text:
|Publication number
|Publication type
|Application number
|Publication date
|Nov 23, 2010
|Filing date
|Sep 14, 2007
|Priority date
|Mar 12, 2004
|Fee status
|Also published as
|Publication number
|David K Murotake, Antonio Martin
|Original Assignee
|Sca Technica, Inc.
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (25), Non-Patent Citations (27), Referenced by (20), Classifications (27), Legal Events (4)
|External Links: USPTO, USPTO Assignment, Espacenet
This application claims priority as a continuation-in-part application to pending U.S. application Ser. No. 11/079,673, filed Mar. 14, 2005, which claims priority to U.S. Application No. 60/552,782, filed Mar. 12, 2004; and claims priority to U.S. Application No. 60/825,793, filed Sep. 15, 2006. Each of these applications is herein incorporated in its entirety by reference.
The invention relates to high assurance computing, and more particularly, to achieving high assurance computing in systems that utilizes low assurance environments.
Current means of computational operation revolve around large and relatively insecure operating systems like Microsoft's Windows, Apple's OSX, the various Linux variants and other monolithic operating systems. The large size of their code base makes it nearly impossible to attain high level of assurances. As a result, the integrity of such an operating system is always questionable. Viruses and other malware can penetrate a system, hiding themselves either within the environment or external to it, running in parallel. In either case, detection of such malicious software can be impossible since the infection has compromised the environment, subverting detection mechanisms.
Accordingly it is an object of the invention to provide a novel and useful system and associated methods that can solve the problems described herein. More specifically, it is an objective of the invention to leverage high assurance computing capabilities to protect lower assurance operating systems. To this end, a computing system is provided with and uses a high assurance kernel, a partitioning microkernel (PMK) or equivalent means for imposing memory partitioning and isolation prior to exposing data to a target operating system or process, and for continuing memory management whereby data is validated by security checks before or between sequential processing steps.
The invention in one aspect is a high assurance computing system that contains a high assurance, partitioning microkernel (PMK) or other such operating system capable of enforcing memory isolation and partitioning. The PMK may employ multiple independent levels of security (MILS) and be referred to as a (MILS) PMK. The PMK can also use a memory management unit (MMU) to enforce memory partitioning. According to one embodiment the system also contains an Object Request Broker.
According to one aspect of the invention the PMK isolates or contains at least one lower assurance operating system such as a Windows XP, Linux, or OSX, or at least one process such as a web browser or email client. (The Applicant makes no claims to the trademarks associated with the referenced operating systems and processes that it may isolate or contain, registered or otherwise.) The PMK may be instantiated by a boot kernel. A high assurance computing system of the invention may further comprise incoming and outgoing data to and from a contained operating system, which flows through a set of security processes in an inline manner. There may be a set of security processes that are contained in their own memory partition.
Simply stated, a high assurance computing system (HACS) of the invention consists of the high assurance components described herein and the affected user's operating systems and processes. The presence and performance of the high assurance components of the HACS in association with its contained operating systems and processes may be transparent to the user in normal operation, while providing increased security and protection.
An HACS system of the invention may also have a process or set of processes, which are contained in their own memory partition, and provide security administration and or authentication.
An HACS system may consist of or reside on a laptop, PC, PDA, Cell Phone, computer server, a multi CPU or multi core embedded system, or other such computing device or computer-based platform.
An HACS system can also reside on and function in a platform such as a communication card; a motherboard chipset; a motherboard chipset and computer CPU(s); a computer CPU; or a system with multiple CPU's.
According to one aspect of the invention, a first processor boots a PMK. The first processor PMK can partition the shared memory for all processes on a platform. The first processor PMK can also partition the shared memory for all processors on a platform. The processors can take their partitioned memory and further partition it for their own set of processes.
In another aspect of the invention, an HACS system enforces inline security processing of data flowing in and out of an operating system or process. The security processing may consist of firewall, virus checking, malware checking, spam filtering, intrusion detection or a VPN, or a combination of these.
Data flowing into the HACS is checked by the security processing prior to being delivered to at least one intended, contained operating system or process. The security process can handle user authentication and be networked with a central authentication system.
In one aspect, the invention includes having a PMK means of passing data across partitions whereby controlling memory partitions can dynamically alter other memory partition's abilities to read or write to certain memory sections. The HACS system may consist of a PMK operating in the main CPU, inline security processing, at least one contained operating system and a boot kernel.
The system may further include security processes that have the ability to examine the memory of the contained operating system, checking it for viruses, malware and other unwanted or unauthorized processes. The system includes processing means such that when a virus, malware, or other unwanted or unauthorized processes is detected, the system operator is informed and queried for appropriate action and such information is written to a log.
The system can provide notification wherein, upon detection, a central network monitoring system and or administrators are informed. The platform may contain a trusted computing module or other such device and a set of processes in their own memory partition, outside of the reach of the contained operating system, that implement trusted computing module functionality. Such functionality can be used for user authentication, key management for VPNs, code authentication, and or key management for disk encryption/decryption.
The features and advantages described herein are not all-inclusive and, in particular, many additional features and advantages will be apparent to one of ordinary skill in the art in view of the drawings, specification, and claims. Moreover, it should be noted that the language used in the specification has been principally selected for readability and instructional purposes, and not to limit the scope of the inventive subject matter.
The present invention will be readily understood by the following detailed description in conjunction with the accompanying drawings, wherein like reference numerals designate like structural elements, and in which:
The development of partitioning micro-kernels (PMK), especially the multiple independent levels of security (MILS) partitioning micro-kernels (PMK), has opened the way to allow for high assurance computing even within low assurance operating systems.
Utilizing a MILS or MILS-like PMK, lower security operating systems or processes can be contained by placing the environment within its own memory partition. This prevents any infections in the contained environment from effecting processes in other memory partitions. Furthermore, security functionality can be instantiated in a separate memory partition, capable of examining the state and memory of the lower security operating system (LSOS) or lower security process (LSP). As a result, malware infections cannot hide from external inspection responsible for verifying the integrity of the contained operating system.
Using the PMK, all incoming communications and or data flow within the security partition prior to reaching the lower security operating system contained in its memory partition. Firewalling and data inspection and other such protection mechanisms can take place within this security partition(s). As a result, no matter the networking device attached to the computational system, the information can be protected before it flows into the LSOS or LSP.
The security partition can employ system and security administration, inter-processor/network control flow management and red/black reconfiguration or it can be contained in a second memory partition. Other configurations are within the scope of the invention. At boot, a boot kernel will insure that a PMK is instantiated and seizes control of the host CPU(s). This may be analogous to a BIOS or EFI (Extensible Firmware Interface).
Hereafter are described five examples of high assurance computing systems (HACS) of the invention, which may be further characterized as high assurance wired or wireless computing systems (HAWCS).
This embodiment places protection mechanisms in a wireless card/radio. This example utilizes a combination of techniques including but not limited to high evaluation assurance level or EAL components, partitioning micro kernels, ORBs, MILS and MILS-like technology, firewalls, data inspection systems, VPNs, encryption units and integrity daemons. A partitioning microkernel is used to create memory partitions that contain and confine various running programs like applications and operating systems. These partitions can limit the external memory access of those processes running internal to memory in other partitions.
For example, assume process A operates in partition A and process B operates in partition B. If both are separate/independent processes, then neither would have read or write access to each other's memory addresses. This hardware enforcement prevents malicious and or accidental transfer of information from one process to the next. Another possible function is where process A is granted limited access rights into the memory partition of process B. Process A could have full read access into process B's partition, for the sake of examining B's state and health. It may then have write privileges for a very small memory section of process B's partition for writing messages of state information to inform B of its health. One such example is Microsoft's EAL 6+ Multiple Independent Levels of Security (MILS) partitioning microkernel that offers strong enforcement of these partitions. The partitioning microkernel establishes these partitions and they are enforced via a hardware MMU or some other such means of enforcement. Thus once established, they are difficult, if not nearly impracticable, to bypass.
This Example illustrates placing protection mechanisms in a computer chipset. These protection mechanisms are similar but are not limited to those listed in the wireless card/radio example. By placing these protection mechanisms into, for example, a computer motherboard's chipset, all communication passes through the chipset and thus all information flowing into and out of the computer is protected. Furthermore, the chipset is capable of examining the state of the computer's memory and CPU, examining the operation of the current operating systems, looking for viruses, infections, root kits and other malicious software.
The chipset can also monitor and enforce direct memory access (DMA). Predefined ranges of memory addresses are enforced, preventing DMA devices the ability to read and write over memory indiscriminately. The predefined ranges can be configured at boot by the BIOS and updated by processes like operating systems in the CPU during and after boot.
This Example illustrates extending the partitioning microkernel and protection mechanisms from the chipset into the CPU. This allows the two sections of the security layer to communicate, not only being able to identify problems with the host operating systems, but also strictly containing the soft OS (e.g. Windows XP, Linux) within the partitioning microkernel on the host CPU. One such practice has the chipset boot first; it then conducts a self examination and also examines the software for the CPU, and then starts, instantiates or allows the security layer on the CPU to boot. This security layer can be a partitioning micro kernel, where a hardware MMU partitions the memory of the system and contains or isolates it to a lower assurance operating system. Examples of such lower assurance operating systems include but are not limited to those operating systems commonly available in the market such as Microsoft's Windows family, Apples OSX and the various Linux distributions.
The security layer can create a second memory partition that would operate various security sub system functionalities specific for the contained operating system (COS). It can boot multiple COS's; allowing the user to switch between different contained operating systems.
It should be noted that when the security layer that contains a partitioning microkernel boots in the CPU, it will "seize" the CPU's MMU, verify that no memory has been allocated and, if available, communicate with the motherboard chipset and perform other self check functionality. A further embodiment creates a partition to act as a communication bridge between the chipset and the CPU. This high assurance component takes over the responsibilities of filtering/firewall for all outgoing communications. On boot, it loads the required operating systems and programs. If there is more than one, it presents to the operator a list of available COS's to boot. On selection of a COS or multiple COS's, it sets up memory partitions for the COS's and if available, memory partitions for a security subsystem tailored for the specific COS. It then loads or boots the security subsystem, verifies it booted properly and then boots the desired COS. Furthermore, when the COS is selected by a user, the user can be asked what portion of the available memory is to be utilized. For example the user might select half the available memory for this COS. In this way, a second COS can be booted later, running parallel to the first COS and the security layers.
In this embodiment, there is a system without a HAWCS motherboard chipset, where all the HAWCS functionality is ported into the CPU. Like the CPU/chipset configuration, the CPU configuration is similar except that it carries all protection functionality onboard. Thus, it filters incoming and outgoing data either within the base security boot layer, in a separate communication partition or in a security subsystem partition for the specific COS. Thus in one implementation, the security layer boots first, seizes control of the systems hardware MMU, creates a memory partition and within it, boots the communication control and protection security subsystem.
It then creates two more partitions, one being the security subsystem, a specially tailored set of processes that has read and potential write access to some, if not all of the select COS's memory partition. These processes contain virus, root kit, spyware and malware detection mechanisms. These processes are started, verify proper functioning, and get updates for detection lists before the primary COS is booted. Once all the security layers are established, then the COS is allowed to boot.
In other embodiments, the security layer traps certain inputs, like a specific key sequence that calls up a boot menu, and if memory is available, allows the booting of another Contained Operating System (COS). Another embodiment allows movement between the different COS's. Yet another embodiment has a small application that runs in each COS, where it allows the user to select the COS they want to switch to. This small program reads a memory space that the security layer writes to, and provides information about the available COS's running. When a user selects a different COS, the application writes a message in its memory, the security layer sees this message, switches the user's viewed COS, and then clears the memory written to.
Another architecture embodiment includes a multi CPU system. This example includes but is not limited to a dual core CPU, multi CPU computer and embedded, multi CPU systems, optionally with globally shared memories. In this system, the security layer first boots up on one of the CPUs. It then partitions the memory for the various processors and processes and then the other CPUs boot within their defined memory partitions. There are several variants to this embodiment. When the first CPU boots with its security layer/kernel, it can query the security layers of the various CPUs, requesting how much memory and what configurations they need. It can also already have in its access, a preconfigured memory allocation list that it can act upon. The primary boot kernel can then allocate the memory partitions, fixing their addresses, sizes, and operations, i.e. who has read/write access, and then inform the various CPU's of their allocations.
The main CPU can also communicate this information to a centralized memory controller that can then limit and contain the memory each CPU has access. Another embodiment has the primary CPU signaling the memory limitations to the slave CPU by informing their MMU directly. In the last two cases, the slave CPUs then have no concept that their memory has been contained or partitioned, they only have knowledge of the memory set aside for it. Lastly, the individual process partitions can be set up by the primary CPU setting up the memory partitions, or the primary CPU can just allocate/partition a section of memory to each subservient CPU and then a security layer/kernel on each of those CPU's then configures its own memory partitions for the processes as needed.
