Also new kinds of demands are set to the IT systems used. A major practical problem in e-transformation is the growing need for the integration of corporate databases and information systems. In this thesis methods are sought to perform this integration. As an example, the challenges relating to the development of a CRM-system were examined. In this thesis the aim was to develop a model for an electronic portal with the help of which centralized electronic services can be offered to customers. In addition to the developed model, possible development phases were studied in the transformation to a portal as well as presenting a model of a multilevel portal.

Quality and analysis of administration processes in server operations

IT outsourcing refers to the way companies focus on their core competencies and buy the supporting functions from other companies specialized in that area. Service is the total outcome of numerous of activities by employees and other resources to provide solutions to customers' problems. Outsourcing and service business have their unique characteristics. Service Level Agreements quantify the minimum acceptable service to the user. The service quality has to be objectively quantified so that its achievement or non-achievement of it can be monitored. Usually offshoring refers to the transferring of tasks to low-cost nations. Offshoring presents a lot of challenges that require special attention and they need to be assessed thoroughly. IT Infrastructure management refers to installation and basic usability assistance of operating systems, network and server tools and utilities. ITIL defines the industry best practices for organizing IT processes. This thesis did an analysis of server operations service and the customers’ perception of the quality of daily operations. The agreed workflows and processes should be followed better. Service providers’ processes are thoroughly defined but both the customer and the service provider might disobey them. Service provider should review the workflows regarding customer functions. Customer facing functions require persistent skill development, as they communicate the quality to the customer. Service provider needs to provide better organized communication and knowledge exchange methods between the specialists in different geographical locations.