text:
A dynamic risk management system for operating systems that provides monitoring, detection, assessment, and follow-up action to reduce the risk whenever it rises. The system enables an operating system to protect itself automatically in dynamic environments. The risk management system monitors a diverse set of attributes of the system which determines the security state of the system and is indicative of the risk the system is under. Based on a specification of risk levels for the various attributes and for their combinations, the risk management system determines whether one or more actions are required to alleviate the overall risk to the system.
1. A method of dynamic risk management for an operating system of a computing device, the method comprising:
automatically assessing a security state of the operating system of the computing device independent of security state changes;
determining, based on the assessing, a risk level RNew, wherein RNew=RCurrent+ΣrfNew−ΣrfOld+riNew−riOld where RCurrent is a current risk level, and where ΣrfNew is a sum of scores assigned to new risk factors discovered by the assessing, and where ΣrfOld is a sum of scores assigned to old risk factors of Rcurrent that are no longer discovered by the assessing, and where riNew is a new risk increment based on a combination of the new risk factors, and where riOld is an old risk increment based on a combination of the old risk factors;
causing an action related to the operating system of the computing device to be performed based on the risk level.
2. The method according to
3. The method according to
4. The method according to
5. The method according to
6. The method according to
7. The method according to
8. The method according to
9. The method according to
generating an alert;
activating a security measure;
restoring to an earlier state of the operating system;
terminating a network connection;
disabling a component;
disabling operation of at least a portion of software code;
initiating a software protection program.
10. The method according to
11. The method according to
12. A system having at least one processor that is configured to perform the method recited in
13. A method of dynamic risk management for an operating system of a computing device, the method comprising:
assessing a security state of the operating system of the computing device;
automatically causing, in response to the assessing, a tiered set of actions related to the security state of the operating system of the computing device to be performed, wherein the tiered set of actions includes:
(i) determining a risk level RNew, wherein RNew=RCurrent+ΣrfNew−ΣrfOld+riNew−riOld where RCurrent is a current risk level, and where ΣrfNew is a sum of scores assigned to new risk factors discovered by the assessing, and where ΣrfOld is a sum of scores assigned to old risk factors of RCurrent that are no longer discovered by the assessing, and where riNew is a new risk increment based on a combination of the new risk factors, and where riOld is an old risk increment based on a combination of the old risk factors, and
(ii) causing a risk alleviation action related to the operating system of the computing device to be performed based on the risk level.
14. The method according to
15. The method according to
16. The method according to
17. The method according to
18. A system having at least one processor that is configured to perform the method recited in
Risk management involves the measuring and/or assessing of risk and the development of strategies to manage that risk. In a computer system, risk management involves preventing and addressing malicious attacks as well as adversarial actions taken unknowingly that may corrupt normal operations. Known technologies for risk management of computer systems are described as follows.
Network Access Protection (NAP) determines machine (operating system) health (that is, whether the machine meets specified security requirements) prior to admitting it on a network. The determination may be performed after various events, including: at connect, authentication or re-authentication, during IP configuration of the machine, and/or when there is a change to the software state of the machine such as when an update is applied. For example, in the case of Dynamic Host Configuration Protocol (DHCP), NAP processing may occur at IP configuration times, including renewal or reconfiguration. In the case of 802.1x, NAP processing may occur at authorization and reauthorization times. In the NAP model, a NAP agent on the machine checks the health of a machine, captures its findings in a statement of health or bill of health (SOH/BOH), and sends the same to a NAP server or end station, respectively. If the NAP server or end station determines the machine to be unhealthy, it is put on a restricted network or the connection is not allowed until the machine gets patched appropriately.
Microsoft Baseline Security Analyzer (MBSA) is a tool designed for IT professionals that helps small and medium-sized businesses determine their security state in accordance with Microsoft security recommendations. MBSA provides Host Vulnerability Assessment (HVA). HVA may be used for checking vulnerabilities in the machine and generating a report for an administrator's benefit. The administrator may analyze the reported vulnerabilities in the machine to determine the risk the machine and the network is under. The administrator may then take appropriate actions to mitigate or fix the vulnerabilities in order to reduce the risk. Alternatively, such action may be taken automatically in accordance with security policy on the machine.
Other technologies, including anti-malware and intrusion detection/prevention technologies, guard against infiltration attempts by malware and may check for the presence of malware on the machine. When malware is discovered, these technologies may take preventative action of blocking, quarantining, or cleaning the malware.
This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.
Some embodiments of the system described herein control dynamic risk management of an operating system in which a security state of the operating system may be automatically assessed independent of security state changes. A risk level may be determined according to the security state. An action related to the operating system may be caused to be performed based on the risk level.
Some embodiments of the system described herein control dynamic risk management of an operating system in which a security state of the operating system is assessed and a tiered set of actions related to the security state is automatically caused to be performed. The tiered set of actions may include (i) determining a risk level based on at least one risk factor of the security state and (ii) causing a risk alleviation action related to the operating system to be performed based on the risk level.
Described herein are various technologies and techniques for dynamic risk management. Various embodiments are described more fully below with reference to the accompanying drawings, which form a part hereof, and which show specific exemplary embodiments for practicing various embodiments. However, other embodiments may be implemented in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will be thorough and complete. Embodiments may be practiced as methods, systems or devices. Accordingly, embodiments may take the form of a hardware implementation, an entirely software implementation or an implementation combining software and hardware aspects. The following detailed description is, therefore, not to be taken in a limiting sense.
