Fast Memory Cards with Generous Capacities

By Ryan Zanoni Published: Monday, November 25, 2013 - 9:49am

 Backup storage solutions have been getting smaller and faster while gaining capacity. Consider that twenty years ago, floppy disks were all the rage—with a whopping 160KB of storage, and 5.25" diameter. When sizes were reduced to 3.5" and storage capacities approached 1.44MB, the race was on to make storage smaller, faster, lighter, and cheaper.

 
Now, consider a standard SD memory card. In capacities from 2GB to 128GB, these cards are the equivalent of thousands of floppies—and at smaller than 1 x 1.25", they're only a fraction of the size.

Fast and reliable image capture and storage are needed in order to save your still photos and videos and transfer them easily to your computer later. Flash memory cards are capable of quickly saving and transferring huge amounts of data for their size, and making it easily and quickly accessible to you afterwards. Flash memory is non-volatile RAM, meaning files aren't deleted when the card is removed from your device. The cards contain no moving parts, which makes them more durable than hard disk drives, allowing them to be used for thousands of erase/write cycles.

SD/SDHC/SDXC, CompactFlash (CF), and XQD cards all use flash memory. Each type features a different form factor and is designed for a dedicated slot on your camera or other digital device. SD cards have a pinless configuration with contact points, while CF cards have pins that must be lined up properly and carefully. XQD cards use the PCI Express connection featured on certain computer expansion cards.
Memory cards are available in a wide range of capacities and data transfer speeds. Faster write speeds enable improved performance during HD video and RAW image capture, especially in continuous and burst shooting modes, and when using advanced modes like slow-motion recording. Quicker read speeds improve workflow efficiency by speeding up card-to-computer file transfers. SD cards are divided into speed classes, such as Class 10, and sometimes also use the speed ratings that CF cards use, such as 600x. XQD cards are placed into different-speed series, including H, N, and S, the last of which is the fastest.

Designed for compact cameras, action cameras, mobile phones and tablets, microSDHC/SDXC memory cards from SanDisk and Lexar are the size of a fingertip—but can hold up to 64GB, an ability comparable to an ant's power to lift fifty times its body weight. They are also available in ample 16 and 32GB capacities. All the cards are UHS-1, a designation denoting speeds faster than those possible with standard Class 10 cards.  SanDisk's cards feature maximum read speeds of 80 MB/s and write speeds of  up to 30-50 MB/s, depending on capacity. Lexar's cards offer read speeds up to 90 MB/s and write speeds up to 25 MB/s. All the cards are Class 10, meaning they offer minimum transfer rates of 10 MB/s.

These speeds allow for fast and smooth continuous shooting, Full HD 1080p video capture, and transfers to your computer. Built for durability, the SanDisk cards can withstand long-term submersion in water, up to 500 Gs of shock, and exposure to X-rays. Downloadable RescuePro Deluxe data-recovery software enables you to bring accidentally deleted images back to life. Plus, microSD adapters, supplied with the SanDisk cards and available separately for the Lexars, let you use the cards in full-size SD slots. As an added bonus, the Lexars include a USB 3.0 card reader in case your computer lacks an SD slot.

Available in 8, 16, 32, and 64GB capacities, these SanDisk SDHC/SDXC Extreme Pro Class 10 UHS-1 cards offer read and write speeds of 95 MB/s and 90 MB/s, respectively, with minimum sustained speeds of 10 MB/s. A write-protect switch prevents accidental data loss, and an advanced Error Correction Code engine automatically detects and fixes transfer errors. Wear leveling management ensures data is written evenly across various regions of the card—preventing excessive wear and prolonging card life. The cards are also built for use in extreme temperatures. One year of downloadable RescuePRO data recovery software is included to help you bring back accidentally deleted images.

Delkin SDHC/SDXC 600x UHS-1 cards are also available in 8-64GB capacities—as well as an impressive 128GB for double the storage. These deliver maximum read speeds of 90 MB/s. The 8 and 16GB cards top out at 30 MB/s write, while the 32-128GB versions are capable of a faster 45 MB/s. They all feature integrated write protection and are built to withstand extreme temperatures. Plus, they all have built-in Error Correction Code (ECC) for better data integrity and card reliability, as well as Advanced Wear Leveling to prolong card life.

The Lexar 600x SDHC/SDXC Class 10 UHS-1 cards give you 90 MB/s maximum read speeds and 45 MB/s write speeds. Available capacities range from 16-64GB. Image Rescue 4 software is available via download, enabling you to recover lost or accidentally deleted photo and video files with ease, even if the card has been corrupted. Take worry out of the equation so you can focus on getting your shots captured and transferred.

Sony is also active in the fast SD market, offering SDHC/SDXC Class 10 UHS-1 cards with top read speeds of 94 MB/s and write speeds up to 45 MB/s. Available with 8-64GB of storage, these highly durable cards can withstand water, dust, X-rays, UV light, magnets, and static, as well as extreme temperatures. Downloadable File Rescue software helps recover photos and videos, including 3D and RAW files that have been accidentally damaged or deleted.

Delkin CompactFlash 700x UDMA 6 cards offer 16-128GB of storage and feature top read and write speeds of 105 MB/s and 67 MB/s, respectively. Their UDMA technology allows for faster, smoother photo and video capture and transfer from card to computer than would otherwise be possible. Think of it as the CF equivalent of the SD cards’ UHS-1 interface. They’re also designed with built-in write protection, Error Correction Code, and Advanced Wear Leveling, in addition to extreme temperature resistance.

