GSE Blogs

I am very happy to announce the availability of the milestone 1.2 of the Community Equity open source project.

Milestone 1.2 release description



  • activitystrea.ms support - read and process activitystrea.ms enabled sites and feeds
    • Facebook connect - integrate Facebook status updates
    • status.net connect - integrate status.net software (this is based on an activitystrea.ms extension for status.net from Olof Tjerngren.
    • Cliqset.com connect - integrate with cliqset activitystrea.ms feed

  • Glassfish WebSpace Server 10 and Liferay Portal integration
    • plugin to capture all social events
    • supports web pages, blogs, bookmarks, wiki , forum, attachments , polls content types
    • all Ceq widgets integrated as portlets
    • CeQ administration integration
    • Single Sign on
    • Tagging and rating events
  • Bug fixes and improvements
    • Performance improvement
    • Application management
    • Bug Fixes
Developers Spotlight : a special thanks to

James Falkner - for the activitystrea.ms reader implementation Olof Tjerngren - for the activitystrea.ms implementation for status.net


Just watch enclosed video to get a quick overview about Community Equity and the new functionality.


An Open Letter to the Editorial Staff of USA Hockey Magazine:

I’m a bit surprised that the “Ivy on Ice” article in the November issue of USA Hockey magazine only talks about the men’s game. Co-education has existed in the Ivies for almost four decades, and the women’s game has a younger but equally important history:

  • The Patty Kazmaier Award, the women’s equivalent to the Hobey Baker Award, was named for Patty Kazmaier, Princeton forward and daughter of Heisman Trophy winner Dick Kazmaier.

  • Laura Halldorson (Princeton) campaigned for women’s hockey within the ECAC, to the point where it gets equal billing on their website and coverage. Laura also coached her home state University of Minnesota women’s ice hockey team to back to back national titles.

  • With the attention foisted upon the upcoming Olympics, USA fans are bound to see any number of Ivy-affiliated women’s players, few more recognized than Angela Ruggiero (as much as it pains me to type it, Harvard). After facing the Donald on The Apprentice, what’s to fear from the Canadians and Swedes?

  • Gillian Apps played at Dartmouth and then took home the gold medal in Torino with the Canadian women’s team. Her brother Syl Apps III played for Princeton (and later Trenton in the ECHL), her father Syl Apps Jr. played with the Penguins and Kings, and her grandfather (Syl Apps) is in the Hockey Hall of Fame.

    USA Hockey usually does an outstanding job giving equal billing to men’s and women’s hockey, and I’m suprised at this omission.
    I’ll forgive leaving out Darroll Powe (Flyers, Princeton, and one of the few players to score on Brodeur twice this year).

  • Once again Princeton University graduate Darroll Powe put one past Marty, and that’s what it took to unravel a pair of winning streaks. Powe scored on opening night as well, seemingly deflating the Devils out of the gate. Tonight’s goal wasn’t the turning point (it was Van Riemsdyk’s goal that Marty didn’t see in the 3rd), but it definitely showed which was the ice was tilting.

    The problem with streaks is that after a while, people pay more attention to the statistics than to the end goals (playoffs, player development, fan attraction, financial management). Better to pick up points consistently than to be streaking one way or the other – averaging 1.25 points per game (or about a 63% points efficiency) is usually enough for a good playoff seeding. I’m not upset the streak of away wins or consecutive wins ended, as the Devils were close to 90% point efficient. You’re going to lose games, although I wish they weren’t to the Flyers.

    Much more concerning to me: Darroll Powe basically walked onto the Flyers. Here was a kid playing less than an hour’s drive from the Rock, and the Devils didn’t chase him? He looked like he had the Devils defense scrambling for half of the last three minutes of the game tonight, simply forechecking strongly enough to keep Brodeur in the net. Madden and Rafalski were the oft-discussed “undrafted” players; the Devils draft has produced some huge winners (Parise, Bergfors) but their ability to spot talent outside of the fresh-faced set should be just as good, and it hasn’t produced in the past five or six years.

    Even more concerning: schedule compression. Devils lost in their third game in four nights, and fourth in six nights. That’s incredibly tight game timing, and it’s a result of taking a few weeks off for the Olympics. I’m betting it’s one reason there have been a rash of serious injuries to marquee players, and it should be a sign of caution for the banged-up bodies (Niedermeyer, Pandolfo, Martin, Oduya, Elias to a lesser extent, Langenbrunner to a bit) to focus on strong, rather than fast, returns.

    Mergers and acquisitions aren’t reserved for failing banks or technology companies: Turns out there’s excitement and kvelling in the Jewish themed consumer goods arena.

    Jewish Fashion Conspiracy had its run and their products sidled over to PopJudaica. In addition to “Jews for Jeter” t-shirts and matzah-print toilet seats, they put six-points of light into a bunch of housewares. It’s funny, quirky stuff.

    Today ModernTribe announced they’re buying PopJudaica. Hip chanukiot, CBGB-inspired shirts and other coolness reign.

    At some point, I’ll pester them about carrying the Jewish Hockey Book. I just have to finish writing it first.



    My “Jews For Jeter” t-shirt provided comfort, good luck and naches during the Yankees’ championship run. But if you’re a Mets fan, the off-season came early, without celebration or pre-holiday post-season splurges at the local Dicks or Sports Authority.

