Request Demo

Connective Platform™

Connective Shield

Connective Identity

Connective Vigilance

Solutions

Partners

Support

Company

Blog

Career

About Us

+1-303-423-4500

Contact Us

Analytics

Big Data

Billing

Business

Business Intelligence

Cloud Computing

Consulting

Cybersecurity

Data Warehouse

News

Services

Technology

Testing as a Service

We focus on reliability, quality, and value.

Discover ways to examine web server log files to learn ways of users website browsing and forecast next browsed content. This article explains applying extensible Markov model to cluster web pages on a website and predict the place user will move next. The algorithm utilizes InfoSphere® Streams and R for regular issue prognostications based on model.

Webserver log files are used to examine users surfing behaviour. As an illustration, in “Predicting Web Users’ Next Access Based on Log Data”, Rituparna Sen and Mark Hansen have utilized combination of first-order Markov models to examine clusters of pages on a website. They applied these models for prognostication which webpage user supposed to visit next. They suggested implementing this information to pre-fetch a resource before a real request by user. This article will explain how to use IBM InfoSphere Streams, combined with R to run an identical analysis of webserver logs.
This solution is implementing extensible Markov models (EMMs), initially released in 2004 by Margaret Dunham, Yu Meng, and Jie Huang, to mix a stream clustering algorithm with a Markov chain. A Markov chain is a mathematical system that reviews transformations from one state to other, in which the following state is relying only on present and not the sequence of proceedings that came before.
The states of Markov chain are aggregation specified by stream clustering algorithm. The EMM can transform eventually by including new states since they are discovered and also damping or trimming current states with time. Consequently, the model is able to make adjustments eventually. This opportunity is particularly crucial in systems with dynamic usage style that changes over the time. As an example, website will probably display dynamic usage pattern, as well as improvements in structure, in some time.

The majority of machine learning models designed for forecasting are performed offline on big amounts of training info. Right after the model are properly trained, prediction could be done right away. This technique is suitable for numerous sorts of issues, however if the patterns for prediction are changing regularly, this method could create models that drop behind the system they are attempting to forecast. Since EMM could be educated dynamically, they are effective for modelling systems like network traffic, auto traffic, or another system in which clustering patterns can transform eventually. Web server traffic is one of those sphere. Server logs deliver an infinite source of streaming information to educate the model when the system is already performing forecasting.

Prognosticating content requests from web server logs

Internet servers are keeping logs of resource queries. Every log entry consists IP address of user, timestamp for request, and the destination for requested data. All this information characterize user and requests to website.

This article shows how to forecast users actions on a website to predict content requests using webserver log files. The modelling and prognosticating are completed by applying EMM. The solution represented here is a testament to concept. Upcoming work is essential for developing a genuine solution. Next actions involve enhancing overall performance by clustering sets of webpages, incremental studying, and using InfoSphere Streams to carry several cases of R.

Discover ways to examine web server log files to learn ways of users website browsing and forecast next browsed content. This article explains applying extensible Markov model to cluster web pages on a website and predict the place user will move next. The algorithm utilizes InfoSphere® Streams and R for regular issue prognostications based on […]

User Request Web Content Prognostication

Rate table update on MySQL backed database

The concepts in this guide apply for the DB2 version of the rating engine.

For the MySQL back-end, use phpMyAdmin to upload the data:

Upon successful import, a message diplaying the number of values imported, for example:

Rate table update on MySQL backed database The concepts in this guide apply for the DB2 version of the rating engine. Data Fromat product_code_call,description,cost,call_type Data Upload For the MySQL back-end, use phpMyAdmin to upload the data: Log in to phpMyAdmin Select the rate table Click the import tab Select the file that has the comma […]

Updating the Rate Sheet in the COGEXO Rating Engine

 (then reboot if kernel has been patched)

yum update (then reboot if kernel has been patched) yum install glibc.i686 yum install openmotif yum install libgcc.i686 yum install openmotif22 yum install openmotif22.i686 yum install xauth yum install libXtst tar xvzf bisrvr_linuxi8664h_10.1.1_ml.tar.gz cd linuxi38664h/ ./isetup

Cognos 10.1 install on CentOS 6.3 64 bit

To flatten a dimensional model built in Excel using pivot tables, follow these steps:

save the original worksheet with the pivot table as a CSV (tab delimited is even better)

select the range or column that contains the blanks (if you have blanks under the header, don’t select the column header in the range)

select blanks (at this point Excel will select all the blank cells

point to the cell above the first selected cell

press <ctrl>+Enter and Excel will copy the formula to all the blank cells

to replace the formula by the values, simply save the worksheet again as CVS, or copy and paste special the cells as values

that’s it, you’re done. (Don’t forget to save.)