Lexar 16-64GB CompactFlash Professional 800x UDMA 7 series features the next level up in UDMA technology, enabling these cards to provide up to 120 MB/s read and 45 MB/s write speeds. Faster still are their 1000x UDMA 7 Professional CF cards, with read speeds that top out at 150 MB/s for 16-128GB, and write speeds that are just shy of that at 145 MB/s for 32-128GB. The 16GB card has a slower but still highly respectable 95 MB/s max write speed. The powerful, downloadable Image Rescue 4 software is available for both the 800x and 100x series, enabling you to recover lost or accidentally deleted files on good and corrupted cards alike.

Substantially faster are the 32-128GB 1050X UDMA 7 Cinema CF cards from Delkin. Designed to excel in high-end recording equipment like 4K cameras and digital backs, they can reach current blazing-fast speeds of up to 160 MB/s read and 120 MB/s write. These formidable data rates enable the cards to keep up with the demanding requirements of digital cinematography, especially when recording at the highest resolution of 4K—twice that of Full HD 1920 x 1080p. Like all Delkin cards, they’re also built tough to survive extreme environments and yield a great many read/write cycles.

An even greater force of nature, SanDisk CompactFlash Extreme Pro 1067x UDMA 7 cards, available from 16GB to a huge 256GB, not only have a higher maximum capacity—they offer even faster write speeds of up to 150 MB/s, while delivering the same 160 MB/s reads. They’re optimized for 4K video recording, and offer minimum sustained write speeds of 65 MB/s at the highest resolution. Protection against shock and vibration makes this another rough-and-tumble card series, allowing you to worry less about damages and focus more on shooting. 

The fastest cards in this review are from Lexar and Sony, and belong to their XQD collection. A distinctly different card format than SD or CF, the XQD utilizes a PCI Express connection to achieve incredible minimum—yes, minimum—read speeds of 168 MB/s and write speeds of 155 MB/s, in the case of Lexar’s XQD Professional 1100x series 32 and 64GB cards. Sony’s XQD Memory Cards promise to compete, offering read/write speeds of up to 180 MB/s with their S series cards. The H and N series versions offer a slower but still noteworthy 125 MB/s transfer rate. The Sony cards can capture 100+ frames in continuous RAW shooting mode. Downloadable Image Rescue 4 recovery software is available for the Lexars, and Sony’s own File Rescue Software with RAW and MOV support is available for their cards.

Memory cards are as necessary today as floppy disks were in the 1980s. Virtually every aspect of your digital life will involve one. Why not maximize your data-transfer efficiency?

10 virtualization tips every administrator should consider

Virtualisation can reduce costs, simplify administration, and enable organizations to get more mileage out of their tech investments. These tips will help you reap those benefits.

Virtualisation has become a necessity for companies of all sizes. From testing sandboxes to production services, virtualization helps businesses get more out of their hardware and do more for their companies than they ever could before. For many companies, this technology is quite new. For others, it's old hat. Regardless of where you fall, virtualization is a vast technology with numerous moving parts. Having the knowledge to get the job done to best suit your needs should be the primary goal for you and your IT staff. With that in mind, here are 10 tips that shouldn't be overlooked by any administrator considering virtualization (or already deep in the trenches of this tech).

1: Plan hardware for virtual capacity

 When you are in the early stages of planning your virtual environment, do not make the mistake of purchasing hardware that can't handle the strain virtualization will put on it. You need to think bigger than usual. Remember, this server might well be hosting numerous virtual machines, so it's going to need the raw horsepower and the space necessary for growth. The last thing you need is to have your host server choke and run out of space for virtual machines. Measure twice, cut once applies. Don't assume a virtual machine will take up little space on that server. And don't assume you'll be hosting only one virtual machine.

2: Keep track of the entire lifecycle of every virtual machine

I've heard of administrators unleashing a virtual machine and leaving it do its thing with little to no monitoring. You need to be keeping track of every one of your virtual machines from birth to death. You should always know how large those VMs have become, the status of their snapshots, how much traffic they are getting, and just about every other piece of information you can get your hands on. It's very tempting to "set and forget" virtual machines, but that is a grievous error and could land you in a world of trouble.

3: Don't virtualize everything

Not everything should be virtualized. That FTP server that gets only internal traffic of maybe a half dozen users? Probably not. Printer server? Probably not. You need to make a specific plan and have sound reasons for everything that is virtualized. The first thing you should ask yourself is, "Why do we need to virtualize Server X?" When you can answer that question with a modicum of certainty, apply that same reasoning to every server you think might benefit from virtualization.

4: Monitor virtual traffic as well as you do non-virtual traffic

Make sure you monitor your virtual traffic as well as you do your non-virtual traffic. Don't be lulled into thinking the virtual hosts are safer simply because you can spin up a snapshot at a moment's notice. That is a false sense of security and should not be considered a substitute for security. But monitoring goes well beyond security. You need to keep abreast of both internal and external traffic to your virtual machines. After a certain period of time, you will know whether specific machines need to be given more resources and whether other virtual machines would be best served as stand-alone.

5: Don't give away virtual resources for free

I've seen it plenty of times: Virtual machines seem to take up so little space and are easily given over to the realm of "free." Don't do this. Don't even migrate a server from stand-alone to virtualized for free. The client needs to understand the benefit they gain from their server being virtualized -- and along with all that comes with virtualization, there is a price. Besides, the technology required for virtualization has a cost associated with it, and sometimes that cost is high. Your organization can't foot that bill alone.

6: Use virtual machines for disposable systems

This might seem a bit strange to some, but there are times when you need a system or service temporarily. There's no better way to supply a temporary service than with virtual machines. Need a temporary FTP server? Virtual machine. Need a temporary print server or Web server? Virtual machine. The nice thing about virtual machines is that they don't cost you the resource of hardware, so bringing a machine to life is quite easy. You could even create specific virtual machines for specific "disposable tasks" and bring them up only as needed.

