IBM Acquires UrbanCode For Rapid Delivery Of Mobile, Cloud, Big Data & Social Software

IBM today announced it has acquired UrbanCode Inc.

Based in Cleveland, Ohio, UrbanCode automates the delivery of software, helping businesses quickly release and update mobile, social, big data, cloud applications.

Mobile, social, big data and cloud technologies are driving demand for new, faster and more frequent approaches to software delivery. Waiting days or even months to get an update to clients is no longer acceptable.

With UrbanCode’s technology, businesses can reduce the cycle time it takes to get updates or new applications into market, from months to minutes. This approach is designed to help reduce cost and risk, while helping address changing client needs by enabling a company to rapidly incorporate feedback into and improve the overall quality of their applications and services.

Software Development As Competitive Advantage

A recent study by the IBM Institute for Business Value uncovered that almost 70 percent of companies using software development for competitive advantage outperform their peers in profitability. As innovation in software becomes more and more critical to success, businesses need a collaborative, intuitive and continual approach to development, testing and delivery.

More than half of surveyed companies agree effective software development is crucial to competitive advantage. Yet, only a quarter of companies feel they have effective methods. UrbanCode’s capabilities will help solve this execution gap with the ability to accelerate software delivery.

IBM plans to continue to support UrbanCode clients and enhance their technologies while allowing these organizations to take advantage of the broader IBM portfolio.

UrbanCode’s software is a natural extension of IBM’s DevOps strategy, designed to simplify and speed the entire software development and delivery process for businesses.

The new capabilities also enhance IBM SmartCloud and IBM MobileFirst initiatives by making it easier and faster for clients to deliver software through those channels. For example, by combining UrbanCode software with the IBM MobileFirst Worklight technology, businesses can now author and deploy an application for any mobile device in hours, versus a previous multi-day timeline.

The UrbanCode solution also works with traditional applications including middleware, databases and business intelligence.

“Companies that master effective software development and delivery in rapidly changing environments such as cloud, mobile and social will have a significant competitive advantage,” said Kristof Kloeckner, general manager, IBM Rational Software. “With the acquisition of UrbanCode, IBM is uniquely positioned to help businesses from every industry accelerate delivery of their products and services to better meet client demands.”  

“Together UrbanCode and IBM technology will be unmatched in the industry, providing businesses a continuous process for developing, testing, and delivering new and updated software,” said Maciej Zawadzki, chief executive officer, UrbanCode. ”By removing the bottlenecks that traditionally exist between development teams and production systems, businesses can drive rapid innovation.”

For more information visit the IBM Rational site.

In Search Of The Mobile Enterprise

The new mobile business model — with anytime, anywhere transactions and a blurring of lines between corporate and individual — can make your IT organization feel like it has lost control. For all the good that comes with mobilizing your workforce, there are challenges: maintaining security and compliance, managing multiple device platforms and addressing complex mobile requirements.

You can’t throw a rock these days without hitting a new smartphone or tablet device.

Last week, it was the iPhone 5 and the new Kindle Fire HD. Tomorrow, HTC’s expected to introduce some new mobile products.

And Apple still has yet to introduce the Apple “mini” iPad, currently expected in October.

The move to mobile computing raises some intriguing questions about the nature of work. What is it? Where does it take place?

As someone who’s worked their entire career at IBM, I can certainly attest to the idea that here, increasingly, work is not a place you go but what you do.

I’ve spent nearly nine full years working from my home, and several of those years, spent at least a week a month living (and working) in airplanes.

As the IBM “Services for the Mobile Enterprise” team recently observed, the new workplace is now undeniably a mobile enterprise.

CIOs On Mobile: 66% Plan To Increase Mobile Investments in 2012

Which makes it no big surprise that 66 percent of CIOs plan to increase investments in mobile services in the next year.

And of course, there’s the “BYOD” movement to contend with (“Bring Your Own Device”), with employees expecting whatever device they have to fit into their corporate environment.

This new mobile business model, with anytime, anywhere transactions and a blurring of lines between corporations and individuals, can send IT folks into a conniption fit.

Despite all the goodness — for employees, management, and most importantly, the bottom line — there are challenges that accompany this mobilization of the workforce.

Issues such as maintaining security and compliance.  Managing multiple device platforms.  Addressing complex mobile requirements.

IBM recently released this interactive infographic that has some interesting statistics I thought worthwhile sharing here.

To start, 35 percent of the world’s total workforce is expected to be mobile by 2013.

Here in the U.S., up to 72.2 percent of workers are already plugged in remotely.

This year, some 43 billion mobile applications are expected to be downloaded.

And yet on average, mobile workers spend only a total of 28 minutes a day on technology distractions…there’s too much work to do, otherwise!