Still another embodiment provides for the case of a failure for the primary CPU, where a succession of CPUs is laid out for backup. Yet still another variant provides for multiple, independent CPU's where there is no governing CPU, as each CPU has its own security layer and sets up and requests memory partitions, launching its own set of processes. There may be fixed or self-teaching housekeeping rules or algorithms by which the independent CPU's co-exist and co-function independently, with high assurance, on the same platform.
One interesting variant of the multi-CPU embodiments provides for a single CPU with a security layer that instructs a memory controller as to which CPUs have access to certain memory sections. In this way, a single security layer partitions the memory for multiple CPUs while the CPUs are running legacy operating systems. The COS's on the other CPUs boot up and see only the memory that they have been configured for; their main memory for operation and a shared set of memory for DMA or other data sharing memory sections. The processes running on the respective CPU's have no way of writing to or corrupting the memory for other CPU's.
In a multi or multicore CPU (e.g. dual core, quad core) system, the security layer can be in multiple cores/CPUs or in just a single core/CPU, as long as it boots first and partitions memory, starting the protection processes (firewalls, virus checkers, etc.) before starting the respective COS's.
One configuration is where a security layer is first, providing the basis of a partitioning microkernel. An example of such a configuration is a MILS kernel. This microkernel is an EAL high (4+) kernel that leverages a MMU to enforce memory partitions for the various processes operating on top of it. A second layer can be a MILS-like Object Request Broker (ORB); and a third layer can be IP filtering mechanisms like firewalls, data inspection (virus, malware), spam filtration systems and more. Another layer may focus on process control and reconfiguration.
According to one embodiment of the invention, the system separates these functions of protection and places them in between the likely sources of attack and the lower security operating systems and environments. These protection mechanisms are placed where the softer operating system/environment cannot access them directly. Since the main or soft operating system can be compromised, this system architecture limits the possibility of compromising the protection mechanisms.
Referring now to
To illustrate the general case represented by
Referring now to
To increase potential throughput, n number of memory partitions, e.g. partitions 4 and 6, can be added so that while one partition is being used, another is available. Further, certain partitions can be designated for outgoing data (where network device driver 11 has write access and the network interface device 1 has read access) or incoming data.
The handling of these memory partition queues can be controlled by the partitioning kernel (not depicted). The network interface device requests from the kernel a buffer. The kernel verifies that the NID has write privileges for the requested buffer. The kernel then gives the NID a pointer, or object associated with an available memory partition (e.g. partition 2, 4 or 6) and no other process will have access to that partition until the NID has finished its write and releases the "lock" on the buffer back to the kernel. The kernel then informs HAWCS™ processing function 12 that data is available and grants it read and write permissions. Likewise, HAWCS™ processing function 12 can be pending, waiting for access to the partition and will only have access once the prior lock has been released. Firewall, virus and or malware checking function 12 then inspects the data, verifies its integrity and access capabilities. If all checks are passed, it then relinquishes its read/write access on the partition and the kernel informs the COS 10 that data is available. The COS is then able to read the data in and process it. In other words, the kernel can impose a series or sequence of "locks" on memory partitions, that permits a coordinated a set of processing steps to be applied to the data before it is delivered to the COS 10. The changing of the read/write capabilities of certain memory locations is controlled by the HAWCS processing function 12 through requests sent to the PMK that then enforces these requirements through the processor's MMU.
Referring now to
One attack in a soft operating system that is difficult to counter is the attack from a root kit. This type of attack is able to hide itself within or along side the operating system, rendering virus checking mechanisms within the operating system worthless. Since these types of defensive mechanisms rely on the underlying OS for their detection methods (for example, "list all processes") a root kit is able to subvert those calls, filter out the information it does not want discovered and only return the information it wishes. Thus the protection processes, and the user, can be fooled into thinking everything is functioning properly.
However, one solution to the root kit problem in accordance with the invention is to place the protection mechanisms outside of the OS and limit the OS's ability to write and/or read into the partitions that contain the protections processes. Thus, a memory partition containing a virus checking software might have read and write access to the COS's memory partition, but the COS would have no read or write capabilities on the virus checking systems memory. Accordingly, an infection in the COS will not affect the virus protection system, nor the underlying security layers and kernel. The external virus checking processes can examine the COS memory, actively looking for virus, malware and or other unauthorized processes. The virus checking system, if a potential virus is found, can halt the COS from further processing and, for example, initiate processing that informs the user of a potential virus infection, asking the user if they wish for an attempt to automatically fix the problem, reboot and attempt to remove the virus, disable the network interface, continue operating or other such remedial action. Such high assurance processing can also work in conjunction with processes running inside the COS, thus providing a bridge of information to virus, malware, etc checking systems inside the COS. The alerting or informing action can include informing a central network monitoring system and/or administrators.
Referring now to
In one of these memory partitions 410 there exist protection mechanisms such as firewalls, filters and virus or malware checkers. These functions check all incoming data streams (network data for example) prior to them being routed to the operating systems running in adjacent memory partitions. The protection mechanisms also check all outgoing data streams similarly. Lastly, these protection mechanisms can operate on the active memory for a target operating system in another memory partition. Furthermore, these mechanisms can exist in the same partitions or in their own partitions. Also, these processes can leverage security mechanisms found in trusted platform modules (TPM).
It is within the scope of the invention to have one such partition with a set of protective processes that act as an interface to a TPM chip; being able to leverage the PMK partitioning that allows for the containment and separation of higher security classifications, so that similar functionality can be leveraged with TPM. A set of TPM processes can operate inside a memory partition, thus being able to leverage the higher processing capabilities of the CPU and the security functions of the TPM.
Referring now to
Antenna #1 596, modem #1 570 and transceiver #1 580 comprise the WIFI set, and in some instances the modem 570 and transceiver 580 may be integrated into a single integrated chipset. Antenna #2 597, modem #2 575 and transceiver #2 585 comprise the BT set, and in some instances modem #2 575 and transceiver #2 585 may also be combined into a single integrated chipset. The modems 570, 575 connect to the Black PCI bus 565, which in this example is a PCI bus, but could also be implemented with other bus structures and techniques, such as switched fabrics. The modems 570, 575 and transceivers 580, 585 may optionally be software-reconfigurable, as would be the case in a software defined radio (SDR), where reconfiguration is performed by the Black CPU 590 which downloads verified software from the Red CPU 545 via the Red PCI bus 540 (or other suitable bus structure), firewall 560, and Black PCI bus 565.
The Black CPU 590 with memory RAM 595 hosts the modems 570, 575. In addition, if encryption is employed to secure the data as in some VPNs, Black CPU 590 also generates the public and private keys and performs the Black side processing. The Black CPU 590 can be protected by computer security software in the manner of the invention, including, for example, a software firewall and anti-virus programs.
Black data from modems 570, 575 is sent to/from reconfigurable firewall 560, which in one embodiment is implemented in a FPGA. Reconfiguration of firewall 560 to adapt to changing security threats, update algorithms, or fix bugs, is performed from the Red side by Red CPU 545 via the Red PCI bus 540. The Red CPU 545 together with memory RAM 555 manages Red side security functions which include key generation, Red side encryption/decryption, network address translation (NAT), port address translation (PAT), Internet routing, management of demilitarized zone (DMZ) router functions, detection of port scanning, packet filtering and threat signature detection, and concealment (stealth) of unused ports. The Red CPU 545 can also be protected by anti-virus and firewall software in the manner of the invention. In addition, the Red CPU 545 is made to be self-booting by virtue of diagnostic and high assurance kernel software, and stored in the flash memory 550, which also includes plug-and-play support of the plug-and-play/hot swap PCI adapter module 535 or other suitable plug-and-play/hot swap interface. A log file of detected attacks and other key security incidents such as downloads are also logged and stored on both flash memory 550 and host system hard disk 520.
The host system includes host CPU 505, PCI bus 510 or other bus structure, memory module 515, hard disk 520, and security module/network interface bridge 525. The host system provides certain services to the high assurance wireless system, including storage of applications, firewall and modem software used for re-boots, event logging, and hosting of system software including high assurance object request broker (ORB) middleware, and core framework (CF) software based on a software communications architecture (SCA). In instances where the high assurance wireless system is embedded within a mobile device, such as in a wireless PDA or smart phone, or Intel Centrino equipped laptop computer, certain variations of the architecture may be appropriate. For instance, the firewall function 560 may be moved to the secure bridge 525, and plug-and-play adapters 530 and 535 can be replaced with a PCI bridge (not shown).
Referring now to both
This means that the Red core's "security kernel" or "high assurance kernel" is brought into the host CPU. An example of such a kernel is a partitioning kernel, similar but not limited to MILS and MILS-like kernels. As a result, all security functions like virus checking and firewalling, can be moved into the host CPU in accordance with the invention. By containing the protection mechanisms within the partitions, a data flow can be imposed that can not be bypassed, thus achieving an inline network flow. Thus, the methodology of the invention builds a system on top of layers of security and does not attempt to incorporate security features as an after thought. In the configurations of
Referring now to
A variation of the
Yet another variation of
Referring now to
A further extension of the
Still referring to
NID Device Driver 813 can optionally be eliminated for certain devices. One example is a network device that handles automatically all OSI layer 1 and 2 information with only a few messages being sent from COS 802 and the device through DMA, memory access that is examined and monitored by the HACWS™ protection processes 805.
Both the crypto/infosec processing 807 and the Disk Interface Encryption/Decryption 808 can access TPM 811 for, but not limited to, key signing, storage, retrieval and random number generation.
Still referring to
It should be further noted that the disk encryption capabilities/functions can be broken away from the HAWCS™ processing. It can be placed in its own memory partition, it can be provided independent, alone or without HAWCS™ processing. It is included in
Referring now to
Inline cyrpto/infosec possesses 906 can be used to help establish secure VPNs like IPSEC, HAIPE, by providing the inline encryption and decryption of data, leveraging the TPM. This is combined in this case with firewall, malware and virus checking. Data coming in from network interface device NID 910 flows into memory partition 921 containing at device driver NID 913 and firewall and virus and malware checking processes 906. Once the data passes the various protection checks, it is then processed by crypto/infosec processes 906. This processing can be decrypting an IPSec stream. After processing in the crypto/infosec processing 906, the data is then checked again by the firewall, virus and malware checking processes 906. After passing the checks, it is then passed on or made available to the intended Windows XP COS 902's network device driver 903 that then passes it to the IP Stack and application within Windows XP COS 902.
Still referring to
Device driver 913 may be eliminated for certain devices. One example is a network device that handles automatically all OSI layer 1 and 2 information with only a few messages being sent from the COS and the device through DMA, memory access that is examined and monitored by the HACWS protection processes.
Both the crypto/infosec process 906 and the disk interface encryption decryption process 908 can access TPM 911 for, but not limited to, key signing, storage, retrieval and random number generation. Furthermore, processes within its own memory partition can provide the behavior and functionality of a TPM device. Since PMK 930 boots up in a manner that is difficult to circumvent, it can also create a memory partition containing processes that can provide security functionality like that found in a TPM device. As a contained process, it would be difficult for an operator working within a COS to alter or bypass the functionality provided by such a contained TPM mimicking process.
All processes running in memory partitions imposed by PMK 930 are operating within a possible single to multi-unit CPU system as described previously. This also provides protection for multiple running instances of various target COS's. This can be multiple instances of the same COS or of various different COS's.
In systems of the invention, when a PMK or other enforcement/security kernel boots, it can load in a protected section a process or processes that can prompt the user for a login and password or finger print, biometric, security card, pass code, or other authentication information, to provide authentication for the user. The authentication process can interface with the TPM for stronger authentication means as currently found today on TMP based authentication systems. In accordance with the invention, with respect to security, the authentication processes can be loaded in their own contained section of memory that cannot be touched save for the well defined boundaries and interfaces imposed by the PMK. In this sense, the authentication capabilities are outside of an area a malicious user can normally access. The only means to interface the authentication system are those defined explicitly by the authentication processes and imposed or enforced by the security kernel PMK. Such a contained authentication system can unlock encrypted disk portions, providing the correct key specific for the user is supplied. It can also be used to load the correct or defined set of processes, e.g. applications, contained operating systems, etc., for a user. The authentication can further provide a means to pass the authentication information into the COS so a user need only log in once and is able to be authenticated to multiple instances of COS's.
Referring to
Also, security and authentication processes can be networked with other firewall, protection and authentication mechanisms within a network, passing and gathering information about state and trust levels. Such other networked mechanisms can include or be other user terminals or protection-based servers and appliances.
Referring to
Referring to
In this document, when referencing MILS, this refers to Multiple Levels of Security technology or MILS like technology. MILS is a difficult certification to attain but it is possible to utilize those MILS certified applications like PMK and ORBs without having to recertify them for the target platform. This brings a very high assurance level and confidence level to the target system over lesser inspected, certified and/or assurance level software. Current means of memory partitioning utilize a MMU to help enforce memory boundaries and partitions. It is within the scope of the invention that the distinction between software and firmware are blended the wherein the "hardware MMU" has the ability to provide the same functionality by other means. One such example would be the implantation of a MMU inside FPGA gates.
Also, the references to TCM (Trusted Computing Module) and TPM (Trusted Platform Module) are interchangeable and refer to the same. TCM is another name for TPM.
PMK are very small and thus it is possible to store the PMK in an area more difficult to access (in other words not on a hard drive). This helps protect the memory partitioning system from attacks either from software running on the system or from a malicious user of the system removing a drive to try to access and alter the PMK. Thus, the PMK (and associated layers like ORB and protection functions) can be stored on a flash or BIOS device on a computer's main memory. Another means include but are not limited to having the boot kernel be able to access, for example through a TPM, a special encryption key and decrypt means that can then read the needed PMK, and other data from a hard drive. Thus the PMK can reside on a hard drive such as a flash drive, USB drive, CD, DVD, etc., in an encrypted state and only the BIOS could unlock/decrypt it. This makes tampering with the PMK and associated software very difficult.
