Showing posts with label security. Show all posts
Showing posts with label security. Show all posts

Saturday, May 10, 2014

How Does Crop Biotechnology Help Food Security?

In the U.S. food is taken for granted. There are well-stocked supermarkets and no shortage of cookbooks and eateries to indulge appetites. This bountiful supply allows Americans to focus more on the aesthetics of food and, to an increasing degree, where and how it is produced.

For the millions around the globe who do not live in an affluent society, the main concern about food is more basic: Getting enough of it on a consistent basis. For many in Africa and Asia, this entails growing cash crops and staple foods.

As the Gates Foundation points out, agricultural enhancement in the developing world is also the key to a better life:

When farmers grow more food and earn more income, they are better able feed to their families, send their children to school, provide for their family’s health, and invest in their farms.

One way to do this is through biotechnology. Note that I said ONE WAY, not the only way. Nor is this just my opinion. Global sustainability guru Jeffrey Sachs has said this.

One of the most frustrating aspects of the GMO debate is how it is framed. Forget the cranks who dominate the discourse–I’m talking about smart, influential thought leaders who simplistically portray GMOs as a well-meaning technology that hasn’t delivered on its grand promises.

A prime example is Jon Foley’s recent essay, titled, “GMO’s, Silver Bullets and the Trap of Reductionist Thinking.” He starts off:

To begin, GMOs have done little to enhance the world’s food security. Mainly, that’s because GMO crops primarily in use today are feed corn (mostly for animal feed and ethanol), soybeans (mostly for animal feed), cotton and canola. But these aren’t crops that feed the world’s poor, or provide better nutrition to all. GMO efforts may have started off with good intentions to improve food security, but they ended up in crops that were better at improving profits. While the technology itself might “work,” it has so far been applied to the wrong parts of the food system to truly make a dent in global food security.

This is a narrow (dare I say reductionistic) way of looking at food security. Feeding the world’s poor, as Foley knows, also requires improving their livelihoods. It’s about lifting their incomes, helping them break the vicious cycle of poverty. There’s much that goes into that economic development equation but in Africa and other areas of the developing world, the role of commodity crops as an income generator for small farmers is crucial.

To cite one example, look at what happened after Bt cotton was introduced in India. (I’m not talking about a certain popular urban myth.) Recent studies show that Indian farmers who turned to genetically modified cotton have increased their yields, lowered their input costs and as a result, boosted their household incomes. Does that not contribute to food security?

Nor is this the whole story. As University of California plant geneticist Pamela Ronald notes:

To understand why farmers have embraced GE crops and how they benefit the environment, consider genetically engineered cotton. These varieties contain a bacterial protein called Bt that kills pests such as the cotton bollworm without harming beneficial insects and spiders. Bt is benign to humans, which is why organic farmers have used Bt as their primary method of pest control for 50 years. Today 70–90 percent of American, Indian, and Chinese farmers grow Bt cotton.

Recently, a team of Chinese and French scientists reported in the journal Nature that widespread planting of Bt cotton in China drastically reduced the spraying of synthetic chemicals, increased the abundance of beneficial organisms on farms, and decreased populations of crop-damaging insects. Planting of Bt cotton also reduced pesticide poisonings of farmers and their families. In Arizona farmers who plant Bt cotton spray half as much insecticide as do neighbors growing conventional cotton. The Bt farms also have greater biodiversity.

It’s puzzling to me that such benefits are ignored by GMO skeptics who profess a deep interest in human welfare and more enlightened environmental stewardship.

In his piece, Foley goes on to make additional arguments against GMOs that some agricultural biotech proponents have already responded to.

It’s important to bear in mind that this is a young technology. Sometimes the value of a scientific enterprise is not appreciated until years down the road. Have GMOs lived up to the hype of their most exuberant advocates? No. Does any new technology?

Perhaps the naysayers should check back in five or ten years. Maybe food security for those who need it most will be more strengthened with new advances that will be harder to ignore by the GMO-averse champions of sustainability.

UPDATE: Due to time constraints, my critique of Foley’s piece was narrowly focused. In the comments, David Ropeik makes a good point, which was also raised in a series of tweets (starting here) by University of Wyoming’s Andrew Kniss.

