Panda Security upgrades cloud-based anti-malware service to include auto updates

As more computing functions continue to exploit cloud delivery models, security issues remain a key concern. But the cloud also continues to be the solution to its own problem.

Extending it's cloud-based PC security and anti-malware services, Panda Security today moved to help further alleviate malware fears by expanding its free offerings to include a paid version that automates the updates and upgrades to the service. [Disclosure: Panda Security is a sponsor of BriefingsDirect podcasts.]

Dubbed Panda Cloud Antivrus Pro, the new edition works to protect computer users online and offline by extending the protections in the free product launched last year. The Free Edition is still available and also offers enhanced functions, while the Pro Edition sells for $29.95 and offers both automated updates as well as support benefits and other features.

Minimal performance impact

Besides being a popular free cloud security service for home users (about 10 million consumers have downloaded the free version to date), Panda Antivirus pushes another attention-getting message: minimal impact on computing performance. That has helped bring the service into use among SOHO, SMB and even some enterprise users.

Panda Antivirus relies on a proprietary technology for automatically collecting and processing millions of malware samples in the cloud, rather than locally on the consumer’s PC. The technology and method, called Collective Intelligence, can swiftly ID and thwart malware as it appears anywhere on the Internet and then update the clients with the fix.

Because the processing is largely done via cloud-based data centers, the client-bourn antivirus software uses a mere 15MB of RAM compared with the 60MB of RAM traditional signature-based antivirus products typically use. It also puts a loss less workload on the processor(s).

Panda Security is pushing the speed superiority of its Collective Intelligence platform in protecting PCs against both known and unknown malware. The company points to recent tests by AV-Test.org that compared leading antivirus programs. In those tests, Panda Cloud Antivirus outperformed the average zero day detection score of competitors by 42.5 percent, said Panda.

New functions and features

The Free Edition of Panda Cloud Antivirus offers some advanced configurations that let users customize certain features, like behavioral blocking and analysis, to meet the requirements of their systems. The Free Edition now also includes a behavioral blocker that protects against new malware and targeted attacks, as well as self-protection of antivirus files and configurations that prevent targeted malware attacks from disabling the software.

The Pro Edition offers all that and more, including automatic upgrades and automatic vaccination of USB and hard drives to eliminate the possibility of transmitting infections while users are offline and/or physically mobile. The Pro Edition also offers dynamic behavioral analysis to add a additional layer of protection by analyzing running processes and blocking any malicious behavior.

BriefingsDirect contributor Jennifer LeClaire provided editorial assistance and research on this post. She can be reached at http://www.linkedin.com/in/jleclaire and http://www.jenniferleclaire.com.

You may also be interested in:

• PC 'security as a service' gains global cloud footprint with free malware protection

• Panda Security strengthens SaaS-based PC virus protection solution
  

• Panda Security delivers cloud-based security management service

• Panda's SaaS-based PC security manages client risks
  

WSO2 tailors open-source middleware platform for cloud-based applications, deployment models

WSO2 today announced the debut of WSO2 Stratos, an open-source middleware platform for cloud-based enterprise applications.

The on-demand or on-premises Stratos platform fosters building and deploying applications and services specifically for platform as a service (PaaS)-type deployments. Stratos goes beyond plain vanilla PaaS, however, by automating provisioning of enterprise servers, including the portal, enterprise service bus (ESB), and application servers. [Disclosure: WSO2 is a sponsor of BriefingsDirect podcasts.]

The announcement marks WSO2's entry into the emerging market for enterprise PaaS, as well as enabling hybrid computing models. Using Stratos, applications can be created or migrated on-premise, to a private cloud, or to the public cloud for potentially unprecedented deployment flexibility.

I like to call this flexibility fungibility of applications and services, meaning the apps can be moved from various cloud models across various cloud providers and platforms with minimal rework and configuration headaches. We're ways off from cloud applications fungibility, but users should be demanding it, and therefore resisting cloud lock-in. Open source is an important part of cloud fungibility, but more standards are needed.

Through its integration layer, WSO2 Stratos installs onto any existing cloud infrastructure -- Eucalyptus, Ubuntu Enterprise Cloud, Amazon Elastic Computing Cloud (EC2), and VMware ESX, to name a few -- meaning enterprises can let the market work for them, and resist being lockeded into a specific infrastructure provider or platform.

“At a time when IT developers can create a new application in one month, taking months to provision and deploy servers and systems no longer makes strategic or economic sense,” said Dr. Sanjiva Weerawarana, WSO2 founder and CEO. “WSO2 Stratos provides a complete middleware platform for delivering robust applications on private clouds, as well as migrating between and integrating with public clouds and on-premise systems—and there’s never cloud lock-in.”