The logical operations of the various embodiments described herein may be implemented (1) as a sequence of computer implemented steps running on a computing system and/or (2) as interconnected machine modules within the computing system. The implementation is a matter of choice dependent on the performance requirements of the computing system implementing the embodiment. Accordingly, the logical operations making up the embodiments described herein may be referred to alternatively as operations, steps or modules.
The system described herein may be used in conjunction with any suitable computer operating system or version thereof. For example, the system described herein may be used with Microsoft Windows�, Linux�, Mac OS X� and/or other operating system.
The assessment of the operating system identified by the step 102 may include monitoring system components. Example system components include specific (or all) registry keys, active processes, specific (or all) folders and files, certain types of network traffic, status of security services, system, application, and audit log entries, and specific performance counters, among others. Other appropriate components or combinations of components may be monitored. The system components may be monitored using push and pull mechanisms. In a push model, components may publish data about their security state and the system may subscribe to the information. In a pull model, the system may actively query the components for data abut their security state. The assessment is used to identify risk factors (attributes or pulse points) of the system that are used to determine the risk level, as further described elsewhere herein. The risk factors monitored may cover operational parameters, CPU and bandwidth (BW) usage, Checksum/IP Security (IPSEC) errors, memory and page faults, etc. In an embodiment, a Risk Manager (RM) may monitor the risk factors and perform other actions as further described elsewhere herein.
Example risk factors include host security profile, network type, network security profile, user risk profile, software risk profile, network risk profile, and/or environmental factors, among others, described as follows.
Host security profile—The host security profile may indicate the security framework on the machine, for example whether the machine has Authenticated Firewall, Anti-Malware, and IDS/IPS enabled. The less the machine has in terms of a security framework, the weaker the security profile and the less secure the machine is. As further described elsewhere herein, the determination of the strength of the machine security profile may also take into account vulnerabilities in the machine such as specific attack prone ports being open, missing patches and outdated signature files.
Network type—The network type may indicate the type of network to which the machine is connected, and may be, for example, work (corporate or enterprise), public or private. Work network may be one where a machine is domain joined. Private network may be a non-domain network where the machines on the network may be mostly known and owned by the same person, group or establishment. Public network may be an open network as in public hotspots where machines on the network are mostly unknown machines that may be owned by different persons, groups or establishments. The machine may be generally at a higher risk on a public network as compared to a private network. Likewise, the machine may be at more risk on a private network as compared to a work network because of the lack of IT managed processes and infrastructure on the private network.
Network security profile—The network security profile may provide a more detailed assessment of risk of using a network and complement other risk assessment benchmarks by checking the security profile of the network. The security profile of the network is based on factors such as the media and type of connectivity used and the security configuration of the network. As an example, a network with an Edge Firewall or Proxy Server that enforces all clients to establish encrypted VPNs or check application usage/traffic may offer better security than a network without such an Edge Firewall or Proxy Server. Likewise, a network protected by Network Access Protocol Server (NAP) offers better security than one without NAP. An unsecured Wi-Fi network offers less security than one that requires 802.1x/WPA and a cable connection as against DSL offers less security because, unlike DSL, a cable connection is a shared medium. The strength of the security profile of a network may be specified by a metric that is factored into the evaluation of the risk level of the network.
User risk profile—The user risk profile may indicate the risk profile of the user using the machine and may be a measure of how much the user using the machine can put the machine at risk. The reputation of the user may factor into the determination of the user risk but it may be predominantly determined by user actions and their results. The machine may be configured with the user risk information or may determine the user risk factor itself. As such, the machine may be self-learning and improve the risk assessment over time as the machine processes more history of actions and subsequent results.
Software risk profile—The software risk profile may indicate the risk due to the software running on the machine. The reputation of the software may factor into the risk level determination. As an example, non-certified or unknown software, for example, low assurance software, raises the risk level of the machine. The system may keep account of the negative impact, if any, due to running specific software on the machine and uses that to assign a risk value to the software. For example, if a machine that is supposed to be in a specific role, as specified by a Security Configuration Wizard (SCW), violates that role's boundaries by running software that executes functionality outside of that role, the risk increases.
Network risk profile—The network risk profile may determine the risk level of the network. The network risk level may be determined by assessing vulnerabilities in the network. Unlike the network security profile, the network risk profile may be fairly dynamic. The network risk level may be determined by consideration of the following factors: (i) risk level of individual machines (machines may communicate their risk level to a central controller/system over secured channels; (ii) suspect activity on the network (an example would be significant increase in port or vulnerability scans, which when combined may indicate an increased chance of a follow-up attack); and/or (iii) presence of unmanaged or legacy machines. The network risk level may also be affected by external (environmental) factors such as publishing of vulnerabilities existent in one or more machines on the network and publishing and/or execution of their exploits, as further described elsewhere herein.
In various embodiments, the network risk level may be specified by an administrator or determined dynamically. The network risk level may be determined dynamically from events and risk scores generated by machines and network infrastructure components that are collected and analyzed at a central server such as NAP or a Network Vulnerability Assessment (VA) server. The network risk level may also be determined using a community network. For example, a peer to peer model may be used by a community of machines to share risk information.
Environmental factors—Environmental factors may be specific events that take place outside of the machine or its network that result in the elevation of a machine's and network's risk level. Environmental factors may affect both machine and network risk levels directly—network risk levels may affect machine risk levels and, therefore, there may be an indirect causal relationship between environmental factors and machine risk level. For example, the risk level of a machine may increase if one or more vulnerabilities on the machine or its network are announced. The machine risk level may increase further if exploit code is published for those vulnerabilities and increase even further if the worm carrying the exploit code exploits one or more machines with the same vulnerability and starts propagating.