UPDATE 2: Science writer and futurist Ramez Naam has weighed in with his response to Foley’s essay.

UPDATE 3: University of Wyoming’s Andrew Kniss has also put up a post addressing one of Foley’s claims.

submit to reddit

View the original article here

Friday, January 3, 2014

The security industry found its dream enemy in 2013 -- and new technical challenges too

IDG News Service - 2013 was the year we learned we must encrypt our data if we don't want the likes of the U.S. National Security Agency or the U.K. Government Communications Headquarters reading it as it crosses the Internet.

The security industry has the enemy it always dreamed of to help it make the case for encryption adoption, but users looking to secure their data and communications need to be wary of claims made in marketing messages. Securing data in motion is the priority, experts say, and some large Internet firms are already making progress in this area, but encrypting data at rest without losing its usefulness will prove a greater challenge.

"The NSA's surveillance has opened the eyes of many people around the world," Lamar Bailey, director of security research and development at security firm Tripwire said via email. "Security professionals have always known that this style of surveillance is possible with the right resources, but this episode has been a big wake-up call for everyone. Many countries and companies outside the U.S. are now taking a harder, more in-depth look at software and hardware that comes from the U.S., although the silver lining is that mainstream users are now more concerned with encrypting data and reviewing how their information is being shared."

The public debate sparked by the surveillance revelations in recent months has prompted some encouraging responses already: Google has encrypted the links between its data centers; Yahoo is working to do the same and has promised to enable SSL encryption by default for webmail and other services, and Twitter has enabled an SSL feature called forward secrecy, already implemented by Google and Facebook, which makes mass decryption of SSL traffic hard even if the website operator's master private key is compromised.

Some software vendors started developing alternatives to existing communication technologies, with the goal of providing end-to-end encryption and making upstream data interception harder. Secure communications provider Silent Circle launched an effort called the Dark Mail Alliance to develop a private a secure email protocol that encrypts metadata, not just message contents; Pirate Bay co-founder Peter Sunde is working with others on a secure crowd-funded mobile messaging application called Hemlis with distributed infrastructure hosted in privacy-friendly jurisdictions, and BitTorrent, the company behind the popular file-sharing protocol of the same name, is developing a peer-to-peer instant messaging application that encrypts messages directly between users and doesn't rely on central servers.

These and other examples send a clear message: securing the data transport channels to prevent unwanted upstream interception is a priority. The Internet Engineering Task Force, an organization that develops Internet standards, is already working toward this goal. Together with other Internet infrastructure groups, IETF expressed concern that the reported mass monitoring and surveillance by government agencies undermines the trust and confidence of Internet users globally.

The IDG News Service is a Network World affiliate.


View the original article here

Cloud computing 2014: Moving to a zero-trust security model

The leaking of classified documents detailing the data collection activities of the U.S. National Security Agency earlier this year reignited some long-standing concerns about the vulnerability of enterprise data stored in the cloud.

But instead of scaring businesses away from using hosted services, as some experts predicted, the leaks about the NSA spy programs are driving some long overdue changes in enterprise and service provider security and privacy policies.

When Edward Snowden first began spilling details of the NSA's surveillance practices to selected reporters in June, industry analysts had expected that the revelations would put a severe crimp on plans for cloud deployment.

Computerworld - The leaking of classified documents detailing the data collection activities of the U.S. National Security Agency earlier this year reignited some long-standing concerns about the vulnerability of enterprise data stored in the cloud.

But instead of scaring businesses away from using hosted services, as some experts predicted, the leaks about the NSA spy programs are driving some long overdue changes in enterprise and service provider security and privacy policies.

When Edward Snowden first began spilling details of the NSA's surveillance practices to selected reporters in June, industry analysts had expected that the revelations would put a severe crimp on plans for cloud deployment.

For instance, the Information Technology & Innovation Foundation in August said the leaks could cause U.S. cloud providers to lose 10% to 20% of the foreign market to overseas competitors -- or up to $35 billion in potential sales through 2016.

Another industry group, the Cloud Security Alliance, predicted a similar backlash due to concerns by Europen companies that thje U.S. government would access to their data.