Once Stratos is installed, users get a Web-based management portal where they can configure, manage and govern independent, but consistent, servers for each department, or for each stage of a system’s lifecycle. Each server is completely virtual, scaling up automatically to handle the required load, and metered and billed according to use.

At the heart of the WSO2 Stratos PaaS is a Cloud Manager, which manages all other services and offers a portal where users can log in and register their domain (tenant), manage their account, and configure the middleware services that are available for their users. The Cloud Manager offers point-and-click simplicity for configuring and provisioning middleware services, so developers can get started immediately and focus on the business logic.

WSO2 Carbon

Stratos is built on top of and extends WSO2 Carbon, the company's componentized middleware platform. WSO2 last month announced Carbon 3.0, which lets developers point-and-click to tailor middleware functionality into a customized solution.

The new WS-Discovery support automates the configuration of a project spanning multiple Web service endpoints. WSO2 Carbon 3.0 also features enhanced integration of the WSO2 Governance Registry across the platform, facilitating governance and monitoring across large clustered deployments and cloud implementations.

At a time when IT developers can create a new application in one month, taking months to provision and deploy servers and systems no longer makes strategic or economic sense.

The Carbon 3.0 Component Manager features a checkbox user interface (UI) where IT professionals start with a lean core and can click to add the functionality they want to their WSO2 middleware products—choosing from among more than 150 features.

WS-Discovery support allows Carbon 3.0 to automatically discover nearby service endpoints, freeing IT professionals from much of the rewiring work typically required when deploying a new set of services or moving existing ones. This facilitates the ability to move deployments between different servers, private clouds, or public clouds.

Enhanced Governance Registry integration across the entire Carbon 3.0 middleware platform increases the ability to govern and monitor large-scale deployments, including clustered servers and cloud implementations.

Availability and support

WSO2 Stratos is available today as an early adopter release for private clouds, as a demonstration version on public clouds, and as an early release of the downloadable open source software.

WSO2 also today launched the WSO2 Cloud Partnership Initiative around WSO2 Stratos. WSO2 is partnering with systems integrators (SIs) and infrastructure-as-a-service (IaaS) providers to streamline the development and deployment of applications and services for enterprise clouds.

WSO2 is providing a "fast-track path" for SIs to use WSO2 Stratos for cloud-enabling their customers’ existing applications and services, building and delivering new SaaS offerings, and creating new vertical PaaS/SaaS templates to support industry-specific applications and services, said WSO2. SIs that join the initative gain complementary training, including set-up of a pilot private cloud based on WSO2 Stratos; revenue sharing on initial WSO2 Stratos-based deployments; and a commission on recurring production support revenue.

SIs Cognizant Technology Solutions and WebScience, one of Italy’s leading providers of technology and consulting services, have already joined, said WSO2.

WSO2 is also establishing partnerships with leading IaaS providers including Amazon Web Services, Canonical/Ubuntu, and VMware.

WSO2 Carbon 3.0 middleware products are available as software downloads and as WSO2 Cloud Virtual Machines running on the Amazon Elastic Computing Cloud (EC2), Linux Kernel Virtual Machine (KVM), or VMware ESX. As fully open source solutions released under the Apache License 2.0, WSO2 SOA middleware products do not carry any licensing fees.

In conjunction with WSO2 Stratos, WSO2 is launching its new CloudStart Program. The service, priced at $17,500, provides an engineering team onsite for a week to deploy WSO2 Stratos on either Ubuntu Enterprise Cloud or the customer’s existing cloud infrastructure. Working hand-in-hand with the customer development team, the WSO2 experts build a lightweight implementation or proof-of-concept. They then follow up the onsite engagement with offsite development support.

You may also be interested in:

• Open-source web services stack and WSO2's latest ESB
  
  
• WSO2 data services provide catalyst for SOA and set stage for new cloud-based data models
  
  
• Open source and cloud: A curse or blessing during recession? BriefingsDirect analysts weigh in

What can businesses learn about predictive analytics from American Idol?

This guest post comes courtesy of Rick Kawamura, Director of Marketing at Kapow Technologies.

By Rick Kawamura

Social media data continues to grow at astronomical rates. Last year Twitter grew 1,444 percent with over 50 million tweets sent each day, and Facebook now has over 400 million active users. Every minute, 600 new blog posts are published, 34,000 tweets are sent, and 240,000 pieces of content are shared on Facebook.