Other and numerous embodiments and equivalents, including methods and devices, are within the scope of the invention. For example, there is a method for operating a multi processor system with shared memory and at least one hardware memory management unit, that includes the steps of: booting a first memory partitioning kernel in one processor; seizing control of the hardware memory management unit by the memory partitioning kernel; partitioning the available memory so as to allocate and isolate a specific region of memory for each respective processor; booting processes in the processors; and limiting memory access by each processor to its respective specific region of memory.
The system may be an FPGA, DSP, GPP, ASIC, motherboard chipset, or a PCI Device. The method may include the step: limiting data access by one region of memory to another region of memory to read-only privileges. The partitioning may include partitioning available memory for processes to run within a processor. The method may include a limiting by the hardware memory management unit of memory access and sub-partitioning of respective specific regions of memory, by other programs, to within specified ranges of memory.
It may further include limiting of subsequent changes to the memory isolation partitions to only the first memory partitioning kernel. It may also include the limiting of memory access by processors to their respective specific regions of memory as defined by the first memory partitioning kernel.
Another example builds on the prior example wherein one of the processes in one of processors in a multi-processor embodiment has a respective process-specific memory partitioning kernel, the term "process-specific" meaning specific to or dedicated to a particular process, where the general method is extended to the further steps of: booting the process-specific memory partitioning kernel and therewith seizing control of a respective process-specific hardware memory management unit by the process-specific memory partitioning kernel; sub-partitioning the respective specific region of available memory so as to allocate and isolate a process-specific sub region of memory for that process; then booting the process and limiting memory access by the process to its respective sub region of memory.
Another example of the invention is a method for operating a computing system including the steps of: booting a high assurance kernel such as have been described herein; partitioning the available memory so as to allocate and isolate respective specific regions of memory for at least one computer program and at least one security process; inspecting with the security process the incoming network data intended for the computer program; delivering inspected incoming network data to the intended computer program; inspecting with the security process outgoing network data from the computer program; and delivering inspected outgoing network data to an intended device.
As elsewhere described, the security process may be or include any of firewall, virus and malware checking processes. Inspecting the incoming network data may include conducting respective firewall, virus and malware checks on the incoming network data. The method may include conducting an encryption/decryption process on the incoming and outgoing network data within the security process; and may further include accessing encryption/decryption keys from a trusted computing module. It may include conducting an encryption/decryption process on both incoming and outgoing file data within the security process. There may be a step for inspecting with the security process the specific region of memory associated with that computer program for anomalies such as infections, viruses, rootkits or other unintended alterations to the computer program. It may include conducting virus checking on incoming and outgoing file data within the security process. As described elsewhere herein, the PMK or high assurance kernel may be a memory partitioning kernel, the step of partitioning available memory being done by the memory partitioning kernel.
As yet another example, there is a method for operating a computing system including the steps of: booting a high assurance kernel; partitioning available memory so as to allocate and isolate respective specific areas of memory for at least each of a computer program and a security process; restricting access by the computer program to the area of memory of the security process; imposing a data flow requiring incoming data to be subjected to the security process before being delivered to the computer program; inspecting with the security process incoming network data intended for the computer program; delivering inspected incoming network data to the computer program; inspecting with the security process outgoing network data from the computer program; delivering inspected outgoing network data to an intended device; where the security process includes any or all of a firewall, virus or malware checking processes, and the inspecting of the incoming network data includes conducting any or all of firewall, virus and malware checks on the incoming network data.
This example may further include: conducting virus checking on incoming and outgoing file data within the security process; conducting an encryption/decryption process on the incoming and outgoing file data within the security process; and inspecting with the security process the specific area of memory allocated to the computer program for anomalies in the computer program. It may include accessing encryption/decryption keys from a trusted computing module.
Still yet another example of the invention includes a computing system that includes a high assurance kernel; an operating system; a security process; and a network interface device; where the high assurance kernel is configured to upon being booted, impose a partitioning and management of memory and a sequencing of operation among the operating system and the security process whereby security checks are conducted on all data by the security process prior to the data being made accessible for a next processing step within the computing system. The system may include an object requester broker in association with the partitioning kernel for conducting its partitioning and memory management functions.
There may be an encryption/decryption process in the system that is also subject to the partitioning and management of memory and sequencing of operation by the kernel. There may be a trusted computing module also subject to the partitioning and management of memory and sequencing of operation by the kernel. The system may be a firewall; and it may be implemented on a common circuit board. The firewall may be implemented in a motherboard chipset.
An additional example of the invention is a device for providing a blended protection scheme for a high assurance communication device that includes: a reconfigurable firewall and packet inspection device of the nature described herein, for enforcing isolation and separation between a communication device's CPUs, memory, and the communication device, where the reconfigurable firewall is implemented on an integrated chip or motherboard chipset; and a protected CPU adapted to mange security functions and to reconfigure the reconfigurable firewall in the manner described herein. The device may be a firewall and virus infection inspection system. The device may be a virtual private network for network based communications.
Another additional example of the invention is a method for high assurance packet data processing in a computer system, which includes the steps:
The foregoing description of the embodiments of the invention has been presented for the purposes of illustration and description. It is not intended to be exhaustive or to limit the invention to the precise form disclosed. Many modifications and variations are possible in light of this disclosure. It is intended that the scope of the invention be limited not by this detailed description, but rather by the claims appended hereto and equivalents thereof.
|Cited Patent
|Filing date
|Publication date
|Mar 9, 2010
|Rockwell Collins, Inc.
|System for extending Multiple Independent Levels of Security (MILS) partitioning to input/output (I/O) devices
|Mar 9, 2010
|Bae Systems Information And Electronic Systems Integration Inc.
|Multi-level secure (MLS) information network
|Jun 17, 2005
|Jun 8, 2010
|Rockwell Collins, Inc.
|System for providing secure and trusted computing environments through a secure computing module
|Jun 7, 2001
|Mar 21, 2002
|Kristofer Skantze
|Method and device for secure wireless transmission of information
|Oct 9, 2001
|Jun 27, 2002
|Samer Abdo
|Wireless secure device
|Dec 6, 2001
|Jul 25, 2002
|Redlich Ron M.
|Data security system and method responsive to electronic attacks
|Apr 5, 2001
|Oct 10, 2002
|Anthony Mauro
|Method and apparatus for providing secure processing and data storage for a wireless communication device
|May 2, 2001
|Nov 7, 2002
|Tantivy Communications, Inc.
|Firewall protection for wireless users
|Aug 10, 2001
|Feb 13, 2003
|Mukesh Sharma
|System and method for secure roaming in wireless local area networks
|Apr 4, 2002
|May 22, 2003
|Nelson David B.
|System and method to provide enhanced security in a wireless local area network system
|Dec 31, 2002
|Jul 24, 2003
|Texas Instruments Incorporated
|Implementation of a secure computing environment by using a secure bootloader, shadow memory, and protected memory
|Apr 18, 2002
|Oct 23, 2003
|Chi-Kai Wu
|Method applicable to wireless lan for security control and attack detection
|May 28, 2003
|Oct 30, 2003
|Kavado, Inc.
|Application layer security method and system
|May 10, 2002
|Nov 13, 2003
|Harris Corporation
|Secure wireless local or metropolitan area network and related methods
|Nov 20, 2002
|Nov 27, 2003
|Robert Whelan
|System and method for providing WLAN security through synchronized update and rotation of WEP keys
|May 24, 2002
|Nov 27, 2003
|Overy Michael Robert
|Method and apparatus for enhancing security in a wireless network using distance measurement techniques
|Jun 3, 2002
|Dec 18, 2003
|Lynn Michael T.
|Method and system for actively defending a wireless LAN against attacks
|Jun 3, 2002
|Dec 25, 2003
|Scott Hrastar
|Systems and methods for network security
|Jun 27, 2002
|Jan 1, 2004
|Nokia Corporation
|Method and system for securely transferring context updates towards a mobile node in a wireless network
|Apr 29, 2003
|Jan 15, 2004
|Ferguson Niels Thomas
|Secure telecommunications system for wireless local area networks
|Mar 30, 2004
|Oct 6, 2005
|Russell Paul F
|Memory allocation to multiple computing units
|Jul 25, 2005
|Feb 8, 2007
|Lockheed Martin Corporation
|System for controlling unmanned vehicles
|Dec 12, 2005
|Jun 14, 2007
|Andrew Dunshea
|Sharing a kernel of an operating system among logical partitions
|May 3, 2000
|Nov 9, 2000
|Michael Stern
|Method, server system and device for making safe a communication network
|Jan 8, 2004
|Aug 12, 2004
|Everbee Networks S.A.
|Dynamic system and method for securing a communication network using portable agents
|"3Com Embedded Firewall Architecture for E-Business", 2001, pp. 1-4, 3Com Corporation.
|"3Com Embedded Firewall for the 3CR990 NICs Family", 2001, pp. 1-4, 3Com Corporation.
|"3rd Generation Partnership Project; Technical Specification Group Services and System Aspects; 3G Security; Security Threats and Requirements (Release 4)", 2001, pp. 1-26, 3GPP TS 21.133 V4.1.0 (Dec. 2001), 3GPP Organizational Partners.
|"A USB Key for Portable, Personal Internet Security", [online] [Retrieved on May 13, 2004] Retrieved from the internet , 1999-2004, pp. 1-3, Everbee Networks.
|"Deepnines' Sleuth9 Security System Immediately Stops", [online] [Retrieved on Mar. 8, 2004] Retrieved from the internet , Oct. 13, 2003, pp. 1-2, DeepNines, Inc.
|"Everbee Embedded Software", [online] [Retrieved on May 13, 2004] Retrieved from the internet , 1994-2004, pp. 1-3, Everbee Networks.
|"Everbee Networks Announces Hassle-Free PC Security Device for Families and Professionals", [online] [Retrieved on Jun. 3, 2004] Retrieved from the Internet , 1997-2004, PR Web.
|"Everbee Networks Introduces Secure Personal Networking Solution Based on Motorola PowerQUICC and Security Processors", [online] [Retrieved on Jun. 3, 2004] Retrieved from the internet , pp. 1-2, Everbee Networks.
|"Everbee xNSP", [online] [Retrieved on May 13, 2004] Retrieved from the internet , 1994-2004, pp. 1-2, Everbee Networks.
|"High Assurance Wireless Computing System (HAWCS)", [online] [Retrieved on Aug. 26, 2004], Retrieved from the Internet , pp. 1-2.
|"NVIDIA nForce3", [online] [Retrieved on Jun. 3, 2005] Retrieved from the internet , 2005, pp. 1-2, NVIDIA Corporation.
|"OpenRG for Wireless Gateways and Access Points", 2003, pp. 1-2, Jungo Software Technologies Inc.
|"RG-Firewall", [Online] [Retrieved on Mar. 26, 2004] Retrieved from the internet , pp. 1-2.
|"Security Anytime, Anywhere", pp. 1-2, Everbee Networks.
|"Security at the Gate. All in One", 2004, pp. 1-4, Everbee Networks.
|"The Wireless Hacker Project", Apr. 2003, pp. 1-4, KPMG's UK Design Services.
|"Wireless LAN Security-What Hackers Know That You Don't", 2003, pp. 1-9, AirDefense, Inc., Alpharetta, GA.
|"A USB Key for Portable, Personal Internet Security", [online] [Retrieved on May 13, 2004] Retrieved from the internet <URL: http://www.everbee.com/index.php?rub—id=2&sub—id=6>, 1999-2004, pp. 1-3, Everbee Networks.
|"Deepnines' Sleuth9 Security System Immediately Stops", [online] [Retrieved on Mar. 8, 2004] Retrieved from the internet <URL:http://www.deepniness.com/press—releases/pr101403.html>, Oct. 13, 2003, pp. 1-2, DeepNines, Inc.
|"Everbee Embedded Software", [online] [Retrieved on May 13, 2004] Retrieved from the internet <URL:http://www.everbee.com/index.php?rub—id=2&sub—id=2>, 1994-2004, pp. 1-3, Everbee Networks.
|"Everbee Networks Announces Hassle-Free PC Security Device for Families and Professionals", [online] [Retrieved on Jun. 3, 2004] Retrieved from the Internet <URL:http://www.prweb.com/printerphp?prid=106411>, 1997-2004, PR Web.
|"Everbee Networks Introduces Secure Personal Networking Solution Based on Motorola PowerQUICC and Security Processors", [online] [Retrieved on Jun. 3, 2004] Retrieved from the internet <URL:http://www.emediawire.com/printer.php?prid=83724>, pp. 1-2, Everbee Networks.
|"Everbee xNSP", [online] [Retrieved on May 13, 2004] Retrieved from the internet <URL:http://www.everbee.com/index.php?rub—id=2&sub—id=1>, 1994-2004, pp. 1-2, Everbee Networks.
|"High Assurance Wireless Computing System (HAWCS)", [online] [Retrieved on Aug. 26, 2004], Retrieved from the Internet <URL:http://www.hawcs.com/—High Assurance Wireless Computing System (HAWCS)>, pp. 1-2.
|"NVIDIA nForce3", [online] [Retrieved on Jun. 3, 2005] Retrieved from the internet <URL:http://www.nvidia.com/page/nf3.html>, 2005, pp. 1-2, NVIDIA Corporation.
|"RG-Firewall", [Online] [Retrieved on Mar. 26, 2004] Retrieved from the internet <URL:http://www.jungo.com/openrg/rgfirewall.html>, pp. 1-2.
|Lockheed-Martin et al. Protection Profile for Partitioning Kernels in Environments Requiring Augmented High Robustness Jun. 9, 2003.
|Citing Patent
|Filing date
|Publication date
|Jul 10, 2012
|Texas Instruments Incorporated
|System and method of identifying and preventing security violations within a computing system
|Jan 29, 2013
|Samsung Sds Co., Ltd.
|Anti-malware system and operating method thereof
|May 25, 2010
|Jun 18, 2013
|Raytheon Company
|Enabling multi-level security in a single-level security computing system
|Mar 16, 2012
|May 13, 2014
|Samsung Sds Co., Ltd.
|SOC-based device for packet filtering and packet filtering method thereof
|Jun 24, 2009
|Jun 3, 2014
|Raytheon Company
|System and method for protecting data with multiple independent levels of security
|Mar 26, 2010
|Sep 2, 2014
|Samsung Sds Co., Ltd.
|System-on-chip malicious code detection apparatus and application-specific integrated circuit for a mobile device
|Feb 17, 2009
|Sep 16, 2014
|Enpulz, L.L.C.
|Network browser based virus detection
|Sep 13, 2013
|Jan 20, 2015
|Paul Case, SR.
|Case secure computer architecture
|Jul 21, 2011
|Mar 3, 2015
|Samsung Sds Co., Ltd.
|Device and method for providing SOC-based anti-malware service, and interface method
|Jan 13, 2015
|Sep 1, 2015
|Paul Case, SR.
|Case secure computer architecture
|May 6, 2010
|Sep 15, 2015
|Mcafee, Inc.
|Identifying malicious threads
|Oct 8, 2004
|Jan 26, 2006
|Conti Gregory R P
|System and method of identifying and preventing security violations within a computing system
|Nov 12, 2009
|Bennett James D
|Network browser based virus detection
|Mar 25, 2010
|Walton Advanced Engineering, Inc.
|Method for employing usb record carriers and a related module
|May 25, 2010
|Dec 2, 2010
|Raytheon Company
|Enabling multi-level security in a single-level security computing system
|Jun 24, 2009
|Dec 30, 2010
|Raytheon Company
|System and Method for Protecting Data with Multiple Independent Levels of Security
|May 6, 2010
|Nov 10, 2011
|Mcafee, Inc.
|Identifying Malicious Threads
|Mar 26, 2010
|Feb 16, 2012
|Samsung Sds Co., Ltd.
|System-on-chip malicious code detection apparatus and application-specific integrated circuit for a mobile device
|Aug 20, 2010
|Feb 23, 2012
|Matt Levy
|System and methods for providing data security and selective communication
|Sep 15, 2014
|Jan 1, 2015
|Enpulz, L.L.C.
|Browsing support infrastructure with tiered malware support
|U.S. Classification
|711/153, 726/17, 711/152, 713/164, 711/163
|International Classification
|Cooperative Classification
|European Classification
|Sep 18, 2007
Owner name: SCA TECHNICA, INC., NEW HAMPSHIRE
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:MUROTAKE, DAVID K.;MARTIN, ANTONIO;REEL/FRAME:019839/0758
Effective date: 20070913
|Jul 3, 2014
|Maintenance fee reminder mailed
|Jul 31, 2014
|Fee payment
Year of fee payment: 4
|Jul 31, 2014
|Surcharge for late payment