To flatten a dimensional model built in Excel using pivot tables, follow these steps: save the original worksheet with the pivot table as a CSV (tab delimited is even better) select the range or column that contains the blanks (if you have blanks under the header, don’t select the column header in the range) select […]

How to Flatten a Dimensional Data Model Built in Excel with Pivot Tables

At the time of this writing, the IBM Smart Business Server’s control panel doesn’t allow importing a secure certificate (SSL cert). Never-the-less it is possible to install a valid (CA signed) secure certificate from the command line. This article assumes that the reader is familiar with SSL and the basic SSL KEY, CSR, and CRT generation step. We are therefore picking up at the point where you have an SSL KEY as well as an SSL CRT. You will also need a machine that has  installed (any Linux or Mac box will do). In fact the smart business server itself has openssl installed, as well as keytools, so all the steps can be performed directly on the smart business server.

Please note that this is a draft document, and work in progress. At this time only the public facing websites have been successfully set up with a CA signed certificate.

The Apache configuration file for the setup wizard is:

The Apache configuration file for the intranet is here: with the corresponding SSL configuration here: 

First copy the new key and cert (in the same file, key goes on top and then the cert) into 

(Optional, this step hasn’t been successfully tested, because a non-RFC compiant method is used.) To create an RFC compliant PKCS8 version of the key pair where the intranet config file is expecting it:

Make sure the CA bundle is made available and properly reference in the above mentioned config files ()

Create a PKCS12 version of your certificate:(at the time of this writing, the default cert store password hard coded in the VERDE install is )

Location of the [SAFEv3] encription tool:

Create a new keystore based on the PKCS#12 cert: 

Update the Keystore configuration reference in  (use the password retrieved above).

Copy the PKCS#12 cert to the VERDE Tomcat cert store:(Make sure you save your previous copies of any file you modify.)

At this point, you have to restart the system, to make sure that all public services get the proper certificate loaded on boot. If you prefer, you can restart the services:

restart the VERDE software from the web console

http://conshell.net/wiki/index.php/Keytool_to_OpenSSL_Conversion_tips

http://cunning.sharp.fm/2008/06/importing_private_keys_into_a.html

At the time of this writing, the IBM Smart Business Server’s control panel doesn’t allow importing a secure certificate (SSL cert). Never-the-less it is possible to install a valid (CA signed) secure certificate from the command line. This article assumes that the reader is familiar with SSL and the basic SSL KEY, CSR, and CRT […]

Installing a Secure Certificate on IBM Smart Business Server (VERDE)

IBM just published fresh training videos for their CoudBurst Appliance.

“This video, based on five online lectures and five online demonstrations, provides in-depth information about WebSphere CloudBurst Appliance and WebSphere Application Server Hypervisor Edition. It demonstrates how to: configure resources managed in the cloud; create virtual systems for deployment to the cloud; administer resources deployed to the cloud; and create a multiple image pattern and manage dynamic machines. ”

IBM CloudBurst Appliance Training Video (As of 2016, the video is no longer available.)

IBM CLoudBurst Appliance Training Video IBM just published fresh training videos for their CoudBurst Appliance. “This video, based on five online lectures and five online demonstrations, provides in-depth information about WebSphere CloudBurst Appliance and WebSphere Application Server Hypervisor Edition. It demonstrates how to: configure resources managed in the cloud; create virtual systems for deployment to […]

Free IBM training video for CloudBurst Appliance

Business Analytics, Business Intelligence and the Hardware Upgrade Tarpit

A common misconception about business analytics, is that better business analytics usually requires better hardware.