The numbers are absolutely astounding. But is social media data credible? And can tangible business intelligence (BI) be extracted from it? [Disclosure: Kapow Technologies is a sponsor of BriefingsDirect podcasts.]

Reality Buzz, a new social media analysis project powered by web data services technology, was created to answer this very question by examining if real-time analysis of social media conversations can predict the outcome of popular reality television shows like American Idol and Dancing with the Stars. After Reality Buzz collected tens of thousands of tweets, comments, and discussions about contestants on both programs each week and applied sentiment analysis to the data, there was very clear, data driven insight to predict the contestants to be eliminated.

Stepping outside the example of "reality" TV, social media sentiment can be a powerful source of data that arms organizations with real-time intelligence to make more strategic business decisions. Based on experience with Reality Buzz, here are five tips for extracting real value from social media data:

Data trumps conventional wisdom

While Malcolm Gladwell, author of Blink: The Power of Thinking Without Thinking, would say otherwise, data-driven business decisions definitely outperform guesswork. Week after week on Dancing with the Stars, the infamous Kate Gosselin held up to 40 percent of all conversations in social media. Unfortunately for Kate, 95 percent of those comments were negative.

Conventional wisdom said that she should pack her bags. Yet the data showed despite all the negative conversations, she still had more share of positive comments than several other contestants, meaning she was far less likely to be eliminated. Because viewers vote for contestants they’d like to keep on the show, there is a strong correlation to positive sentiment. It wasn’t until the fourth week that Kate’s volume of positive comments died down and she was voted off.

Product managers deal with this dilemma all the time. Tasked with determining the next set of product features to drive greater profitability, they have to manage the CEO’s gut feel while also satisfying the needs of those who have to sell it, both of whom want it better, cheaper and faster. But “better, cheaper, faster” isn’t a great long-term strategy. A great product manager would look to the data to find unmet needs and untapped markets, and social media is a great place to find these hidden nuggets of intelligence.

Timing is critical

Any data over 24 hours old is pretty much worthless for predicting who will be eliminated from a reality TV show. The same holds true in the business world, where it’s imperative for the data to be as close to an event as possible, as this data has the strongest effect on sentiment.

Weeks old data may prove costly, resulting in more damage to the brand and revenue.

When launching a new product, for example, companies need to consider sentiment immediately prior to and after the launch. The same applies to a marketing campaign. Say Toyota releases a full page ad in The Wall Street Journal only to get a report on sentiment a few weeks later. Worthless. Companies need to know their customer’s sentiment just before they publish the ad to create the most relevant message, and immediately following to measure its resonance with their audience. Weeks-old data may prove costly, resulting in more damage to the brand and revenue by further demonstrating lack of understanding and responsiveness to frustrated customers.

Don’t be blind to the noise factor

It’s easy to understand trends, changes in momentum, volume of traffic, and ratio of positive to negative sentiment. However there is a lot of noise that can easily skew the data, especially with large, very public shows like American Idol. The bigger the show, product, etc., the more noise. This is most prominent in Twitter, which very often represents the largest source and volume of data. Despite the noise, though, there is valuable information that shouldn’t be ignored. Interestingly, most of the noise resides in neutral sentiment, not positive or negative. These are comments, articles, and reviews about a brand that don’t provide any real opinion.

This is why it’s important to understand how to filter the data to maintain its quality and relevance.

Not all social media sentiment created equal

Companies need to clearly define their goals before analyzing social media data. There are differing degrees of sentiment, and not all translate equally well. Most sentiment analysis tools begin by separating data into positive and negative groups. Yet even within each fan group there are varying degrees of support for contestants. In trying to determine the number of votes for a contestant, consider this data: “I just voted 100 times for Casey” vs. “My top 3 are Lee, Michael and Casey” vs. retweeting a link to a video or article which mentions Casey.

Companies also need to consider how to weigh one tweet versus a Facebook comment versus a blog post.

The reality is that not all data is needed or equal in weight. For American Idol, votes are cast for the person you want to keep on the show, so negative sentiment has little correlation to who will be voted off. This requires factoring out negative comments from total sentiment to get the most accurate prediction. Companies also need to consider how to weigh one tweet versus a Facebook comment versus a blog post. Each is just one piece of data, but does each one count equally?

Don’t look at data in a vacuum

Having knowledge of events and circumstances is critical to understanding and extracting intelligence from social media data. In the case of Reality Buzz, it was helpful to watch the performance shows for added context. This process is key for companies to raise other hypotheses to further investigate after they’ve seen the output.

