Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×

Submission + - Unintended Consequences for Traffic Safety Feature (npr.org)

An anonymous reader writes: Traffic engineers had a problem to solve: too many pedestrians were getting hit by cars while using the crosswalks at intersections because they didn't know when the 'WALK' sign would change. Their solution was simple: implement a countdown timer. Countless cities have now adopted these timers, but it turns out to have an undesired consequence: motor vehicle crashes are actually increasing at intersections where the countdown timer is used. Researchers think this is because pedestrians aren't the only ones who see the timers. Drivers see them too, and it provides them with information on when the light will change. Then they anticipate the change by either speeding up to beat a change to red light, or anticipating a green light in order to get through before the pedestrians can move into the road. The researchers suggest finding some way to hide the countdown from the drivers, perhaps through the use of an audio countdown that would be difficult to hear from inside a car.
Book Reviews

Submission + - Book review: Data-Driven Security: Analysis, Visualization and Dashboards

benrothke writes: Data-Driven Security: Analysis, Visualization and Dashboards

Author: Jay Jacobs and Bob Rudis

Pages: 352

Publisher: Wiley

Rating: 10/10

Reviewer: Ben Rothke

ISBN: 978-1118793725

Summary: Superb book for effective use of data for information security





There is a not so fine line between data dashboards and other information displays that provide pretty but otherwise useless and unactionable information; and those that provide effective answers to key questions. Data-Driven Security: Analysis, Visualization and Dashboardsis all about the later.



In this extremely valuable book, authors Jay Jacobs and Bob Rudis show you how to find security patterns in your data logs and extract enough information from it to create effective information security countermeasures. By using data correctly and truly understanding what that data means, the authors show how you can achieve much greater levels of security.



The book is meant for a serious reader who is willing to put in the time and effort to learn the programming necessary (mainly in Python and R) to truly understand what information exists deep in the recesses of their logs. As to R, it is a GNU project and a free software programming language and software environment for statistical computing and graphics. The R language is widely used among statisticians and data miners for developing statistical software and data analysis. For analysis the level of which Jacobs and Rudis prescribe, R is a godsend.



The following are the 12 densely packed chapters in the book:



1 : The Journey to Data-Driven Security

2 : Building Your Analytics Toolbox: A Primer on Using R and Python for Security Analysis

3 : Learning the "Hello World" of Security Data Analysis

4 : Performing Exploratory Security Data Analysis

5 : From Maps to Regression

6 : Visualizing Security Data

7 : Learning from Security Breaches

8 : Breaking Up with Your Relational Database

9 : Demystifying Machine Learning

10 : Designing Effective Security Dashboards

11 : Building Interactive Security Visualizations

12 : Moving Toward Data-Driven Security





After completing the book, the reader will have the ability to know which questions to ask to gain security insights, and use that data to ensure the overall security of their data and networks. Getting to that level is not a trivial at all a trivial task; even if there are vendors who can promise to do that.





For many people performing data analysis, the dependable Excel spreadsheet is their basic choice for data manipulation. The book calls the spreadsheet a gateway tool between a text editor and programming. The book notes that spreadsheets work as long as the data is not too large or complex. The book quotes a 2013 report to shareholders from J.P. Morgan in which parts of their 2012 $6 billion in losses was due in part to problems with their Excel spreadsheets.





The authors suggest using Excel as a temporary solution for quick one-shot tasks. For those that have repeating analytical tasks or models that are used repeatedly, it's best to move to some type of structured programming language, specifically those that the book suggest and for provides significant amounts of code examples; all of which are available on the companion website here.





The goal of all data extraction is to use data analysis to answer real questions. A large part of the book focuses on how to ask the right question. In chapter 1, the authors write that every good data analysis project begins with setting a goal and creating one or more research questions. Without a well-formed question guiding the analysis, you may wasting time and energy seeking convenient answers in the data, or worse, you may end up answering a question that nobody was asking in the first place.





The value of the book is that it shows the reader how to focus on context and purpose of the data analysis by setting the research question appropriately; rather than simply parsing large amounts of data. It's ultimately irrelevant if you can use Hadoop to process petabytes of data if you don't know what you are looking for.