text:
Latest News
Mar 30, 2015 | Press Release
Mar 18, 2015 | Press Release
Mar 9, 2015 | Press Release
Feb 24, 2015 | Press Release
Feb 18, 2015 | Press Release
Posted by Jenny Dean on Jan 24, 2014
All about Bath- Waste Awareness
I'm a Waste Awareness Officer for Bath & North East Somerset Council. Waste Awareness can be a...
Posted by Jenny Dean on Nov 27, 2013
Christmas is coming- Are you prepared?
We hope you have a good Christmas Break and are looking forward to the year ahead. Below you will...
Posted by Jenny Dean on Sep 23, 2013
All about Bath- Purple Flag
This year we will be featuring blogs from people who live and work in Bath so if you are new to the...
SCP Tweets
RT @hallsatbath: Something for everyone: Living in halls? Become a Hall Rep! Living in private rented housing? Become a Community Rep! http…
RT @BSU_Green_Focus: With thanks to our students donations @BathSpaUni we sent 15 boxes of food to @BathFoodbank with more to send soon! ht…
RT @GreenParkHouse: Come on in! Join us for our community open day 1 June 2016 10:00 - 15:00, register at https://t.co/Z6oagGEMJ3 h https:/…
Good evening yesterday at the Westmoreland Residents Action Group with @bathspasu . Thank you for the invite @JunePlayer1