Business Analytics: Software rules over Hardware

A number of blogs have recently reflected on the “REPORT TO THE PRESIDENT AND CONGRESS DESIGNING A DIGITAL FUTURE: FEDERALLY FUNDED RESEARCH AND DEVELOPMENT IN NETWORKING AND INFORMATION TECHNOLOGY” pointing out how progress on algorithms has contributed 43 times more to advances on processing speed than pure hardware improvements (Moore’s Law). &emdash; The report notes that in a 15 year span ending in 2003, hardware improvements accounted for a 1,000 fold increase in compute speeds, while during the same period, the algorithmic improvements accounted for a 43,000 fold improvement.

Business Analytics: Focus on Smarter Data Warehousing

While these numbers may certainly be up for debate, the main point to retain, is that by improving the algorithms, i.e. the software used in your systems, you can attain much higher efficiencies then by replacing the hardware alone. Taking a holistic approach, using an Information Agenda that takes into account all aspects of the data lifecycle paves the way for a better Data Warehouse that enables smarter Business Analytics, avoiding the tar pit of never ending hardware and software upgrades.

Business Analytics, Business Intelligence and the Hardware Upgrade Tarpit A common misconception about business analytics, is that better business analytics usually requires better hardware. Business Analytics: Software rules over Hardware A number of blogs have recently reflected on the “REPORT TO THE PRESIDENT AND CONGRESS DESIGNING A DIGITAL FUTURE: FEDERALLY FUNDED RESEARCH AND DEVELOPMENT IN […]

Business Analytics Software Efficiencies are Key

A shocking discovery by cybersecurity researchers has put thousands of LG smart TV owners at risk of having their devices remotely hijacked. The vulnerability, impacting an estimated 91,000 TVs, allows attackers to gain complete control over affected devices, potentially stealing data, installing malware, or even using the compromised TV as a launching pad for further attacks on the user's network.

The security flaws, identified as CVE-2023-6317 and CVE-2023-6318, were discovered by Bitdefender and reported to LG. While LG addressed the vulnerabilities with a patch released in March 2024, many users remain unaware of the risk and have not yet updated their devices.

Experts warn that these vulnerabilities pose a significant threat, allowing attackers to take over a victim's TV without their knowledge. The consequences could be severe, ranging from privacy invasion and data theft to financial loss and broader network compromise.

Experts urge all LG smart TV owners to take immediate action to protect themselves:

Update your TV's software: This is the single most important step. Go to your TV's settings and check for available software updates. Install them immediately to patch the vulnerabilities.

Be cautious of suspicious apps: Only download apps from the official LG Content Store and avoid installing anything from unknown sources.

Beware of phishing scams: Be vigilant against emails or messages claiming to be from LG and prompting you to click on links or download files. These could be attempts to install malware on your devices.

LG smart TV owners are encouraged to take these precautions seriously to ensure their devices remain secure and their personal information protected. 

A security vulnerability impacting a significant number of LG smart TVs was recently disclosed. This flaw could allow attackers to remotely seize control of susceptible devices. Researchers at Bitdefender discovered two critical vulnerabilities (CVE-2023-6317 and CVE-2023-6318) that, when combined, could grant unauthorized users complete control over a targeted LG smart TV.

91,000 Smart LG TV Devices Vulnerable to Remote Takeover

Even though the cybersecurity pros I work with haven't fallen for the latest LinkedIn scam, seeing it hit my inbox made me realize just how dangerous and believable these attacks are. The sophistication of this one surprised even me, and that's concerning. Luckily, no damage was done this time, but as LinkedIn usage grows, we need to be prepared. Here's how to protect yourself before these scams evolve even further...

These attacks start with a super convincing fake email that looks like it's from Microsoft. It might warn you about suspicious activity and make you panic. You click, get taken to a website that looks exactly like the Microsoft login page, and enter your credentials. But here's the trick – even with your password, they need that one-time security code sent to your phone or email. The fake email pressures you to hand over that code, and once you do, the attackers are in control of your entire account.

These scams aren't going away, they'll only get trickier. Taking a few precautions now is much better than dealing with a hacked account later.