The Mobile Upside: 240 Extra Hours Worked Per Worker Per Year

And here’s the upside bonus for you managers: Such mobile workers work an average of 240 extra hours per year.

But as the infographic observes, with those benefits come expectations.

This new mobile generation of workers demands flexibility. Today’s employees expect to use their own devices and applications at work to access information and social networks at will. They even value this flexibility more than a higher-paying salary (Can you say “Mobile enables work/life balance?”).

Cisco’s Connected World Technology Report in 2011 found that 66 percent of workers said they would take a job with less pay and more flexibility in device usage, access to social media, and mobility than a higher-paying job without such flexibility.

Mobile Presents New Challenges

So, as businesses work to embrace these new productive mobile work habits, they must also face the requisite challenges asscoated with the growing number of devices, networks, and applications. Enterprises need a solution that intertwines cross-platform compatibility, security, cost management, compliance, and the inevitable complexity.

By way of example, 21 percent of mobile workers say they have experienced a security issue related to their smartphone (lost, stolen, hacked, virus) in the last year alone.

Fifty-four percent of enterprises rate security and authentication as one of the two top concerns for their mobile environments.

Seventeen percent say they need to meet compliance/regulatory requirements in mobile environments.

And yet 45 percent of IT departments say they aren’t prepared policy- and technology-wise to handle this more borderless, mobile workforce.

Bridging Your Mobile Gap

To overcome those challenges, enterprises need an experienced partner with a strategy capable of spanning the distance between mobile advances and existing infrastructures.

Those early adopters are leaping ahead: They’re already experiencing 20 percent cost savings and productivity improvements.

And 75 percent of CIOs say mobility solutions are a top priority of theirs for 2012.

On the mobile front, IBM workers are walking their own mobile talk, connecting to 10 different networks located around the world, and with 100K+ of them connecting using their own handheld devices (using at least five supported device platforms).

IBM’s own app store, Whirlwind, offers over 500 applications and was recognized by CIO Magazine with the “CIO 100 Top Innovation Award.”

All of that experience IBM has had with its own mobile enablement has informed and shaped the company’s customer-facing mobile initiatives, both through product development and through the introduction of its mobile services offerings.

IBM can help your staff develop the right strategy and governance and deliver a wide range of mobile enterprise services to create a more productive, connected workplace.

You can read about some of those offerings here.

Google’s New “Jelly Bean”

So did anybody else watch that Google I/O keynote earlier today from the Moscone Center in San Francisco?

Apparently, so, because at one point there were nearly 100,000 concurrent viewings on YouTube.

Yes, I said, 100,000.  Pretty impressive for a developer’s conference.

I’ll get to some of the key Android announcements momentarily…first, the show stealer, which for my money (and of which there’s not a whole lot), one-upped Apple’s keynotes in a way they’ll likely never be able to match.

As the team was preparing to introduce the much-discussed Google Glasses (which I hope, one day, I’ll be able to wear on the golf course and announce to my technophobe father exactly how many yards his shot is to the pin without missing a beat), Sergey Brin cut away to an airplane flying high over the skies of San Francisco, all featured in a Google Events Hangout.

I presumed the cutaway was Memorex, but soon found out differently.

The skydivers jumped from the plane, flew in their birdsuits a little ways, then opened their chutes and landed safely on a roof by or at the Moscone Center.

They delivered the Google Glasses to some manic BMX mountain bikers, who jumped a couple of roofs before handing them over to some dudes who were hanging by some ropes.

Before too long, they all came busting into the live keynote and up on the stage to deliver the glasses.

I’ll never think of my FedEx delivery guy the same again.

I guess everyone at Google Marketing and PR was pretty confident all their skydivers’ chutes would open and no Google Glasses were going to go splat along with their mules.  That, or they had a contingency plan to cutaway to poor voice-challenged CEO Larry Page trying to pick up the slack via ASL.

Like I said, the whole stunt got my attention.

There were a range of interesting announcements, including the Glasses (available to developers attending I/O sometime next year), the new Google streaming media player (Yawn), and Google’s own Nexus 7 (is that one step behind Windows8?) tablet.

But the new Android, 4.1, AKA “Jelly Bean,” was the storyline I found most interesting.

Google announced “Project Butter” as the new innovation in 4.1, which helps make transitions and animations in the Android OS run more smoothly (at a cool 60 frames per second).

Googlers also demonstrated more responsive widgets (I hate to wait on any mobile device app!), which users can drag and drop and move around on their home screen.

Android Heavens, open up and save me from thith mobile lag!

The Google voice recognition engine is now going offline, which means you can transcribe to your heart’s content without being connected to the Interwebs.