subset: commoncrawl


text:
LENR stands for Low Energy Nuclear Reactions, (or sometimes Lattice Enabled Nanoscale Reactions) and refers to the phenomenon where anomalous amounts of heat are created when certain metals (e.g. nickel, palladium) absorb hydrogen or deuterium and an external stimulus such as heat or an electric current is applied. The reaction takes place at relatively low temperature and sometimes results in transmutation of elements as well as the production of heat. Either no strong radiation is produced or it is absorbed locally. The waste products have been found not to be radioactive. This phenomenon is also referred to as Cold Fusion, LANR (lattice assisted nuclear reaction), as well as other terms.
Modern interest in LENR began in 1989 when scientists Martin Fleischmann and Stanley Pons announced at the University of Utah they had succeeded in generating nuclear reactions in laboratory experiments. This announcement sparked much interest in the media and in the scientific community, with many researchers attempting replicate the effect in their own experiments — many without success. The effect was not always easy to replicate, particularly as the preparation of the metal was critical and it sometimes took weeks for anomalous heat to appear. When the effect has been obtained it can also be difficult to control.
There are many attempts going on at the moment by various parties to be able to replicate and control the LENR effect. Several companies are now working on commercial products with claims of producing kW of power as heat. Andrea Rossi's E-Cat invention has received a lot of attention because he was the first to publicly demonstrate his device and it has now been been tested by third parties, demonstrating at least ten times the energy of any known chemical reaction and showing that the E-Cat is capable of producing useful heat.
Andrea Rossi's E-Cat seems to be the most promising candidate for the first useful commercial LENR product. He has a 1 MW plant currently undergoing production testing at a customer site (undisclosed), and if the year-long test proves successful, according to Rossi, widespread commercialization will begin in the first half of 2016.
Various claims are for a Coefficient of Performance (COP) from 6 to over 30 (meaning between 6 and 30 times more energy is produced than is input into a system). Even at the low end such a device would make obsolete virtually all other ways of producing power.
The high power- and energy density of LENR seems to compare with a nuclear process and Andrea Rossi is now testing a 1 MW plant which is intended to last for a year without refuelling. If LENR is proved that it works, the cost of energy would likely dramatically drop. LENR has the potential to be the energy source for humanity for the next centuries and may be able to stop the exhaust of CO2 in the atmosphere.
High temperature, more efficient designs would be suitable for powering transport, even aircraft, although this would probably take decades. This promise of inexpensive, safe, clean power is why many are now following the subject.
There are many theories about what causes this heat effect, but none has been widely accepted or definitively proven.
Further Reading:
Lenr-canr.org — A library of research papers on LENR
LENR Proof — Examination of the commercial viablity of LENR
LENR For the Win — An examination of the evidence for LENR
Martin Fleischmann Memorial Project — An open science project to provide convincing proof of the 'New Fire'
Vortex-L — Archive of email list dealing with LENR-related topics


text:
Secret Saturdays: Beasts Of The 5th Sun-879278320150Item#: GAME-NDS D3P 32014 | Model#: 879278320150
Currently Out Of Stock!
Product Details
Video Game Edition: Secret Saturdays: Beasts Of The 5th Sun
Based on the hit THE SECRET SATURDAYS TV series on Cartoon Network, you will take control of Zak and the Saturday family as they explore the globe to discover and protect lost Cryptids and stop Argost from destroying the Earth.
Manufactured by: D3 Publisher of America
Warranty provided by: D3 Publisher of America
UPC No: 879278320147
Mfg Part No: 879278320150
Box Size:
( Length:0, Width:0, Depth:0)
Shipping Weight: 0.2500 pound(s)
Click here for full warranty and support information
- D3 Publisher of America logos are registered trademarks of D3 Publisher of America. All others trademarks and copyrights mentioned herein are the property of their respective owners.


text:
Plants vs. Zombies Garden Warfare for PCOn: PC, PS4, Xbox One, Xbox 360, PS3
Plants vs. Zombies Garden Warfare delivers an explosive new action experience in a massive, three-dimensional world blooming with color and combat.
Review Verdict Read Review
7Out of 10
PvZ: Garden Warfare players to be rewarded with bonus sticker packs in Garden Warfare 2
Max rank players can unlock a 'Legendary Unicorn Chomper'.
Plants vs Zombies: Garden Warfare 2 release date brought forward to February
Arrives in Europe on PS4, Xbox One and PC on February 25.
Plants vs Zombies: Garden Warfare 2 reveal teased for Microsoft's E3 press conference
UPDATE: Tune in on Monday to find out more.
Humble Origin Bundle 2 offers Dead Space 2, Drage Age Origins, Garden Warfare and more
Total game bundle valued at $134.
Plants vs Zombies: Garden Warfare is now on EA Access
PopCap's multiplayer shooter joins growing list of free titles.
Final remaining PopCap founder departs studio
PopCap continues to be a core studio in EA's mobile efforts.
View AllScreenshots
Garden Variety Pack Launch Trailer
Garden Variety Pack Launch Trailer
Launch Trailer
Launch Trailer
Gameplay Trailer
Gameplay Trailer
Garden Ops Gameplay Video
Garden Ops Gameplay Video
Gameplay Walkthrough Video
Gameplay Walkthrough Video
Official E3 Reveal Trailer
Official E3 Reveal Trailer


text:
Click to enlarge.
The particular client was very particular on cable labeling and invested a small amount of in-rack cable management so that each rack-crossing cable followed the same path. You can imagine how this could quickly get out of hand, but good policy and cable management can make it quite intuitive.
One silver lining benefit of the every-other-rack switch is that there are fewer runs back to the main network switch. Of course the practice could be extended to an every third rack or possibly further. The main factor is the port count requirement that is typical per rack. Given that environments vary widely today and that various levels of virtualization may change it greatly, there is no clear guidance. One limitation is that it almost assumes that the only networking media requirement would be satisfied by the single switch in every other rack. This may not be a viable option to environments with fiber channel SANs using LC fiber or other fiber media. Again, we could put the fiber interface panel in every other rack or only in the regions where necessary.
I am personally a fan of in-rack switching in lieu of central patching or home-run cabling. Share your comments below related to keeping costs down while using in-rack switching.
Full Bio
Rick Vanover is a software strategy specialist for Veeam Software, based in Columbus, Ohio. Rick has years of IT experience and focuses on virtualization, Windows-based server administration, and system hardware.