Similarly, some manual data review is also essential to ensure quality and consistency. For example, when using an automated sentiment analysis tool, companies can weigh keywords differently. In addition, automated tools are not yet capable at distinguishing sentiment as functional, emotional or behavioral. So in monitoring social media data, there had to be a huge difference between “I like my new Canon camera” and “I just told my friend to buy the new Canon camera.” While both positive sentiments, the latter should be weighed much more heavily.

The growing mass of social media data is definitely a treasure trove of insight to extract intelligence, whether predicting reality show winners or moving your business forward. When done correctly, collecting and analyzing social media sentiment can be a pain-free, powerful tool for real-time feedback, predictive analytics and getting the competitive edge you need to win.

Rick Kawamura is Director of Marketing at Kapow Technologies, a leading provider of Web data services. Rick was most recently VP of Marketing at DeNA Global, and previously held strategic and product management roles at Palm and Sun Microsystems. He can be reached at rick.kawamura@kapowtech.com.

You may also be interested in:

• Web data services extend business intelligence depth and breadth across social, mobile, web data
  
  
• Web data services -- here's why text-based content access and management plays crucial role in a real-time BI
  
  
• Web data services provide ease of data access and distribution from variety of sources, destinations

Ariba, IBM deal shows emerging prominence of cloud ecosystem-based collaboration and commerce

The more you delve into how cloud computing can reshape business, the more clear becomes the importance of ecosystems.

No one cloud provider is likely to forecast and deliver all that any business needs or wants. More importantly, the role of the cloud provider is less about providing complete services than in enabling the ease and adaptability of acquiring, delivering and monetizing a variety of services in dynamic combination.

We're now seeing that the marketplace of cloud-hosted APIs is rich and exploding. But it's a self-service, organic market model that's emerging-- not a top-down ERP-like affair. And that is likely to make all the difference in terms of fast adoption.

Do providers like Apple, Google and Amazon produce the lion's share of services themselves -- or do they provide a fertile garden in which others create services and APIs that make the garden most valuable to all participants, inviting more guests, more development, more collaboration?

The organic model is also likely to repeat in ecosystems that allow buyers and sellers to align, and business processes between and among them to flourish. The business-to-business (B2B) commerce cloud is now being built. Recent acquisitions, like IBM's buy of Cast Iron and intent to buy Sterling Commerce, point up the "business garden" goals of Big Blue. Cast Iron allows the cultivation of hybrid clouds, clouds of clouds and rich services integration. Sterling brings EDI-based networks into the fold.

IBM clearly likes the idea of playing match-maker between traditional and new business models.

IBM clearly likes the idea of playing match-maker between traditional and new business models. And this cloud garden party effect aligns perfectly with IBM's tendency to avoid providing packaged business applications in favor of the platforms, middleware, process enablement and collaboration capabilities that support others' discrete applications.

Last week's announcement then of a cloud collaboration partnership between IBM and Ariba furthers the emerging prominence of cloud commerce ecosystems. To encourage more ecommerce, the IBM-Ariba deal matches B2B buyers and sellers via LotusLive collaboration and social networking services, all through cloud delivery models.

Conference capstone

The announcement came as a capstone to the Ariba Live 2010 conference in Orlando. [Disclosure: Ariba is a sponsor of BriefingsDirect podcasts.] I had fun at the conference spouting off on cloud benefits, and tweeting up some of the mainstage events under #AribaLive.

Ariba plans to integrate its Ariba Commerce Cloud with IBM LotusLive to help buyers and sellers communicate and share information more fluidly and effectively, leading to faster, more confident business decisions, the companies said. Ariba plans to integrate IBM’s LotusLive with Ariba Discovery, a web-based service that helps buyers and sellers find each other quickly and automatically helps match buyers’ requirements to seller capabilities.

Both Ariba and IBM are recognizing the power and huge opportunity of being at the center of cloud-based commerce. And being at the center means allowing the participants to do the actual driving, to enable the community to seek and find natural partners via social interactions. We're likely to see the equivalent of app stores and social networks well up for B2B commerce, scaling both down and up, in the coming months and years.

What's now good for consumer commerce is soon to be good for the business side of the equation. It's simply the most efficient.

“The successful combination of LotusLive and the Ariba Commerce Cloud will provide such a matchmaking comfort zone in which networks of partners, suppliers and customers can easily work together across company boundaries to help do their jobs more efficiently and cost-effectively, and perhaps even develop lasting relationships," said Sean Poulley, Vice President, IBM Cloud Collaboration, in a release.

As Ariba Chairman and CEO Bob Calderoni says, what's now good for consumer commerce is soon to be good for the business side of the equation. It's simply the most efficient.