Referring again to
At the step 106, a risk level of the security state may be determined. To determine the risk level, a risk score may be provided to each assessed risk factor that may be factored into the determination of the risk level. A score may also be provided to the risk increment caused by combinations of risk factors. The risk increment is a measure of the extra risk on top of the aggregate risk of individual risk factors that is reflective of the increased risk from having multiple risk factors existing at the same time. Scores of risk factors may be assigned automatically, such as default values, or may be scores specified by an administrator. An administrator may also specify one or more aggregate risk levels for the machine that, when crossed, triggers follow-up action. The risk score used may be a number, such as from 1 to 5 or 1 to 20, and/or may be a level, such as Low, Moderate, Medium, High and Critical, and/or may be some other risk identifier.
In an embodiment, to determine the risk level of a machine, the following formula may be used:
Once the risk level is determined, the occurrence of a security event that may potentially change the risk level of the machine triggers the calculation of the new risk level. The formula for determining the new risk level may then be:
For purposes of explanation, the following provides a simple example of a risk level determination. Suppose the administrator has specified the risk scores of the following risk factors and their combinations, as shown in Table 1 (the first column identifies the risk factor or a combination of risk factors with the value of the risk factor or of the combination shown in parenthesis):
Suppose that the current security state of the machine is as follows: File and Print Port Exception (ON); Network Type (Work). Then the current risk level is:
If the Network Type changes from Work to Public, then the new risk level is:
The new risk level of 5 is higher than the sum of the risk score of FPPE existing and Network Type: Public which is 3. Because of this higher risk level, a threshold may be exceeded, as further noted below, and policy prescribed risk alleviation actions may be triggered automatically.
In various embodiments, events that elevate the risk level of a machine may be classified into two categories: (1) events that make a machine more vulnerable to infiltration and/or attack and (2) events that indicate possible infiltration and/or attack. Appropriately addressing events of the first kind may substantially reduce incidents of the second kinds of events. Further, as further discussed elsewhere herein, multiple thresholds may be established to indicate different severities of risk levels.
The following is a sample list of events that, individually or in certain combinations, may raise the risk level to a level that crosses the safety threshold specified for the system. As discussed elsewhere herein, multiple thresholds may be established to indicate severity levels, for example danger levels and/or critical levels. The events may be detected through monitoring of specific attributes of the system, as further described elsewhere herein.
(1) Joining an unsafe network: A machine may join a network that has multiple risk factors such as the network being a public network, the last mile connectivity being unprotected Wi-Fi, the network not being authenticated properly, etc. Such a network's security profile may be considered weak and the network risk level is high.
(2) Disabling/removing protective security measures: The protective security measures on the machine, such as Authenticated Firewall, Anti-Malware, or IDS/IPS may terminate or be disabled due to worm activity or through legitimate user action.
(3) Weakening the security measures—The protective security measures on the machine may get weakened. For instance, discovery ports, file and print share ports, and other such ports that may be used by an attacker may get opened in the Authenticated Firewall, the virus/spyware signatures on the machine may get deleted or may become out of date, IE security settings may become more lax, IPSEC authentication that was previously ON may get disabled, insecure wireless ad-hoc mode may become enabled (an operating system may be more vulnerable in wireless ad-hoc mode than in wireless Infrastructure mode because of the lack of WEP/WPA security or the presence of weak security measures in ad-hoc mode), etc.
(4) Running non-certified, un-patched or less secure applications—The machine may be running non-certified applications (covering any executable such as exe, dll, ActiveX control, script, etc.) or legacy applications or applications that do not have all security patches. As an example, Windows may be running with an older version of IE. Such applications, considered as being at a lower assurance level than others, raise the risk level of the machine.
(5) System restore or software installation activities—When a system is restored to an earlier time, it may result in reopening vulnerabilities because of lost patches that were installed after the earlier time. Conversely, installing new software may introduce vulnerabilities if the software contains bugs. It may also increase the surface area of attack of the system (opportunities to attack the system).
(6) Running in non User Access Control (UAC) mode—If UAC is off, administrative processes may run at administrative privilege levels instead of at lower privileges by default, thus presenting a larger surface area of attack.
(7) Increased occurrence of undesirable activity—Actions such as repeated incorrect password input attempts, unauthorized attempts to access privileged data, port scanning, etc. may be indicative of malicious activity and a risky environment.
(8) Turning Bitlocker off—If Bitlocker is turned off for a mobile PC, it raises the risk of loss of privacy and data.
(9) Turning on routing between two networks—When routing between two adapters is enabled on a machine that is not an Edge Firewall or a NAT, it may provide an unmonitored and uncontrolled conduit between networks that may be exploited by malware to infiltrate the network and machines on the network.
(10) Putting a network card in promiscuous mode—An attacker may put the network switch into a confused state so that it sends all packets to every port. This may enable the card in promiscuous mode to see traffic of/for every node connected to the switch and may increase the risk level of other machines.
Factors occurring external to the machine that may elevate risk levels are identified as follows:
(11) Publishing of vulnerabilities—When an existing vulnerability in Microsoft Windows� is exposed without a patch being available or applied, the risk level of the vulnerable machines may increase.
(12) Publishing of exploits of vulnerabilities—When an exploit is published, the risk level of unpatched machines goes up even more than when just the vulnerability is published.
(13) Computing devices in the same network or security domain getting infected—When other device(s) on the same network as the device being managed for risk get infected, the other devices may likely infect the device being managed. If the infected device(s) are trusted, the risk level increases substantially.