“Android, go beat up Siri and then send me some funny pics of such that I can view on my newfangled Android 4.1 home screen and share them via my non-lagging new Facebook app on Jelly Bean!”

The new “Google Now” was also a cool new feature, which allows you tor bring up new “cards” that contain relevant and timely information (“How tall is the Empire State Building?”).

If Trivial Pursuit ever makes a comeback, I want to play the Google Now-assisted edition!

Google Now also takes advantage of temporal and physical data it knows to make friendly suggestions to you.  For example, when it’s lunchtime, Google Now could suggest some local restaurants nearby and let you easily make reservations to go there.

I’d suggest you view the video below to learn more about Google Now, but despite my preference to stick with the Apple iPlatforms, me likey the new “Jelly Bean” and hope Apple responds with some similar features in a future iOS release.

(Almost) Live From IBM Innovate 2012

I wasn’t able to make it down to Orlando for the IBM Innovate event, as I’m preparing to participate in an annual Watson family rite: My father’s annual member-guest golf tournament.  We won the competition two years ago for the first time, and last year, not so much.

So, this year I’m out for …. well, not blood.  Just a much lower golf score.

However, I wasn’t too busy to check in and watch some of the tidings from Innovate 2012 via the Livestream coverage, then chat about it with mi amigo Scott Laningham, who is holding down the broadcasting fort quite nicely.

If you’re a frequent viewer of our podcasts (or even if you’re not), you ought to get a kick out of my persona: A laptop sitting on the sofa with a picture of me.  We tried to use Skype video to do the back and forth, but the Internet connection on the ground simply wasn’t big enough for my booming persona!

Thanks to Scott and Jesse and the crew on the ground in Orlando for helping me participate. It’s not easy being the virtual me, especially when I cannot decide which pair of shoes to wear!

IBM Expands Collaborative Software Development Solutions to Cloud, Mobile Technologies

At IBM Innovate in Orlando earlier today, the company announced a range of new software solutions that will help clients create software applications faster and with higher quality across multiple development environments including cloud, mobile, and complex systems.

The software world’s push toward continuously evolving systems necessitates consistency and collaboration across the entire software lifecycle and supply chain. Often software development teams are struggling to meet business expectations due to a lack of hard facts.

There is a need for shared data and a consistent context across organizational boundaries, exposed through clear and honest metrics.

To address these challenges, IBM is introducing a new version of its integrated software Collaborative Lifecycle Management (CLM) solution with extended design management capabilities.

CLM is built on IBM’s open development platform, Jazz, and brings together IBM Rational Requirements Composer, IBM Rational Team Concert, and IBM Rational Quality Manager in one easy-to-install and easy-to-use solution. The new CLM software ensures that software design is integrated with the rest of the software application development lifecycle.

Development teams are now able to seamlessly collaborate on the design and development of software with key stakeholders from across the business.

According to preliminary findings of an IBM Institute for Business Value Global Study on software delivery, more than three-fourths of the participating organizations said they are underprepared for major technology trends that will impact their competitiveness.

These trends include the proliferation of mobile devices, the ability to leverage cloud-based resources for flexibility and savings, and the growing percentage of smart products with embedded software. While 50 percent of organizations believe successful software delivery is crucial to their competitive advantage, only 25 percent currently leverage it.

“Today’s business dilemma is how to address both the need for rapid delivery and sufficient control in the software development process,” said Dr. Kristof Kloeckner, general manager, IBM Rational. “We must balance the need for speed and agility with better governance to manage cost and quality, achieve regulatory compliance, ensure security, and have some level of financial predictability.”

Top Bank in China Transforms Core Processes

China Merchants Bank (CMB), headquartered in Shenzhen, China, has over 800 branches, more than 50,000 employees and is cited as one of the world’s top 100 banks. China Merchants Bank environment spans IBM System z and IBM Power platforms.

With geographically dispersed developers responsible for modernizing core banking and credit card processing applications, collaboration became essential. CMB uses IBM Rational CLM software capabilities to create a multiplatform application lifecycle management (ALM) environment to help automate their development processes and breakdown skills silos for effective cross-teaming.

“IBM Rational Developer and ALM tools were brought into our credit card migration and core banking system project,” said Zhanwen Chen, manager of configuration management, China Merchants Bank. “Replacing older tools and coordinating the efforts of our 1,000+ developers improved our quality and performance.”

DevOps in the Cloud

In a typical organization, it may take weeks or months to deliver a development change, due to infrastructure and configuration, testing and manual deployment, and lack of collaboration between development and operations teams.

Continuous software delivery in the cloud allows customers to continuously and automatically deliver changes across the enterprise software delivery lifecycle, spanning development, application testing and operations. With a “DevOps” approach in the cloud, customers can reduce time to market and automate changes in development, test and production.

