The Case for Software Infrastructure Maintenance

1435 days ago, 529 views
PowerPoint PPT Presentation

Presentation Transcript

Slide 1

The Case for Software Infrastructure Maintenance Jim Horning Chief Scientist Information Systems Security Operation SPARTA, Inc. Sonoma State University, November 13, 2008

Slide 2

Overview Definitions Some old history Some late history Maintenance of common frameworks Maintenance of programming Two things that are not programming support SCADA A last confound for you References Sonoma State University

Slide 3

Infrastructure A hidden base or establishment particularly for an association or framework. The fundamental open works of a city or subdivision, including streets, extensions, sewer and water frameworks, waste frameworks, and vital open utilities. The streets, spans, rail lines, and comparable open works that are required for a mechanical economy, or a segment of it, to work . All through history, framework frameworks and administrations have ceaselessly developed in both innovation and association. Undoubtedly, in numerous occurrences, social researchers measure the level of human progress or headways of a general public on the premise of the abundance and explanation of its framework frameworks. One can undoubtedly recognize no less than fifty frameworks and subsystems that constitute a city's foundation, going from vast scale transportation and water activities to neighborhood therapeutic facilities and libraries. A PC framework's foundation would incorporate the equipment, the working framework, database administration framework, correspondences conventions, compilers and other advancement instruments—all the more by and large, any component certainly depended on in the arrangement of an administration. Sonoma State University

Slide 4

Maintenance The work of continuing something in legitimate condition; upkeep. Bookkeeping: Periodic uses attempted to save or hold an advantage's operational status for its initially expected utilize. Military: The routine repeating work required to keep an office in such condition that it might be consistently utilized, at its unique or planned limit and proficiency for its expected reason. Incorporates review, testing, grouping as to serviceability, conformity, adjusting, recuperation, departure, repair, update, and change. Programming: The repeating overhauling of projects keeping in mind the end goal to keep on operating as expected in an evolving domain. Sonoma State University

Slide 5

Ancient history: Key Roman Infrastructures Roads Agriculture and sustenance stores Aqueducts Photo from Assante Sonoma State University

Slide 6

Timeline of Roman reservoir conduits [Assante] Sonoma State University

Slide 7

Lack of upkeep [Assante] Sonoma State University

Slide 8

Recent history: Civil frameworks Much has been said in regards to the disregard and resulting crumbling of America's considerate foundation—the openly financed or directed structures and offices that bolster vital capacities, for example, transportation (land, water, and air), water supply and wastewater treatment, power, and waste transfer. There have been numerous exorbitant framework disappointments that could have been forestalled by convenient upkeep. American specialists have been cautioning about under-interest in foundation support for no less than a quarter-century (e.g., America in Ruins: The Decaying Infrastructure , 1983). However, less has been done than said. Sonoma State University

Slide 9

New Orleans after Hurricane Katrina Sonoma State University

Slide 10

Hurricane Katrina, Aug. 29, 2005 Cascading issues Wind High water Levees given way Massive flooding Electricity lost Pumps fizzled Telephones to a great extent fizzled Water and sewer frameworks generally fizzled Hospitals, schools, police, transportation, libraries, banks, … Each broken down foundation made reestablishing others harder Over 1.5 K dead Over $100 G in Federal guide alone Over 100 K caught in city amid tempest; more than 250 K outcasts Complete recuperation may take 20 years Sonoma State University

Slide 11

Interstate 35W scaffold crumple, Aug. 1, 2007 New York Times photograph Sonoma State University

Slide 12

Sonoma State University

Slide 13

Interstate 35W scaffold fall, Aug. 1, 2007 Multiple causes Faulty plan Gusset plates were too thin for outline stack (½" rather than 1") Structure was "break basic" Inspection two years earlier neglected to perceive gusset plate locking that was obvious in photos Deferred upkeep (appraised in "poor" condition for 17 straight years) Bridge over-burden with development gear and materials 13 executed, 145 harmed $38 M pay bundle for casualties Expedited substitution of scaffold cost $400 M Replacement had been booked for 2020-25 See for subtle elements and numerous realistic photographs Sonoma State University

Slide 14

My contention Civilization and framework are personally interlaced. Rising civic establishments fabricate and advantage from their frameworks in a "prudent cycle." As human advancements decrease, their foundations rot. Sonoma State University