Referring again to
At the test step 108, if the determined risk level does not exceed a particular threshold established as requiring an action, then processing may return to the step 102. However, if the threshold is exceeded, processing proceeds to a step 110 at which an action is caused to be performed.
At the step 110, the action caused to be performed may be based on the risk level and/or the established threshold that the risk level exceeded. The action may be a risk alleviation action that may help alleviate the risk and also potentially prevent the risk from escalating again. In an embodiment, a risk alleviation action may fall into at least one of two categories: a risk mitigation action and/or a risk remediation action. After the step 110, processing is complete.
Risk mitigation action may include actions that may be taken with or without user/administrator consent based on policy. Risk mitigation actions may include: generating a warning or other alert, putting the machine in "high security measure mode", terminating specific high risk applications, terminating communication with non-certified/unknown devices, and putting a machine in self-quarantine mode, as further described elsewhere herein.
In addition to mitigating risks, remediation actions may also be triggered. For example, the risk manager may trigger the NAP agent on the machine to initiate the NAP exchange with the NAP server on the network. This allows the NAP server on the network to assess the risk level of the machine and take appropriate actions to alleviate the risk for the host and the network. The NAP agent may pass the health and the risk level of the system in the Statement of Health packet (SOH) to the NAP server. The NAP server may analyze the SOH to determine if any follow-up action is needed to alleviate the risk. If one is needed, the NAP server may instruct the NAP agent on the machine to take remedial measures and/or quarantine the system, for example.
In another embodiment, in the absence of a NAP infrastructure, the machine may directly undertake risk remediation actions such as downloading of needed updates of software, patches, and signatures. Additional risk mitigation actions may be initiated such as scanning the system to clean known viruses and activating specific IDS/IPS filtering because of newer signatures received due to the update. Additionally, a more extreme form of risk remediation may be for the machine to be returned to a previous known good (low-risk) state of the system and apply extra protective measures on top of that previous state to protect the machine from entering the bad (high-risk) state again. The restoration to a previous known good state may be done to reverse the affects of specific security related events which are suspected of putting the machine at high risk. As an example, if Active Scripting was enabled which put the machine and the networks at elevated risk, and later, the machine was determined to be infected, a risk remediation action may clean the machine and disable Active Scripting. Such action may be taken automatically or may be performed after user confirmation if significant functionality is likely to be impacted. Further, when risk levels fall below specified thresholds, some of the risk alleviation actions that were taken may be reversed if the actions are impacting functionality.
(1) Generate alerts—Various types of alerts may be generated ranging from visual cues provided on the task bar to sending high-priority alerts to a server to sending the aggregate risk score to a central controller that then takes mitigation and remedial measures for the network, etc. In alerting the user, the machine may inform the user of the new risk level and ask the user to confirm the triggering of specific mitigating actions. This user confirmation may become more important if the mitigating measures can result in loss of functionality until a patch becomes available to remediate the problem.
(2) Trigger High Security Measure Mode—In High Security Measure Mode, the most secure measures may be used to shield the computer from attacks. This includes enabling Authenticated Firewall, IDS/IPS, and/or Anti-Malware, in case any of these are disabled, and employing conservative measures that include one or more of the following actions:
(A) Disallowing inbound connections—Only outbound connections may be allowed by default. This means that all existing exceptions to the above rule may be disabled. Such an action may be taken when a machine moves from an Intranet to the Internet. Any exception to this rule may be allowed only after user confirmation or if the risk level of the system goes below a certain threshold. If a machine's risk level is critical because it is suspected or has been determined to be infected by a propagating worm, all inbound and outbound connections may be disallowed.
(3) Reduce attack surface—If the machine is violating its role(s) boundaries, the RM may terminate and disable code that is not required for executing the authorized role(s) of the machine. For the case, where there is no specified role(s) for the machine or the machine is executing within its role(s), the RM may reduce a machine's attack surface by disabling entire components, or specific functionality of components, that are not in use. If specified by policy, even components/functionality that are in use may be terminated and disabled. For example, wireless may be disabled if either it is not being used as in an environment such as an airplane that does not have wireless support or if the machine is multi-homed with both wireless and wire-line connectivity to the same networks. As another example, ports 135, 137, 138, and 139 (Rpcss and Netbios ports—popular attack points) may be shut down. As yet another example, the machine may turn on Data Execution Protection (DEP) protection for all programs or for programs that have a certain risk score by disabling exceptions. Examples of the latter may be shutting down and not allowing execution temporarily of certain applications such as IM that are vulnerable in order to control the spread of a worm known to have an exploit for IM and/or disabling specific functionality such as Active Scripting through "Disabling Active Scripting" security option in IE.
In performing the above actions, the system may begin by terminating/disabling only low assurance components. Low assurance components are those that do not meet a certain preset bar of trustworthiness as indicated by their reputation score. In cases where high-assurance components may increase risk due to known vulnerabilities and exploits and there are machines running such "possibly infected" components, these components may also be terminated/disabled.
The system may also choose to terminate communication with non-certified or unknown devices to reduce the chances of getting infected from untrustworthy sources. This may be complementary to allowing only IPSEC and SSL above which pertains to IP communication. An example would be "pairing" with an unknown Bluetooth device. Such pairing may give the unknown device access to all services on the machine that are available for sharing. When risk levels are high as in a public place, Bluetooth discovery mode may be disabled and/or, more drastically, Bluetooth radio may be disabled.