IBM is supporting cloud delivery, development and operations with new solutions, including:

• IBM Rational solution for Collaborative Lifecycle Management on IBM SmartCloud Enterprise provides an agile cloud computing infrastructure as a service (IaaS) well suited for development and test that is designed to provide rapid access to secure, enterprise-class virtual server environments.
• The IBM SmartCloud Application Services pilot provides a pay-as-you-go service that coordinates activities across business and system requirements, design, development, build, test and delivery.
• IBM SmartCloud for Government Development and Test Platform as a service delivers industry-leading Rational tools for government agencies in a highly scalable, elastic computing environment for agencies that want the cost savings of a shared cloud environment combined with Federal Information Security Management Act (FISMA) security.
• IBM SmartCloud Continuous Delivery managed beta via a hosted sandbox in the cloud, provides a hands-on-experience of DevOps capabilities enabling accelerated code-to-deploy through automation, standardization of repeatable processes and improved coordination and visibility among development, test and operations teams.
• IBM SmartCloud Application Performance Management software provides comprehensive monitoring and management capabilities that enable development and operations professionals to reduce costly troubleshooting. It also provides free resources to focus on developing new innovations and services for customers. With this tighter integration, application issues can be found and resolved faster, but also proactively prevented to avoid future service disruption.

Enterprise Mobile Development

IBM Rational CLM has also been extended to the IBM Mobile Foundation platform for centralized code sharing and distributed mobile application development.

Currently, fragmentation of mobile devices, tools, and platforms complicates delivery of mobile applications that typically have faster time-to-market and more frequent releases.

The IBM Enterprise Mobile Development solution helps teams apply an end-to-end lifecycle management process to design, develop, test and deploy mobile applications while enabling seamless integration with enterprise back-end systems and cloud services through mobile-optimized middleware. The Enterprise Mobile Development solution brings together several offerings that optimize the recent Worklight acquisition as well as IBM enterprise development environments, including:

• Rational Solution for Collaborative Lifecycle Management
• IBM Worklight Studio 5.0 and IBM Worklight Server 5.0
• Rational Application Developer v8.5
• Rational Developer for System z v8.5
• Rational Developer for Power Systems v8.5
• IBM Application Center 5.0
• Android SDK and Emulator

Green Hat Technology in New IBM Test Automation Solutions

Today’s applications and manufactured products put additional pressures on development teams to find innovative ways to attain agility and increase the rate that software updates are delivered for testing.

IBM has integrated the recently acquired Green Hat technology with IBM Rational CLM to help address the challenges of testing highly integrated and complex systems and simplify the creation of virtual test environments.

New IBM test automation solutions use virtualized test environments and can reduce costs associated with the setup, maintenance and tear down of infrastructure associated with traditional testing or cloud based implementations.

Over a Decade of IBM Software Development Leadership

For the eleventh consecutive year, IBM has been named the number one shareholder in the worldwide application development software market according to Gartner with 25 percent of the market.

Gartner reported that IBM continues to lead in key and growing segments includingDistributed Software Change & Configuration Management, Requirements Elicitation and Management, Design and Java Platform AD Tools, and realized 25 percent growth in the Security Testing (DAST & SAST) market.

Additionally, according to Evans Data Corporation’s Users’ Choice: 2012 Software Development Platforms, for the overall platform rankings, IBM’s Rational continues its reign as the most highly rated overall offering, an honor they have obtained 6 in the last 7 years in this Evans Data survey of 1,200 developers globally.

IBM & Syracuse: Building Critical Software Development Skills

If you’ve been watching any of the Livestream coverage emerging from the IBM Innovate event down in Orlando, you know that skills is a key issue facing software development shops everywhere.  The need for new and changing skills, skills for new platforms and development languages, skills to help pull it all together.

Today, IBM made an announcement from Innovate that it is working to help address the skills issue in a new partnership with Syracuse University intended to help college students build computing skills to manage traditional and new systems in large global enterprises.

As business value creation increasingly shifts to software, the skills needed to tackle disruptive technologies like cloud and mobile computing, particularly for enterprise-class, large industrial systems, have become critical.

Lack of employee skills in software technologies is cited as the top barrier that prevents organizations from leveraging software for a competitive advantage, according to initial findings in IBM’s Institute for Business Value 2012 Global Study on Software Delivery.

And according to IBM’s 2012 Global CEO Study, including input from more than 1,700 Chief Executive Officers from 64 countries and 18 industries, a majority (71 percent) of global CEOs regard technology as the number one factor to impact an organization’s future over the next three years — considered to be an even bigger change agent than shifting economic and market conditions.  

