Years ago, when I first joined developerWorks, I oversaw (among other things) a section of the site that focused on security.
Of course, there was no shortage of material to cover -- just as there was no shortage of shady characters doing shady things
with technology -- so I had my work cut out for me.
Before long, it became clear that security is not an isolated issue, but permeates nearly every aspect of IT. (Those shady
folks are innovative and versatile!) So we decided to close the section and incorporate security coverage into
our existing content areas as appropriate; after all, security affects nearly every topic we cover. In the years since, the
demand for secure applications and systems has grown exponentially. (Innovative, versatile, and diligent!) So
I'm gratified to see so much security-related content on developerWorks. Case in point: This week's top features (below)
include articles on Tripwire, iptables, cloud security, web app security -- and if you dig into the latest WebSphere Tech
Journal, you can learn something about OAuth tokens, as well. Clearly, developerWorks is still empowering you to defeat
the forces of evil.
OK, maybe that was over the top, but it's not often I get a chance to use the phrase "forces of evil."
Be careful out there.
John Swanson and the developerWorks editorial team
This week's top features on developerWorks:
| Developer events in
| developerWorks Live! briefing in Amsterdam: IBM Business Process Manager Express/Standard|
Use IBM Business Process Manager V7.5 Express and Standard editions to be more agile and to focus on continuous process improvements.
Attend this workshop to gain a broader understanding of features and functions of the process designer, the process center,
and the process server. And be sure to join the community
group for this event on developerWorks. (20 December 2011, Amsterdam, Netherlands)
Get more details and register >
| Use Tripwire to monitor file changes|
Tripwire is an intrusion detection system that monitors for file or directory changes based on the policy provided by the
Couple tripwire to AIX audit >
| IBM Cloud: Implement secure SSH access|
Find out more about the basics of upgrading, choosing, and implementing a highly effective secure SSH connectivity solution
to the IBM Cloud.
Get secure >
| Establish a system to build custom virtual cloud images|
As companies turn to virtual images as a means of improving software delivery within their data centers, challenges are emerging.
The authors discuss these challenges and introduce the IBM Image Construction and Composition Tool (ICCT), which addresses
many of these challenges and provides a systematic approach to constructing virtual images in the cloud.
Start using the IBM Image Construction and Composition Tool >
IBM ecosystem partner images on the IBM Cloud |
Get ready to try new partner software images on the IBM Cloud. IBM Business Partner solutions extend the value of the IBM
SmartCloud by providing new capabilities. Learn more about these new capabilities, which are now being offered on the IBM
New ecosystem partner images on the IBM Cloud >
| Moving a master DNS server to a different system|
This article provides a brief overview of DNS, and demonstrates one method for moving a master DNS server to a different
Get moving >
| Business process management|
| Create a telecommunication subscriber life history|
This article presents the value of developing and maintaining learning relationships with a company's most important partner
-- the consumer -- and offers a viable approach to gathering, storing, and using subscriber life history information.
Know your customer >
| Dimensional modeling with InfoSphere Data Architect, Part 2: Reverse engineering|
Follow the workflow outlined in Part 2 of this series to learn how to update existing data models, and minimize the impact
on the production environment by reverse-engineering from an existing data source.
Enter a new dimension >
| Extended Insight in WebSphere Application Server environments|
Follow along to learn how to install the Extended Insight client software, and configure it to monitor the transaction and
SQL statement response times of your z/OS and WebSphere applications, including the time-spent breakdown across the IT stack.
Extend your insight >
| Finding and resolving IMS database exceptions using the
Tools Base Administration Console for z/OS|
Learn how the informational dashboard provides a starting point for viewing detailed database information. From the dashboard,
view exceptions and use Administration Console widgets to verify the exceptions.
A console for your tools >
| Back up, restore, and roll forward in an InfoSphere Warehouse
data partitioning environment|
Knowing how to back up and restore your database is a fundamental skill for every DBA. In a partitioned database environment,
there are special considerations. This article introduces the basics and demonstrates step-by-step the processes of backup,
recovery, and rollforward in the InfoSphere Warehouse partitioned database (DPF) environment.