    Take heart, fans of the injury-prone but get’em next year Amazins: New Rome Clothing has something equally sacrilegious for you. You can have “Messiah” embellished with the mogen david, sporting Sandy Koufax or Hank Greenberg on the back.

    Tip of the yarmie to ESPN: The Magazine for the New Rome pointer.

    I broke down and ordered the NHL Center Ice package tonight. It was actually a Facebook conversation with a co-worker that convinced me it was worth the $172 for the next six months, or as he put it, less than the cost of going to two games. My interest started with a sincere interest in seeing Mike Cammalleri, Brian Gionta and Scott Gomez take on the Bruins tonight. What I got was a lingering taste of the seven-plus years Mrs. Snowman and I spent in the Boston suburbs, channeling NESN on a 17-inch TV. It’s still NESN carrying the Bruins home game, but it’s in HD — a little bit of old school Boston sports mixed with geographic diversity. Given that all of the out of market games are redirections of local coverage, I’m looking forward to getting to know the broadcast voices of the Lightning, Canadiens, Ducks, Hawks and perhaps the Flyers, as I follow some brand name as well as lesser-known but fun to watch players (Halpern, Powe and Parros, along with Madden, Toews, Gomez, Cammalleri and Gionta).

    Snowman favorite George Parros picked up his first of the year, ending a 21-game stretch without a goal that extended into last spring. It was a weird night, including a goal that Joffrey Lupul put in off of the glass stanchion near the blue line.

    Sports fans most definitely mark time by sports seasons, and clearly associate events staggeringly good or bad with particular slices of our life. The 1969 Mets are what I remember from 1st grade; the 1972 Pirates-Reds National League Championship Series marked the beginning of understanding sadness in sports; the Devils won their last Stanley Cup the first year my son played travel hockey. But like financial prognosticators who picked stock market direction based on the conference affiliation of the Super Bowl winner, I have specific memories of World Series events and their perceived impact on my life.

    1969 World Series: Miracle Mets, watching from Miss D’Amico’s first grade class on a black and white set perched on her desk, lights turned off, 25 of us clustered around the 12-inch screen to mark the first time I ditched school (or work) for a sporting event. My fascination with baseball cards started that following spring, collecting pasteboard memories of what transpired at the beginning of the school year.

    1977 World Series: Yankees win, Reggie Jackson is Mr. October. I had put away my baseball cards the previous spring, upon graduation from middle school. I remember watching it with my cousins, amazed that they had such passion for the Yankees, not quite appreciating the magnitude of Jackson’s performance. It was likely the first sports event I can claim to have watched as a young adult.

    1979 World Series: Pirates “We Are Family” series, Willie Stargell leading the black and gold to another championship, preaching unity before “diversity” was in the vernacular. In the fall of my senior year in high school, baseball was less interesting than college applications, dating, and doing statistics for the football team. My fascination with Stargell had faded a bit, into the mental left-center field gap, but came back front and center in the last Fall Classic I’d watch while living in my parents’ house.

    2000 World Series: I watched the Yankees win from the comforts of a higher-end hotel, where I was addressing a dot-com high-flier the next morning. I remember seeing Sun Microsystems (my employer) stock jump the next morning, along with a basket of other technology stocks I owned. I sold only to be reprimanded by my manager for not believing the stock would continue its rocket ride. Just a few days, later, SUNW hit an all-time high, and since that day it’s been a remarkably difficult period to be a Sun employee or shareholder.

    My personal definition of “lost decade” is that stretch from the Yankees last adding a ring until tonight. The World Series can’t make the market go up, or improve corporate earnings, or find jobs for all of my friends who have been displaced in the past year. Furthermore, there’s nothing I (or any other fan) personally did to propel the Yankees through the season and postseason. But for everyone who is a fan, who has been marking time since the first year of the double zero decade, the years marked with naught in every conceivable sense, there’s a bit of a halo effect that we’ll enjoy for a few weeks. It’s a nice way to wrap up the last season of this decade, bookending the way it started.

    I have to say that it has been a very busy couple of weeks. That said, I am happy to say that there is a lot to show for everyone's effort however. We have been able to publish quite a lot of new and updated content, and I figured that it might be a good time to shine a spotlight on some of the more interesting items. Without further ado...

    Going forward, we are going to try and bring together all of the Cloud Computing security content on our brand new Sun.COM Cloud Security home page. Be sure to check it out regularly!

    More is coming, don't miss it!

    Technorati Tag:

    Today, I am very happy to announce the availability of a new Solaris 10 Security Deep Dive training. This version has been updated for Solaris 10 10/2009 (also known as Update 8). From a security perspective, there have only been a few updates since my last posted version, but it is always good to be current. Items added in this new version include: ZFS user and group quotas, ZFS pre-defined ACL sets, NTPv4, and nss_ldap shadowAccount support. In addition, there was a bit of cleanup throughout and a new example was added for Trusted Extensions.

    As usual, I have made this content available in both OpenDocument Format (ODF) and PDF. If you are using Microsoft Office, you can use the Sun MS Office ODF Plugin to read the source document.

    For those of you who have downloaded one of the previous versions, thank you! There have been nearly 8,000 downloads of this presentation so far! If you have not had a chance, I would encourage you to download and check out a copy today. It is really amazing how many new and updated security features and capabilities there are in Solaris 10. If you have been away from Solaris (even Solaris 10) for a while, I am sure you will be shocked with what you can do today! As always, feedback is greatly appreciated!

    Take care!