Syracuse GETs Skills

Syracuse University’s Global Enterprise Technology (GET) curriculum is an interdisciplinary program focused on preparing students for successful careers in large-scale, technology-driven global operating environments.

IBM and a consortium of partners provide technology platforms and multiple systems experience for the GET students. IBM’s Rational Developer for System z (RDz) and z Enterprise Systems help students build applications on multiple systems platforms including z/OS, AIX, Linux and Windows.

“Our students need to build relevant skills to address the sheer growth of computing and Big Data,” said David Dischiave, assistant professor and the director of the graduate Information Management Program in the School of Information Studies (iSchool) at Syracuse University. “These courses and the IBM technology platform help prepare students to build large global data centers, allow them to work across multiple systems, and ultimately gain employment in large global enterprises.”

Close to 500 students have participated in the Global Enterprise Technology minor since its inception. Syracuse University’s iSchool is the No. 1 school for information systems study, as ranked by U.S. News and World Report, and serves as a model for other iSchools that are emerging around the globe.

Back To The Mainframe Future

More than 120 new clients worldwide have chosen the IBM mainframe platform as a backbone of their IT infrastructure since the IBM zEnterprise system was introduced in July 2010.

The zEnterprise is a workload-optimized, multi-architecture system capable of hosting many workloads integrated together, and efficiently managed as a single entity.

Syracuse University is a participant in IBM’s Academic Initiative and was a top ranked competitor in IBM’s 2011 Master the Mainframe competition.

As today’s mainframes grow in popularity and require a new generation of mainframe experts, the contest is designed to equip students with basic skills to make them more competitive in the enterprise computing industry job market.

IBM’s Academic Initiative offers a wide range of technology education benefits to meet the goals of colleges and universities. Over 6,000 universities and 30,000 faculty members worldwide have joined IBM’s Academic Initiative over the past five years.

Happy Float, Facebook

Happy IPO day, Facebook.

I’m not an “insider” of any sorts, so I won’t be gaining from any of the early Facebook IPO action.  I’m on the fence as to whether or not I might try to buy some “FB” shares on the open market through my Schwab account…not because I’m not interested in owning any Facebook stock, but because like a lot of investors, I want it to be a conscious, responsible investment, and one never knows what’s going to happen on IPO days.

But know this: I’m very bullish on Facebook, both its past and its future.  I’ve never seen an Internet property bring so many people together from so many different places in the world, across economic and social strata, and keep them coming back.

If you’re as bullish, but not ready to gamble on IPO day, you might give some thought to investing in the Facebook “pick and shovel” plays.

Stand back, look at the Facebook ecosystem, and rather than place all your bets on the Facebook IPO “come” line, instead spread some bets across the board and benefit from all the other players who stand to benefit from Facebook’s continued growth and adoption around the world.

The Zyngas, whose gaming ecosystem helped the Facebook tribe spread around the world.  The Dachis Corps and Buddy Medias, which are helping make the Facebook platform work well for marketers (and focusing well beyond the social graph ads that GM announced it would abandon earlier this week).

And, to be sure, hundreds of others.

Regardless of whether or not you’re a Facebook fan, and heaven knows sentiment about them can run to the extremes, if you’re a good Western capitalist, you have to be excited.

This is the classic American success story, where young kid has great idea, develops that idea in his dorm room and later small house in Silicon Valley, and eventually changes the world.

And make no mistake about that: Facebook has forever changed the world.

Just ask the folks in Egypt, or Tunisia, or Russia, or any other locale or organization that has benefited from the lower center of gravity Facebook has created that makes organizing in mass quantities as simple as a few clicks.

There is a good reason that Facebook is NOT available in China — fear of transparency and open communications.

If it were available, China would be a very different place than it is today, and it makes me thankful that the kind of open innovation and entrepreneurialism we have here in the U.S. is still alive and well.

And that, in the end, may well be the most important reason for celebrating Facebook’s entry into the public markets.

Big ideas can still have big impacts, and Silicon Valley (and, more broadly, the United States) is one of those places in the world that you can find the capital, the talent, and the political and regulatory playing field  to make those big ideas a reality.

Happy IPO day, Facebook.

Fear And Loathing At The Venetian

Well, I arrived in Vegas this morning just as quick as I could get here, my purpose being to cover the National District Attorneys Association’s Conference on Narcotics and Dangerous Drugs…oh, hold a minute…sorry, that was Hunter S. Thompson.

I’M here for the IBM Impact 2012 event being held at the Venetian Hotel and Casino (which is NOT to be confused with the Venice that’s located in Italy and which is slowly succumbing to the seas around it).  No, this Venetian doesn’t have that particular problem to worry about.

