“We are very pleased to report a healthy improvement i the operating performance of the business. Global voice has demonstrated ontinued improvement in volumes and revenues. The company’s global data business is scaling up as planned,” he said. “Over the last several years, we have worked towards changing our business mix towards data and managed services and enterprise segment. Having achieved this shift, it is our intention to grow all our business segments faster than the growth in respective markets,” he added.

Towards the end of last year, Tata Communications announced its’ ambitious five-year plan: to almost treble its data centre capacity to one million sq ft from the current 400,000 sq ft. Tata Communications has already spent Rs 1,000 crore in the last three years – to build the current capacity.

Source: http://www.datacentres.com/news/tata-communications-invest-us450-million

The global economic environment continues to drive businesses to limit hiring and increase demand for managed services. Managed security services are mature, but buyers must carefully define the scope and depth of services required, and assess the delivery capabilities and options available from providers. Enterprises that optimize their use of managed security service providers (MSSPs) can free up internal staff time for dealing with more-business-critical security functions if they select MSSP services that can integrate with internal security operations.

You can access the Gartner reports for more details:

Gartner, “Magic Quadrant for MSSPs, North America”
Gartner, “MarketScope for Managed Security Services in Europe”
Gartner, “MarketScope for Managed Security Services in Asia/Pacific”

KEY Accountabilities
- Works together with the solutions design team to provide technical review and feedback on critical project input documentation. The resulting architecture and networks are scalable and adaptable enough to evolve with changing customer requirements.
- Remote configuration network elements in Wide Area Network (WAN) and Local Area Network (LAN) integration.
Understanding of networking product best practices. Well versed in multiple technology areas; continuously learning new skills where required.
- Provide technical support and guidance to Project Managers, to support the implementation of new hosting services.
Provide technical impact assessments for planned changes, and service amendments, during the early life support phase for new Hosting Services.
- Develop and maintain good relationships within the Hosting organisation to facilitate the delivery of new Hosting services.
- Develop peer relationships with customers and external vendors.
- Demonstrate an ability to work under pressure, multitask and deliver timely and accurate work packages.
Working relationships and interfaces

· Colleagues engineers

· Project Managers

· Hosting Designers

· Hosting Delivery Managers

· Operations engineers

· Hosting Implementation Management

· Programme Management

Location: Chennai, India

If interested, contact rasoolirfan@gmail.com

http://campus.training.fortinet.com/course/view.php?id=236

Customizing SSL VPN Portals

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=42164537&act=pb&rKey=0aced6d665e42bb2

Directory Services Integration using FSAE

https://fortinet.webex.com/fortinet/ldr.php?AT=pb&SP=MC&rID=35290227&rKey=a7c84cc5f677d013

FortiAnalyzer Reporting

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=42550762&act=pb&rKey=b88fff099a16f082

FortiGuard Web Filtering

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=44114077&act=pb&rKey=940414a2f153b5c3

Fortinet UTM Overview

http://campus.training.fortinet.com/course/view.php?id=856

FortiOS Troubleshooting

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=41612427&act=pb&rKey=5ab5a7db7829e12b

High Availability Clusters

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=44755027&act=pb&rKey=e42695dfb911e63d

Introduction to FortiGate (101) – New !!!

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=45702427&act=pb&rKey=4762338d32ad86ea

IPSec VPN Design and Troubleshooting

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=45246227&act=pb&rKey=ec1b1681d98564cd

Static Routing (Policy Routing, ECMP, RPF & Spillover)

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=TC&rID=40306997&act=pb&rKey=357805ecd3ed6134

Two-factor Authentication – NEW!!!

https://fortinet.webex.com/fortinet/lsr.php?AT=pb&SP=MC&rID=46800927&rKey=38d0a4b3f03a25f9

https://www.fortianalyzer.com

Your Login name is: demo
Your password is: fortianalyzer

==========

FORTIMANAGER — The FortiManager System is an integrated management and monitoring tool that enables enterprises and service providers to easily manage large numbers of FortiGate Antivirus Firewalls.