Six months later, the impact appears to be less severe than expected.

Despite some reports of slowing sales of cloud services by U.S. vendors to overseas companies, experts now expect that the Snowden leaks will have little effect on long-term sales. The business benefits of using cloud-based services continue to supersede enterprise fears of government snooping.

At the same time though, the detailing of classified NSA spy programs has prompted an increased emphasis on cloud data security and protection that's expected to grow further in 2014.

The leaks hammered home just how little control companies have over data stored in the cloud, said Richard Stiennon, principal at consulting firm IT-Harvest. "There is a fundamental shift to a zero-trust model in the cloud." The disclosures showed enterprises that "there cannot be any chink in the trust chain from internal resources to the cloud and back."

Analysys say IT security officials are looking at several key areas, such as data encryption, key management and data ownership, regionalization, and the need for increased government transparency, to improve cloud security.

Data encryption

Encryption has gained a lot of attention since the Snowden leaks. Major service providers like Microsoft, Yahoo and Google set the tone by adding end-to-end encryption of data they host and manage for customers.

For instance, Google Cloud Storage now automatically encrypts all new data before it's written to disk. Such server-side encryption will soon be available for older data stored in Google clouds.

Since the NSA programs were disclosed, Microsoft has announced that it plans to ramp up encryption support for various services, including Outlook.com, Office 365, SkyDrive and Windows Azure.

By the end of 2014, Microsoft expects to have measures in place for encrypting data in transit between customer locations and its data centers, and while in transit between its own data centers.


View the original article here

Virtualization, security advances on tap for ADCs

The application delivery controller has been more than a simple accelerator and load balancer for some time now, becoming an increasingly important component of enterprise network infrastructures over the past couple of years.

This growth in importance is illustrated by a recent Infonetics research study, which found that ADC revenues in the second quarter grew by 4% year over year, while WAN optimization, a related network management technology, saw an 11% decline over the same period.

Network World - The application delivery controller has been more than a simple accelerator and load balancer for some time now, becoming an increasingly important component of enterprise network infrastructures over the past couple of years.

This growth in importance is illustrated by a recent Infonetics research study, which found that ADC revenues in the second quarter grew by 4% year over year, while WAN optimization, a related network management technology, saw an 11% decline over the same period.

As 2014 kicks off, two of the main issues for the growing ADC market are security and virtualization – the technology has several features that have implications for denial-of-service protection, and the trend toward SDN and network virtualization has many people looking for software-only application delivery.

But the technology isn’t going to turn into a cloudified, all-inclusive network management panacea overnight – experts say there is still some way to go.

+ALSO ON NETWORKWORLD: ABC's of ADCs in the cloud | ADC: It's a platform, not a product | How to shop for ADCs+

F5 Director of Technical Marketing Alan Murphy says that modern ADCs are a natural fit for the security role, particularly in light of the fact that most of today’s denial-of-service attacks target the application layer to begin with.

“The network tools that protect network perimeters from security attacks are great at network-level stuff – knowing what IP address it’s coming from, going to, source, and then protocol,” he says. “But once the attacker moves over to the application, manipulating what’s going on over the protocol … issuing a million DNS requests, for example – that’s going over the network, but the attack is actually against the DNS application infrastructure.”

ADCs, adds F5 Senior Product Marketing Manager Lori MacVittie, are better-suited than traditional firewalls to identify and defend against this type of attack, particularly where detection and classification are concerned.

“As we continue to evolve into the next year, it really becomes more important to start analyzing the behavior of the interaction with the application, and that’s something that application delivery is well-suited to do,” she says.

So will 2014 be the year to ditch your enterprise firewall and entrust everything to the ADC? Not entirely. Citrix Senior Product Management Director Steve Shah acknowledges that the issue is a hot one in the ADC market.

+ MORE ON NETWORK WORLD Read the entire list of our Outlook 2014 articles + 

“Right now, the ADC landscape is getting a little conflated with the whole firewall landscape,” he says. “Do ADCs take on firewall responsibilities or don’t they? Or do we maintain separation of responsibilities? And this is where I actually believe that [in] 2014, we’re going to see further clarification of that, and I believe that separation of duties is going to win out here.”