The next four to five days, depending on the length of your stay and the size of your bank account, is going to be entirely dedicated to technology-related topics: SOA, BPM, cloud computing, enterprise mobility…it’s a virtual technology funfest.

Oh, and let’s not forget the Goo Goo Dolls, who will be playing Tuesday night.

A few housekeeping details you might want to be cognizant of: First, check your bathroom for Bengali Tigers FIRST THING.

Look, you can never be too careful, particularly in the wilds of Las Vegas.

Second, go get your badge at registration.  Unlike “Blazing Saddles,” at Impact 2012, you’re going to need your stinkin’ badge. You can find them on Level One of the Venetian Convention area.

Third, plan your escape route NOW in the private confines of your hotel room.  Err, I meant to say, your conference itinerary.  I know, I know, most battle plans go out the window the moment you hit the battlefield, but it’s nice to have some general semblance of where you are and where you’re going to go next, even if it’s just a strawman.

Fourth, make room for serendipity.  No, that’s not the name of a dancer from Cirques Du Soleil.  That’s more along the lines of improvisation — as in, give yourself room for some. You never know who you meet just hanging around the canals of Venetian (but hey, don’t blame me if you fall in with the wrong crowd!  I told you to have  a plan, just in case!)

This year’s conference theme is “Change the Game: Innovate, Transform, Grow.”  So, what are you waiting for?  Get to it!

As for me, I’m going to finish writing up some interview questions for ImpactTV (which starts tomorrow at 5 PM PST, 8 PM EST — check it out at www.livestream.com/ibmsoftware), then I’m going to head on down to the Pai Gow Poker tables.  I’m feeling lucky!

If you’re feeling lost, or even unlucky, just follow the #IBMImpact hashtag on Twitter — you’re sure to find plenty of others who are feeling just like you.

And if you have a question for the event organizers, send that question on Twitter to the #AskImpact Twitter ID and surely someone will get you an answer and soon…ahem, it may not be the RIGHT answer, but social media operators ARE standing by.

And most importantly, smile and enjoy yourself…you’re in Vegas, bay-bey, NOTHING could go wrong now!

Having Impact

It’s the end of a long Friday, and you’re sitting there thinking to yourself, “Hmm, what in the world am I going to be doing starting on Sunday, April 29th?!!”

I’m from headquarters and I’m here to help.

If you’re a business or technology leader trying to understand and keep up with the insane amount of change going on in our industry, my recommendation is you hop on a plane and head out to attend the IBM Impact 2012 Global Conference from April 29-May 4.

No, it’s NOT “The Hangover,” thank goodness — neither part one nor part deux — but what it IS is an opportunity to mix it up with your peers and to hear from some of our industry’s key thought leaders.

Let’s start with the keynotes: Author of the acclaimed Steve Jobs biography entitled Steve Jobs, as well as president and CEO of the Aspen Institute, Walter Isaacson, will be a featured speaker this year. Isaacson is a former correspondent and new media editor of Time magazine, who went on to serve as chairman and CEO of CNN from 2001-2003.

“Chic Geek” and 2011 audience favorite Katie Linendoll will also be making a return engagement to Impact. Katie is going to be leading the day 2 general session, as well as moderating a “Women’s Panel” later that Tuesday afternoon (May 1).

And if you’ve never heard from Jane McGonigal, creative director of Social Chocolate and a world-renowned designer of alternate reality games…well, prepare to have your mind blown. I’ve heard Jane at a couple of SXSW Interactives, and Jane’s view of the world is one you’ll want to look into.  She’s also the author of the New York Times bestseller, Reality is Broken.

And those are just the guest speakers.  You’ll also hear from a powerhouse cadre of IBM experts and executives, starting with senior veep Steve Mills. Also in attendance: Rod Smith, our VP emerging technologies…Marie Wieck, GM of the AIM organization…Bridget van Kralingen, senior veep of IBM Global Business Services…Jerry Cuomo, IBM Fellow and WebSphere veep…and a host of others.

But let’s not forget one of the most important aspects of Impact: The networking prowess of 9,000 tech and business leaders all under the same roof.  You can get started in the conversation well ahead of the event by following and contributing to the Impact Social Media Aggregator, and onsite, by visiting the “Impact Social Playground,” a new social hub that will provide enhanced social networking facilities for all attendees, Tweeps, bloggers, analysts, media, and Business Partners.

If you just want to follow along on Twitter, make sure you’re using the #IBMImpact hash tag.

developerWorks blogger and podcaster extraordinaire, Scott Laningham, will also be in attendance, along with yours truly, where we will be conducting live and recorded interviews throughout the event for “ImpactTV.”  So far, we have a committed lineup of the best and brightest…and then there’s Scott and I!