text:
Magic of Autumn
By Kamilla Design
More By This Designer
|(0 Total Votes) | Rate It
Please sign in to rate this product! Log In
Product Information
- Type: Combo Pack
- Designer: Kamilla Design
- Download Size: 71.9 MB (approximate)
Design Elements
- Digital Papers: 10
- Page Elements: 25
- Monograms Characters: 71
Designer Notes
This kit was featured in the MyMemories Oct 2012 Monthly Design Club Offering.
Created by Kamilla Design
To find out how you can get kits 30 days before they are for sale in this store and for more information about the monthly Design Club
click here


text: Minor irritant: selinux is enabled, but apache's being stopped from writing to a logfile. We're running torque (a cluster), and submitting jobs via a wiki. ls -Z /var/log/httpd/smagent.log shows: -rw-r--r-- apache root root:object_r:httpd_log_t /var/log/httpd/smagent.log Now, ls -Z /var/log/httpd/error_log shows me -rw-r--r-- root root system_u:object_r:httpd_log_t /var/log/httpd/error_log What do I need to change to keep selinux from barging in? mark


text:
Gareth Porter: "If the public had access to the classified reports," Davis writes, "they would see the dramatic gulf between what is often said in public by our senior leaders and what is true behind the scenes."
Night Raids Killed over 1,500 Afghan Civilians
Gareth Porter: U.S. Special Operations Forces (SOF) killed well over 1,500 civilians in night raids in less than 10 months in 2010 and early 2011, analysis of official statistics on the raids released by the U.S.-NATO command reveals.
Kabul Attack Continues Taliban Control of War Narrative
Gareth Porter: This week's Taliban attacks on multiple targets in Kabul, including the U.S. Embassy and U.S.-NATO headquarters, are the latest and most spectacular of a long series of operations that have given the insurgents the upper hand in establishing the narrative of the war as perceived by the Afghan population.
Like Nixon, Obama Will Waste Lives to Get Reelected
Ivan Eland: The public could be forgiven for missing the real message of Obama's Afghanistan speech: "We've lost the war, but we are declaring victory anyway and getting out."
Despite Surge, Taliban Attacks, U.S. Casualties Soared
Gareth Porter: Data on attacks by armed opposition forces and U.S. combat casualties since the U.S. troop surge in Afghanistan was completed last summer provide clear evidence that the surge and the increase in targeted killings by Special Operations Forces have failed to break the momentum of the Taliban.
Ninety Percent of Petraeus's Captured "Taliban" Were Civilians
Gareth Porter: The timing of Petraeus's claim of Taliban fighters captured or killed, moreover, indicates that he knew that four out of five of those he was claiming as "captured Taliban rank and file" were not Taliban fighters at all.
U.S. Uses Peace Talks to Divide Taliban from Pakistan
Gareth Porter: Senior Obama administration officials hope to use the talks to sow suspicion between the Taliban and their main ally, thus weakening the Taliban resolve to negotiate on a peace settlement only if the United States offers a timetable for troop withdrawal.
A Radical Solution for the War in Afghanistan
Ivan Eland: The problem is that the U.S. goal in Afghanistan—although President Obama has reduced it from George W. Bush's instituting democracy to merely stabilizing the country—is still too ambitious.


text:
- Adventure
- African American fiction
- Alternative history
- Anthologies
- Biographical
- Business
- Children's books
- Christian
- Classics
- Coming of age
- Cultural & ethnic themes
- Educational
- Erotica
- Fairy tales
- Fantasy
- Gay & lesbian fiction
- Graphic novels & comics
- Historical
- Holiday
- Horror
- Humor & comedy
- Inspirational
- Literary collections
- Literature
- Mashups
- Mystery & detective
- Plays & Screenplays
- Poetry
- Religious
- Romance
- Science fiction
- Sports
- Themes & motifs
- Thriller & suspense
- Transgressional fiction
- Urban
- Visionary & metaphysical
- Western
- Women's fiction
- Young adult or teen
- Antiques & Collectibles
- Art, Architecture, Photography
- Biography
- Business & Economics
- Career Guides
- Children's Books
- Comics (nonfictional)
- Computers and Internet
- Cooking, Food, Wine, Spirits
- Education and Study Guides
- Engineering, trades, and technology
- Entertainment
- Gay and Lesbian
- General reference
- Health, wellbeing, & medicine
- History
- Home and Garden
- Inspiration
- Language Instruction
- Law
- Literary criticism
- Music
- New Age
- Parenting
- Philosophy
- Politics and Current Affairs
- Psychology
- Publishing
- Reference
- Relationships and Family
- Religion and Spirituality
- Science and Nature
- Self-improvement
- Sex and Relationships
- Social Science
- Sports & outdoor recreation
- Transportation
- Travel
- True Crime
- Weddings
Nonfiction » History » Historical Geography
Bütün Yönleriyle Mustafa Kemal ATATÜRK by ibrahim Sarı
Price: $2.00 USD. Words: 108,040. Language: English. Published: September 23, 2016 by ibrahim Sarı. Categories: Nonfiction » History » Historical Geography
Mustafa Kemal, vatanı ve milleti için canını feda etmekten kaçınmazdı. Daha Çanakkale savaşları sırasında Anafartalar grubu komutanı iken en ön safta savaştı. Bu savaş sırasında Atatürk'e bir şarapnel parçası isabet etmiş, fakat sağ cebinde bulunan saati kendisini ölümden kurtarmıştı. Sakarya Savaşı sırasında ise atından düşmüş ve kaburga kemikleri kırılmıştı.
Atatürk'ün Anıları by ibrahim Sarı
Price: $2.00 USD. Words: 52,790. Language: Turkish. Published: September 23, 2016 by ibrahim Sarı. Categories: Nonfiction » History » Historical Geography
ATATÜRK'ÜN TÜYLERİNİZİ DİKEN DİKEN EDECEK VE GURURLA OKUYACAĞINIZ ANLARI ''Beni görmek demek,behemehal yüzümü görmek demek değildir.Benim fikirlerimi,benim duygularımı anlıyorsanız ve hissediyorsanız bu kafidir.'' - M.Kemal ATATÜRK
Georgia History, Early History by Henry Albinson
Price: $9.99 USD. Words: 21,590. Language: English. Published: June 25, 2016 by Sonit Education Academy. Categories: Nonfiction » History » European, Nonfiction » History » Historical Geography
Christianity and the Georgian Empire, Population, Language, Religion, Culture, Arts, Economy, Government and Politics
Secret Viking Sea Chart: Discovered in Rosslyn Chapel by Ashley Cowie
Price: $6.99 USD. Words: 32,910. Language: English. Published: May 31, 2016. Categories: Nonfiction » History » Expeditions & Discoveries, Nonfiction » History » Historical Geography
As MGM's hit show Vikings on the History Channel follows the adventures of Ragnar Lothbrok and his brother Rollo, TV Historian Ashley Cowie unearths a rare Viking sea chart beneath Rosslyn Chapel in Scotland. Identifying important seats of power in the Viking's Nordic empire, it indicates a land far to the west of Britain. Is this chart the earliest representation of North America ever discovered?
Arkeoloji Bilimi by Emre Sarı
Price: $3.00 USD. Words: 47,310. Language: Hindi. Published: May 23, 2016 by ibrahim Sarı. Categories: Nonfiction » History » Historical Geography
Arkeoloji biliminin amacı, geçmişe ışık tutarak geçmişi canlandırmak, ilk çağ insanını düşünceleriyle ve bunların sonucu gerçekleştirdiği yapıtlarla günümüz insanına derinlemesine tanıtabilmek, onu anlamasına yardımcı olabilmektir.
ГИПЕРБОРЕЯ - HYPERBOREA 1 by WP IP GEB
Price: $3.00 USD. Words: 34,940. Language: Russian. Published: February 17, 2016. Categories: Nonfiction » History » Historical Geography
Giperborey's collection is devoted to problems of an ancient Vedic ancestral home in the north, to its traces of antiquity, traditions in the present. The first collection included articles of the Russian and foreign authors 1960-2015.
Gođenje, jučer, danas, sutra by Mehmedalija Sulejman Lilic
Price: $5.00 USD. Words: 25,250. Language: Bosnian. Published: April 1, 2015 and represented by Irfan Lilic. Categories: Nonfiction » History » Historical Geography
U knjizi "Gođenje, jučer, danas, sutra" je historijski razvoj sela Gođenje u Istočnoj Bosni, opis sela i običaja prije Rata 1992, opis ratnih dešavanja, opisi povratnika u selo, spiskovi poginulih, umrlih, raseljenih pojedinaca porodica i pojedinaca, te poznata porodična stabla familija koja su živjela u selu, a koja sežu i do 18. vijeka.
Grammaire de la carte by Claude Trudel
Price: Free! Words: 26,390. Language: French. Published: February 3, 2015. Categories: Nonfiction » History » Historical Geography
Ce livre présente les principaux éléments de la carte en vue de favoriser l'observation, l'étude ou l'analyse d'anciennes cartes géographiques: définition, support, contour, cartouche, orientation, grille, projection, échelle, toponymie, topographie, légende, illustration, commentaire, carton, thème. Compléments: cinq synthèses, liste des cartes, bibliographie, notice sur l'auteur.
THE ASSIMILATION OF AN AUSSIE BACKPACKER Into an English Life Style and Work Force 1952 by GORDON J R SMITH
Price: Free! Words: 29,570. Language: English. Published: September 28, 2014. Categories: Nonfiction » History » Historical Geography
This book tells of my experiences of working in England for three months and being included in the social life style of a young English group of married people of my age. Kings the excellent English company I worked for in my trade, was located adjacent to the famous LNER railway line and I was able to watch a cavalcade of famous passenger steam trains that I had read about in my railway books.
Shipwreck! Palau Discovered, 1783 by Dr Paul W Dale
Price: $3.99 USD. Words: 40,530. Language: English. Published: June 19, 2014. Categories: Nonfiction » History » Expeditions & Discoveries, Nonfiction » History » Historical Geography
The people of Palau over the centuries had evolved their own culture, language, body of knowledge, oral history and myths entirely devoid of any input from persons from other lands. This account by the men of the ANTELOPE of their experiences in Palau is the first and only thorough report of this unique culture before there was a nearly overwhelming contact between Palau people and Europeans.
Missouri Proud by Robert Mellberg
Price: $2.99 USD. Words: 85,520. Language: English. Published: March 25, 2014. Categories: Nonfiction » History » Historical Geography, Nonfiction » Sports & outdoor recreation » Sports statistics
Missouri is a Wonderful State! It is a scenic, historic, and entertaining region surrounding the mean population center of a great country.
Anciennes cartes géographiques by Claude Trudel
Price: Free! Words: 60,010. Language: French. Published: January 8, 2014. Categories: Nonfiction » History » Historical Geography
Découvrir et explorer le monde merveilleux de la cartographie: un répertoire de collections numériques d'anciennes cartes géographiques en libre accès, des ressources connexes, un atlas du monde et une bibliographie pour la recherche, l'analyse ou l'étude de ces documents dont plusieurs peuvent être redimensionnés, imprimés ou téléchargés et dont certains sont libres de droits.
O Alentejo no espólio cartográfico da Biblioteca Pública de Évora: Construção de uma colecção digital by Pedro Moreira
You set the price! Words: 42,400. Language: Portuguese. Published: December 28, 2013. Categories: Nonfiction » History » Historical Geography
Tese de Mestrado na Universidade de Évora em Arquivos, Bibliotecas e Ciências da Informação - ramo bibliotecas.
What's in an English Place-name?: A History of England in Its Place-names by William Lewis
Price: $5.99 USD. Words: 63,880. Language: English. Published: August 12, 2013. Categories: Nonfiction » History » Historical Geography, Nonfiction » History » European
What's in an English Place-Name? offers a fascinating chance to trace the names within our localities back to their roots and to give an absorbing insight into our district's histories. Discussing the origins of hundreds of place-names in England this book provides a comprehensive understanding of how place-names arose.
End Bag by Robert N. Jenkins
Price: $2.99 USD. Words: 22,620. Language: English. Published: June 13, 2013. Categories: Nonfiction » Travel » Essays & Travelogues, Nonfiction » History » Historical Geography
For 19 years, Robert N. Jenkins worked as the travel editor of the Tampa Bay Times and then as a freelance travel writer. In this illustrated anthology, Jenkins presents more than a dozen of his articles, taking readers through the contradictions of Cairo and of the former USSR, through the somber history of Gettysburg Military Park and the cornpone tour of the Jack Daniels Distillery, and more.
Hitler muerde el anzuelo. Normandia: la trama oculta del Día D by Alberto Mazzuca
Price: $6.99 USD. Words: 33,450. Language: Spanish. Published: January 4, 2013 by LD Books - Lectorum. Categories: Nonfiction » History » War, Nonfiction » History » Historical Geography
En Junio de 1944, las tropas aliadas desembarcaron en las playas de Normandía, sorprendieron a los alemanes y sellaron el resultado de la Segunda Guerra Mundial, en la mayor operación anfibia de toda la historia. Esta es la historia de esa apasionante batalla. Cavando defensas en el sitio equivocado, Hitler mordió el anzuelo.
Deeper Into The Mystery by Gary Cook
Price: $2.99 USD. Words: 37,180. Language: English. Published: May 21, 2012. Categories: Nonfiction » History » Historical Geography, Nonfiction » Religion and Spirituality » Antiquities & Archaeology
Journey Deeper into the Mystery of the sacred places of Aotearoa (New Zealand) with Gary Cook. as he takes you on an inspiring pilgrimage through the awesome landscapes of this land to twelve sacred sites in Aotearoa. Share his adventures and findings - natural and supernatural - along the way as he bears three gifts to each site. This book may well inspire you to go on your own nature pilgrimage.
Rennes le Chateau by TempleofMysteries.com
Price: $0.99 USD. Words: 34,400. Language: English. Published: January 25, 2012. Categories: Nonfiction » History » Historical Geography
It is the hiding place of the Holy Grail, or a great secret that will rock the Church. It is a place of hidden treasure and dark knowledge. It is the place where Jesus is buried... These are just some of the many theories now current about the village where a Victorian priest became strangely - and massively - rich, and where he left clues to a great mystery in the very fabric of his church.
The Story of Georgia's Boundaries: A Meeting of History and Geography by William J. Morton
Price: $9.99 USD. Words: 55,660. Language: English. Published: December 5, 2009. Categories: Nonfiction » History » American, Nonfiction » History » Historical Geography
Georgia's boundaries are more than mere lines on a map. They reflect centuries of wars and treaties, political maneuvering and litigation, heroic actions and human error. From the arrival of Europeans in the New World through legislative resolutions in 2008, this book recounts the landmarks, events and people that have shaped present-day Georgia.


