Threat Modelling: The Now of IT

Threat modelling was the subject of the latest Virtualization Security Podcast (which I am still trying to upload, so time for a new service). Threat modelling is what every security person does, but not necessarily formally. Threat modelling in many ways takes an architecture and looks for well-known threats. One such threat that could come …

Technical Arc of Virtualization

While at EMC World and RSA Conference this last month, I realized something very interesting. The same people I normally see at these shows have moved on to something new and shiny, and as such they were not at the shows. However, what was at the shows was really interesting. There was much more talk …

Cloud: Developing over the Chasm in 2011

Now, of course, this is a simplified version of the question, because in almost all cases Infrastructure Clouds and Platform Clouds are built on Virtual Infrastructure, and in most cases Platform Cloud is built on Infrastructure Cloud, so the question is really about how far into the Cloud you should be prepared to go. My perspective here is of a development manager – someone who is charged with building a new application. I’m thinking as a development manager not a developer and I’m taking decisions to maximise the productivity of a development team – rather than on the “shininess” of the technology.