Here’s the link where it all starts for Impact 2012.

I, for one, can’t wait.  Last year was my first Impact, and I had more fun and talked to more cool people than a person has a right to.  And I learned more than I could keep in my head…but of course, that’s not saying much.

And iffen your boss is giving you a hard time about taking time out of your hectic schedule, we’ve even got that covered with our “5 Reasons to Attend Impact 2012.”

I hope to see you there, and if you can’t make it live and in person, be sure to keep an eye on ImpactTV from April 29 through May 4.

Oh yeah, did I forget to mention that the Goo Goo Dolls are playing???

Warning Against Your Insecurities: The 2011 IBM X-Force Trend And Risk “Poltergeist”

WARNING: This is an exceptionally long post intended for security and privacy geeks everywhere, including sys admins, Internet security hawks, CIOs, and innocent but interested bystanders everywhere.  No web servers were hacked in the preparation of this report: at least, none by me!

Okay, troopers, it’s that time of year again.  You know, the time when IBM releases its report card for security incidents, the X-Force Trend and Risk Report.

Google has the search “Zeitgeist” every year, we have the security “poltergeist!”

This time around, we’re looking back at the wild and wacky 2011, a year which showed surprising improvements in several areas of Internet security. Improvements, you ask?  Surely you jest, Turbo.

This figure from the 2011 IBM X-Force Trend And Risk Report shows a steady decline in the instances of input control related vulnerabilities such as cross-site scripting (XSS) and SQL injection since X-Force began recording these statistics in 2007. In 2011, the statistics suggest that the likelihood of encountering XSS in a given test continues to decrease but shows signs of leveling out at approximately a 40 percent chance of occurring. Injection vulnerabilities and specifically SQL injection appears to have leveled out at around a 20 percent chance of occurring in a given test.

No, no, there IS some good news.  Like a reduction in application security vulnerabilities, exploit code and spam.

But, good news leads to less good news on this front, as many of you who follow security well know, because the bad guys are being forced to rethink their tactics by targeting more niche IT loopholes and emerging technologies such as social networks and mobile devices.

The Top Line: Less Spam, More Adaptation

To get specific, the X-Force 2011 Trend and Risk Report demonstrated a 50 percent decline in spam email compared to 2010.

2011’s poltergeist saw a diligent patching of security vulnerabilities by software vendors, with only 36 percent of those vulnerabilities remaining unpatched in 2011 (compared to 43 percent in 2010).  The year also saw a higher quality of software application code, as seen in web-app vulnerabilities called “cross-site scripting” that were half as likely to exist in clients’ software as they were four years ago.

So, the net is, the bad guys are adapting their techniques to the changing tech environment. The report uncovered a rise in emerging attack trends including mobile exploits, automated password guessing, and a surge in phishing attacks.

It also witnessed an increase in automated shell command injection attacks against web servers, which may well be a response to successful efforts to close off other kinds of Web app vulnerabilities.

The Security Landscape Glass Half Full: Decrease In Unpatched Vulnerabilities, Exploit Code, And Spam

Getting even more specific, according to the report, there are several positive trends as companies adjusted their security policies in 2011:

• Thirty percent decline in the availability of exploit code. When security vulnerabilities are disclosed, exploit code is sometimes released that attackers can download and use to break into computers. Approximately 30 percent fewer exploits were released in 2011 than were seen on average over the past four years. This improvement can be attributed to architectural and procedural changes made by software developers that help make it more difficult for attackers to successfully exploit vulnerabilities.
• Decrease in unpatched security vulnerabilities. When security vulnerabilities are publicly disclosed, it is important that the responsible software vendor provide a patch or fix in a timely fashion. Some security vulnerabilities are never patched, but the percentage of unpatched vulnerabilities has been decreasing steadily over the past few years. In 2011 this number was down to 36 percent from 43 percent in 2010.
• Fifty percent reduction in cross site scripting (XSS) vulnerabilities due to improvements in software quality. The IBM X-Force team is seeing significant improvement in the quality of software produced by organizations that use tools like IBM AppScan OnDemand service to analyze, find, and fix vulnerabilities in their code.  IBM found XSS vulnerabilities are half as likely to exist in customers’ software as they were four years ago. However, XSS vulnerabilities still appear in about 40 percent of the applications IBM scans. This is still high for something well understood and able to be addressed.
• Decline in spam. IBM’s global spam email monitoring network has seen about half the volume of spam email in 2011 that was seen in 2010. Some of this decline can be attributed to the take-down of several large spam botnets, which likely hindered spammers’ ability to send emails. The IBM X-Force team witnessed spam evolve through several generations over the past seven years as spam filtering technology has improved and spammers have adapted their techniques in order to successfully reach readers.