Scrutinize the Sender: I never trust an email address at first glance. One wrong letter, an extra domain (.co instead of .com), is a red flag, no matter how official it looks.

Resist Clicking: If an email makes me nervous or claims there's an urgent problem, I never click links. I go to the company website directly and log in that way.

Codes are Sacred: Codes sent to my phone or email are my last line of defense. At work, we're told to never share these with anyone, and that's my rule for everything now.

If you're unsure about phishing in general, there are great resources online Security Awareness Training | KnowBe4 And if your company offers any security training, take advantage! Before you open an unknown email – Stop, think, and don't be uninformed.

Even though the cybersecurity pros I work with haven't fallen for the latest LinkedIn scam, seeing it hit my inbox made me realize just how dangerous and believable these attacks are. The sophistication of this one surprised even me, and that's concerning.

This LinkedIn Scam Got Me (Almost)...and It Should Scare You Too

A hacking competition called Pwn2Own 2024 in Vancouver awarded over $1.1 million to participants who discovered vulnerabilities in various software and devices. This security competition incentivizes hackers to discover and report vulnerabilities in widely used software and devices. By finding these vulnerabilities, companies can patch them before malicious actors exploit them for criminal purposes.

The biggest winners were those who found exploits compromising Tesla cars. On the first day, hackers earned a combined $732,500 for finding 19 zero-day vulnerabilities. These vulnerabilities affected Tesla cars, along with popular operating systems and programs like Windows, Ubuntu, and Adobe Reader.

The top prize of $200,000 went to a team from Synacktiv for hacking a Tesla's electronic control unit (ECU), which could potentially allow them to manipulate the car. The second day's top earner was Manfred Paul, who won $100,000 for a critical Firefox exploit. Paul's exploit allowed for remote code execution and escaping the program's sandbox protections. Overall, Paul won more than $200,000 during the competition by also hacking other browsers as well.

A hacking competition called Pwn2Own 2024 in Vancouver awarded over $1.1 million to participants who discovered vulnerabilities in various software and devices. This security competition incentivizes hackers to discover and report vulnerabilities in widely used software and devices. 

Tesla, OS, Software Exploits Earn Hackers $1.1 Million at Pwn2Own 2024

Cybercriminals are looking for ways to integrate large language models (LLMs) into their attacks, and they have three main options: trying to bypass the safeguards on existing LLMs, building their own LLMs, or using uncensored open-source models.

One recent example is Dark Gemini, an underground service that appears to modify prompts sent to a legitimate LLM in order to bypass restrictions. While Dark Gemini's abilities weren't very impressive, it demonstrates how cybercriminals can leverage existing LLMs to enhance phishing attacks, for instance, by generating more convincing text.

Security researchers are concerned that nation-state actors are already using LLMs to improve their operations. Additionally, some researchers believe the safeguards on LLMs can be easily bypassed. However, it seems that using LLMs for more complex tasks, like creating malware, will still be difficult due to the current limitations.

In conclusion, cybercriminals are actively looking for ways to exploit LLMs, and while there are challenges, even basic use of LLMs can improve the effectiveness of existing attacks.

Cybercriminals Weigh Options for Using LLMs: Buy, Build, or Break?

In a proactive measure to enhance user security, Google has announced an update to its Chrome browser, effectively patching a series of vulnerabilities, including the zero-day flaw CVE-2024-3159, unveiled at the Pwn2Own hacking contest in March 2024. This critical issue, an out-of-bounds memory access in the V8 JavaScript engine, was exploited by Edouard Bochin and Tao Yan from Palo Alto Networks, earning them a $42,500 reward.

CVE-2024-3159 is the third zero-day discovered at Pwn2Own 2024 to be addressed by Google, following earlier fixes for vulnerabilities in WebCodecs and WebAssembly. In addition to CVE-2024-3159, the latest update also corrects two other vulnerabilities reported by external researchers, with Google disbursing $10,000 in total bounties.

The updated Chrome versions—123.0.6312.105/.106/.107 for Windows and macOS, and version 123.0.6312.105 for Linux—are currently being deployed. 