Visualization is a large part of what this book is about, and in chapter 6 — Visualizing Security Data, the book notes that the most efficient path to human understanding is via the visual sense. It goes on to details the many advantages data visualization has, and the key to making it work.





As important as visualization is, describing the data is equally important. In chapter 7, the book introduces the VERIS(Vocabulary for Event Recording and Incident Sharing) framework. VERIS is a set of metrics designed to provide a common language for describing security incidents in a structured and repeatable manner. VERIS helps organizations collect useful incident-related information and to share that information, anonymously and responsibly with others.





The book shows how you can use dashboards for effective data visualization. But the authors warn that a dashboard is notan art show. They caution that given the graphical nature of dashboards, it's easy to fall into the trap of making them look like pieces of modern or fringe art; when they are far more akin to architectural and industrial diagrams that require more controlled, deliberate and constrained design.





As to dashboards the authors do not like, they consider the Cyber Security Situational Awarenessto be glitzy but not informative. Personally, I thought the dashboard has a lot of good information.





The book uses the definition of dashboardaccording to Stephen Few, in that it's a "visual display of the most important information needed to achieve one or more objectives that has been consolidated in a single computer screen so it can be monitored at a glance". The book enables the reader to create dashboards like that.





Data-Driven Security: Analysis, Visualization and Dashboardsis a superb book written by two experts who provide significant amounts of valuable information in every chapter. For those that are willing to put the time and effort into the serious amount of work that the book requires, they will find it a vital resource that will certainly help them achieve much higher levels of security.







Reviewed by Ben Rothke
Censorship

Russia Moves From Summer Time To Standard Time 158

jones_supa writes: Russia's legislature, often accused of metaphorically turning back the clock, has decided to do it literally – abandoning the policy of keeping the country on daylight-saving time all year. The 2011 move to impose permanent "summer time" in 2011 was one of the most memorable and least popular initiatives of Dmitry Medvedev's presidency. It forced tens of millions to travel to their jobs in pitch darkness during the winter. In the depths of December, the sun doesn't clear the horizon in Moscow until 10am. The State Duma, the lower house of parliament, voted 442-1 on Tuesday to return to standard time this autumn and stay there all year. The article also discusses a ban on swearing in books, plays, and films that went into effect today in Russia.
Science

Reproducing a Monet Painting With Aluminum Nanostructures 27

MTorrice writes: Plasmonic printing is a recently developed method to create color images using different shapes and sizes of gold or silver nanostructures. It relies on the oscillations of electrons in the metal surfaces and can produce images with a resolution 100 times that of a common desktop printer. Now researchers have expanded the color palette of the technique using tiny aluminum-capped nanopillars. Each pixel consists of four nanopillars; tuning the diameters and arrangement of the pillars produced a palette of more than 300 different colors. Using these pixels, the researchers created a microscale reproduction of Claude Monet's "Impression, Sunrise."
Businesses

Time Warner Cable Customers Beg Regulators To Block Sale To Comcast 80

An anonymous reader sends this report from Ars Technica: New York is shaping up as a major battleground for Comcast's proposed acquisition of Time Warner Cable. While the $45.2 billion merger will be scrutinized by federal officials, it also needs approval at the state level. TWC has 2.2 million cable TV, Internet, and phone customers in 1,150 New York communities, and hundreds of them have called on the New York Public Service Commission to block the sale to Comcast. Comcast doesn't compete against TWC for subscribers, and its territory in New York is limited but includes a VoIP phone service offered to residential and business customers in 10 communities. "Both Time Warner Cable and Comcast already have monopolies in each and every territory in which they do business today, and combining the companies will reinforce those individual territorial monopolies under a single corporate umbrella, with NBC-Universal thrown in to boot," resident Frank Brice argued in a comment to the PSC posted yesterday.
Power