    Glenn

    Technorati Tag:

    Enjoy :-)

    Community Equity Overview

    View more documents from Peter Reiser.

    Just in time for the OpenSolaris Developer Conference, we were able to publish new Immutable Service Containers images directly to the Amazon Web Services Elastic Compute Cloud (EC2) environment. Previously, I talked about creating ISCs using our security enhanced OpenSolaris 2009.06 AMIs. Today, I am happy to announce that we have taken the next logical step by making available AMIs that fully incorporate the ISC changes. If you want to try out this configuration, simply provision an Immutable Service Containers AMI on EC2. We have made AMIs available in both the U.S. (ami-48c32021) and European (ami-78567d0c) regions. As always, we would love to get your feedback on these images and what you would like to see next!

    Take care!

    Technorati Tag:

    Just wanted to let everyone know of a new Immutable Service Containers technical presentation (ODF, PDF) that has been posted. This version was delivered last week in Dresden, Germany at the OpenSolaris Developer Conference. This presentation has all of the latest and greatest information particularly on the OpenSolaris ISC Construction Kit. As always, I would love to hear your comments and feedback!

    Take care!

    Technorati Tag:

    It’s time for the Fall Classic, and this year it tramples the Garden State in multiple ways. Growing up in Freehold, NJ, I had the benefit of being located as close to the centroid of the state as you could be. We lived only a few miles from the boundary of the 201 and 609 area codes, a Mason-Dixon line that separated Philadelphia from New York, Tasty Kake from Entenman’s, and pizza from cheesesteaks. The New York-Philadelphia battle lines run deep — it’s not about rivalry or competition, it’s about deep-seated, long-running, geo-politics, with New Jerseyans caught squarely in the cross-hairs, aiding and abetting each side.

    Here’s a prime example: During my formative, impressionable pre-teen years, the local Rotary Club would sponsor a father-son trip to a baseball game (it was the 70s, forgive the political incorrectness). For some reason, we’d trek down the Turnpike to Veteran’s Stadium to see the Mets play the Phillies. Never mind that Shea Stadium was closer, and represented the Mets on home turf for displaced Long Islanders in the area. New York for some reason was off-limits: too dangerous, too far, too expensive, too something. So the upper levels of the Vet invited us, took us in, and shielded us from a 2-hour rain delay. In the middle of that weather interruption, I witnessed a fight break out between fans of the opposing teams, resulting in a Mets fan being dangled over the railing until he took back a comment made in haste or hates, depending upon your view. Beer dampened senses (common and otherwise) to the point where nobody would have felt the injuries until the next day. The Mets won, so all was for naught anyway.

    Phillies fans are famous for hurling insults and snowballs at Santa Claus. Really. When JD Drew refused to sign with Philadelphia, his first visit to the outfield was punctuated with D-cell batteries. Philadelphia news media celebrated the minimal rioting that came with last year’s World Series trophy.

    It’s the City of Brotherly Love only for some definitions of love that involve the home team, home team fans, and their supporters. Don’t cross Philly fans. Do not, under any circumstances, after your wonderful and cannot-be-denied NJ Devils defeat the Flyers to force a Game 7 in the 2000 NHL Conference Finals, after listening to nearly 3 hours of abuse, vulgarity and bodily noises coming from 200 level of the Meadowlands, turn around and holler “Hey Philly fans, bite my dad’s ass!” (Yes, this happened, yes we lived to tell about it, because I think the fact it came from a 6-year old’s mouth shocked everyone enough to give us a 3-step lead down the staris).

    I believe that Philadelphia fans are rabid out of a sense of being in a perpetual “not” comparison; they’re not New York; they’re not Pittsburgh; they’re not the nation’s capital (although they were for a while); they’re just consistently belligerent. If Philadelphia is fueled by inferiority, then New York is driven by superiority: how many rings, the new stadium, the excise tax on the baseball payroll, the “world’s most famous arena” (Madison Square Garden), the winningest franchise in sports. The longest game closing call known to man originates from the broadcast booth at Yankees games. Yankees fans set themselves up for abuse; Phillies fans dish it out faster than a cheesesteak at Jim’s on South Street.

    Baseball is America’s pastime because it includes, covers, habors and engenders such strong emotions. It’s acceptable to abuse your co-workers, your neighbor, your brother-in-law, just until the final out is made, and you go out for breakfast or lunch the next day and gently tease each other. It’s the basis for movies and television and songs and, well, slices of American life. It’s passion shared and surfaced and played out, each season after the other, a way to mark time without ever growing old.

    A kid who used to skate on one of my hockey teams chided Yankees fans earlier today: “You don’t have a game tonight; the team does.” Oh, but fans of both sides have a game tonight. It’s our given right, protected by the Constitution, to enjoy free speech, with some allowance for volume. And anyway, the Red Sox are done for the year. Nah-nah.

    Trailers for The Blind Side are running along with a steady stream of TV spots. I think it’s the required viewing holiday movie for this year, because Michael Lewis captured so much of what can be good in sports. To top it off, he discovered the story accidentally, while looking for something else, very Dorothy-like, making it as sincere as it is astonishing. “The Blind Side: Evolution of a Game”, Lewis’ book from which the movie was adapted, deals with the good in people to the extent that “Liar’s Poker” foreshadowed the ugliness of Wall Street greed.

    I’m finally getting around to adding some header graphics to the blog featuring images that are more advanced than a 2nd grader’s failed art project. I never much made it past stick figures (and my attempt at business graphics clearly demonstrates this), however, I have friends who are starving artists and know others in the same situation.