7: Create virtual machine templates for easy deployment

If you know you'll want to deploy numerous virtual machines based on specific configurations or needs, create a set of templates so that deployment of these machines is as efficient as possible. This can really save you time and effort if you sell a specific service -- say, Web servers -- and sell them often. There's no need for you to constantly reinvent the wheel. Create a template and use it as often as necessary. That time saved is money in the bank for both you and the client.

8: Use "thick provisioning" for disks when performance is key

Most admins will create dynamically allocated disks for their virtual machines. For those VMs that need as much performance as possible, you should allocate thick provisioning. In other words, set an actual size for the disk in the VM configuration. Yes, you will need to make sure you've done the necessary planning to ensure the host machine has enough space to accommodate those thick provisioned virtual machines. But the performance gains you get will definitely be worth the time invested.

9: Install all guest add-ons and virtualization tools

This should be a no-brainer. Most virtual machine tools (like VMware and VirtualBox) offer guest add-ons and other virtualization tools created to improve the experience and performance and to make the communication between the guest and host more seamless. A lot of admins neglect these installations, assuming them to be unnecessary. Install them. Mouse integration, display drivers, guest-to-host time sync, and more can be installed to help make the virtual life a more efficient one. Though they are not required, they do a great job of improving the front-end usability.

10: Keep your host system fully patched at all times

Most assume all the weight is on the guest OS. Although that is true for the virtual machine, the host plays a huge role in this process. The last thing you need is to have your VMs hosted on a vulnerable machine. Sure, if that server isn't hosting a litany of virtual machines, the only thing at risk is a single server's worth of data. But since that server is hosting any number of VMs (some of which could be for clients), the threat of loss is significantly greater. Because of this, you will want to make sure that the host machine is patched up and always secure.

The payoff

At some point, your company is going to want to make the investment in virtual technologies. At that time, you will want to be as prepared as possible. With enough due diligence and work on your part, your virtual machines will save you money, time, and effort -- which, in the end, can make your clients very happy.





10 virtualization tips every administrator should consider - TechRepublic

Review: Free DD-WRT network router firmware

Most network routers have fairly basic firmware that limits the hardware's full potential. You can change that.

In most situations, a network router's normal purpose is to facilitate in connecting computers together to form a network, either for internal use or for granting access to the World Wide Web. Admittedly, if you actually want to do anything interesting with the hardware, most routers have fairly basic firmware that limits the hardware's full potential. I know this first hand, as I picked up an ASUS RT-N12 router from a good friend of mine recently to replace my underwhelming Belkin branded one. Although ASUS hardware is mostly of high quality, the firmware felt rather raw and unpolished. With that in mind, I did some research online and found that custom router firmware was available and I decided to give it a try.

DD-WRT

Product Information

• Title: DD-WRT
• Company: NewMedia-NET GmbH
• Product URL: http://dd-wrt.com
• Price: Free

Eventually, I settled on DD-WRT, which is quite honestly one of the best router firmware packages I've ever used. For those who are unfamiliar with it, DD-WRT can be flashed on any compatible router in order to grant the user extra functionality, which hardware manufacturers seem reluctant to include in stock software. Once you flash your router, you probably won't want to go back. You quite literally get everything but the kitchen sink at your fingertips.

For an idea of what DD-WRT can do for you, I will highlight some of my favorite features included with the firmware.
If you wanted to set up an OpenVPN gateway for all systems that connect through the router, you can add your VPN cert and private key, flip a few switches to determine the encryption and tunnel type, and voila! Every computer that connects to the router will pass right into the VPN. No client end VPN software is necessary.
I also like how DD-WRT is extremely verbose on stats, showing you total inbound and outbound traffic to date, as well as router performance information, including free memory and CPU activity. Having access to this panel will give you insights into what kind of traffic you are dealing with and if you need additional hardware down the road.

An example of some of the available router stats

Finally, DD-WRT just seems to improve network performance by a decent margin. For instance, after switching the firmware from stock to custom, surfing web pages and downloads seemed a bit snappier than before. Not to mention, I could be more discriminatory of what protocols (i.e. Bittorrent) could do what it needed to do with the network to improve balance.

Installing takes some research

Now, when it comes to getting DD-WRT installed to the router, there really is no one-size-fits-all method, as hardware from different manufacturers is handled on a case by case basis. There are some routers that are unable to be flashed too, so if you are shopping around for a new router, it would be advisable to refer to the DD-WRT hardware compatibility database first before committing to a purchase.
Fortunately, for my router, installation was as simple as dropping into the firmware upgrade menu, selecting the custom-tailored ROM file for my hardware make and model, and then uploading it over the network. After a several minute upload process, followed by a mandatory router reboot, I was up and running in DD-WRT. In the unfortunate event of an endless reboot or other strange issue that might arise in the process of flashing, I also have the option to boot into the router's low-level recovery mode in order to roll back to the stock firmware and try again.
With all this interest surrounding router modifications, it goes without saying that flashing with un-official custom firmware could invalidate your warranty coverage and cause other problems. If this all sounds too risky, companies like Buffalo actually offer routers with DD-WRT firmware already flashed and ready to go with full warranty coverage. This way, you won't have to worry about accidentally bricking any hardware if you don't feel adventurous.
DD-WRT is available to everyone as freeware under the GNU GPLv2 license. So long as your router make, model, and revision are all listed, you should be good to go. One thing to note: if you have less than 8MB of flash storage space on your router, you won't be able to take advantage of every feature available. Therefore, you will need to choose the mini firmware "edition" that best suits your needs for the hardware.






Review: Free DD-WRT network router firmware - TechRepublic

Rescue a Windows XP installation in Windows 8 with Zinstall XP7

Learn how to get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system.