(4) Trigger NAP—When the risk level reaches danger level while the machine is on the Work network, for example a network with a NAP infrastructure, the RM may trigger the NAP agent on the machine to conduct the NAP protocol with the NAP server on the network so that the machine may be checked for health and if needed quarantined until it gets patched.
(5) Restrict user capabilities—The RM may restrict privileges of high risk individuals regardless of what account they run under. This may be done by changing the risk score of such individuals in the system. Access Control Lists (ACLs) with an associated condition of "principal's risk score <=X" where X is a certain value may not work for individuals whose risk score >X. Also, the RM may ask the security subsystem to strip privileges from the security token of the processes running in the account of the high risk individual.
(6) Precipitate update or restore action—If the machine is on a non-Work network, the machine may use services such as Windows update to update itself immediately with patches, signatures, policy, rules, etc, that are available instead of waiting for its regular scheduled time to do such updates. The machine may resort to a more severe form of risk alleviation by restoring its state to a previously known good state (less risky state) and applying patches and appropriate mitigation measures on top of it to prevent itself from getting back to the previously elevated risk situation that triggered the restore.
(7) Virtualize the environment—The RM may virtualize the execution environment of a user or code to isolate the system from the potential negative affects of that user or code's activity. For example, if the RM determines that a user is engaging in risky behavior, it could run the user's applications in a virtual environment. Thus, the determination of whether to enable UAC or not or to create a virtual machine for a particular user or code may influenced by the risk score of the same
(8) Cleaning the infection—In addition to the above actions, risk alleviation actions may include cleaning the machine of any infections. For example, when security measures like AM are enabled, update is done, and NAP is triggered, immediate scanning and cleaning of the machine may also be done. If an update is being done (with or without NAP), the system described herein defer the scanning until after the update is complete in case a new signature file gets downloaded onto the machine. Thus, if a virus were to disable or weaken a security measure on a machine or does an activity that raises the risk level above the machine's safety levels, risk alleviation actions such as the above would not only reactivate the security measures again but would also activate measures that could possibly remove the virus, assuming that its signature is now available because of the update.
TABLE 2 illustrates a few example risky situations and corresponding actions triggered. These actions may be taken with or without user confirmation based on policy. An alert may generated in all cases. In each case, though one possible reason for the risk situation is given, worm activity may also always be a reason.
The steps shown and described in connection with the flow diagram 100 of
In response to the assessment of the non-secure state 520, the risk management system according to the system described herein may act to alleviate the risk. One action may be to restore the operating state to the earlier first secure state 510 that was known to be good. Another action may be to transition to non-secure state 520 into a second secure state 530 different from the first secure state 510. Such risk alleviation actions are further described elsewhere herein. An event may also occur in the non-secure state 520 that alerts a user to the problem but that does not modify the non-secure state 520. It is also possible that the risk event may pass and the operating system reverts back to the first secure state 510.
In the second secure state 530, an alert event may occur that alerts a user to the modification to the second secure state but which does not change the second secure state. It is also possible that the risk event that initially occurred ends and the risk alleviation event that placed the system into the second secure state 530 is reversed, resulting in a return of the system to the first secure state 510.
Processing after the 604 may proceed in a similar manner as described elsewhere herein. After the step 604, processing may proceed to a test step 606 at which it is determined whether a change in the security state of the system has occurred. If a change in the security state has not occurred, processing may proceed back to the step 602. If a change in the security state has occurred, processing may proceed to a step 608 at which a risk level is determined. Alternatively, processing may proceed automatically from the step 604 to the step 608 without intervening test step 606.
After the step 608, processing proceeds to a test step 610 at which the risk level is compared with a predetermined threshold. If the risk level does not exceed the threshold, processing may proceed back to the step 602. If the risk level does exceed the threshold, then processing proceeds to the step 612 at which one or more actions are caused to be performed to alleviate the risk, as further described elsewhere herein. After the step 612, processing is complete.
It should be noted that the system described herein may be operated in any combination of the embodiments disclosed herein. For example, the system may operate only when called following a new installation into the operating system indicating a change of state and/or may operate only in an asynchronous mode in which security assessments are performed on the occurrence of an event affecting the system or periodically and/or may operate in both modes.
The system described herein may automatically and quickly employ different types of protection based on the system's risk level through the use of risk conditioned authorizations. Risk conditioned authorization, specified through conditional ACLs (Access Control Lists), allow principals to access the system resources only at certain risk levels. Thus, if the authorizations specified by such ACLs work only when the risk to the system is below a certain threshold then a system having more security measures may be employed when the risk to the system crosses the threshold. As an example, if a remote user write access to a file through a conditional ACL when the machine has a risk level of low to medium, then if the risk level goes up to high, the write authorization specified in the ACL gets automatically revoked without any explicit action from the RM. The remote user may be denied access in this situation.
The following example flow shows how through ACLs conditioned on risk, a system can be self-adjusting/protecting. Machine policy may be that no web site be accessed when the machine's risk rating is greater than or equal to 8 (in a risk range of 1-10 where 10 is the highest). This may translate into the following rule:
Rule: Object=(ObjectId=*, ObjectType=TCP) {Action=Connect, Principal=AnySid, Permission=Allow, Condition=MachineRiskScore:(1..7)}.