Slide 15

Dependence on basic foundations is expanding internationally. This is genuine of data frameworks and system administrations, as well as of numerous others that we depend on for our vocations and prosperity. These basic frameworks are turning out to be more interrelated, and all the more intensely reliant on data innovation. Individuals request always and better administrations, however see ever less about what it takes to give those administrations. Sonoma State University

Slide 16

The disappointment of a basic framework can course into others. The very cooperative energies among foundations that permit advance to quicken are a wellspring of positive criticism, permitting beginning disappointments to grow into much bigger long haul issues including a wide range of frameworks. Remediating after a crumple frequently includes numerous auxiliary costs that were not anticipated. The more extraordinary frameworks that flop simultaneously, the more troublesome it gets to be to reestablish benefit in any of them. Reestablishing a lost "environment" for the most part costs a great deal more than the total of the expenses of reestablishing every component independently. Sonoma State University

Slide 17

The support exchange off Engineers realize that physical foundations rot without standard upkeep, and they get ready for maturing (e.g., consumption and disintegration) that requires reviews and repairs. Appropriate upkeep is by and large the least expensive type of protection against disappointments. With uncommon special cases, for example, shuttle, where it's not possible. In any case, it has an unmistakable present cost that must be adjusted against the obscure future cost of conceivable disappointments. Sonoma State University

Slide 18

Software upkeep Although PC programming does not dissolve or consume, it is liable to contrary qualities and disappointments brought about by evolving situations, changing client practices, and changes in basic equipment and programming. In this way, it requires upkeep. However the expenses of programming support are regularly disregarded in the arranging, outline, development, and operation of basic frameworks. Incremental moves up to programming are blunder inclined and confound upkeep. Sonoma State University

Slide 19

Software upkeep cases Y2K In the 60s it appeared to be impeccably sensible to utilize two digits in dates to encode the year. Who knew the COBOL programming would at present be utilized as a part of 00? Worldwide Positioning System satellite 32 In the November 2008 issue of BoatU.S. magazine, there's a reference to another GPS satellite being exchanged on. It utilizes the identifier "PRN 32," which causes some Northstar GPS units to "wind up befuddled" and "close down." Fortunately, there are firmware overhauls accessible, however now and again they cost cash. Shockingly, most boaters wouldn't know a firmware overhaul on the off chance that they snared one, so there will without a doubt be mischances and different issues, and GPS units "acting flakey" (they just crash when that specific satellite is in view). Sonoma State University

Slide 20

Two things that I don't call Software Maintenance Adding new usefulness: This is Software Extension. Adding another wing to a building is not upkeep. Fixing bugs: This is simply Belated Quality Assurance (BQA). November 11, 2008 (IDG News Service) Some security patches require some serious energy—seven and a half years, truth be told, on the off chance that you tally the time it's taken Microsoft Corp. to fix a security issue in its SMB (Server Message Block) benefit, which was settled Tuesday. This product is utilized by Windows to share records and print archives over a system. In a blog posting, Microsoft recognized that "Open instruments, including a Metasploit module, are accessible to play out this assault." Metasploit is an open-source toolbox utilized by programmers and security experts to manufacture assault code. As per Metasploit, the imperfection backtracks to March 2001, when a programmer named Josh Buchbinder (a.k.a. Sir Dystic) distributed code demonstrating how the assault functioned. Ben Greenbaum, inquire about supervisor at Symantec Corp., said the blemish may have first been revealed at Defcon 2000, by Christien Rioux (a.k.a. Dildog), boss researcher at Veracode Inc. Whoever found the defect, Microsoft appears to have set aside an uncommonly long opportunity to alter it. Sonoma State University

Slide 21

Neglecting support Creating viable frameworks is troublesome and requires huge foreknowledge, fitting spending plans, and talented people. Disregard is the inertially simple way; upkeep requires repeating exertion, ability, and financing. Be that as it may, proper interests in support and in viability could yield colossal long haul benefits, through dependability, strength against assault, usability, and versatility to new needs. Sonoma State University

Slide 22

Supervisory Control and Data Acquisition Systems SCADA alludes to a framework that gathers information from different sensors at a manufacturing plant, plant, or other remote area and afterward send