A friend of mine got a new Windows 8 system and was running it along side of his old Windows XP box so that he could get used to Windows 8 yet still be able to run his older applications in Windows XP. Everything was going fine with this set up until recently when he called and told me that his Windows XP computer died and wanted to know if I could help him rescue his XP system. After talking with him for a while I discovered that the power supply on the old system had bitten the dust. While the old system would not power on, he said that the last time he used it, the system worked fine and he had shut it down like he normally did. Suspecting that the hard disk was still intact, I told him that we could probably retrieve his data and put it on the new computer. He said that while that would be great, what he really wanted was a way to revive the Windows XP computer. We initially discussed replacing the power supply, but when I told him about Zinstall XP7 and how you could use it to move a Windows XP installation from a hard disk into a virtual environment that could be run in Windows 8, he liked that idea.
Later, we took IDE hard disk out of the old computer, connected it to his new computer via an IDE to USB adapter, and verified that it was still accessible and in good condition. We then used Zinstall XP7 to move the entire Windows XP installation into his Windows 8 system. The entire procedure was very easy and the end result provided such a slick way to switch between operating systems that I thought I should revisit this product and show you how it works in Windows 8. (Back in 2010, I wrote an article about using Zinstall XP7 to perform an in-place migration of Windows XP to Windows 7.)
In this article, I'll show you how get and use Zinstall XP7 to move your Windows XP installation from a hard disk to your Windows 8 system. As I do, I'll explain each step in the procedure.
Note: Even though the product name "XP7" implies a Windows XP to Windows 7 path, it works perfectly in Windows 8.

Overview

Keep in mind that while you can use Zinstall XP7 on two computers and move Windows XP into Windows 8 using a network connection, I am going to cover moving Windows XP into Windows 8 using just the hard disk. Furthermore, while I used an IDE to USB adapter to move my friend's Windows XP installation, on my example system for this article, I simply removed the SATA hard disk from my Windows XP computer and connected it to the second SATA connector in my Windows 8 system.

Getting and installing Zinstall XP7

Zinstall XP7 is a commercial product which sells for $89. You can purchase and download the product from the Zinstall site.
Since I'm going to be moving Windows XP into Windows 8 using just the hard disk, I'll download and install Zinstall XP7 on a Windows 8 system. Once the download is complete, just run the executable file. In a few moments you'll be prompted to enter the serial number you received along with the email address you used to purchase the product, as shown in Figure A.

Figure A 

 

You'll be prompted to enter the serial number you received in order to activate Zinstall XP7.

Performing the transfer

As soon as the installation is complete, Zinstall XP7 will launch and prompt you to identify your migration scenario. Since I am running the program on my Windows 8 system with the Windows XP hard disk connected, I will identify the migration scenario by selecting I only have this PC and the selecting Yes, I am migrating from another hard drive, as illustrated in Figure B.

Figure B

 In this scenario, you select the migrating from another hard drive option.

You'll then see a Zinstall window that will begin searching for the Source and Target computers. When it finds them, the Go button turns green, as shown in Figure C, and you can click it to begin the migration procedure. Here you can see that Zinstall found the 160GB hard disk that contains the Windows XP installation and will migrate it to a folder on my Windows 8 system.

Figure C

 

 

 

 

 

 

When the Go button turns green, you can click it to begin the migration procedure.

The actual migration is a lengthy process involving multiple operations, as shown in Figure D, and can take several hours depending on the size of your Windows XP installation. For instance, my 160GB hard disk took a little over an hour to finish.

Figure D

 

The actual migration is a lengthy process that involves multiple operations.

Working with the two systems

Once you complete the migration step, you'll see a Zinstall icon in the system tray of you Windows 8 system. To access your Windows XP installation, you can just double-click on the Zinstall icon. You can also access your Windows XP installation by right-clicking on the Zinstall icon and selecting the Switch to Guest Desktop command.
When you are in Windows XP, you'll also find a Zinstall icon in the system tray. To go back to your Windows 8 installation, you can just double-click on the Zinstall icon or right-click on the Zinstall icon and select the Switch to Host Desktop command. This process, which Zinstall refers to as switching channels, is illustrated in Figure E.

Figure E 

You can use the Zinstall icon in the system tray to switch between Windows 8 and Windows XP.

You'll also find several shortcuts on your Windows 8 desktop that allow you to initiate the desktop switch and access Windows XP's My Documents folder inside of Windows 8; however, I found both of those shortcuts much more time consuming than simply double-clicking the Zinstall icon and changing to the Windows XP channel.
You'll also discover that Zinstall XP7 places shortcuts to all of your Windows XP applications on Windows 8's Start Screen and each one is prefixed with a Z^ to make it easy to identify. If you find that this makes the Start Screen overcrowded, you can remove all the shortcuts using the Advanced tool.
Right-click on the Zinstall icon and select the Advanced command. When you see the Advanced application, select the Remove shortcuts on Exit check box, as shown in Figure F, and click OK. Then, shut down Windows XP and restart Windows 8. When you get back to Windows 8, you'll see that all of the shortcuts have been removed.

Figure F 

 

You can Remove the Windows XP shortcuts from the Start screen.

To make working with the two systems as easy as working on one system, the Windows 8 and Windows XP environments are fully integrated. This means that you can copy files and text between the two systems just like you copy files between two folders and text between different applications. For example, to copy a file from the Windows 8 environment to the Windows XP environment, just right-click on the file, select Copy, switch to Windows XP, and paste the file.
For larger-scale file copy operations, access your Windows XP environment and go to My Computer where you will find a drive letter Z: under the Network Drives section. When you open it, you will find links to all of the drives on your Windows 8 system as well as a link to the Documents folder on your Windows 8 system.
Network and Internet access is automatically enabled. If Windows 8 has access, so does Windows XP. This works with any kind of connection, wireless included.

