I took advantage of the few (exceptional) weeks that I spent in France by attending a few spring seminars:
- March 31st: ScrumDay 2011, organized by the French Scrum User Group
- April 1st: VMWare seminar on virtualized workstations
- April 5th: Seminar on Cyber Criminality, organized by Stonesoft
ScrumDay 2011
For ScrumDay 2011, I wrote a series of articles on our new thematic blog, called Methods and Technologies, where I presented all seminar sessions that I attended.
Virtualization of workstations
This is a subject that I regularly follow, as it is part of a scheme of industrializing our developers’ work environment. But the business model is not yet a viable one as regards the gain in workstation management. I was recently talking to a top manager of a French IT facilities management group which already offers package solutions. We agreed on the fact that the market was not yet ready for a massive deployment of DaaS (Desktop as a Service), but that service providers needed to be prepared.
Several companies were present at this seminar, as the VDI is not a solution, but a chain:
- VMWare: bare-metal virtualization. Other solutions are of course possible, but this solution is reliable, robust and is not new on the market.
- ThinPrint: Solution that facilitates remote printing
- RES Software: Tools for managing the deployment of patches, applications on platforms.
- RiverBed: It is now possible to deploy the appliance in a virtual machine. This is becoming more flexible than the hardware version. Moreover, it seems possible to optimize the RDP flow. We have done the test in order to optimize our flows with Vietnam, and I can say if gains are possible on the RDP, we shall ask ourselves the question again.
- Wyse: Their new product “Zero” is interesting: it is even less cumbersome, more energy efficient, without a local OS, but dedicated to one use.
Nevertheless, I doubt that a desktop environment, which is rather static, could have real gains, despite offering some benefits:
- Anonymization of the workstation: changing the physical support, but keeping the software environment
- Better data security: the workstation is more accessible, USB access is more restricted
- Reducing energy consumption: physical machines stop based on the need of virtual machines
In the Pentalog context, the gain consists in offering standardized working environments in an automated manner.
AET – Cyber criminality
The seminar on cyber criminality was really interesting. It was organized by StoneSoft which presented its approach on AET (Advanced Evasion Technique). This seminar was hosted by Anicet Mbida (an IT reporter on BFM TV) and included three stages:
- Presentation of the AET approach by Juha Kivikoski, Stonesoft’s COO (AET site)
- Presentation of Gartner’s 10 pieces of advice by Bob Walder, for choosing a protection solution.
- Debate on cyber criminality, which included the above-mentioned participants who were joined by Nicolas Arpagian, editor-in-chief of the “Prospective Stratégique” magazine, and Pierre Polette, LEXSI’s director.
The debate began with a fact related to accounting. Over the last three years, three major cyber crimes were noted. In 2011, the three major crimes already occurred in the first quarter. This can be analyzed from several points of view:
Protection systems are more and more reliable and attacks are better identified. Let us not forget that a good intrusion attack succeeds when it is not known/seen.
There is a growing awareness with regard to the need to present facts which could serve as a reminder. The events which have taken place at the French Ministry of Finance can be an example.
The number of Mafia-type organizations or the desire to cause harm is increasing and flaws are more and more exploited.
I have already tackled security in one of my previous articles of the ISD saga and I want to add a few things. I would just like to discuss a case that was mentioned: an identified employee from the financial department was caught off-guard and proved to be vulnerable. He was asked on three occasions by phone, by a person who assumed the identity of a manager, to make a bank transfer of one million euros every time. It is only the fourth time that he began to ask himself questions. This story is meant to emphasize that security concerns everyone and that one must not expect the technical department to provide solutions to all faults of the human behaviour.






















