Wednesday, December 23, 2009

Fuzz Testing

Fuzz testing is an interesting concept...and one that I believe we should look into for the testing being done for the ABIS and other identity systems. Fuzz testing is different than the normal development operational testing that is done by ATEC and other agencies in DOD. Fuzz testing is more like a brute-force testing approach. "Fuzzing" persistently tests a system by submitting random inputs to the system and evaluates the responses.

This is helpful when testing complex systems that are too complicated for the testing of all the various test scenarios and inputs. It also is automated, so there are fewer data collectors and test users required.

Mr Herbert Thompson in his article (http://www.ddj.com/architect/221900780) on Fuzz Testing points out that fuzzing has credited to finding vulnerabilities in Windows 7, iPhone, and Android computing platforms.

The importance of fuzz testing of the identity systems is especially important as we move to XML schemas for data sharing.

Tuesday, December 22, 2009

Telework and Snow Days

Government Computer News had an interesting article on how the recent "Blizzard of '09" could be used to test out telework capabilities. It also points out that teleworkers would still be productive and working, while the rest of the federal workforce is getting an extra paid day off. Certainly, teleworking can benefit both the employee and the government.

http://www.1105newsletters.com/t.do?id=3962399:10402253

Yerba Mate tea

OK, it's not actually a tea, but rather a drink all it's own...but I discovered it through a tea source and you make it like a tea. It's origins are from South America. The Yerba Mate tree is a relative of the holly bush. An infusion, brewed from the dried leaves and stems of the tree, is consumed by millions of South Americans as a healthful alternative to coffee. Deemed “the green gold of the Indios” by Europeans, yerba mate possesses a multitude of health benefits.

Yerba Mate looks and tastes similar to a green tea. But it's not a tea. Different plant, different process. I found the explanation below online.

A green tea is one that is not fermented and not roasted. Healthwise, green teas are superior to oolong and black teas as many of the beneficial antioxidant compounds are protected by the green tea production process. Black teas may taste sweeter because they are fermented and then roasted, but this flavor comes at the expense of its life giving properties. Just like in nature, green is life giving.

While yerba mate and green tea share many of the same benefits, (antioxidants, polyphenols, flavenoids, bio flavenoids, and theophylline) modern science shows that yerba mate has 52 more active compounds than green tea. There are 196 active compounds in yerba mate compared to the 144 found in green tea. In fact, yerba mate can boast higher polyphenol and antioxidant counts than either green or black teas.

Bottom line: It's one of the rare things that tastes good and is good for you!

Friday, December 18, 2009

Emergency Preparedness

The Virginia Department of Emergency Management recently published a paper on things to think about to be ready in an emergency.

Their tips include:

  • Choose an out-of-town friend or relative as an emergency point of contact. During emergencies it is often easier to make a long distance call than a local call. An out-of-town contact can help communicate among separated family members. Be sure everyone in your family knows the phone number for that person.
  • If you have cell phones, teach family members how to use text messaging. Text messages can often get around cell network disruptions when a phone call might not be able to get through.
  • Decide on a meeting place in case you cannot return home. Choose a neighborhood meeting place and another meeting place outside your neighborhood in case you can't return there. For example, your neighborhood meeting place may be a friend's house on the next street. A meeting place outside your neighborhood may be a nearby church, store or another friend's home.
  • If you are a parent, ask your schools and daycare providers about their emergency plans. Find out how they will communicate with families during a crisis. Ask if they are prepared to "shelter in place" if needed and where they plan to go if they must leave.
  • Talk with your family about the types of emergencies that could happen to you. Include weather emergencies, health crises and human-caused situations.
  • Write down your family emergency plan. Get printable worksheets to make a plan at www.ReadyVirginia.gov. This Web site also provides information about emergency supplies and how to respond to all types of emergencies.

Friday, December 4, 2009

Report to President Obama on Identity Management

I found this the other day... the National Security Telecommunications Advisory Committee provided a report to the President in May 2009 on the need for an IdM strategy that spans the federal government. The report makes three recommendations.

1. Demonstrate personal national leadership in IdM to positively influence the national culture, attitude, and opinion toward IdM.

2. Charter a national IdM office under a specifically appointed and dedicated leadership, in the Executive Office of the President. The office should have powers to integrate and harmonize national IdM policies and processes, including those related to law enforcement and security, as well as physical and logical access controls.

3. Direct the newly created office to develop a coordinated programmatic agenda to implement a comprehensive IdM vision and strategy to address, at a minimum, four component areas, specifically:

  1. Government organization and coordination
  2. Public-Private IdM programs
  3. Policy and legislative coordination
  4. National privacy and civil liberties culture

The report strongly encourages a single, authoritative and comprehensive federal IdM governance process with an office dedicated to this mission and reporting to the President.