If, at the step 924, permission is allowed then processing proceeds to a step 926 at which SeAccessCheck( ) returns AccessAllowed and ESRMAccessCheck( ) calls ESRMConditionEvaluator(Object, Condition=(MachineRiskScore=1,7). After the step 926, processing proceeds to a step 928 at which ESRMConditionEvaluator( ) checks the machine's risk score by calling into the Host Risk Manager. After the step 928, processing proceeds to a step 930 at which the Host Risk Manager returns a risk score. At a test step 932, the risk score is compared to a threshold for the rule. If the threshold for the rule is exceeded (for example, a risk score of nine is returned with respect to the above-noted rule), then processing proceeds to a step 934 at which ESRMConditionEvaluator( ) returns False. If there are no other access control rules after the step 934, processing proceeds to the step 950 at which ESRMAccessCheck( ) returns AccessDenied and the packet is dropped and the user's Internet browser fails in getting to the URL. If the threshold for the rule is not exceeded, then processing proceeds to a step 936 at which ESRMConditionEvaluator returns True. After the step 936, processing may proceed to the step 940 at which access to the URL is allowed or, alternatively, another security assessment procedure may be initiated.
In the above, ESRMAccessCheck( ), ESRMGetRule( ), SeAccessCheck( ), and ESRMConditionEvaluator( ) are all functions provided either by the Dynamic Risk Manager component in the Operating System or by other parts of the security subsystem within the Operating System. All of the steps described herein may be implemented as executable code in a processor or other computer-readable medium.
The risk management component 1002 may also receive connectivity type information and process information from a Security State Assessment component 1006 that assess the state of the system. The security state assessment component 1006 may receive vulnerability information from a Host vulnerability assessment (HVA) component 1010 that scans for vulnerabilities as further discussed elsewhere herein. The security state assessment component 1006 may also receive network type information from a networking subsystem 1012, such as a Network RM as further discussed elsewhere herein.
The risk management component 1002 may receive host security profile information and changes made to it from a controller 1008. The controller 1008 may also provide information on the list of non-certified applications running on the system. Using the received information, as further described elsewhere herein, the risk management component 1002 may cause actions to be performed, such as sending alerts externally or sending instructions to the controller 1008 to perform actions, such as enabling security measures, or trigger NAP. The risk management subsystem 1000 may interface with windows components in user and kernel model through Windows Management Instrumentation (WMI).
Although the subject matter has been described in language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed as example forms of implementing the claims.
Patent Citations
Non-Patent Citations
Referenced by
Legal Events
Original Image


text:
The link below will take you to the Tonner Virtual sale. Expect a crowd which will create a slow-moving experience and delays. But it can be fun just to look around.
News, reviews and photographs of Modern Fashion Dolls including Sybarite, BJDs, Fashion Royalty, Tonner Dolls, Gene Marshall, Barbie and my own experiences as a doll collector.
Tonner Virtual Factory Sale - Flex Those Fingertips!
1 comment:
Subscribe to: Post Comments (Atom)

subset: commoncrawl


text:
Amenities Spa Salon
Amenities Mission
It is our mission to connect beauty and well being while responsibly sustaining the environment. We believe in treating ourselves, each other, and the planet with care and respect. Our goal is to inspire and educate people while helping "one" reach a personal balance.
At our Aveda Spa:
Feel resistance fall away and tension melt. Undo what everyday stress does to you. Bring balance to your world.
Click Here for Spa Specials and Sign up for our Newsletter
Amenities Store Location and Hours
"Fig Garden"559.224.2667
5054 N Palm Ave
Fresno, CA 93704
"Hours"Mon: Closed
Tues: 9 am - 7 pm
Wed - Fri: 9 am - 9 pm
Sat: 9 am - 7 pm
Sun: 11 am - 6 pm
Relax & Enjoy
We welcome you to visit
Amenities and enjoy a
relaxing spa treatment
or an up to the minute
haircut and color.
Our newly expanded and
remodeled space offers
comfort and relaxation.
Amenities continues our
mission to always do what
is best for our guest, our
community and our environment.
Come experience
Amenities. Breathe
in aromas that balance
mind and body.
Treat yourself soon.


text:
Variant of musquash
nounpl. musquashes or musquash
- any of a genus (Ondatra) of muskrats of N North America having rudderlike tails that are flat from top to bottom
- Chiefly Brit. the fur of the muskrat
Origin of musquash; from Amerindian (Algonquian), akin to Abenaki muskwessu, it is red


text:
contact us
subscriber services
digital sign in
local news
today's cherokee tribune
cherokee sports
high school preps sports
reprints and photos
cherokee photos
photo reprints
your photos
your stories
community calendar events
letter to the editor
obituary submission information
cherokee legal notices
cobb legal notices
georgia public notices
call an expert
church directory
about us
contact us
COUCH, James T., Jr.
Cherokee Tribune
August 28, 2013 12:58 AM
| 1874 views | 0
Mr. James T. Couch, Jr., 64, of Canton, passed away Sunday, August 25, 2013 at his residence. Funeral services are scheduled for 2:00pm Tuesday, August 27, 2013 at the Sosebee Memorial Chapel with Dr. Joe Edwards and Rev. Allen Owens officiating. Interment will follow in the Mt. Carmel Baptist Church Cemetery. The family will receive friends at the funeral home on Monday from 4:00pm until 9:00pm. Mr. Couch was a loving family man and a U.S. Army Veteran. He was retired from the meat department at Publix. He was preceded in death by his parents Mr. and Mrs. James T. Couch, Sr.; brothers, Edward Couch, Vernon Couch, Ricky Couch; sister, Marie Tapley; niece, Pam Couch. Survivors include, his wife, Amanda Couch of Canton; son, James Couch, III of Canton; stepson, Jonathan Stark of Canton; sisters, Mary Owens of Acworth, Virginia Couch of Cartersville; Florence Proctor of Euharlee; brothers, Ernest Couch of Cartersville, Clyde Couch of Cartersville, Virgil Couch of White; several nieces and nephews. Sosebee Funeral Home, Canton, GA is honored to serve the family. 770-479-2131. sosebeefuneralhome.com
Copyright 2015 Cherokee Tribune. All rights reserved.