Renewable Energy Saves Fortune 100 Companies $1.1B Annually 116

Lucas123 writes: A new report authored by several environmental groups say data shows more than half of Fortune 100 companies collectively saved more than $1.1B annually by reducing carbon emissions and rolling out renewable energy projects. According to the report, 43% of Fortune 500 companies, or 215 in all, have also set targets in one of three categories: greenhouse gas reduction, energy efficiency and renewable energy. When narrowed to just the Fortune 100, 60% of the companies have set the same clean energy goals. Some of the companies leading the industry in annual clean energy savings include UPS ($200M), Cisco ($151M), PepsiCo ($121M) and United Continental ($104M).
United States

30% of Americans Aren't Ready For the Next Generation of Technology 191

sciencehabit writes: "Thanks to a decade of programs geared toward giving people access to the necessary technology, by 2013 some 85% of Americans were surfing the World Wide Web. But how effectively are they using it? A new survey suggests that the digital divide has been replaced by a gap in digital readiness. It found that nearly 30% of Americans either aren't digitally literate or don't trust the Internet. That subgroup tended to be less educated, poorer, and older than the average American."
Technology

Nathan Myhrvold's Recipe For a Better Oven 228

Tekla Perry writes: We cook our food today using technology invented to bake bricks. We can do a lot better. Nathan Myhrvold explains what's wrong with today's ovens and challenges oven designers make them better. He says, "Oven designers could do a lot to make ovens heat more evenly by taking advantage of the different ways ovens transfer heat at different cooking temperatures. At 200 C or below, convection moves most of the heat. But at 400 C, radiant energy starts doing a fair amount of the heat transfer. At 800 C, radiation overwhelms convection. Why couldn't we have an oven designed to cook primarily by convection at low temperatures that switches to radiant heating for high-temperature baking? ... The shiny skin of raw fish reflects heat, but as the skin browns, it reflects less and less energy. That’s why food under a broiler can seem to cook slowly at first and then burn in the blink of an eye. But technology offers a fix here, too. Oven designers could put optical sensors in the oven chamber to sense the reflectivity of the food, and then the oven controller could adjust the heat automatically or at least alert the cook as the surface browns. And a camera in the oven could feed to a color display on the front panel, giving the chef a clearer view of the food than a small window in the door can. Indeed, a decent optics system could allow designers to dispense with the glass in the door altogether, reducing the gap between the hottest and coolest corners of the oven and obviating the need to open the door and rotate the food midway through cooking.

Submission + - FTC Says T-Mobile Made Hundreds of Millions From Bogus SMS Charges (ftc.gov)

An anonymous reader writes: Today the FTC filed a complaint (PDF) against T-Mobile USA, alleging the carrier made hundreds of millions of dollars from bogus charges placed on customers' bills for unauthorized SMS services. "The FTC alleges that T-Mobile received anywhere from 35 to 40 percent of the total amount charged to consumers for subscriptions for content such as flirting tips, horoscope information or celebrity gossip that typically cost $9.99 per month. According to the FTC’s complaint, T-Mobile in some cases continued to bill its customers for these services offered by scammers years after becoming aware of signs that the charges were fraudulent." FTC chairwoman Edith Ramirez said, "It’s wrong for a company like T-Mobile to profit from scams against its customers when there were clear warning signs the charges it was imposing were fraudulent. It’s wrong for a company like T-Mobile to profit from scams against its customers when there were clear warning signs the charges it was imposing were fraudulent." According to the complaint, T-Mobile also made it hard for customers to figure out they were being billed for these services, failed to provide refunds when customers complained.
Politics

Video Lawrence Lessig Answers Your Questions About His Mayday PAC, Part 2 (Video) 42

The original Mayday PAC goal was to raise $1 million. Now Larry is working on a second -- and more ambitious -- goal: To raise $5 million by July 4. We called for your questions on June 23, and you sent a bunch of them. This time, instead of using email, we used Google Hangout to ask via video, with an attached transcript for those who can't or won't watch the video. In today's video, Larry tells us that some of the impetus for Mayday PAC came from the late Aaron Swartz, and goes deeper into the group's goals and hopes than he did in yesterday's video. (Alternate Video Link)
Open Source