https://www.fortimanager.com

Your Login name is: demo
Your password is: fortimanager

==========

FORTIGATE — The FortiGate series of multi-threat security systems detect and eliminate the most damaging, content-based threats from email and Web traffic such as viruses, worms, intrusions, inappropriate Web content and more in real time – without degrading network performance.

https://www.fortigate.com

Your Login name is: demo
Your password is: fortigate

==========

FORTINET DATABASE SECURITY SOFTWARE — This automated database hardening solution for vulnerability assessment provides accelerated security and best practice compliance policies for PCI, SOX, HIPAA and more.

http://www.fortidb.com

Your Login name is: demo
Your password is: fortidb1!$

==========

FORTIMAIL — Fortinet’s FortiMail Secure Messaging Platform provides optimum configuration flexibility with enterprise-class antispam and antivirus features to secure mission critical email applications.

Gateway mode: (FortiMail system is configured as an email gateway to relay emails to an existing mail server)

https://203.160.224.73/admin

Your Login name is: demo
Your password is: fortimail

Transparent mode: (FortiMail system is configured as transparent bridge)

https://209.87.230.132/admin

Your Login name is: demo
Your password is: fortimail

Server mode: (FortiMail system is configured as a standalone email server)

https://209.87.230.132:1443/admin

Your Login name is: demo
Your password is: fortimail

==========

FORTIWEB – The FortiWeb is a web security appliance that provides web application and XML firewalls to protect, balance, and accelerate web applications, databases, and the information exchanged between them.

https://fortiweb.fortinet.com/

Your Login name is: demo
Your password is: fortiweb

Japan’s biggest consumer-electronics exporter will offer a $1 million insurance policy per user, covering legal expenses, identity-restoration costs and lost wages that occur after data is stolen, Sony said in a blog post. Austin, Texas-based Debix Inc. was hired to provide the monitoring service and similar programs for customers other countries are being considered.

The announcement follows last month’s hacking of Sony’s online entertainment and games platforms when the Tokyo-based company was criticized by U.S. lawmakers for not informing users of the breach quick enough.

“I welcome Sony’s strong first step toward protecting millions of consumers whose personal and financial information has been compromised,” U.S. Senator Richard Blumenthal, a Democrat from Connecticut, said in a statement.

The shares fell to their lowest in a week in Tokyo today after Sony increased the total number of accounts that were comprised to 101.6 million.

“This is an unprecedented case of information theft in terms of the number of accounts involved,” said Nobuo Kurahashi, an analyst at Mizuho Financial Group Inc. in Tokyo. “There are lots of uncertainties including lawsuits, making it difficult to estimate the company’s overall expense.”

U.S. subscribers have until June 18 to sign up for Debix’s AllClear ID Plus protection program, said Patrick Seybold, a Sony spokesman for the video-games unit.
‘Frustrating Time’

Sony didn’t say whether the program will cover identity theft that isn’t related to the mid-April breach of the PlayStation and Qriocity networks, which affected 77 million accounts. Some 24.6 million users of the Sony Online Entertainment platform were also affected, the company said.

“I know this is a frustrating time for all of you,” Chief Executive Officer Stringer said in the blog post. “Let me assure you that the resources of this company have been focused on investigating the entire nature and impact of the cyber attack we’ve all experienced and on fixing it.”

Kazuo Hirai, Sony’s executive deputy president in charge of consumer products and network services, apologized May 1 for the breach and said the company aims to restore the online gaming center by the end of the month after upgrading security. Hirai and two other officials bowed in apology at a press conference in Tokyo, and said Sony can’t rule out credit card numbers and expiry dates having been stolen. The company is cooperating with authorities, including the Federal Bureau of Investigation.
Legal Backlash

Sony fell 2.3 percent to 2,262 yen at the close of trading in Tokyo, the lowest level since April 28. The shares have slumped 23 percent this year.