    Thanks to Richard Stevens from Diesel Sweeties for coming up with the 8-bit image of me in my Devils finest, based on a few photographs and a lot of his gray matter (as opposed to my gray hair). The font work, image placement and other graphical elements that make your eyes beg for unicorn chaser are all my own work, and demonstrate how much I totally suck at Photoshop (or in this case, Pixelmator).

    I am asked by several people and organizations to provide a summary description about our work around Community Equity and SunSpace. Instead publishing individual responses I thought its more efficient to write a blog post. So here we go ..

    Over the last 8 years our team @ Sun has been tasked to build vibrant technical communities.
    During this time - the name of the organization changed from Knowledge Management to Intellectual Capital management to Community Enablement.
    It does not really matter would you call it - the most important lesson we learned is

    It's all about people - adoption - value

    This does not mean that architecture, tools and technologies are not important. But you can build the coolest (social) site and community platform and tools - but what if the users don't use it ?
    We spent a lot of time to learn and research what people motivates to contribute and participate in communities and developed a simple but efficient model on

    How to build vibrant communities


    200909281514.jpg


    Value System -What is in it for me

    Behavior of people are highly influenced by the perceived value. Each vibrant community has its specific value system.

    Example: A manager has two people reporting to him - a sales rep and a technical engineer.
    He ask both the question: " Next calendar year - you can choose between a.) to get 5% more salary or b.) working an a cool project."
    Guess what the sales rep will pick versus the technical engineer :-) .

    Based on this findings we created a Method and System for tracking Social Capital (Community Equity). Community Equity  has been deployed as part of Sun's internal Social Community platform called SunSpace and is in production since July 2008. In July 2009 Sun open sourced Community Equity under the BSD license.
    In SunSpace we implemented various Tips and Tricks on how to show the values to the users

    • myEquity widget showing the values and ranking of a person on their myProfile (Facebook like component of SunSpace)ceq_topcountries.gif
    • all contributions of a person are automatically aggregated on a users myProfile
    • Top Contributors widgets
    • Specific "honored" community roles displayed on their MyProfile page
    • Recognition programs
    • etc....

    Example of the Community Equity widgets can be found here

    Methodology - Adoption

    Communities don' t just work. The creation and sustaining of communities needs active facilitation.
    As part of the SunSpace deployment we created a Community cookbook which covers following topics 200901192239.jpg

    • Community overview (CoP,project teams, social networks ...)
    • Community build (roles,responsibilities,measures, getting started)
    • Active Community management (facilitation tips & tricks, health check )
    • Scalability (community driver model, self supporting communities)
    • etc.

    A good example of best practices can be found on the Onestop blog .

    Architecture - Federated Services

    From an Enterprise 2.0 perspective a secure and federated services architecture should be designed to allows to deploy and consume (any) internal or external services.
    ohh - and don't forget to enable the architecture for all the emerging Mashup's :-).

    An explanation about the SunSpace architecture can be found here

    so - where is the proof of the pudding?

    sun_space.jpgThe implementation of SunSpace has been proven to be successful . Since we launched SunSpace in July 2008 we have

    • > 25'000 users
    • 10 time growth within six month
    • > 500 communities
    • > 130'000 content objects (wiki pages, attachments etc.)
    • > 5.5 million social activities
    • consolidation of 3 existing knowledge management tools (aka shutdown these sites )




    Much is written about equity, capital and networking, particularly when prefaced with "social" to ascribe some value to sites such as Facebook, Yahoo or Twitter. Conflating these terms reduces their utility in describing the problem space.

    Equity is a measure of value. Tells you how much something is worth, net net of whatever detracting, devaluing or impairing items surround it. Not just equity in the stockholder sense, but brand equity, personal equity, and

    Capital is a working form of equity. Capital needs markets - networked communities - that agree on pricing, valuation, transfer, forward transactions, and membership. Capital markets may be the US Treasury auctions, or Kiva microfinance networks of affiliated microlenders.

    Networking is what makes those values fungible. It's the basis for exchange of value and for disseminating values.

    Assigning value to members of a community isn't a new idea: eBay has member feedback; Cory Doctorow introduced the concept of "whuffie" as a form of social contribution measurement in in Down and Out in the Magic Kingdom and that idea spawned Tara Hunt's Whuffie Factor. In a large technical community, what are the elements that create value, and what things detract from it? In particular, when you're dealing with technical documents and design patterns that share the half-life of the underlying technologies, last year's contributions have to be discounted versus updates and current interactions. On the other hand, this kind of value doesn't really fit into a market model - would you exchange two Hadoop experts for a graph theoretician? Measurement only makes sense if the semantic contexts are the same, and technologists are not necessarily players in an organizational fantasy league.

    That's the set of problems that Peter Reiser and team set out to tackle when defining "community equity," a measurement of contribution and participation. Community equity rewards content publishers but equally recognizes those who interact with the content, as the commenters, redistributors and fine-tuners of content give the community heft. Can you imagine Twitter without retweeting or responses?

    Peter and I talked about the state of equity measurement, code availability and what some more down to earth views of "semantic web technology" might be in the latest Innovating@Sun podcast; check out the audio stream and related links.