What's your take?

Will you use this Zinstall XP7 to migrate your Windows XP system to Windows 8? As always, if you have comments or information to share about this topic, please take a moment to drop by the TechRepublic Community Forums and let us hear from you.

More information

Virtualization has swept through the data center in recent years, enabling IT transformation and serving as the secret sauce behind cloud computing. Now it's time to examine what's next for virtualization as the data center options mature and virtualization spreads to desktops, networks, and beyond.

Also read:

• Get started with Windows 8 Client Hyper-V the right way
• Create a virtual switch in Windows 8 Client Hyper-V
• Run your Windows XP system in Windows 8 with VMware

Rescue a Windows XP installation in Windows 8 with Zinstall XP7 - TechRepublic

Snort :: Home Page

Snort :: Home Page

Infographic: Finding the right security solution for the data center

This infographic from Cisco illustrates the issues that data centers face trying to deploy comprehensive security systems.

By Evelyn de Souza, Security Technology Group at Cisco

Today’s savvy information technology professional wants security tools and understands that protecting your organization is something that opens doors, rather than closes them. The right security solution can move businesses beyond buzzword bingo to a place where they can actually achieve these hoped-for efficiencies.
Many times as InfoSec professionals, it can be difficult to associate security investments with ROI. However, when it comes to data centers, the ROI associated with employing a comprehensive security solution goes well beyond hard numbers. The right security solution can result in avoiding higher costs and consequences stemming from potential data breaches – which are far more damaging in the long run than taking necessary preliminary precautions early.
This infographic from Cisco dives into problems that data centers face today, and how finding the right security solution can make all the difference.

Infographic: Finding the right security solution for the data center - TechRepublic

Breach Detection Systems take aim at targeted persistent attacks

You've just been told to get a Breach Detection System in place. Where do you start? How about a buyer's guide created by an independent test facility?

I’ve been asked how to prevent illicit network penetration enough times to realize an esoteric discussion of the recent advances in intrusion detection and firewall protection is not what’s needed. What is needed is a clear picture of available preventative measures, and which of the preventative measures work as advertised.
Getting up to speed, for me, means paying attention to a certain independent test lab. For the past two years, the people at NSS Labs have been testing how well Breach Detection Systems deal with Targeted Persistent Attacks.

Different terminology

It’s entirely understandable if Targeted Persistent Attacks (TPA) and Breach Detection Systems (BDS) are unfamiliar, or appear to be incorrect acronyms. To get that sorted out, I talked to John Pirc, Research Vice President at NSS Labs and published author. Starting with Targeted Persistent Attacks, I asked John why NSS Labs didn’t use Advanced Persistent Threats (APT) like everyone else. “The truth of the matter is that an APT is sometimes made up of known exploits / vulnerabilities that are not that Advanced; so the term APT doesn't define the action correctly. TPA highlights that the actor is going after a specific target such as company X or an entire industry sector like financial services, and will be persistent in attacking the target”
John also mentioned there was a detailed examination of APT versus TPA in this blog. Next, I asked John why NSS Labs prefers to use Breach Detection System instead of Next Generation Intrusion Prevention System and Next Generation Firewall:
“The BDS, NGIPS, and NGFW products are similar in that all three can contain signatures and heuristics for identifying malware. However, a BDS separates itself from the pack with its ability to analyze the patterns of network traffic, identify malicious domains, and model the behavior/impact of files that are being downloaded and executed on an attack surface.
In some cases, BDS vendors are able to detect zero-day malware at various stages of propagation, and provide remediation. The ability to identify still-unnamed malware on your network is almost like having your own zero-day research team on site.”
BDS technology having proactive capabilities plus remediation is significant. I asked John how that was accomplished:
“What separates BDS from IDS/IPS is detecting unknown malware. Breach Detection Systems, unlike IDS/IPS, have the ability to model malware behavior through emulation and sandboxing or a combination of both. This places BDS at a distinct advantage over IDS/IPS; as they can identify the presence of dropped files, analyze them, determine if they are known bad or unknown bad, and monitor for command and control callbacks.”
Now that we’re on the same page, I’d like to look at how NSS Labs goes about testing Breach Detection Systems.

BDS testing

To start, this excerpt from the BDS Test Methodology paper describes what the testers will be looking for:

• Centralized management of multiple devices.
• Breach detection capabilities using one or more of the following methods:
• Malware identification (signatures, heuristics, or both).
• Network traffic analysis (flow monitoring, content analysis, or both).
• Sandboxing that allows for modeling internal systems (workstations and servers).
• Browser emulation.
• Domain reputation to identify malicious domains.
• Response mechanisms (for example, alerting, session termination).
• Reporting.

The remaining 18 pages of the test methodology report go into intimate detail explaining how the engineers at NSS Labs determine whether a BDS device meets expectations or not.

Test results

At the beginning of this article, I mentioned my reliance on NSS Labs to get a clear picture of this complex technology. To get that clarity, besides reading how NSS Labs tests BDS, I also read their annual Breach Detection Systems Buyer's Guide. The 14-page report is chock-full of analysis and recommendations. For example, here are some overall conclusions of the systems tested this year:

• A BDS is able to detect threats by using a network appliance or stand-alone endpoint, or by using a combination of both.
• A BDS can identify pre-existing breaches as well as malware that is introduced to the system through side channels.
• A BDS that is unable to identify side-channel attacks or command and control traffic from infected machines is little more than a network AV device.
• While high-end network core switches will be capable of supporting most BDS requirements, NSS engineers have noted port-spanning issues with many workgroups switches.