The Security Landscape Glass Half Empty: Attackers Adapt Their Techniques in 2011

Even with these improvements, there has been a rise in new attack trends and an array of significant, widely reported external network and security breaches.

This figure from the 2011 IBM X-Force Trend And Risk Report shows an increase in mobile operating system exploits in 2011 due to an uptick in malicious activity targeting mobile devices. Because of the two-tiered relationship between phone end users, telecommunications companies, and mobile operating system vendors, disclosed mobile vulnerabilities can remain unpatched on phones for an extended period of time, providing a large window of opportunity to attackers.

As malicious attackers become increasingly savvy, the IBM X-Force documented increases in three key areas of attack activity:

• Attacks targeting shell command injection vulnerabilities more than double. For years, SQL injection attacks against web applications have been a popular vector for attackers of all types. SQL injection vulnerabilities allow an attacker to manipulate the database behind a website. As progress has been made to close those vulnerabilities – the number of SQL injection vulnerabilities in publicly maintained web applications dropped by 46 percent in 2011– some attackers have now started to target shell command injection vulnerabilities instead. These vulnerabilities allow the attacker to execute commands directly on a web server. Shell command injection attacks rose by two to three times over the course of 2011. Web application developers should pay close attention to this increasingly popular attack vector.
• Spike in automated password guessing – Poor passwords and password policies have played a role in a number of high-profile breaches during 2011. There is also a lot of automated attack activity on the Internet in which attacks scan the net for systems with weak login passwords. IBM observed a large spike in this sort of password guessing activity directed at secure shell servers (SSH) in the later half of 2011.
• Increase in phishing attacks that impersonate social networking sites and mail parcel services – The volume of email attributed to phishing was relatively small over the course of 2010 and the first half of 2011, but phishing came back with a vengeance in the second half, reaching volumes that haven’t been seen since 2008. Many of these emails impersonate popular social networking sites and mail parcel services, and entice victims to click on links to web pages that may try to infect their PCs with malware. Some of this activity can also be attributed to advertising click fraud, where spammers use misleading emails to drive traffic to retail websites.

Emerging Technologies Create New Avenues for Attacks

New technologies such as mobile and cloud computing continue to create challenges for enterprise security.

• Publicly released mobile exploits rise 19 percent in 2011. This year’s IBM X-Force report focused on a number of emerging trends and best practices to manage the growing trend of “Bring your Own Device,” or BYOD, in the enterprise. IBM X-Force reported a 19 percent increase over the prior year in the number of exploits publicly released that can be used to target mobile devices. There are many mobile devices in consumers’ hands that have unpatched vulnerabilities to publicly released exploits, creating an opportunity for attackers. IT managers should be prepared to address this growing risk.
• Attacks increasingly relate to social media – With the widespread adoption of social media platforms and social technologies, this area has become a target of attacker activity. IBM X-Force observed a surge in phishing emails impersonating social media sites. More sophisticated attackers have also taken notice. The amount of information people are offering in social networks about their personal and professional lives has begun to play a role in pre-attack intelligence gathering for the infiltration of public and private sector computing networks.
• Cloud computing presents new challenges - Cloud computing is moving rapidly from emerging to mainstream technology, and rapid growth is anticipated through the end of 2013. In 2011, there were many high profile cloud breaches affecting well-known organizations and large populations of their customers. IT security staff should carefully consider which workloads are sent to third-party cloud providers and what should be kept in-house due to the sensitivity of data. Cloud security requires foresight on the part of the customer as well as flexibility and skills on the part of the cloud provider. The IBM X-Force report notes that the most effective means for managing security in the cloud may be through Service Level Agreements (SLAs) because of the limited impact that an organization can realistically exercise over the cloud computing service. Therefore, careful consideration should be given to ownership, access management, governance and termination when crafting SLAs. The IBM X-Force report encourages cloud customers to take a lifecycle view of the cloud deployment and fully consider the impact to their overall information security posture.

The IBM X-Force 2011 Trend and Risk Report is based on intelligence gathered by one of the industry’s leading security research teams through its research of public vulnerability disclosures findings from more than 4,000 clients, and the monitoring and analysis of an average of 13 billion events daily in 2011.

“In 2011, we’ve seen surprisingly good progress in the fight against attacks through the IT industry’s efforts to improve the quality of software,” said Tom Cross, manager of Threat Intelligence and Strategy for IBM X-Force. “In response, attackers continue to evolve their techniques to find new avenues into an organization. As long as attackers profit from cyber crime, organizations should remain diligent in prioritizing and addressing their vulnerabilities.”

You can learn more about IBM Security Solutions here.