    Happy listening :-)



    More information can be found on http://blogs.sun.com/innovation/entry/community_equity

    The Patent METHOD AND SYSTEM FOR TRACKING SOCIAL CAPITAL (pdf version) has been published by United States Patent & Trademark office.

    equity1.gif


    This patent was filled in Feburary 2008 as part of the Community Equity project.

    Happy reading :-)



    dis·in·ter·me·di·a·tion [dis-ˌin-tər-ˌmē-dē-ˈā-shən]
    According to Wikipedia, disintermediation is the removal of intermediaries in a supply chain: "cutting out the middleman".

    This morning I ascended the bully pulpit and gave our team a speech as to why our OneStop pages are an order of magnitude more popular than other pages we produce. (We produce pages for different sites/user communities including the public, partners, and sales people.)


    As I've written about, prior, people like OneStop because the content is complete, accurate, up to date, and is in a consistent format. Easy enough, right? Not really. The question is, what ingredients are necessary, in the secret sauce, to produce this quality content?

    Ownership

    The page(s) need to be owned by the content expert, or minimally some who is well versed in the content AND in the needs and expectations of the users. On OneStop we have the person's name, picture, and country flag on the page. The quality of the page is a direct reflection of the author.

    Disintermediation! 
    Most of the sites our group works with are based on a structured update process. The content creator needs to submit a request with the update. It then goes through a couple of people for approval on correctness and completeness, and then goes to a web person for posting. This process can be time consuming, and often something is lost in translation. On OneStop the owner does the actual posting. The corollary to this rule is that it Needs to be Easy.

    The owner needs to be a user
    The best pages are the ones that the owner uses every day. This is the only was to get a gut feel for whether the page works. Are the items in the right order? Is it easy to find the highest priority items? Are there bad links? Is response time fast? Is the page always available? Many of the best pages on OneStop are authored by SEs. As SEs talk to customers every day, and use OneStop to look up information to support these customers, they can do an optimal job of creating a page that is useful for other SEs.

    Needs to pass the what's in it for me test
    It can be a decent amount of work to maintain a popular OneStop page. Having an author's name and picture featured prominently on the page gives credit where credit is due. Note that in a intermediated site the content contributor is often invisible.

    Working feedback loop
    I'm a glutton for feedback. [Particularly positive feedback. :) ] Bloggers are heavily reliant on comments and stats, often via google analytics. Internal content contributors often aren't so lucky. On OneStop we make a big effort to make as much data as possible easy available. I think of it as positive reinforcement.

    Ask the users

    On OneStop it is necessary to login, so we know who views, updates, and comments on a page.
    In my experience, users love when you reach out to them. It shows you care and want to increase the quality and effectiveness of the page. There is always what I call a gem in the responses, a really good idea that you can readily implement.

    As a closing thought, I like to emphasize people over tools and mechanism. It's not that I don't like mechanism, I'm a huge google fan (search, gmail, talk, reader, docs, etc.) However, I'd bet dollars to donuts that the developers use almost all the tools - on a daily basis - to do their jobs. See owner needs to be a user above.

    Wow!- The BCS Enterprise Architecture Speciality Group has secured John Zachman, the de facto father of Enterprise Architecture, and creator of the "Zachman Framework for Enterprise Architecture" (ZFEA), to speak at it's next event on Tuesday the 6th of October: Talk about a major coup. The BCS EA SG is really getting busy and is the fastest growing BCS Speciality Group I've seen so far, with 750+ members, and is gaining new members on a daily basis.

    Come along and see John speak about "Enterprise Design Objectives - Complexity and Change", at the Crowne Plaza Hotel, 100 Cromwell Road, London SW7 4ER on Tuesday the 6th of October, 2009. You can register your place here: http://www.ea.bcs.org/eventbooking/showevent.php?eventid=esg0908

    Of course a serious advantage of the BCS EA SG is that it is framework agnostic, and as such can look at best practice and framework capabilities from across the EA community. In fact less than six months ago a preceding event was an update on the recently released TOGAF 9 standard from the Open Group (typically seen as one of the other major Frameworks, alongside ZFEA, although you often encounter Organisation using a blended, best-of-breed, approach when it comes to EA implementation).

    The BCS EA SG has got some other great events lined up, and I'm especially looking forward to hearing "Links with other IT disciplines such as ITIL and strategy" on Tuesday the 15th of Decemeber, 2009, over at the BCS London head quarters at 5 Southampton Street, London WC2E 7HA. Details of this event are still being confirmed, but it'll be great to see how thoughts on mapping major capabilities to EA match with my own (I've been doing rather a lot in terms of co-ordinating EA, Service Management and Portfolio Management lately). Plus since TOGAF 9 removed the genuinely useful appendices showing mappings between TOGAF, ZFEA, and other disciplines and frameworks, promising to have them published as stand alone white papers, it's great to know that experience and knowledge in this important area has not been forgotten and in fact is being collated and compiled by the BCS EA SG team.

    I'm really looking forward to seeing John speak on the 6th and if you can make it I hope to see you there too! And please do come over and say "Hi" if you get chance.



    Got this via email and wanted to pass it on in it's entirety, so here it is, personally I think you should just go to http://www.england2018bid.com/support/register.aspx and vote for Birmingham to host the 2018 FIFA World Cup.

    England is bidding to host the 21st FIFA World Cup in 2018 and Birmingham is one of 16 cities vying for the chance to be part of the official England bid.

    We want everyone in Birmingham and the West Midlands to back the city's official England 2018 World Cup Bid and pledge their support by voting for us as a host city at the official website here.