text:
emissions monitoring Companies serving St. Kitts & Nevis
Current filtering criteriaYou can remove a filter by clicking on the x
Keyword: emissions monitoring ×
Industry: Health Care ×
Serving: Latin America ×
Serving: St. Kitts & Nevis ×
Instrumatic A/S
based in Ry, DENMARK
Instrumatic a/s is a Danish company specialized in the development and manufacturing of emission monitoring equipment, designed especially for harsh environments. Instrumatic is known for is high quality products, and recognized by the product brands OXYTRON and OXYDAN.
Environnement S.A
based in Poissy, FRANCE
Environnement S.A is the leading company in the field of instrumentation for the environment. Ever since its creation in 1978, Environnement S.A has been dedicated to the study, development, manufacture and supply of advanced on-line gas, particulate and water analyzers, using the most recent technologies. Environnement S.A proposes a comprehensive range of continuous ...
SGS - Climate Change Programme
based in Geneva, SWITZERLAND
Our services can help you whether you are eligible for the EU Emission Trading Scheme (ETS), have a Clean Development Mechanism (CDM) project or simply want to report to one of the growing number of voluntary or state-based initiatives. Our climate change program will help facilitate your trade in GHG emissions. By promoting the standardization of verification procedures, ...
Environics, Inc.
based in Tolland, CONNECTICUT (USA)
Environics is a world leader in computerized gas flow instrumentation. All service is handled factory direct. Environics is a world leader in computerized gas mixing, dilution, and calibration systems. Our gas mixing technology is based on very precise control of thermal mass flow controllers. Our calibrators and dilution systems exceed the accuracy required by the ...
Ashtead Technology Ltd
based in Letchworth, UNITED KINGDOM
Ashtead Technology was formed in 1985 when Ashtead Group plc acquired SubSpek Limited, which at the time provided underwater positioning, survey and inspection equipment rental from a base in Aberdeen. In 1994 the Singapore base was opened, focussing on the offshore oil and gas industry and the subsea telecommunications cable market in Asia Pacific. The first US ...
Ionicon Analytik Ges.m.b.H.
based in Innsbruck, AUSTRIA
IONICON is the world's leading producer of trace gas analyzers with market-leading, real-time, single-digit pptv-level detection limits for VOCs using the unique Proton Transfer Reaction – Mass Spectrometry (PTR-MS) and Selective Reagent Ionization – Mass Spectrometry (SRI-MS) technology. IONICON also produces trace calibration devices for analytical instruments and ...
Chromatotec Group
based in Val de Virvée, FRANCE
For 40 years, Chromatotec, alliance of the expertise of three companies, Chromato-Sud, airmotec, Medor, has been specialized in the development, manufacturing and sales of online gas analysers by chromatography, exclusively made in France.With offices in China and USA, our group is worldwide known for its leading-edge technology. Based on gas chromatograph principle, our ...
Pollution Srl
based in Budrio, ITALY
POLLUTION is an experienced designer and manufacturer of analytical instruments for the on-site chemical analysis of volatile compounds. Since 1991 POLLUTION has been a leader in micro GC and emissions FID technologies. Markets served: Environmental, Energy & Process (natural gas, petrochemical), Health & Safety. POLLUTION's young and highly motivated team, on top of ...
Clarke Energy
based in Liverpool, UNITED KINGDOM
Clarke Energy is a multinational specialist in the engineering, installation and maintenance of gas-fuelled power plants. Our facilities deliver fuel efficiency and help reduce carbon emissions. Applications include combined heat and power (CHP) with natural gas, biogas, landfill gas and coal gas. We are a the largest authorised distributor and service provider for GE's ...
based in St. Petersburg, FLORIDA (USA)
Industrial and Environmental Health and Safety Instrumentation: Air Sampling Pumps, Calibrators, Equipment, and Accessories. Colorimetric Gas Detector Tubes. Point Gas Monitors. Open Path Gas Detection. Sound, Noise, and Vibration Measurement Instruments. Real-time Dust Monitors. Flame Detectors.
Shimadzu Scientific Instruments Inc
based in Columbia, MARYLAND (USA)
Shimadzu Scientific Instruments (SSI) is the American subsidiary of Shimadzu Corporation, headquartered in Kyoto, Japan. Shimadzu is a $3 billion multinational corporation with three major divisions: Medical Diagnostics, Aerospace/industrial, and Analytical Instruments. The Analytical Division is one of the world's largest manufacturers of analytical instrumentation and ...
PPM Technology
based in Caernarfon, UNITED KINGDOM
PPM Technology is a leading manufacturer of portable and fixed gas detection and monitoring instruments, PPM has developed wireless connectivity for all our products; dedicated monitoring software enables our instruments to be managed wirelessly from a single PC; the collected data can be stored and analysed, analysis of the data can ensure effective management of any ...
PCE Instruments UK Ltd
based in Southampton, UNITED KINGDOM
PCE Instruments offers the most extensive and detailed range of precision measuring instruments. In our catalog we provide about 500 different types and models of high quality measuring equipment and test equipment to do tests and analysis of various physical, electrical, chemical and other parameters. You`ll find lots of equipment for monitoring, analysis, detection, ...
Chemisch Thermische Prozesstechnik GmbH / CTP Air Pollution Control
based in Graz, AUSTRIA
CTP (Chemisch Thermische Prozesstechnik GmbH) is one of the world`s leading companies in air pollution control for industrial applications. CTP was founded in 1985 and since then, its engineers, chemists and researchers have been developing individual technologies to serve customers worldwide, covering all industrial sectors. At CTP, we adhere to high quality standards ...
Fluid Dynamics International Ltd
based in Maidenhead, UNITED KINGDOM
Fluid Dynamics is one of the UK most experienced water conditioning and hard water scale prevention product manufacturers. Established in 1973 The only water treatment company whose products have been tested and proved effective under the US Government`s Green Proving Ground Scheme. With over 200,000 clients ranging from Coca Cola to Unilever to the US Airforce, and ...
Axetris Ag
based in Kaegiswil, SWITZERLAND
Axetris is a leading provider of components and modules for gas sensing, gas flow and gas control, powered by Axetris' proprietary platinum based Pt-microchip technology. All products are manufactured at Axetris' state-of-the-art micro-technology clean room facilities in the central part of Switzerland. The product range includes ultra-compact, high-accuracy and fast ...
Ahlstrom Filtration
based in Tampere, FINLAND
Ahlstrom is the global leader in the development, manufacture and marketing of high performance fiber-based materials. Our high performance products for filtration markets contribute to a cleaner and healthier environment. We serve Transportation / IC Engines and Industrial industries including Engine Air, Fuel, Oil, Cabin air applications. We also cover Fluid and Air ...
Enhesa - Global EHS & Product Compliance Assurance
based in Brussels, BELGIUM
Enhesa is a global environmental, health and safety consulting firm, providing EHS regulatory compliance assurance support to businesses worldwide. Over the past 20 years, Enhesa has built a knowledgebase of EHS regulations which includes the `What` of business requirements, the `How` to develop cost-effective solutions and the `When` of enforcement activities in over 200 ...
based in Montigny Le Bretonneux, FRANCE
Saphymo is a global leader in nuclear instrumentation solutions and Track & Trace solutions for industrial use. Design, production and services are ensured by the Saphymo group teams based in France and in our European subsidiaries. Our customers are the heart of Saphymo concerns in order to provide the most suitable solutions for radiation detection and measurement.
Dynamic Air Quality Solutions
based in Princeton, NEW JERSEY (USA)
Dynamic Air Quality Solutions, a leading manufacturer and distributor of high-performance indoor air quality products, is showcasing its V8 air cleaning system at this year`s AHR Expo. Dynamic air cleaning systems utilize a technology called non-ionizing, polarized-media, which significantly reduces the energy and environmental footprint of an HVAC`s filtration system. ...
Related Terms for emissions monitoring
Need help finding the right suppliers?
Let the XPRTs do the work for you


