More sessions than you can shake a stick at! At least, I have to say that they were all worth attending, even if the day is fairly long and concentrating becomes somewhat difficult.
Here’s a rundown of my day’s program:
Vista security tidbits highlighted some of the new features added to Vista to increase and improve security. There are no more Power Users and a few groups have been added. To increase security with regard to services, each service is now assigned its own SID. To prevent DOS attacks and other exploits, better buffer overflow protection has been included in the kernel and offline files are encrypted per user. The event viewer has been updated and includes additional information and an XML view. There are device installation restrictions to secure workstations and notebooks, whilst the Windows Defender has been integrated into the OS.
IT infrastructure security provide some highlights with regard to hacking techniques, social engineering and user ignorance. A rather useful methodology to start with the planning for effective security and counter measures was introduced. The Security Risk Management Process provides guidelines to handle and identify threats, attack vectors and vulnerabilities. Proper patch management and compliance management must be considered. The danger of keyloggers seems to be on the increase…
SQL-Server always on – a rather dangerous statement to make for any Microsoft product, in my opinion! In any case, the new features in SQL Server 2005 include the ability to mirror databases and implement a high-available solution, using only software components. Restoration of single database pages is possible, whilst Microsoft is still unable to supply a database engine capable of indexing data whilst in an online state. This functionality is available only in certain circumstances. A couple of the Always On technologies include improved failover clustering, database mirroring, log shipping, peer-to-peer replication and improved backup and restore operations. The database now maintains checksums on database pages. Microsoft is even getting in on the UNIX act by finally providing mount points!
Building the data mart highlighted the capabilities of data warehousing functionality in SQL Server 2005. There has been some progress made in the binding together of ETL (extraction, transformation and loading) tools to provide a unified toolbox and interface. The graphical wizards and integration with .NET technologies make report creation and manipulation fairly easy. Analysis Services provide functionality to build cubes and the cube browser may be used by developers to troubleshoot and refine solutions. Report Services provide all the necessary wizards and painters for report generation.
Governance and compliance had the most ominous title, but proved to be the most interactive session of all. Highlighting security issues (keyloggers, again) and various initiatives to legislate cybercrimes in both South Africa and the rest of the world, this was certainly informative. There is a huge onus on keepers of data to ensure the privacy and appropriate use of such information. The draft POPI (Protection of Personal Information) bill will affect direct marketing companies: there is a focus on eight key elements: processing limitations, purpose specifications, further processing restrictions, information quality issues, openess, security safeguards, individual participation and accountability. The bill is expected to be approved and enforced within the next eight months or so. A new commission is expected to be formed to enforce the bill within all regions of South Africa.
DB mirroring best practices was a follow-up to the Always on session somewhat earlier. Focusing entirely on database mirroring principles and options available within SQL Server 2005, the session gave some excellent insight into the protection of databases. SQL Server 2005 supports both synchronous, as well as asynchronous mirroring. A principal and mirror server are setup, ideally with a reliable network connection between them. Through the use of a witness server it is possible to create a software-based high-availability solution with automatic failover. A DB monitor provides some feedback as to the amount of data that had been queued prior to a failure in the principal server. That gives some indication as to how much data may have been lost during a switch-over when running with an asynchronous setup.
Mobile development practices showed off the Mobile Client Software Factory. This is a set of libraries and routines specifically catering for mobile application development, and is freely downloadable. Various interesting modules are provided to assist developers coding for different mobile devices, including the orientation control which handles device-dependent features such as resolution and screen orientation. The connection monitor assists developers in determining how a mobile device is currently connected (GSM, ActiveSync, WiFi) and queues data for later transmission to a server in the case that a connection is not present. AUTD (Always Up To Date) technology is promised for inclusion in a future SP release of Exchange.
Tonight, comedy with John Vlismas and sci-fi action with X-Men 3.