    Whether you're a die-hard footie fan - a Blue Nose, Villan or Baggies fan - or just proud to be from the city or the region register your vote now.

    The last time the World Cup was hosted in England was in 1966 when we beat West Germany 4-2 in the Final, receiving the Jules Rimet trophy from the Queen and lifting it in front of the fans at Wembley Stadium. Let's do all we can to help England host the World Cup again.

    Birmingham and the West Midlands have the sporting heritage, facilities and the passion to guarantee that we would deliver an outstanding backdrop and incomparable atmosphere if we were selected as a host city for the 2018 World Cup. Winning this bid will bring hundreds of thousands of people into the region and provide a much-needed financial boost.

    Help bring the World Cup 2018 to the region and show your support at the official England site by voting for Birmingham as a host city http://www.england2018bid.com/support/register.aspx

    You can also visit the new Birmingham website http://www.backthebirminghambid.com and also show your support at Facebook, Twitter, and Flickr.

    Support your region and city; let's bring the World Cup to Birmingham and leave a legacy to be remembered by the fans forever.

    Back Birmingham, back England 2018!

    Obv. you can vote for the City and Country of your preference, but of course I think Birmingham would be the best place to host the World Cup. :)



    Tomorrow, on Saturday the 12th, the local Parish Church, Saint Mary and Saint Margaret's, will be holding a 'Heritage weekend' and fund raising launch for the new 'community church room' that is planned to be built into the church.

    We're going to be presented with some of the results of the archaeological dig on the Church grounds (and Castle Bromwich hall, upon whose grounds the Church sits), hear from local historians, and get unprecedented access investigating a church which is at it's heart almost a thousand years old! The gardens of Castle Bromwich hall are also well worth a visit, containing walled baroque gardens that are the only remaining example in the country of a formal English garden design.

    If you have an interest in the Castle Bromwich and it's history then perhaps this might be something you'd like to come along to.

    Details:

    • Time: 14:00
    • Date: Saturday the 12th of September, 2009
    • Location: St. Mary and St. Margaret's Church, Castle Bromwich, just behind Castle Bromwich Hall.

    Here's the flyer for the event:



    Links:



    Last Sunday I hosted a barbecue for the Committee of the BCS Birmingham Branch and thought I'd share a few of the photo's that we took with you.

    After the Branch Committee's request for new Committee member applicants I'm very pleased to say we had five people come along and take up new positions on the Committee. We're fortunate to be joined by Martin Froggatt, Rob Gilliam, Steve Harris, Dawn Peers and Hugo Russell, and most welcome they are too!

    This bring the size of the Committee back up to a healthy twelve members, which is excellent, however we on the Committee thought that it would be good idea to hold a small event to help everyone get to know each other, and hopefully build a sense of camaraderie, outside of the usual Committee meetings and BCS Birmingham Branch events (one of which is on Tuesday the 15th evening). I was happy to host and for my part I wanted to say 'thank you' to the long serving members of the Committee for all of their dedication (as well as a couple of long serving ex-Committee members too).

    We've also recently started to reboot the Branches approach to social networking technologies and will be refreshing the BCS Birmingham Branch facebook page, please consider joining if your a BCS member and either associated with or interested in the Birmingham Branch.

    And here's those photos I mentioned, as you can see we all had an excellent time, and as Peter Crouch had to say "Thanks also for posting Donna's photos on the Web, now everyone can see what the Birmingham Committee does on a Sunday afternoon!".

    www.flickr.com


    Back in June, we released the very first security hardened virtual machine images for the Amazon Web Services Elastic Compute Cloud (EC2) environment. These original images were based upon the OpenSolaris 2008.11 release and were configured in accordance with the guidelines published by Sun the Center for Internet Security. Since its initial release, we have provided an update to offer this image in the European Region. In August, we took another step forward with the release of a security-enhanced image based upon the OpenSolaris 2009.06 release. This image went beyond just the simple hardening of its predecessor to add functionality such as encrypted swap, non-executable stacks and auditing that was enabled by default. With such a strong foundation, it should have been no surprise that it was likely to be used as a foundation for layered functionality. Just this month, for example, we announced the release of an image pre-configured with Drupal (v6.10) along with Apache (v2.2), MySQL (v5.0), and PHP (v5.2).

    In parallel, the Immutable Service Containers project was announced back in June. This project was focused on the creation of secure execution environments for services. One of the key deliverables from this project has been the OpenSolaris ISC Construction Kit (Preview) that transforms an OpenSolaris 2009.06 system into an ISC configuration. Interestingly, several of the functional elements used today as part of the security-enhanced AMIs actually got their start as part of the ISC Construction Kit.

    This brings us to today. For the first time, we have been able to create ISCs in the Cloud on Amazon EC2! Using the OpenSolaris ISC Construction Kit and the security-enhanced OpenSolaris 2009.06 AMI, we have deployed an ISC that exposes a representative service (in this case, a web server).

    HELLO WORLD!

    The nice thing about this is that the installation process was essentially the same as the one we used to create our pre-configured OVF image. There were two settings that needed to be adjusted in order for the ISC Construction Kit to properly work on EC2:

    export ISC_SVCS_DOCK="fs network zone encrypted_scratch"
    export ISC_DOCK_NET_IF_NAME="xnf0"
    

    These two parameters had to be set before running the iscadm.ksh command. The first parameter simply removes steps that have already been completed in the base AMI (or are not needed for EC2). The second parameter changes the network interface name from e1000g0 (default) to xnf0 which is needed on EC2. That's all there was to it!

