Posts Tagged ‘systems’

How Complete is Your E-commerce Solution?

Saturday, November 21st, 2009

Once upon a time, the budding entrepreneur was often stopped in their tracks due to the lack of financial resources needed to invest in the traditional brick and mortar store.  This no longer has to be the case as both the internet and e-commerce are in full swing, providing companies of all sizes with an opportunity to move up several notches on the competitive ladder.  However, finding the right e-commerce solution is never as easy as it sounds.  A countless number of companies claim to have exactly what you need, but the harsh truth is that you can never be certain until giving it a try for yourself.  Unfortunately, the trial and error approach can turn out to be very risky, especially if you are trying to establish a business online.  To help in your search efforts, we have a compiled a list of some features that must be present in order to make up a complete e-commerce solution.

Compatibility with Existing Systems - Launching an e-commerce site is a tremendous process.  Therefore, you should not make it even more complex by setting yourself up to encounter technical problems.  Whether it is a shopping cart or payment gateway, make sure any e-commerce component you plan to integrate is compatible with your existing hardware, operating system and applications.

Ability to Support Existing Data – An ideal e-commerce solution is one that allows you to easily import data from one location to another.  This becomes a must for large stores that maintain databases in environments where it could be complex and costly to manually transfer large amounts of data into a new system.  Keep in mind that this feature is usually included in high-end enterprise solutions but may not be included in cheaper, entry-level systems.

APIs with Linking Support – Integrating inventory management and finance systems is one of the most challenging aspects of e-commerce.  If this is something you wish to do, you may want to look for a solution that offers flexible APIs.  Short for application programming interfaces, these APIs enable developers to write code that will connect your legacy system to your e-commerce server.

Functional Shopping Cart - The shopping cart is the most obvious and important feature of any e-commerce solution.  You need to put special emphasis on this application as it will allow visitors to browse your store and purchase the items they want to purchase.

Diverse Payment Systems – Most consumers prefer to shop online with credit cards or third-party services such as PayPal.  On the other hand, a complete e-commerce solution goes that extra mile and supports additional payment options.  This will give you the opportunity to maximize your profits by catering to a broader range of customers.

The features listed in this article are just a few that must be obtained to form a complete e-commerce solution.  This means you need to keep your eyes peeled for several more qualities.  Despite how insignificant some of these features may seem, each is equally critical as they will determine the failure or success of your venture with e-commerce.

How Secure is Virtualization Technology?

Wednesday, October 14th, 2009

A September 2009 survey released by Centrify revealed that the major barrier facing 46% of the respondents when it comes to adopting virtualization is security. In fact, only an estimated 20% of respondents said they were strongly confident in the security infrastructure of their virtualized environments. Professionals heavy into the technology sector are well aware of the security conundrum that surrounds virtualization. It has become such an issue that EMC recently assembled a panel of experts from its Ionix, RSA and Vmware divisions to put together some guidelines for adequately securing virtualized environments. What they came up with was “Security Compliance in a Virtual World,” a report that focuses on many key points that must be considered for ensuring virtualization security.

OS Hardening

The configuration for virtual machines and switches must be hardened just like your physical boxes and network switches. The underlying operating system must also be hardened through routine patches and updates, removal of unused components and maintaining secure settings. The EMC report suggests modeling virtual systems after the guidelines from the CIS (Center for Internet Security) and DISA (Defense Information Systems Agency) as they are viewed as well established security practices.

Configuration and Change Management

Since virtualization technology makes it simple to deploy new virtual machines and modify their set ups, it becomes very easy to fall into a chaotic state of configuration when it comes time to managing the environment. Even when systems are adequately hardened during installation, it is still important for organizations to stay on top of the environment to ensure a secure configuration. This means that when system settings are modified or new software applications are added, administrators are making sure the virtual system continues to meet what the EMA report calls the “gold standard” of configuration.

Access Control

Practical security polices such as least privilege and separation of duty should not be thrown to the wayside just because virtualization has come into the picture. Instead, such principles should become more essential than ever. The presence of virtualization results in increased density of all the systems and applications on your server. This is more convenient for your organization as well as the intruder who may be able to manipulate these systems if proper access control is not enforced and maintained. The report suggests that solution providers aid their staff and clients in understanding the importance of role-based access control both in and out of the virtual environment.

Network Security and Segmentation

Companies operating virtual servers lacking any sort of segmentation are far more vulnerable to exploit and exposure than organizations making use of virtual switches to incorporate those virtual machines into virtual local area networks like their physical counterparts. The security report explains that one of the most essential factors in compliance is ensuring that data is isolated and not mingled with or available to users on other virtual machines. Organizations that possess expertise in the network security field should put it to use in the virtualization environment. This can be done by obtaining virtual switches and other virtual security mechanisms such as firewalls and intrusion protection systems to protect network perimeters.