[Recommended Reading] DREAD (risk assessment model)

Source: DREAD (Risk Assessment Model)

DREAD is part of a system for risk-assessing computer security threats previously used at Microsoft and currently used by OpenStack and many other corporations. It provides a mnemonic for risk rating security threats using five categories.

The categories are:

  • Damage – how bad would an attack be?
  • Reproducibility – how easy is it to reproduce the attack?
  • Exploitability – how much work is it to launch the attack?
  • Affected users – how many people will be impacted?
  • Discoverability – how easy is it to discover the threat?

Read more…

Advertisements

Leave a comment

Filed under InfoSec, Recommendations

[Recommended Reading] Apache HBASE

Source: Apache HBASE Wikipedia

HBase is an open-source, non-relational, distributed database modeled after Google’s Bigtable and is written in Java. It is developed as part of Apache Software Foundation’s Apache Hadoop project and runs on top of HDFS (Hadoop Distributed File System), providing Bigtable-like capabilities for Hadoop. That is, it provides a fault-tolerant way of storing large quantities of sparse data (small amounts of information caught within a large collection of empty or unimportant data, such as finding the 50 largest items in a group of 2 billion records, or finding the non-zero items representing less than 0.1% of a huge collection).” Read more…

 

Leave a comment

Filed under Recommendations, Site Reliability Engineering

[Recommended Reading] Pomodoro Technique

Source: Pomodoro Technique Wikipedia

“The Pomodoro Technique is a time management method developed by Francesco Cirillo in the late 1980s. The technique uses a timer to break down work into intervals, traditionally 25 minutes in length, separated by short breaks. These intervals are named pomodoros, the plural in English of the Italian word pomodoro (tomato), after the tomato-shaped kitchen timer that Cirillo used as a university student.

The technique has been widely popularized by dozens of apps and websites providing timers and instructions. Closely related to concepts such as timeboxing and iterative and incremental development used in software design, the method has been adopted in pair programming contexts.” Read more…

Leave a comment

Filed under Management, Recommendations

[Recommended Book] Wired to Care

Source: Wiredtocare.com

“WHAT’S THE CRITICAL difference between Nike and every other shoe company on the planet? Why do some airline executives continue to insist that air travel is great when we all know better? What has enabled Zildjian, a family business founded outside Istanbul, to thrive for almost 400 years?” Read more…

Image source.

Leave a comment

Filed under Books, Soft Skills

[Recommended Reading] Principles behind the Agile Manifesto

Source: Principles behind the Agile Manifesto

We follow these principles:

Our highest priority is to satisfy the customer
through early and continuous delivery
of valuable software.

Welcome changing requirements, even late in
development. Agile processes harness change for
the customer’s competitive advantage.

Deliver working software frequently, from a
couple of weeks to a couple of months, with a
preference to the shorter timescale.

Business people and developers must work
together daily throughout the project.

Build projects around motivated individuals.
Give them the environment and support they need,
and trust them to get the job done.

The most efficient and effective method of
conveying information to and within a development
team is face-to-face conversation.

Working software is the primary measure of progress.

Agile processes promote sustainable development.
The sponsors, developers, and users should be able
to maintain a constant pace indefinitely.

Continuous attention to technical excellence
and good design enhances agility.

Simplicity–the art of maximizing the amount
of work not done–is essential.

The best architectures, requirements, and designs
emerge from self-organizing teams.

At regular intervals, the team reflects on how
to become more effective, then tunes and adjusts
its behavior accordingly.”

Leave a comment

Filed under Articles, General, Management, Recommendations