    If you are interested in ISCs and how you can use them in your environment, I would love to hear from you! Also, just in case you missed it, I had the pleasure of joining Hal Stern to discuss ISCs on a recent Innovating@Sun podcast. Check it out and send us your feedback! Thanks in advance!

    Take care!

    Technorati Tag:

    The third of my articles on the macro-level issues with (automated) provisioning, which build on the previous articles, specifically the comparison of Enterprise versus "web scale" deployments described in "The problem with automated provisioning (II of III)" and the levels of complexity, in terms of automated provisioning, set up and configuration that is required.

    As I've said before in this series of articles provisioning a thousand machines which all have the same OS, stack and code base, with updated configuration information is easier to set up than a thousand machines which use a mixture of four or five Operating Systems, which all have differing patch schedules, patch methods and code release schedules, with a diverse infrastructure and application software stack and multiple code bases. And to express this I've postulated the equation "(Automated) Provisioning Complexity = No. of Instances x Freq. of Change".

    What I'd like to move the focus over to is that of runtime stability and the ability of a given system to support increasingly greater levels of complexity.

    I find that it is important to recognise the place of observation and direct experience as well as theory and supposition (in research I find it's useful to identify patterns and then try to understand them).

    Another trend that I have witnessed in regards to system complexity, including the requirement to provision a given system, is that the simpler and more succinct a given architectural layer, the more robust that layer is and more able to support layers above it which have higher levels of complexity.

    Often Architectural layers are constrained in terms of there ability to support (and absorb) high numbers of differing components and high rates of change by the preceding layer in the stack. AKA the simpler the lowest levels of the stack the more stable they will be and thus more able to support diverse ecosystems with reasonable rates of change in the layers above them

    The more complex the layer below the less stable it is likely to be (given the number of components and instances thereof and the rate of update which significantly drive up the level of complexity of the system).

    This phenomenon is found in the differing compute environments I've been speaking about in these short articles, and again they affect the ability of a given system to be provisioned in any succinct and efficient manner.

    More accurate Enterprise

    Typically Enterprise IT ecosystems are woefully complex, due to a mixture of longevity (sweating those assets and risk aversion) and large numbers of functional systems (functional as in functional requirements) and non-functional components (i.e. heterogeneous infrastructure, with lots of exceptions, one off instances, etc.).

    Subsequently they suffer from the issue that I've identifioed above, that is as lower levels are already compolex, they are constrained in the amount of complexity that can be supported at the level above, the accompanying diagram demonstrates the point.

    the-problem-with-provisioning-0.1-real-enterprise

    More accurate Web Scale

    Whilst Web Scale class systems often exhibit almost the opposite behaviour. Given they often use a radically simplified infrastructure architecture anyway (i.e. lots of similar and easily replaceable common and often 'commodity' components) in a 'platform' approach, there isn't often the high levels of heterogeneity that you see in a typical Enterprise IT ecosystem (homogeneous). And this approach is often found in the application and logical layers above the infrastructure, i.e. high levels of commonality of software environment, used as an application platform to support a variety of functionality, services, code and code bases.

    Subsequently, because of the simple nature of low level layers of the architecture they are much more robust and capable of withstanding change (because introducing change into a complex ecosystem often leads to something, somewhere breaking, even with exceptional planning). This stability and robustness ensures that the overall architecture is better equipped to cope with change and with the frequency of change, and that layers of high levels of complexity can be supported.

    the-problem-with-provisioning-0.1-real-web

    And so that concludes my articles on provisioning, and the problems with it, for the time being, although I might edit them a little, or at least revisit them, when I have more time.



    Back on my topic of concerns about the UK economy this article looks something which I find highly problematic, that is the UK's spending on research and development (R&D), against world wide spend, and then measured against world wide innovation 'league tables'.

    In the theme of trying to get all these 'backed up' blog posts 'out of the door' I'll be keeping this as succinct as possible, avoiding my usual Lovecraftian levels of verbiage, so please excuse the change of tempo.

    The UK spends a great deal on R&D, in fact it spends around 2.5% of GDP, about the same percentage it spends on the Military and Armed Forces, which for 2007 comes out at around £54 Billion.

    In terms of R&D spend and investment in the future, innovation and science, in $B, the UK ranks 4th after Germany, Japan and the USA. There is another way of measuring this investment, which is by % of GDP, which is a good comparator, but hides the vast amounts spent on innovation.

    All well and good you might think, especially if that investment brings us in to the top four benefiting from that investment, but, well, there's your problem, the UK doesn't come in to the top four. It doesn't even make the top ten.

    In fact the UK comes in at fourteenth in terms of the "innovation index". I think this is pretty rum as countries with a tenth of our spend on R&D still do much better in terms of the Innovation league tables. Now ostensible you'd be right to ask what is the "innovation index" and what does it measure, unsurprisingly it is a measure of the adoption of new technology, and the interaction between the business and science sectors (it includes measures of investment into research institutions and protection of intellectual property rights).

    The UK does slightly worse on the "technology readiness index", coming joint fifteenth. This measures the ability of the economy to adopt new technologies (it includes measures of ICT usage, the regulatory framework with regard to ICT , and the availability of new technology to business).