View the original article here

Thursday, November 21, 2013

Champlain: Best Cyber Security Higher Ed Program in the U.S.A.

We have been waiting anxiously for this moment since December, and we are excited and proud to announce that we won!

SC Magazine named Champlain College the Best Cyber Security Higher Education Program in the United States last night at their annual awards ceremony in San Francisco, CA.

We originally wrote about this award in December when we received word we were one of four finalists. The other three finalists were the University of Maryland University College, Kennesaw State University, and Iowa State University.

Congratulations to all our faculty, staff, students and graduates who have made our programs a national leader in this field!

This national award is given to "The best cyber security undergraduate or higher education program which currently has a cyber security degree program. These are for schools throughout the United States and qualification is based on the quality of instruction, programs and how well these prepare students for the marketplace."

Champlain College has been educating digital forensics and information security students since 2002. The college was one of the first colleges in the country to offer a bachelor’s degree in digital forensics and information security, it was also one of the first (if not the very first) to offer that degree 100% online. Since that time we have expanded our portfolio to include two Master’s degree programs in Digital Forensics, also available 100% online. Champlain also has a partnership with ISFCE which allows us to offer a CCE Bootcamp to our students, online or on our campus, prepping them to sit for the CCE exam upon completion.

Champlain College is recognized by the National Institute of Justice, which identified our digital forensics degrees as Model Electronic Crime and Digital Investigation Programs, and the National Security Agency (NSA) and Department of Homeland Security which designated Champlain as a Center of Academic Excellence in Information Assurance Education. Champlain has proudly held those honors since 2004 and 2007 respectively.

Now in its 16th year, the SC Awards showcase the best solutions, services and professionals while recognizing achievement and technical excellence. SC Magazine distinguishes the achievements of the security professionals in the field, the innovations happening in the vendor and service provider communities and the fervent work of government, commercial and nonprofits. 


View the original article here

Finalist for Best Cyber Security Higher Education Program!

We are VERY proud, and very excited, to announce that Champlain College has been named a 2013 SC Awards finalist in SC Magazine's Best Cyber Security Higher Education Program category. The winner will be announced on February 26; it is going to be a long 2 1/2 months!

This national award is given to "The best cyber security undergraduate or higher education program which currently has a cyber security degree program. These are for schools throughout the United States and qualification is based on the quality of instruction, programs and how well these prepare students for the marketplace."

Champlain College has been educating digital forensics and information security students since 2002. The college was one of the first colleges in the country to offer a bachelor’s degree in digital forensics and information security, it was also one of the first (if not the very first) to offer that degree 100% online. Since that time we have expanded our portfolio to include two Master’s degree programs in Digital Forensics, also available 100% online. Champlain also has a partnership with ISFCE which allows us to offer a CCE Bootcamp to our students, online or on our campus, prepping them to sit for the CCE exam upon completion.

Champlain College is recognized by the National Institute of Justice, which identified our digital forensics degrees as Model Electronic Crime and Digital Investigation Programs, and the National Security Agency (NSA) and Department of Homeland Security which designated Champlain as a Center of Academic Excellence in Information Assurance Education. Champlain has proudly held those honors since 2004 and 2007 respectively.

Now in its 16th year, the SC Awards showcase the best solutions, services and professionals while recognizing achievement and technical excellence. SC Magazine distinguishes the achievements of the security professionals in the field, the innovations happening in the vendor and service provider communities and the fervent work of government, commercial and nonprofits.

Congratulations to all our faculty, staff, students and graduates who have made our programs a national leader in this field!


View the original article here

Thursday, April 18, 2013

Revealing hidden artwork with airport security full-body-scanner technology

In the latest achievement in efforts to see what may lie underneath the surface of great works of art, scientists today described the first use of an imaging technology like that used in airport whole-body security scanners to detect the face of an ancient Roman man hidden below the surface of a wall painting in the Louvre Museum in Paris.

They described unveiling the image, which scientists and art historians say may be thousands of years old, during the 245th National Meeting & Exposition of the American Chemical Society.