After IBM set its sights on Sterling, I at first wondered if IBM and Ariba might find themselves competing. But last Wednesday's deal shows that ecosystems rule. One-in-all cloud provider aspirants should take note. The way to making the network most valuable is by empowering the business (both sellers and buyers) to carve out what they want to do themselves.

IBM Lotus collaboration services plus Ariba's cloud and commerce network services seem to be striving to reach the right balance between providing a fertile arena and then getting out of the gardeners' way.

You may also be interested in:

• Ariba steps up cloud efforts with StartContracts, on-demand contract management for SMBs
  
  
• BriefingsDirect analysts discuss business commerce clouds: Wave of the future or old wine in a new bottle?
  
  
• Enterprises can leverage cloud computing benefits while managing risks through services governance, say HP executives

With eye on cloud standard, Apprenda offers free downloadable version of SaaS application server

Apprenda, a software as a service (SaaS) middleware provider, is now offering a free downloadable SaaS stack that provides much of the functionality of its flagship SaaSGrid, an application server for on-demand apps.

The Clifton Park, NY company says that SaaSGrid Express, announced today, provides free access to a foundation with which to deliver .NET applications as mature SaaS offerings with a competitive cost-of-delivery profile.

The model appears simple. Use community and ISV economic imperatives to drive a de facto standard into the market, thereby seeding a strong business to the upgrade-path commercial version. The timing is great, as finding a way to enjoy cloud computing scale and economics is top of mind for ISVs and early-adopter enterprises.

All of the main features and functions of SaaSGrid application server have been ported to the self-installable Express edition. Apprenda says their product has drastically reduced time-to-market and capital requirements for independent software vendors (ISVs), SMBs and enterprises, with some customers experiencing 50 to 70 percent reductions in planned engineering time and associated costs.

I like to think of this as allowing for SaaS "stack bursting," which could easily augment cloud-bursting efforts, seeing as users of Apprenda SaaSGrid can run on Amazon EC2 as well as for on-premises virtualized workloads. The model might also work really well in migration efforts, of going from legacy apps to web and ultimately cloud deployments.

According to Apprenda CEO Sinclair Schuller some 93 percent of ISV-delivered applications have yet to make the transition to on-demand and SaaS-delivered. That's a lot of apps.

In addition to the complex architectural foundation afforded by SaaSGrid Express -- such as low effort multi-tenancy and resilient grid-scalability -- the product also provides some of the other “out of the box” application services found in the full-fledged commercial SaaSGrid offering, including:

• Metering
• Monetization
• Subscription Management
• Application lifecycle management
• Cloud control
• Billing
• Customer provisioning

This new edition enables developers to quickly build, deploy and onboard customers to their .NET applications, letting them build significant revenue streams without any license costs.

Full-licensed version

ISVs leveraging the full-production-licensed SaaSGrid edition pay a per-server, per-month license fee, and benefit from full customization and branding capabilities, as well as additional features. This licensing model, known as the SaaSGrid Monthly Server License, includes free access to maintenance and software upgrades and comprehensive customer service (based upon the number of licensed servers).

In April, Gartner analyst Yefim Natis profiled Apprenda as one of the "Cool Vendors" in the application platform as a service (APaaS) space. He said:

Apprenda's support of ISV (or private cloud application project) requirements for developing and running SaaS-style offerings far exceed the functionality available with the recently delivered Windows Azure SDK. Apprenda's advanced support for fine-grained and adjustable use tracking and billing is particularly valuable for ISVs.

Apprenda achieves this breadth of capabilities largely unintrusively, in part by intercepting and extending the Web and the database communications of the application and in part by modifying the compiled application intermediate language code (adding value and some overhead in the process).

However, Natis does offer one caution:

Apprenda's current business is primarily focused on ISVs. Historically, the business opportunities of middleware providers servicing the ISV market have been limited. With time, the company must develop a product offering that targets enterprise IT cloud application projects as well in order to expand its business opportunities.

If the ISVs' needs and enterprise app migration efforts alone jump-start adoption of SaaSGrid Express it could make for a strong and clear path to clouds, from Amazon to Azure to the home-grown variety at an enterprise near you.

For more information on SaaSGrid Express and how to download it, visit the Apprenda web site: www.apprenda.com.

You may also be interested in:

• Workday builds out SaaS bellwether for human capital management services and cost controls
  
  
• IT and log search as SaaS gains operators fast, affordable and deep access to system behaviors
  
  
• SaaS delivery of IT lifecycle and quality management functions evolves toward an IT service-delivery solutions approach