    Now you might say that this is not a fair comparison, in that R&D is not analogous to Innovation nor the way it is calculated nor presented or that the UK's investment in R&D is exhibited in other areas, such as joint work abroad and investment overseas where the end 'innovation' benefit is generated and calculated. And you may well be right, but the numbers are pretty definitive and hard to avoid once you've unearthed them.

    So what is the problem? The majority of people that I speak to about the subject seem rather reticent to view the issue from the top down, because of the magnitude of the problem and effectively addressing it at a 'macro' level. Instead the majority of those I spoke with preferred to look at influencing a variety of 'levers' and mechanisms that the government might have to improve the discrepancy.

    However I'm really not sure this addresses the root cause, even if such a root cause could be, or had been, identified.

    From my point of view the mechanism to get money from the Government (and EU who are also big investors into the UK's R&D funding, followed by business) is highly complex. The number of agencies that work in the sector is high, along with the mechanism itself (i.e. at the most basic level money is divided-up amongst the research councils and funding bodies, predominately by subject and topic area, before being divided up again amongst the universities, education and research establishments, who deliver those subjects).

    Another issue may well be the difference in focus in the UK in terms of R&D to much of the World, especially compared to the USA and major EU member nations. For instance 15% of US public civil R&D spending is on development rather than basic or applied research, whilst it is only 2.3% in the UK. It's likely that this better alignment with business means that the investment actually gets a better return on investment.

    Possible inefficiencies and complexity of the system may only be one, albeit a major one, of the issues at hand, as is focus of R&D effort and the closeness it has with business. The other popular opinion I hear is that Research Council funding needs to much better meet genuine business needs, which suggests that the relationships between universities and enterprise can continue to be improved upon significantly.

    Other items that come up are (i) clarity of Government policy and associated packages, (ii) the relative size and funding of the Technology Strategy Board (TSB) and the need to scale up further, (iii) higher availability of business relevant skills and the need to continue to promote STEM skills, (iv) a focus on key technology 'families', (v) better engagment of the SME community with Universities and R&D beyond Tax Credits and supporting and strengthening the Small Business Research Initiative (SBRI), and (vi) better engaging UK Business with 7th Framework Programme (FP7) perhaps by getting the UK to address the discrepancy between large businesses, SMEs and Universities where FP7 funds only up to 50% at enterprises, whilst universities and SMEs may receive 75%, possibly by 'topping up' funding to make it more accessible to these large companies. However I feel these seven items are minor in comparison to the three major issues above.

    There seem to be a couple of threads running through these issues and I'd say that they are complexity of the funding eco-system possibly leading to inefficiency and one of R&D investment alignment to business.

    Whatever the root cause, be it one of those, or another, or more likely a mixture of some or all of these issues, 'tweaking' certain items without a fundamental understanding of the aforementioned root causes will likely continue to have a less dramatic effect then the UK rapidly getting anywhere near the no.4 spot in the international innovation league tables.



    First things first. I want to offer a big "Thank you" to the 1,000 or so people who joined my webinar earlier this week on the topic of Cloud Computing Security. I was completely amazed by the turnout and sincerely hope that the talk was both entertaining and thought provoking! I also wanted to thank Subra Kumaraswamy, Joel Weise, and Luc Wijns for their herculean efforts answering the fast streaming list of questions from the audience! Clearly, this is a lot of interest out there for Cloud Computing and security! For those who were not able to join the live event, the presentation and replay are both now available. If you have a chance to check them out, please be sure to send along your feedback! We definitely want to hear from you!

    On the heels of this event, I did want to let you know about another web-based event to be held on September 30, 2009. At this event, Simon Gallagher (a Senior Technical Architect @ ioko) and I will join forces to talk about Cloud Security. The title of our talk will be "Decision Tree: Key questions to ask your Cloud Service Provider". Our focus, as your might guess, is on the key issues and questions that must be addressed before moving to the Cloud. Our goal is to leave you with practical ideas and actual questions that you may want to consider when deciding if/when/and how to move services and data into the Cloud. The announcement includes all of the details.

    This event is actually a part of a BrightTalk Cloud Security Summit that will feature talks from several other Cloud Computing vendors, consumers and industry groups such as the Cloud Security Alliance. Should be an information-packed day! Hope to see you (virtually) there!

    Take care!

    Technorati Tag:

    Apologies to all my blog readers I've been lax of late and haven't posted a great deal recently, and I'm afraid that in an attempt to clear down all the draft blog entries I have prior to the transition and acquisition (of Sun by Oracle, of course) I'll be posting a number of blog entries in quick succession, some of which I expect may need expanding upon in the future.

    Topics I have to complete include part three of my provisioning article series, a number of posts on Google and the Google architecture, a number of posts on UK Government messaging systems, specifically DIS, a number of posts on the continuing issues with the economy and innovation and science spending in the UK, as well as a few others.

    On the economy side, I was hoping to follow up my articles "DBERR's views on the future growth of the UK economy 'New Industry, New Jobs'" and "Industry contributions to the UK economy and investment in R&D by industry" with pieces which might include looking at:

    1. 'innovation' investment in the UK versus the UK's place in the World Wide league tables
    2. UK versus US stimulation packages
    3. Services Sciences and Web Sciences
    4. the state of UK Manufacturing and "Robot"isation in the UK
    5. a review of the recent 'Digital Britain' report
    6. possibly a comparison of R&D spending and focus in the UK versus other nations (European comparison might be the most pointed)

    But for now I'll see how I get on!