Next NSS Labs offered the following advice for those thinking about purchasing a BDS: “Enterprises looking to deploy a BDS should understand that there are differences in the maturity, technology, and scalability of the solutions that are offered by different vendors.”
Both the paper on BDS test methodology, and the BDS buyer’s guide provide an abundance of information, affording IT pros the opportunity to get familiar with Breach Detection Systems.
Here’s a list of vendors that are offering BDS products.

• Check Point
• Damballa
• Fortinet
• McAfee
• Palto Alto networks
• Sourcefire
• Trend Micro

John mentioned that not all of the above vendors have submitted systems for testing as of this post, and to contact NSS Labs to see if there is a test report on a system you are considering.

Final thoughts

With something as complex as Breach Detection Systems, I’m glad there is such a thing as a buyer’s guide. I’d be nervous having to base a decision on one vendor’s market-speak versus another’s.


Breach Detection Systems take aim at targeted persistent attacks - TechRepublic

Restore Windows 8 with System Image Recovery

In a recent series of blog posts, I've shown you how to use two of Windows 8's new recovery tools, Refresh your PC and Reset your PC. While the Reset your PC tool will allow you to essentially start from scratch and the Refresh your PC tool will allow you to install a new copy of the operating system while retaining your data, you may also want to have a backup of your full system - data and applications - on hand, just in case you encounter a catastrophic hard disk failure.
If so, you'll be glad to know that the tried and true System Image tool still exists in Windows 8 and as long as you have created a system image of your hard disk, you can use the System Image Recovery tool to recover your entire system in the event of a hard disk failure. In other words, if your hard disk goes south, you can purchase a new hard disk and use the System Image Recovery tool to restore your system to the state it was in at the time that you created the image.
Now, keep in mind that for this type of backup to be truly effective, you need to regularly create new System Images so that in the event of a recovery, you will have a recent version of your system.
In this edition of the Windows Desktop Report, I'll show you how to use System Image Recovery tool from the Recovery Drive to restore your hard disk. As I do, I'll also show you how to create a System Image on a set of optical discs.
This post is also available as a Slideshow Image Gallery.

What you need

In order to run the System Image Recovery tool as I'll describe in this article, you'll need to have created a Recovery Drive as I showed you in the article Create a Recovery Drive in Windows 8. You'll also need a set of optical discs or on an external drive on which to create a system image of your hard disk.

 

Creating a System Image

As I mentioned, in order to use the System Image Recovery tool you must have created a system image of your hard disk. As such, I'll begin by walking you through the steps required to create a system image.
To create a system image in Windows 8, you'll start by accessing the oddly named Windows 7 File Recovery window. (Why not just call it File Recovery or Windows Backup and leave it at that?) To do so, use the [Windows] + W keystroke to access the Search Settings page. Then, type Windows 7 File in the text box and click Windows 7 File Recovery, as shown in Figure A.

Accessing the Windows 7 File Recovery tool from the Start screen is easy.[Figure A]

In a moment, you see the Windows 7 File Recovery user interface and you should select the Create a system image command on the left side of the screen to launch the creation tool. On the first screen you will need to choose where you are going to create a system image. For my example, I am going to create the system image on a set of DVD+R discs in the DVD RW drive, as illustrated in Figure B.

 

On my test system, I'll create the system image on a set of DVD+R discs.[Figure B]

When you click Next, you will be prompted to confirm your backup settings, as shown in Figure C. As you can see, in addition to the main partition, the System Reserved partition is also selected to be backed up. On my test system, which is pretty bare bones at this point, the system is indicating that the image will take up 36GB of space. (When the operation was complete, the system image, with compression, only required three 4.7GB DVD+R discs.) When you are ready, just click the Start backup button.

 

On the Confirm your backup setting page take a look at the information presented and then click the Start backup button.[Figure C]

As Windows begins preparing for the operation, it will prompt you to label and then insert the first DVD disc This process is illustrated in Figure D.

 

To get started, insert the first disc and click OK.[Figure D]

Once you insert the blank disc, you'll be prompted to format it. Make sure that you select the Don't ask me again for this backup check box before you click the Format button. The operation will then format the optical media, as shown in Figure E.

 

Make sure that you select the Don't ask me again for this backup check box.[Figure E]

As the backup operation gets under way, you'll see progress indicators letting you know the status of the operation, which includes verification of the media once the backup portion is complete. After each disc is verified, you'll be prompted to insert a new disc. This process is illustrated in Figure F.

 

Creating a System Image on DVDs includes a verification operation.[Figure F]

When the System Image creation procedure is complete, you'll be prompted to create a System Repair disc, as shown in Figure G. However, as you may remember, a System Repair disc is the same as the Recovery Drive and if you have already created a Recovery Drive, you can just click No and you will be notified that the backup completed successfully.

 

In Windows 8, the System Repair disc is the same as the Recovery Drive.[Figure G]

Now that you have a System Image backup, you are ready for an emergency situation.

 

Launching System Image Recovery

In the case of a hard drive failure, you can restore Windows 8 by running the System Image Recovery tool from the Recovery Drive. While I am booting from a USB Recovery Drive, you can just as easily boot the Recovery Drive from the optical disc. (As a part of my research for this article, I ran the System Image Recovery tool after booting from an optical disc and the procedure is basically identical.)
After your system boots from the Recovery Drive and you are prompted to choose an option, select the Troubleshoot tile as shown in Figure H.

 

When you are prompted to choose and option, select the Troubleshoot tile.[Figure H]

When you see the Troubleshoot screen, as shown in Figure I, select the Advanced options tile.

 

From the Troubleshoot screen, select the Advanced options tile.[Figure I]

When you see the Advanced options screen, as shown in Figure J, select the System Image Recovery tile.

 

From the Advanced options screen, select the System Image Recovery tile.[Figure J]

You'll then be prompted to choose the operating system that you want to recover, as shown in Figure K. Now, when performing a system image recovery operation, it seems redundant to have to select the operating system, but you must click the Windows 8 tile to get started.