text:
Thursday, August 7, 2014
Every day, many cancer patients need rides to medical facilities for treatment. To help solve this problem, the American Cancer Society is having a recruitment campaign for its Road To Recovery program in Berkeley, Charleston, Colleton, Dorchester and Georgetown counties.
Through this program, volunteers provide free transportation for local cancer patients in need of a ride to and from cancer treatment.
Many of the people assisted through the Road To Recovery program do not own a vehicle, cannot afford bus fare or do not live where public transportation is available. Some patients are elderly and unable to drive and have no one nearby who can provide regular assistance with transportation. Without transportation they cannot receive their cancer treatments.
In 2013, some 400 rides were provided for patients in the greater Charleston area through the Road To Recovery program. The American Cancer Society is seeking additional volunteer drivers in Berkley, Charleston, Colleton, Dorchester and Georgetown counties in order to meet increasing need from local patients.
Anyone interested in volunteering must have a good driving record, valid driver's license, automobile insurance and a vehicle in good working condition.
Rides are needed Monday through Friday between the hours of 8 a.m. and 6 p.m. and the schedule is flexible to each volunteer's availability.
For more information on becoming a Road To Recovery volunteer, contact Fronde Merchant at firstname.lastname@example.com or call 843-744-1922.
© 2016 Moultrie News an Evening Post Industries company. All Rights Reserved.
Registration on or use of this site constitutes acceptance of our Terms of Service, Privacy Policy and Parental Consent Form.


text:
- Peoria Accelerated High SchoolEnglish Teacher, present
- University of WyomingSecondary Ed / English, 2005
- University of WyomingTheater & Dance, 2001
Teach With, Not 'To' the Test | Think Tank | Big Think
Teach With, Not 'To' the Test. Jason Gots on September 18, 2011, 12:00 AM. Tweet. Test_well. SPECIAL MINISERIES: Dr. Wang Explains Y
Let's make fitness a fun, achievable part of everyday life. Our products track your health and fitness, then sync wirelessly to offer insigh
Youth & Education
Home Programs Youth & Education. Home; About Us. Summary; Organization Structure. Executive Committee; Board of Directors; Committees; S
Free nerdy crochet patterns: Nerdigurumi! - Boing Boing
Features Reviews Video Science Gweek B-SIDE Archive Submit More SEARCH. About Us Contact Us Policies Shop Facebook Twitter Subscribe. DESKTO
Guillermo Del Toro To Direct Retelling Of 'Beauty and The Beast' Starrin...
Writer, director, producer, game-maker, and all-around ultra-busy dude, Guillermo del Toro has a lot going on. And by a lot we mean A-freaki
Muppets Halloween: The Bride of Frog 'N' Swine | Geeks of Doom
The Muppets love to dress up for Halloween, just like we do! Check them out in their Halloween garb from this e-card they sent out day for t
Venn Diagram: "Using a tent is not always just camping." - Boing Boing
THIS IS AN AD. THIS IS THE HARD-WORKING STAFF ↓. Jason Weisberger Publisher-at-Large. Ken Snider Sysadmin. Dean Putney Developer. Antinous L
535 - Lycanthropography: Howling at the Map | Strange Maps | Big Think
Big Think. Sign up; Log in. Home; Special Series; Topics; Experts; Blogs; Ideafeed. Follow us. Like us on Facebook; Follow us on Twitter; Li
a softer world: 735
Your ad could be here, right now. a softer world archive / about / store / fnord / our projects / search. back. buy this print digg facebook
garfield minus garfield
garfield minus garfield. Garfield Minus Garfield is a site dedicated to removing Garfield from the Garfield comic strips in order to reveal
xkcd: MTV Generation
Permanent link to this comic: http://xkcd.com/973/. Image URL (for hotlinking/embedding): http://imgs.xkcd.com/comics/mtv_generation.png. Se
Lessons from Sherlock Holmes Pt.I: Paying Attention to What Isn't There ...
Lessons from Sherlock Holmes Pt.I: Paying Attention to What Isn't There. Maria Konnikova on July 21, 2011, 10:41 AM. Tweet. Silver_blaze
MaMa's Supper Club Tilapia Parmesan
You asked for it. Here it is. Thanks so much to MaMa's Supper Club. Wish we could all go there.
How to Make Harry Potter's Butterbeer [Video]
Hey, this actually looks pretty good... or at least, better than last week's recipe, Skyrim's Sunlight Soufflé.
The 5 Most Badass Teams of Famous People To Ever Join Forces
You Might Be A Zombie! Cracked Store; iPad App; Back to School; Write For Us. Login; or Register; Face Book Connect. Cracked.com America&#39
Watch The First Trailer For 'Argo,' Ben Affleck's Amazing Historical Dra...
Ben Affleck's remarkable transformation from talk show punchline to acclaimed filmmaker is one of the most remarkable Hollywood comeback sto
A possible medical diagnosis of zombies, just in case they end up being ...
The Zombie Research Society has some information about medically diagnosing zombies that might interest you!
garfield minus garfield
garfield minus garfield. Garfield Minus Garfield is a site dedicated to removing Garfield from the Garfield comic strips in order to reveal
That's the cleverest Doctor Who-themed dildo I ever hope to see.


text:
Geraldine Edith "Gerry" Skinner, 76, of Amarillo, formerly of Clarendon, died Thursday, Jan. 14, 2010.
Services will be at 10 a.m. Wednesday in Pleasant Valley Baptist Church with the Rev. Roger Smith, pastor, officiating. Burial will be in Llano Cemetery by Robertson Funeral Directors of Clarendon.
Gerry was born April 10, 1933, in Hobbs, N.M., to Odell Allen and Geneva Hipp Hawks. She married Troy Dean Skinner on Sept. 28, 1956, in Fort Sumner, N.M. She had been a resident of Amarillo and Clarendon most of her life. In 1966, she and Troy started Texas Saddlery, where she was the head bookkeeper until their retirement.
She loved working with plants, gardening and bird watching. She also loved to watch TV and shop. While living in Clarendon, she volunteered at the nursing home. She loved her children, grandchildren and her pets. She was a Christian.
She was preceded in death by her parents; her husband, Troy, on Feb. 19, 2008; and a son, Scott Skinner, in 1972.
Survivors include two sons, Walt Skinner and wife Kathy of Amarillo and Sam Skinner and wife Jean of Valley View; a daughter, Dr. Rebecca "Becky" Monroe and husband Dee of Kingwood; two sisters, Jeanne James of Odessa and Norma Schoelkopf and husband Al of Centerburg, Ohio; nine grandchildren; and 14 great-grandchildren.
The family suggests memorials be to Cal Farley's Boys Ranch, P.O. Box 1890, Amarillo, TX 79174-0001; or Clarendon Volunteer Fire Department, P.O. Box 364, Clarendon, TX 79226.
The family will be at 7611 Hermosa St. in Amarillo.
Sign the online guest book at www.RobertsonFuneral.com.
Amarillo Globe-News, Jan. 17, 2010
© 2016. All Rights Reserved. | Contact Us


text:
Stuck on Killer is Dead: Nightmare Edition? We've got you covered!
Don't panic! Our cheats will see you through.
Grasshopper Manufacture is teasing its next project
Believe In The Internet tease points to reveal next week.
Killer Is Dead coming to PC in May
Nightmare Edition contains new difficulty, Theater Mode and DLC goodies.


text:
Tiger Woods
What We Didn't Get From Tiger Woods
What We Didn't Get From Tiger Woods
TIger Wood Golf Professional
You got the Michael Jordan of golf and then the Michael Jordan of... Well hes THE Michael Jordan so lets just leave it at that
No matter how good you get, you can always get better
"Days when you just don't have it, you don't mail it in. You don't pack it in. You give it everything you've got. You grind it out." -Tiger Woods
Tiger Woods is perhaps the greatest athlete of all time and as a result has a personal net worth of $500,000,000 million and an annual salary of 85 million. The accolades he has earned are too numerous to list in their entirety but here are some highlights: 14 professional major tournaments, 71 PGA Tour events, he has been ranked #1 for more consecutive weeks than any other player
Tiger Woods Reach for the top you may be surprised how soon you can reach it!!! May not be easy but you can reach it!!
Tiger Woods Crewneck Sweater
Tiger Woods More
Tiger Woods Timeline - Won 78 official PGA Tour events including 14 majors. He has been heralded as "the greatest closer in history" by multiple golf experts. He owns the lowest career scoring average & the most career earnings of any player in PGA Tour history. Woods has spent the most consecutive & cumulative weeks atop the world rankings. He is 1 of 5 players to have won all 4 prof'l major championships in his career, known as the Career Grand Slam, & the youngest to do so.
How cool is this? A portrait of Tiger Woods using nothing but Nike swooshes.