Understand the backup process for partitioned databases >
scripts more efficiently in the SQL and XQuery editor|
Get on board with new enhancements to the SQL and XQuery
editor, a feature of Data Studio, InfoSphere Data Architect, and InfoSphere Optim Query Tuner. Learn how to create scripts,
validate syntax and semantics, use content assist, and schedule and run scripts against your database of choice.
Take advantage of the editor's new features >
| Demo: Create BIRT report templates with InfoSphere Data
In this demo, learn how to create BIRT report templates for data models using the New Report Template wizard in InfoSphere
Data Architect. Then, walk through the steps to generate a report based on that template.
Easily create and modify report templates >
| Demo: Optimize availability and resource utilization with
InfoSphere Optim Configuration Manager|
In this demo, see how an IT team at a fictional company, the Sample Outdoor Company, can optimize their data availability
and resource utilization with InfoSphere Optim Configuration Manager.
Increase your productivity >
| Enterprise Content Management Application Center|
In this developerWorks community group, you can find ECM solutions and interact with experts who can help you solve your
real-world business problems using ECM products and technologies.
Participate in the community >
| Java development 2.0: Redis for the real world|
Redis has a lot in common with memcached, but it boasts a richer set of features. Follow Andrew Glover as he experiments
with adding Redis (by way of Java-based variant Jedis) to his location-based mobile application.
Ultra-fast, lightweight caching with Redis >
| Secure Samba in mixed environments|
Security is a key element of any infrastructure. Learn about the available options, as well as some best practices for securing
Samba file shares, in our continuing series on Linux 302 preparation.
Secure Samba at both the firewall and daemon levels >
for Linux on POWER|
The IBM Software Development Kit for Linux on POWER (SDK) is a no-cost, Eclipse-based Integrated Development Environment
(IDE) that integrates C/C++ source development with the Advance Toolchain, Post-Link Optimization, and classic Linux performance
analysis tools, including OProfile and Valgrind.
Learn more and download it >
| Join in the conversation|
The Real-world open source group in the developerWorks community is an open forum for sharing your open source perspectives
and questions. Right now there are discussions on Android, photo editing software, and more. Add your perspective today.
Get real with the open source community >
| Follow Chris on Twitter|
Follow Linux and Open source zone editor Chris Walden on Twitter for regular updates
on articles and other information relevant to the Linux and open source communities.
Follow ChrisW_at_IBM on Twitter >
| Get social with Lotus Notes and Domino 8.5.3 Upgrade Pack 1|
The newly released
Lotus Notes and Domino 8.5.3 Upgrade Pack 1 provides a rich set of assets for building desktop and mobile web applications,
as well as two social application templates. Upgrade Pack 1 contains the Domino XPages Extension Library, updated templates
built with controls in Extension Library, and Domino Access Services.
Find out more >
| Control your network with iptables|
Iptables is the standard Linux firewall application. It is easy to configure and maintain yet powerful enough to provide
the control expected from a high-end appliance. Learn how to get started with iptables, recover from common issues, and
simulate a small-office usage scenario.
Set up and maintain a Linux firewall with iptables >
the Real-world open source community|
Show off your enthusiasm and knowledge for all things open source by
helping to build the Real-world open source community on developerWorks.
We need people to contribute to the wiki and the blog, and to help get
the discussions started. If you stand out, you could find yourself in a
podcast or writing a series for developerWorks!
Get involved, get discovered >
| Follow Chris on Facebook|
You can also keep up with Linux and Open source zone editor Chris Walden on
Facebook. Find out when articles post and keep up with his pointers to
other interesting information. Don't worry -- he doesn't talk about his
cat or his kid. It's all open source!
Follow ChrisW.at.IBM on facebook >
| Automate vulnerability scanning of web applications with Rational AppScan|
A 2011 IBM report revealed that 37% of all security vulnerabilities reported were in web applications. In this article, you
use Rational AppScan Standard Edition v184.108.40.206 to automate testing of a sample web service application. The authors, Bhargav
Perepa and Sujatha Perepa, also explain AppScan's regulatory compliance-reporting capabilities.