The console maker has faced a legal and political backlash over delays in the time it took to warn customers their accounts had been compromised. Users were alerted of the breach April 27, six days after the shutdown of the movie and music-streaming services. The company hired technical experts to find out the problem.

“I wish we could have gotten the answers we needed sooner, but forensic analysis is a complex, time-consuming process,” Stringer wrote. “Hackers, after all, do their best to cover their tracks. It took some time for our experts to find those tracks and begin to identify what personal information had, or had not, been taken.”
‘Anonymous’

Sony said on May 2 that the April attack also gave hackers access to data from Sony Online Entertainment, which offers role-playing games. That exposed 23,400 credit-card and debit records from non-U.S. customers, and the personal account information of 24.6 million account holders.

The inventor of Walkman music players was subpoenaed by New York Attorney General Eric Schneiderman over the data braches, a person familiar with the probe said.

In a letter to U.S. lawmakers, the company said while looking into the Sony Online Entertainment breach, it discovered that intruders had “planted a file on one of those servers named ‘Anonymous,’ with the words, ‘We are Legion.’”

The company noted that weeks earlier, several Sony divisions had been the “target of a large-scale, coordinated denial-of-service attack” by Anonymous, a hacker-activist group.

Sony was singled out in a statement by ‘Anonymous’ after the company sued George Hotz, a 21-year-old hacker who publicized instructions for playing unauthorized games on the PlayStation console.

Legal and technology costs are likely to increase because of the incident, further hurting Sony’s credit profile, Moody’s Japan K.K. said in a statement May 2. Sony has an A3 rating at Moody’s with a ‘stable’ outlook.

“We are absolutely dedicated to restoring full and safe service as soon as possible and rewarding you for your patience,” wrote Stringer. “We will settle for nothing less.”

To contact the reporters on this story: Cliff Edwards in San Francisco at cedwards28@bloomberg.net; Mariko Yasu in Tokyo at myasu@bloomberg.net

To contact the editors responsible for this story: Anthony Palazzo at apalazzo@bloomberg.net; Young-Sam Cho at ycho2@bloomberg.net

V3.co.uk, 24 Feb 2011

The Night Dragon hacking attacks uncovered by security vendor McAfee were targeted at some of the world’s largest petrochemical companies, including Shell, Exxon Mobil and BP, according to new reports.

A Bloomberg report citing “one of the companies and investigators who declined to be identified” said that the list of targeted companies also included Marathon Oil, ConocoPhillips and Baker Hughes.

Legal and financial information on the companies’ deals appear to have been the main targets for the hackers, the report added.

The revelations cast new doubt on the state of information security systems in large global companies.

The Night Dragon attacks, which could date back as far as four years, originated in China, according to McAfee.

The attacks used methodical but far from sophisticated hacking techniques, including SQL injection, password hacking and remote access Trojans, according to McAfee’s European director of security strategy, Greg Day.

“Why is it only now coming to light? Well, the environments and security controls these days are so complex it is very easy for them to slip under the radar of visibility,” he said at the time.

“Only really in the last few weeks have we been able to get enough intelligence together to join the dots up, so our goal now is to make the public aware.”

Companies suspecting that they may have been targeted are urged to look through anti-virus and network traffic logs to see whether systems have been compromised.

The world has entered a “new frontier” of information security threats brought on by network stress and the increasing sophistication of our devices, an anti-virus vendor told a security conference.

Presenting in the keynote theatre at the RSA Conference in San Francisco, McAfee chief technology officer George Kurtz said the lack of IPv4 addresses and the rise of devices from printers to cars with their own operating systems raised concerns about the security of the network.

Kurtz raised the prospect that Apple and Google are letting malware slip through their approvals processes.

“If you download something from an app store are you assuming it is OK?” he said.

“When do Apple [or Google] have time to go over three million apps with a fine tooth comb?”

He described an experiment where an app was created that was similar to the popular flashlight app but did a lot more than what users would assume.