The diligent response from Google emphasizes the tech giant's commitment to user security and the pivotal role of ethical hacking competitions like Pwn2Own in identifying and mitigating potential threats. These contests not only help in uncovering hidden vulnerabilities but also foster a culture of proactive security measures among tech companies. Users are strongly advised to update their browsers to the latest version to ensure they have the most up-to-date defenses against this specific vulnerability and others that may pose a risk. Google's commitment to security, combined with the collaborative efforts of the cybersecurity community, continues to play a vital role in maintaining the integrity and safety of the digital landscape.

Source: SecurityWeek 04/03/2024

In a proactive measure to enhance user security, Google has announced an update to its Chrome browser, effectively patching a series of vulnerabilities, including the zero-day flaw CVE-2024-3159, unveiled at the Pwn2Own hacking contest in March 2024. 

Google Updates Chrome to Patch Zero-Day Flaw Exposed at Pwn2Own

It’s been three months since the Securities and Exchange Commission’s cyber disclosure rules took effect and rather than creating a deluge of incident revelations, only a trickle has emerged. Companies have submitted 12 initial Form 8-K, Item 1.05 filings, the form the SEC began requiring businesses to file for material cybersecurity incidents on Dec. 18. Each of these filings mention an “incident,” and all but two said the activity or access was “unauthorized.” While the language businesses use in Item 1.05 filings are ultimately crafted to notify regulators and investors of potential risks, these words also signal how a company detects, mitigates, contains and recovers from cyberattacks. Across the filings Cybersecurity Dive analyzed, none of the businesses described the incident as a breach or data breach in the filing with the SEC — and that was likely by design.

“Words like ‘breach’ and ‘data breach’ have very specific legal meanings and consequences, and they also have a particular meaning within what I’ll call the public consciousness,” said Travis Brennan, partner and chair of the privacy and data security practice at Stradling. “It’s just become a very loaded term, generally, and I think it’s one that companies in these disclosures will studiously avoid using in most cases,” Brennan said. “Once there has been a breach, as opposed to merely an incident, that suggests that the risk of harm has just gone up a few notches.” 

It’s been three months since the Securities and Exchange Commission’s cyber disclosure rules took effect and rather than creating a deluge of incident revelations, only a trickle has emerged. 

How companies describe cyber incidents in SEC filings

APIs were the target of 29% of web attacks in 2023, with cybercriminals exploiting the swiftly growing API economy for new avenues of attack, according to a report from Akamai. The commerce sector experienced the highest number of attacks, accounting for about 44%. Business services followed at nearly 32%. Attacks ranged from Local File Inclusion (LFI) and SQL Injection (SQLi) to Cross-Site Scripting (XSS).

Akamai’s findings underscore the escalating concerns in the industry surrounding API security threats. In 2021, Gartner predicted API abuse and data breaches would double by 2024. In 2023, the Open Web Application Security Project (OWASP) released a dedicated list of API-specific risks, highlighting the growing concern. “APIs are increasingly critical to organizations, but their security is often not designed into the capability, or the security team is not able to keep up with the rapid deployment of new technology,” Steve Winterfeld, advisory CISO of Akamai, said in the State of the Internet (SOTI) report.

APIs are pivotal in developing new capabilities within companies. However, their security often receives inadequate attention, either overlooked in early planning stages or failing to match the pace of rapid technological deployment. Akamai pointed out two distinct issues in this regard — posture and runtime problems.

API implementation flaws in an enterprise can lead to posture problems. Most common among them include shadow endpoints, unauthenticated resource access, sensitive data in a URL, a permissive cross-origin resource sharing (CORS) policy, and excessive client errors.

Runtime problems, on the other hand, are active threats demanding immediate action. These include unauthenticated resource access attempts, API activity with unusual JSON payloads, path parameter fuzzing attempts, illogical API timestamps, geolocation, or sequence, and data scraping. 

Adopting a comprehensive API security program provides organizations with unparalleled visibility across their digital ecosystem. This includes discovering all APIs within the organization, auditing their risk levels, detecting abnormal behaviors indicative of abuse, and enabling expert-led investigations to hunt for hidden threats.

APIs were the target of 29% of web attacks in 2023, with cybercriminals exploiting the swiftly growing API economy for new avenues of attack, according to a report from Akamai. 