 

Choose Windows 8 [Figure K]

 

 

 

 

 

 

 

The recovery process

As soon as you click the Windows 8 tile, you'll see the Re-image your computer wizard and the tool will immediately begin looking for media containing the system image, as shown in Figure L.

The Re-image your computer wizard will immediately begin looking for media containing the system image.[Figure L]

When it can't find the system image, it will prompt you to insert a disc. Take note that when restoring from DVD, you must first insert the final disc in the set, as shown in Figure M. The reason being is that when you create a system image, information required by the restore operation is saved on the final disc.

Information required by the restore operation is saved on the final disc. [Figure M]

When you insert the final disc, the Re-image your computer wizard will read the information on the final disc and then display the details of the system image, as shown in Figure N. As you can see, my system image is on drive F, it was created on 2/25 at 11:28 PM, and it is the image for the computer named Jovian-8. When you are ready, just click Next.

When Re-image your computer wizard is ready to begin, it will display the system image details.[Figure N]

You'll then see the second screen of the Re-Image Your Computer wizard, as shown in Figure O. As you can see, this screen provides you with several options. If you are restoring to the same hard disk, you don't need to select the Format and repartition disks check box. (For my example, I selected the Format and repartition disks check box, just to see if that changed the process in any way. Other than possibly adding a little time to the process, the steps and the end result were the same.) If you are restoring to a new hard disk, chances are that the Format and repartition disks check box will be selected by default and will be unavailable. If that is the case, there is nothing to worry about as long as the new hard disk is of the same capacity or greater than the old one.

The second screen in the Re-Image Your Computer wizard provides you with a number of options to choose from.[Figure O]

If you have multiple drives you can click the Exclude Disks button and choose the drive(s) you want to leave untouched. If you click the Advanced button, you'll see a dialog box that will present you with two additional options. An Automatically Restart check box will be selected by default and you'll have the option to enable a disk check operation as a part of the procedure. (Now, if none of the options are available on this dialog box, you may have to install drivers for the disks you are restoring by clicking the Install Drivers button.)
When you click Next, you'll see the confirmation screen of the Re-Image Your Computer wizard, as shown in Figure P. To continue, just click Finish.

To complete the Re-Image Your Computer wizard, just click Finish.[Figure P]

Of course, there is one more confirmation to work through, as shown in Figure Q. Just click Yes to get started.

Just click Yes in the final confirmation dialog box.[Figure Q]

You'll then be prompted to insert the first DVD in the set, as shown in Figure R. Once you do so, just click OK.

Once the operation is set to begin, you'll be prompted to insert the first disk in the set.[Figure R]

In a moment, the restore operation will begin and you'll see a progress bar that keeps you apprised of the status of the restore operation. Depending on how big your hard disk is, the restore operation can take a few hours. As each DVD in the set is restored, you'll be prompted to insert the next one.
When the restore operation is complete, you'll be prompted to click the Restart now button. If you happen to be away from your desk when this occurs, your system will restart on its own, as shown in Figure S.

If you happen to be away from your desk when the restore operation is complete, your system will restart on its own.[Figure S]

When, your system restarts, you'll see the familiar logon screen.



Restore Windows 8 with System Image Recovery - TechRepublic

Five free IT tools available in the Apple App Store

For many years, IT professionals have relied on tools that require a PC or a laptop to run; smaller, more portable devices just weren't available. Now, with the advent of nearly-ubiquitous smart phones and the proliferation of tablets, IT professionals can use these types of devices to test their networks and systems to ensure that things are running properly - and without lugging around a full laptop or heading back to the office to use a desktop.
This blog post is also available as a TechRepublic Photo Gallery.

Sign up for TechRepublic's Five Apps newsletter!

In this edition of Five Apps, I take a look at five free IT tools in the Apple App Store which can be used by IT professionals to diagnose problems with their networks and systems. All of these apps are "universal" apps, meaning that the same version can be used on iPhones, iPads, and iPod Touches.

Five Apps

1: IP Network Scanner by 10base-t Interactive

IP Network Scanner quickly scans the local subnet (by default) returning a list of the systems detected and what their IP and MAC addresses are. Additionally, you can view the manufacturer, give the device a custom name and icon, and use several network tools and additional apps on the device all from the right-side pane. The free version is limited to the first five devices found, but you can adjust the scanning range to catch the group of devices you're interested in. The full version is $9.99 and gives you unlimited devices.

2: Speedtest X HD by VeeApps

A speed test app is another must for IT professionals, and Speedtest X HD does an excellent and beautiful job. Free users get access to a limited number of servers to test against while users upgrading to the full version get access to many more. The gauge is simple and easy to read and the app gives you the typical ping, download, and upload results. VeeApps also offers a non-HD version of their app. Both paid versions cost $0.99.

3: NSLookup by Dayana Networks Ltd.

NSLookup does only one thing, but it does that thing well. Simply enter the domain name and it will return a list of name servers and hosts with IPv4 and IPv6 addresses. The few options available allow you to reduce the number of different types of results and make other minor tweaks. The paid version is $1.99 and appears to just remove the ads.

4: Netstat by James Devenish

Another essential IT app is Netstat. The free version will list all currently-open sockets on the device and give several details about those sockets. The paid version ($3.99) goes a little bit further in allowing you to monitor another device's sockets. You can also buy the connection details module for $0.99. One additional stand-out feature of this app is that it exports the results to CSV which you can then sync to iTunes, open with another app, or send as an e-mail attachment.