J. Bianca Jackson, Ph.D., who reported on the project, explained that it involved a fresco, which is a mural or painting done on a wall after application of fresh plaster. In a fresco, the artist's paint seeps into the wet plaster and sets as the plaster dries. The painting becomes part of the wall. The earliest known frescoes date to about 1500 B.C. and were found on the island of Crete in Greece.

"No previous imaging technique, including almost half a dozen commonly used to detect hidden images below paintings, forged signatures of artists and other information not visible on the surface has revealed a lost image in this fresco," Jackson said. "This opens to door to wider use of the technology in the world of art, and we also used the method to study a Russian religious icon and the walls of a mud hut in one of humanity's first settlements in what was ancient Turkey."

The technology is a new addition to the palette that art conservators and scientists use to see below the surface and detect changes, including fake signatures and other alterations in a painting. Termed terahertz spectroscopy, it uses beams of electromagnetic radiation that lie between microwaves, like those used in kitchen ovens, and the infrared rays used in TV remote controls. This radiation is relatively weak, does not damage paintings and does not involve exposure to harmful radiation.

"Terahertz technology has been in use for some time, especially in quality control in the pharmaceutical industry to assure the integrity of pills and capsules, in biomedical imaging and even in homeland security with those whole-body scanners that see beneath clothing at airport security check points," said Jackson, who is now with the University of Rochester. "But its use in examining artifacts and artworks is relatively new."

Artists, including some of the great masters, sometimes re-used canvases, wiping out the initial image or covered old paintings with new works. They often did this in order to avoid the expense of buying a new canvas or to enhance colors and shapes in a prior composition. Frescoes likewise got a refresh, especially when the originals faded, owners tired of the image on the wall or property changed hands.

The scientists turned to terahertz technology when suspicions surfaced that a hidden image might lie beneath the brushstrokes of a precious 19th century fresco, Trois hommes armés de lances, in the Louvre's Campana collection. Giampietro Campana was an Italian art collector in the 1800s whose treasures are now on display in museums around the world. When Campana acquired a work of art, he sometimes restored damaged parts or reworked the original. Art historians believe that Campana painted Trois hommes armés de lances after the fresco was removed from its original wall in Italy and entered his collection.

Jackson said that Campana's painting in itself is valuable, and the terahertz revelations may have added value by showing that an authentic Roman fresco lies under it.

To search for a hidden image, Jackson and colleagues, including Gerard Mourou, Ph.D., of Ècole Polytechnique, and Michel Menu, Ph.D., of the Centre de Recherche et de Restauration des Musées de France, and Vincent Detalle, of the Laboratoire Recherche des Monuments Historiques, probed it with terahertz technology. The process is slow, requiring a few hours to analyze a section the size of a sheet of paper.

"We were amazed, and we were delighted," said Jackson. "We could not believe our eyes as the image materialized on the screen. Underneath the top painting of the folds of a man's tunic, we saw an eye, a nose and then a mouth appear. We were seeing what likely was part of an ancient Roman fresco, thousands of years old."

Who is the man in the fresco? An imperial Roman senator? A patrician? A plebian? A great orator? A ruler who changed the course of history? Or just a wealthy, egotistical landowner who wanted to admire his image on the wall?

Jackson is leaving those questions to art historians. The team already has moved ahead and used terahertz technology to study a Russian religious icon and the walls of a mud hut in one of the earliest known human settlements in what now is the country of Turkey.

More information: Abstract

Terahertz pulse imaging and spectroscopy is emerging as a tool of high potential for the nondestructive investigation of historical artworks, architecture and archaeological objects for the purpose of research and conservation. We studied a section of the fresco Trois hommes armés de lances from the Louvre's Campana collection using time-domain terahertz imaging. The top painting is 19th C, while the support is composed of wall sections recovered from Roman ruins. No previous technique, including X-ray radiography, XRF, infrared photography, infrared reflectometry and UV florescence, has produced an image of a lost fresco beneath the painting. A composite of the photograph of the section and the composite terahertz image reveals a face hidden beneath the 1st man's drape. Other examples of this application will also be presented, including a Russian icon, a wall painting from the Riga Dom cathedral and a Neolithic site from Catalhoyuk Turkey.

Provided by American Chemical Society search and more info website


View the original article here