Share This Article
similar stories
PAYNE, James Tillman Jr.
| 12 days ago
Cherokee Tribune
Copyright 2015 Cherokee Tribune. All rights reserved.
SUDDERTH, James Martin
| 13 days ago
Cherokee Tribune
Copyright 2015 Cherokee Tribune. All rights reserved.
SUDDERTH, James Martin
| 14 days ago
Cherokee Tribune
Copyright 2015 Cherokee Tribune. All rights reserved.
Big moves made, but dealing isn't done in NBA free agency
| 1 day 16 hrs ago
Brian Mahoney, AP Basketball Writer
Associated Press
Copyright 2015 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.
Theater shooting judge rules on paralyzed woman's testimony
| 19 days ago
Sadie Gurman, Associated Press
Associated Press
Copyright 2015 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.
Post a Comment
No Comments Yet
*We welcome your comments on the stories and issues of the day and seek to provide a forum for the community to voice opinions. All comments are subject to moderator approval before being made visible on the website but are not edited. The use of profanity, obscene and vulgar language, hate speech, and racial slurs is strictly prohibited. Advertisements, promotions, spam, and links to outside websites will also be rejected. Please read our
terms of service
for full guides
Create an Account
Subscribe to print edition
Subscribe to e-edition
Help & Information Services
Cherokee Tribune Digital Subscription Q&A
Subscriber Services
Privacy Policy
Contact Us
Today's Newspaper
Local News
Editorial Page
Cherokee Legal Notices
Tools & Formats
TCT Photos
Post Your Photos
Community Calendar
Purchase Photos
Place Classified Ad
Digital Network
Cherokee Tribune
Marietta Daily Journal
Cobb Life Magazine
Cherokee Life Magazine
Alpharetta Neighbor
Clayton Neighbor
Bartow Neighbor
Dekalb Neighbor
Douglas Neighbor
Henry Neighbor
John's Creek Neighbor
Milton Neighbor
Northside Neighbor
Paulding Neighbor
Roswell Neighbor
Sandy Springs Neighbor
South Metro Neighbor
software copyright © 2015
Sole Solution
Content copyright © 2015 Marietta Daily Journal
this software is in a public beta test phase
read our privacy policy
Associated Press Terms and Conditions
The Cherokee Tribune is in Canton, Ga.


text: By Tina Snell, Staff Writer [email protected] Bernie Kimman, a longtime resident of Pierz, turned 100 years old April 18. While a little hard of hearing and confined to a wheelchair, he said he is doing just fine and is not in any pain. His attitude seemed to say turning 100 was no big deal. ...Read More


text:
Bill on Bankruptcy: Big Time Lawyers Pricing Themselves Out
Bill on Bankruptcy: Delaware Garners Almost All Big Chapter 11s
Bill on Bankruptcy: Madoff Victims Rooting for Stanford Victory
Bill on Bankruptcy: Sex Doesn't Sell Enough to Avoid Bankruptcy
Bill on Bankruptcy: LightSquared, the Battle among Hedge Funds
Bill on Bankruptcy: Supreme Court Cases Will Have Wide Impact
Bill on Bankruptcy: Lawyers Must Disclose What Clients Pay
Bill on Bankruptcy: The Market's Unquenchable Thirst for Junk
Bill on Bankruptcy: Kodak Plan Bumps the Debt, Craters Stock
Bill on Bankruptcy: Lawyers Easily Make Simple Words Complicated
Bill on Bankruptcy: Easterbrook Turns the Tide on Student Loans
Bill on Bankruptcy: Stockton May Win the Battle, Lose the War
Bill on Bankruptcy: Why is Kodak's Stock Soaring?
Smolinsky Sees Similarities Between Reader's Digest, Kodak
Consultant: More Big Law Firms Will "Implode"
Bill on Bankruptcy: Rakoff Reverses Himself in Madoff Case
Bill on Bankruptcy: MF Global Creditors Undeterred by Low Value
Bill on Bankruptcy: Fee Agreement Puts Law Firm In Trustee's Sights
Bill on Bankruptcy: Will 2013 Be Kind To The Bankruptcy Bar?
Bill on Bankruptcy: Big Surprises For AMR, MF Global Creditors
New Bankruptcy Challenges for Secured Creditors. The Bankruptcy Code provides secured creditors with significant advantages over their unsecured counterparts. During the past year, however, courts have chipped away at secured...more
Despite lower-than-average Chapter 11 activity in 2014, the legal landscape for distressed investors has continued to evolve, with significant legal developments in credit bidding, make-whole premiums and intercreditor...more
In re Charles Street African Methodist Episcopal Church of Boston, 510 B.R. 453 (Bankr. D. Mass. 2014) –
In connection with a proposed sale of real property, a chapter 11 debtor sought to prohibit the mortgagee from...more
The right to credit bid is one of the most important protections afforded a secured creditor. Recognized under both state and bankruptcy law, the right to credit bid safeguards against undervaluation at an asset sale, whether...more
As is well known, the right to credit bid is the entitlement of a secured lender to bid the amount of its outstanding claims at the sale of its collateral. If the secured lender places the winning bid, no money is exchanged...more
It is well-settled that secured creditors are ordinarily entitled to credit bid their allowed secured claim in a sale pursuant to § 363 of the Bankruptcy Code (the "Code"). In Radlax Gateway Hotel, LLC v. Amalgamated Bank,...more
On January 17, 2014, the United States Bankruptcy Court for the District of Delaware (the "Bankruptcy Court") entered an order in the Fisker Automotive ("Fisker") chapter 11 bankruptcy cases limiting the ability of Fisker's...more
Can a Chapter 11 debtor propose a plan to sell a lender's collateral free and clear of the lender's lien without allowing the lender to credit bid? The Supreme Court says "no"—unless there's cause....more
Seventh Circuit holds that new equity in a Chapter 11 debtor must be auctioned…and that a creditor may credit bid.