Automotive Grade Linux Released For Open Source Cars 88

Mcusanelli writes: The Linux Foundation and its partners have released the first version of Automotive Grade Linux, the open source platform for use inside connected cars. "AGL is building the industry’s only fully open automotive platform, allowing automakers to leverage a growing software stack based on Linux while retaining the ability to create their own branded user experience. Standardizing on a single platform means the industry can rapidly innovate where it counts to create a safe and reliable connected car experience. Open collaboration within the AGL community means support for multi-architectures and features to bolster the in-vehicle infotainment (IVI) experience." Further details and source code are available from the official website.
Government

The New 501(c)(3) and the Future of Open Source In the US 228

An anonymous reader writes: If you're involved in the free and open-source software movement — especially in the United States — you may want to read through this, as long as it may seem. It appears that the United States' Internal Revenue Service has strongly shifted its views of free and open-source software, and to the detriment of the movement, in my opinion. From the article: "The IRS reasons that since Yorba’s open source software may be used for any purpose, Yorba is not a charity. Consider all the for-profit and non-charitable ways the Apache server is used; I’d still argue Apache is a charitable organization. (What else could it be?) There’s a charitable organization here in San Francisco that plants trees throughout the city for the benefit of all. If one of their tree’s shade falls on a cafe table and cools the cafe’s patrons as they enjoy their espressos, does that mean the tree-planting organization is no longer a charity?"

Submission + - Renewable Energy Saves Fortune 100 Companies $1.1B Annually (computerworld.com)

Lucas123 writes: A new report authored by several environmental groups say data shows more than half of Fortune 100 companies collectively saved more than $1.1B annually by reducing carbon emissions and rolling out renewable energy projects. According to the report, 43% of Fortune 500 companies, or 215 in all, have also set targets in one of three categories: greenhouse gas reduction, energy efficiency and renewable energy. When narrowed to just the Fortune 100, 60% of the companies have set the same clean energy goals. Some of the companies leading the industry in annual clean energy savings include UPS ($200M), Cisco ($151M), PepsiCo ($121M) and United Continental ($104M).
Facebook

Baton Bob Strikes Back Against Police That Coerced Facebook Post From Him 203

McGruber (1417641) writes "In June 2013, Atlanta police arrested costumed street performer "Baton Bob" during the middle of a street performance after Baton Bob was allegedly involved in a verbal altercation with mall security guards. Now, a year later, Baton Bob has filed a federal lawsuit accusing Atlanta police of violating his constitutional rights, assault, discrimination, privacy violations and identify theft. Atlanta Police allegedly forced Baton Bob to make a pro-police statement on his Facebook page before officers would allow Bob to be released on bond. According to the lawsuit: "At approximately 3:40 p.m., while Plaintiff sat handcuffed and without an attorney, he was told to dictate a public statement to Officer Davis, who then typed and posted the message to the Baton Bob Facebook account. The message read: 'First of all, the atl police officer that responded to the incident thru security has been very respectful and gracious to me even in handcuffs. So, the situation escalated from a complaint from a security officer in the area and for some reason she rolled up on me like she didn't know who I was and like I had not been there before. For them to call police to come to intervene was not necessary. So, out of it, because of my fury, the Atlanta police officer did not understand the elements of the situation, so he was trying to do his job, respectfully and arrested my ass!!!!!!!!! I'll be out tomorrow so look out for my show at 14th and Peachtree. So now I'm waiting to be transported so I can sign my own bond and get the hell out of here. I want to verify, that the Atlanta police was respectful to me considering the circumstances. See you when I see you!!!!!!!!!!!!!!' As promised, Plaintiff was then given a signature bond and released from jail."

Submission + - Reproducing a Monet Painting with Aluminum Nanostructures (acs.org)

MTorrice writes: Plasmonic printing is a recently developed method to create color images using different shapes and sizes of gold or silver nanostructures. It relies on the oscillations of electrons in the metal surfaces and can produce images with a resolution 100 times that of a common desktop printer. Now researchers have expanded the color palette of the technique using tiny aluminum-capped nanopillars. Each pixel consists of four nanopillars; tuning the diameters and arrangement of the pillars produced a palette of more than 300 different colors. Using these pixels, the researchers created a microscale reproduction of Claude Monet’s “Impression, Sunrise.”

Slashdot Top Deals

New York... when civilization falls apart, remember, we were way ahead of you. - David Letterman

Working...