A third of web attacks targeted APIs in 2023, threatening the expanding API economy

DDoS attacks against the financial services sector historically accounted for about 10-15% of all attacks, however that trend began to rise in 2021, the FS-ISAC and Akamai found. “Financial services companies are prime targets because successfully disrupting operations, for even just a moment, can lead to severe reputational risks and distrust in the global financial system,” Teresa Walsh, chief intelligence officer and managing director, EMEA, at FS-ISAC, said via email.

Akamai in September said it prevented a DDoS attack on a major U.S. financial institution. The attack peaked at 633.7 gigabits per second and 55 million packets per second. The increased activity was driven in large part by hacktivist groups using DDoS as a tool to disrupt institutions at a time of rising geopolitical tensions.

U.S. authorities in July warned that threat groups were potentially targeting multiple sectors using DDoS capabilities, including one group which claimed to have targeted the Treasury Department’s Electronic Federal Tax Payment System. By October, security researchers warned a novel zero day vulnerability, known as HTTP/2 Rapid Reset, was being used to launch some of the most powerful DDoS attacks ever recorded.  

DDoS attacks against the financial services sector historically accounted for about 10-15% of all attacks, however that trend began to rise in 2021, the FS-ISAC and Akamai found. 

Financial services sees sharp increase in DDoS attacks as geopolitical tensions rise

The NIST Cybersecurity Framework (CSF) 2.0, an evolution of its predecessor, is a comprehensive guide designed to assist organizations across various sectors in managing and mitigating cybersecurity risks effectively. This framework, while not prescribing specific actions, offers a taxonomy of high-level cybersecurity outcomes, enabling organizations, regardless of their size, sector, or maturity, to better understand, assess, prioritize, and communicate their cybersecurity efforts.

The CSF 2.0 emphasizes the importance of communication and integration in cybersecurity risk management. It advocates for a shared understanding and approach to managing cybersecurity risk, not just within an organization but also in its interactions with third parties. This shared understanding is crucial for making informed decisions about cybersecurity expenditures and actions, ultimately enhancing an organization’s cybersecurity posture.  The NIST Cybersecurity Framework 2.0 serves as a foundational resource for organizations seeking to navigate the complex landscape of cybersecurity risks. It encourages a proactive, nuanced approach to cybersecurity, emphasizing flexibility, adaptability, and continuous improvement. 

The NIST Cybersecurity Framework (CSF) 2.0, an evolution of its predecessor, is a comprehensive guide designed to assist organizations across various sectors in managing and mitigating cybersecurity risks effectively.

An Overview of the NIST Cybersecurity Framework 2.0

Google’s new Security Command Center Enterprise (SCC Enterprise) could streamline cloud risk management through AI automation, saving security teams time, experts say. Enhanced with Mandiant threat intelligence and generative AI, SCC Enterprise aims to offer comprehensive insights across the cloud security lifecycle. Google Cloud has identified gaps in the protection provided by current cloud-native application protection platforms (CNAPPs) and introduced SCC Enterprise as a solution to better guard against emerging threats.

“There are two things that Security Command Center Enterprise addresses compared with previous solutions: tighter integration between cloud and enterprise security and coverage across multi-cloud rather than just operating in silos,” Narayana Pappu, CEO at Zendata, a San Francisco-based provider of data security and privacy compliance solutions said in an interview. “Automation and integration of Gen AI brings efficiencies that will save teams time as well.”

According to Suni Potti, VP/GM of Google Cloud Security, the new platform integrates Mandiant Threat Intelligence with modern SecOps capabilities, enabling swift responses to cloud security incidents through “SIEM-powered visibility and SOAR-driven accountability.”

“Security teams can get a single view of their posture controls, active threats, cloud identities, data, and more, while integrating remediation and issue accountability into the end-to-end workflows of a converged cloud risk management platform,” Potti wrote in a blog post.

Google’s new Security Command Center Enterprise (SCC Enterprise) could streamline cloud risk management through AI automation, saving security teams time, experts say. Enhanced with Mandiant threat intelligence and generative AI, SCC Enterprise aims to offer comprehensive insights across the cloud security lifecycle.

Blog Category: Business Intelligence

Categories