“There is no doubt that this will go through, if you downloaded it then it will connect to Twitter and look for hashtags to connect to our command and control centre. It can continue to post to the server, as the app regulates with the server and downloads a remote code,” he said.

“We did not put this into the app store, we put the app with the code and created a command and control centre backend. The app checks in with this backend server and can steal photos off the phone. We also used it to send an SMS to the Red Cross but we are not donating, the victim is.”

He said it took a week to write and the point was to demonstrate a “world that had not been looked at”.

“This is one example [of a malicious app] and we have seen it done in the past and it is something that we will continue to see,” he said.

Chris Wysopal, chief technology officer of Veracode, said that mobile app scanning was the most important trend for his company, because people can create fake websites as easily as they can create fake apps that collect credentials.

“Companies are outsourcing the development of their apps so how do they know what is in the code?” Wysopal said.

“How can you control the new way of getting data into an organisation? It is out of control, as they do not know what they are running so it is an unknown risk.

“The mobile risk is our main priority, as although we do not see a worm infecting phones, the problem is with security and that space has changed. Worms make a big noise and targeted attacks go undetected.”

This article originally appeared at scmagazineuk.com

In 2008, Tata Communications entered into a strategic alliance with BitGravity that included the licensing BitGravity’s CDN technology and the federation of BitGravity’s and Tata Communications’ delivery networks. The company also made a strategic investment of $11.5mn in BitGravity. The alliance enabled Tata Communications’ to enter the market with its own global CDN in 2008 and has resulted in successful traction with high profile media, content and gaming companies in Europe, Asia and India such as NDTV, IAH Games, Quick Heal Technologies and Nimbus Communications.

“Two years ago, we made an investment in BitGravity to provide content delivery services for Tata Communications” said Genius Wong, Senior Vice President, Global Network Services, Tata Communications. “With the success we’ve seen in the marketplace and our ownership of BitGravity, we can now fully invest in the potential that exists around the globe and accelerate the delivery of new features and services to our customers”.

“Tata Communications bet on BitGravity’s vision and people to provide innovative video services. We are ecstatic that this will be a positive outcome for all the stakeholders; we are equally excited about what this means for BitGravity and its products going forward,” said Perry Wu, CEO and co-founder of BitGravity. “As a combined entity, we can propel our position in the market, and the opportunity to accelerate our vision on a significantly larger scale was one we couldn’t pass up.”

BitGravity, a privately held company located in Burlingame, California, was founded in mid-2006 and launched its services in 2008. The company’s innovative services made inroads with major media and Internet companies and has received numerous accolades including RedHerring 100, OnHollywood 100, DemoGod, and LightReading’s Service Company of the year. BitGravity initially raised a total of $13.5mn in two rounds of funding from angels and from Tata Communications.

Reference: http://www.tatacommunications.com/news/release-view.asp?d=TataCommunicationsAnnouncesDefinitiveAgreementtoAcquireBitGravity

Integrating ArcSight’s security portfolio with HP’s IT operations management portfolio will allow organizations to converge millions of events across IT operations and security, providing deeper context than either platform alone. This represents a new security approach that will help businesses understand risk by making visible everything from activity to configuration state, role rights and past history.

By aligning IT assets with business objectives, chief information officers will have a common context and consolidated view of all IT risk and compliance issues for business services and applications. Customers will be able to monitor real-time events and activities, assess the risk and impact to their business operations, and quickly respond to and correct potential threats.

Further details on the ArcSight product integration into the HP Software and Solutions portfolio as HP expands into the security information event management (SIEM) market will be announced at a later date.

Upon the closing of the acquisition, all remaining outstanding shares of ArcSight common stock, other than those held by stockholders who properly perfect appraisal rights under Delaware law, were converted into the right to receive $43.50 per share in cash. As a result of the transaction, ArcSight has become a subsidiary of HP.

http://www.arcsight.com/press/release/hp-completes-acquisition-of-arcsight/