5: Remote Desktop Lite - RDP by MochaSoft

Finally, no Windows IT professional would be complete without an RDP app. Remote Desktop - RDP is an easy-to-use Remote Desktop client with many options available for advanced configuration; however, basic configuration is as simple as entering the IP address or hostname. Once you connect to a remote Windows system, you can see, zoom, and pan the screen around as needed and use the built-in iOS keyboard or an external one when you need to type. The paid version ($5.99) gives you additional hotkeys on the screen, better mouse support, and removes the ads.

Your picks

What IT Tools have you used from the Apple App Store? Share your recommendations with fellow TechRepublic members in the discussion forum.


Five free IT tools available in the Apple App Store - TechRepublic

Five must-have portable networking tools

Add these apps to your portable toolkit for network troubleshooting, monitoring, and management.

Having all your tools in one place certainly makes your job easier. This is especially true when you need networking tools. These tools can be anything from simple monitoring tools to full-blown portable servers. Regardless of what you need and why you need it, there are plenty of networking tools that require zero installation and can fit on a USB flash drive.
There are quite a lot of portable apps out there--even within the narrowed scope of networking tools. Here are five handy portable network tools that you can add to your on-the-go toolkit.
Note: This list is also available as a photo gallery.

1: ConnectionMonitoring

ConnectionMonitoring (Figure A) is a simple tool that allows you to monitor incoming and outgoing socket connections. With this connection information at hand, you can see whether any unwanted traffic is coming into a machine. And because this app is portable, you don't have to bother with installing the tool -- you'll always have what you need right there. Connection Monitoring scans current connections and then displays the following: Local address/port, remote address/port, TCP UDP protocol/status of those connections.

2: TCPView

TCPView (Figure B) is like Netstat with a power boost. With this portable tool, you can view a detailed listing and the current state of all TCP and UDP endpoint connections, as well as the process name running each endpoint. This tool also contains a command-line version, Tcpvcon, which offers the same features as Netstat.

 

 

 

3: DNS Benchmark

DNS Benchmark (Figure C) allows you to do exactly what the name implies -- benchmark your DNS servers. You can easily determine whether your nameservers are the cause of your networking problems. DNS Benchmark can monitor up to 200 DNS servers and report on their status. You can use a simple configuration file to configure the specific DNS servers you want checked.

4: Pale Moon Portable

Pale Moon Portable (Figure D) is based on the minimalist version of Firefox but is far lighter in weight and far faster in performance. Pale Moon (the creators of the browser) claims a 25% speed increase over Firefox. However, you will find that some Firefox features aren't in Pale Moon. The major missing features are accessibility and parental control. Otherwise, you can expect a full-featured browsing experience in a very mobile package.

5: EasyPHP

EasyPHP (Figure E) allows you to carry around a complete portable WAMP stack on a stick. This tool is mostly useful for developers, but anyone who needs a portable Web server can benefit from having this available. EasyPHP bundles all the usual WAMP tools (Apache, MySQL, PHP) as well as the PhpMyAdmin tool for managing the databases on the server. You will also find Xdebug to aid in your debugging process.

Other good portable networking tools?

Portable tools don't need to be useless. In fact, they can be some of the most valuable tricks up your sleeve. With this short list of portable networking tools, you can enjoy some serious power and manageability -- at your fingertips.


Five must-have portable networking tools - TechRepublic

Five apps for your portable security kit

Portable security apps can come in quite handy in the field. Here are five lesser-known apps worth checking out.

Portable apps do one thing for the system and network administrator -- make the job easier. The better (and more diverse) your portable apps, the more jobs are made easier. Security is one area where portable apps can make a big difference. But there are so many to choose from, it's hard to piece together a collection of tools that best fit your needs. To that end, I want to introduce you to some portable security apps you might never have heard of. Even if you only take away one or two of these tools, your portable security toolkit will have improved significantly.
Note: This list is also available as a photo gallery.

1: SmartSniff

SmartSniff (Figure A) enables you to capture TCP/IP packets traveling on a network adapter and view the packets between source and destination. The TCP/IP conversations can be viewed in ASCII mode (for text-based protocols, such as HTTP, SMTP, POP3, and FTP) or as a hex dump (for non-text based protocols, such as DNS). Having SmartSniff with you allows quick troubleshooting a networking issue from any PC on your network.

2: Omziff

Omziff (Figure B) is an encryption utility that can encrypt, split, and securely delete files (according to DOD standards), create file hashes, and generate random passwords. The encryption allows you to choose from all the standard types (Blowfish, IDEA, Twofish, and more) and even includes a few utilities (random number generator, file append, and a command prompt) that can help you with other tasks.

3: Eraser Portable

Eraser Portable (Figure C) is a secure data removal tool that can remove data from a drive with multiple wipes, pattern writing, and more. The portable version of this tool is based on the full version of Eraser and offers the same features. This tool can erase files, folders, and even previously (insecurely) deleted files. You can also instruct Eraser Portable to automatically restart or shut down a PC.

 

 

 

4: Remove Fake Antivirus

Remove Fake Antivirus (Figure D) should really have a better name. But even with the wacky name, the tool does exactly what it says it does -- checks for any fake antivirus and removes it. The tool removes nearly 50 antivirus variants. This particular tool can be run as a portable app or, with the help of some scripting, can be saved on a drive and run on schedule or at bootup.

5: BleachBit

 BleachBit (Figure E) is one of the best tools for freeing up hard disk space and guarding privacy. This tool works effortlessly to free cache, delete cookies, clear Internet history, shred temporary files, delete logs, and discard various types of junk you may not have known was on a system. BleachBit is available as a portable app as well as an installable for both Windows and Linux.

 

Build your kit

Your portable arsenal is invaluable. Having a set of tools you can carry around with you and run from a USB drive will make you more efficient and keep your end users working without downtime. Give these tools a try and see if one or more of them doesn't wind up in your permanent portable toolkit.


Five apps for your portable security kit - TechRepublic