Check the security of your web apps and services >
| Use models to design business processes and services|
In this overview of designing business processes and services, Tanya Wolff highlights the roles and tools involved, workflows
that software architects can use, and the advantages of using modeling tools to assemble the elements. She also explains
workarounds and summarizes SoaML modeling practices.
Assemble components with modeling tools >
| Toward a Basic Profile for Linked Data|
While using Linked Data as an application integration technology in Application Lifecycle Management (ALM), IBM found several
ways of applying the existing W3C standards, yet little guidance on how to combine them. Two top IBM experts offer best practices
and propose a Basic Profile for Linked Data.
Get the details >
| Agile software development made practical with existing
Agile project management methods help teams respond to change and deliver higher-quality software. Rational Team Concert
helps you jump-start agile planning. It works well with Rational change and configuration management tools, so you can make
the transition yet leverage investments and minimize costs.
Jump-start your transition to agile development >
| Synchronize requirements data between Rational DOORS and
Rational System Architect|
It is critical to keep track of requirements associated with enterprise architecture artifacts. This article explains how
to synchronize and map EA data within Rational DOORS requirements management software with Rational System Architect, so
you can track requirements associated with the EA artifacts.
Sync your EA requirements data >
| Rational Innovate 2012 conference Call for Papers|
Submit your paper to the Rational Innovate conference Call for Papers for a chance to be selected as one of this year's distinguished
speakers. Deadline to submit your speaker application is 9 January 2012.
Learn more >
| Get started with Backbone|
interfaces in Ajax web applications. In this article, learn how useful Backbone can be for creating Ajax apps or single-page
Bring MVC structure to Ajax web apps >
| Your first cup of CoffeeScript, Part 1: Getting started|
developers. Set up the CoffeeScript compiler, then use it to create code that's ready to run in a browser or server.
Take a quick tour of CoffeeScript >
| New WebSphere Developer Technical Journal|
The new Tech Journal starts with two articles on WebSphere Application Server: using Trust Association Interceptors, and
using Jython to report performance data. Other article topics include capturing interface characteristics, controlling image
sprawl, and new tools to help automate your software updates.
| Building a parallel processing web service with the service
facade pattern and WebSphere Message Broker aggregation nodes|
Learn how to build a parallel processing web service
using the service facade pattern and the aggregation mechanisms in WebSphere Message Broker. The aggregation nodes fan out
the initial input message to a number of MQ requests that can be processed asynchronously, then fan in the multiple responses
to a single response, enabling you to decouple from MQ services and build a parallel synchronous web service.
| Series: Modeling your business processes with WebSphere
In this four-part article series, you'll learn how to use WebSphere Lombardi Edition V7.1 to model end-to-end business processes
using a sample purchase order scenario.
| New WebSphere Application Server Developer Tools for Eclipse
Are you looking for a no-cost, lightweight desktop development environment to build applications for WebSphere Application
Server? WebSphere Application Server Developer Tools for Eclipse is a subset of Rational Application Developer that you can
easily install on top of your existing Eclipse environment.
Download now >
| Mine XML association rules from static and dynamic XML documents|
Dig into XML data mining, a facet of XML data analysis. Learn about static and dynamic XML association rules and how to create
version-based association rules when the mined XML documents change, in Part 2 of this three-part series.
Start digging >
| Build an iPad slideshow app with XML, XCode, and the iOS
Create an iOS slideshow application that displays photos on iPads and iPhones. Begin with XML code and photos on a server,
build the iOS app, and add an image view. Finally, get the XML and animate your slideshow.
Create your slideshow >
| Combine Drupal, HTML5, and microdata|
Make your content easier to find and reuse. Add microdata to your pages with the new microdata module in Drupal. Configure
and add microdata output for basic field types and custom field types, so your content is available for use in applications
such as Google's Rich Snippets.
Enhance your data now >
To ensure proper delivery, please add firstname.lastname@example.org to your address
book. You received this email because you are subscribed to
IBM's developerWorks newsletter as: © International
Business Machines Corporation 2012. All rights reserved.
Attn: Developer Communications,
150 Kettletown Road
Southbury, CT USA 06488
Downloads & Trials