In a Chapter 11 bankruptcy, if the debtor's owners want to continue to own the debtor after...more
In This Issue:
- March 9, 2012: Publication of Dynegy Examiner's Report
- March 29, 2012: SDNY Rules That 363 Sales May Not Be Free and Clear of Future Claims
- May 15, 2102: Eleventh Circuit Rules in...more
May a Chapter 11 plan permit a debtor to auction property free and clear of a creditor's lien while preventing that creditor from credit-bidding the amount of its debt? A question that split the U.S. Circuit Courts was...more
Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up to create your digest using LinkedIn*
Back to Top
Copyright ©


text:
Most Recent Articles In Fashion
Latest Fashion Articles
- Highlights From the 2016 Men's Spring RTW Collections
- Colin Kaepernick, New Era Launch Capsule Collection
- Colin Kaepernick: Shoes, Tattoos and Victor Cruz
More Articles By
PARIS — Women in Paris never give up on elegance during challenging times — be it 2009 or 1940.
Some 300 fashion accessories and objects dating back to World War II will be on display here beginning today at an exhibition that pays tribute to fashion ingenuity against a backdrop of penury and restrictions between 1940 and 1944.
Held at the Mémorial du Marechal Leclerc de Hauteclocque et de la Libération de Paris – Musée Jean Moulin — twin museums dedicated to the history of the French Resistance and of the liberation of Paris — the exhibition showcases items ranging from the homespun to the high-end designer. Hand-crocheted hats sit next to a minimalist Hermès clutch made of panama straw, reflecting the paucity of luxury materials like leather and silk during the war years.
Other fashion accessories double up as clever stratagems used by the resistance movement, as in elegant handbags built with a double bottom to disguise propaganda documents, while scarves display their owner's allegiance to the collaborationist Vichy government with a portrait of Marshal Pétain.
There is even an Hermès jacket made with checkered tweed fabric supplied by the customer, who must have taken to heart a fashion edict published in the October 1943 issue of Marie Claire: "These days, an ingenious woman is an elegant woman."
The exhibition runs until November 15.


text:
Sign up now to take advantage of all the NFCA has to offer. Fastpitch news and updates, coaching education, discounts on store products, Fastpitch Delivery newspaper and much, much more.
The NFCA's™ newspaper, members-only area on web site, player Awards, coach Awards, the NFCA directory and calendar, NFCA Web Store discounts and more >
What kind of player will you most be looking for on the recruiting trail this summer?
To VOTE click HERE:
STARKVILLE, Miss. – Seniors Sharon Estrada of Cajon High School in San Bernardino, Calif. and Kiersten Tinkoff of Barrington High School in Barrington, Ill., junior Paige Mcduffee of The Woodlands High School in The Woodlands, Texas, and sophomore Danielle Shadley of Golden Gate High School in Naples, Fla. have all been named as the High School Players of the Week for their respective regions by the National Fastpitch Coaches Association for games played through March 21, 2011.
Tinkoff is the first player to win top regional honors this season as teams in the North Region got under way last week. The senior infielder led the Fillies to a perfect 3-0 to start their 2011 campaign. The cleanup hitter was 6-9 on the week with two doubles, three runs, three RBI, .727 OBP, and an .889 slugging percentage. Defensively Tinkoff was sharp as well as she also turned an unassisted double play.
Representing the West Region, Estrada smashed five home runs during the Diamond Valley tournament and was named to the All-Tournament team for her efforts. The senior hit and impressive .916 overall on the week, going perfect at the plate in 3 out of 4 contests. Her 7 run 15 RBI offensive effort led the Cowboys to a perfect 4-0 record on the week. On the mound senior has held opponents to a .282 average and owns a 5-2 record.
South Central Region honoree, Mcduffee went 4-0 in the circle last week, to help the 23-0 Highlanders take over the top spot in the MaxPreps Top 25 High School poll. The lefty junior has dominated hitters so far this season holding teams to a .113 average with 107 strikeouts with only 12 walks in 82 innings pitched. So far this season she owns a .68 ERA and has yielded only two extra base hits.
From the South Region, Shadley played in all 4 of the Titan's games last week. Offensively she was 11-13 with two doubles, two triples, a HR and 5 RBI. On base Shadley was equally dangerous as she swiped 17 bases. On the season the sophomore is hitting an impressive .736 and leads her team with 23 RBI. In the circle against Immokalee Shadley threw a 2 hitter with with 4 strikeouts to get the win. The victory brings her record to 5 - 0 with a .62 ERA.MaxPreps.com, the official high school statistical provider of the NFCA, provides all statistics for the NFCA High School Player of the Week award.
To nominate a player for the award, the coach must enter his or her athlete's game stats into MaxPreps.com by Sunday evening to be eligible for that week's award. The NFCA High School Players of the Week, one for each high school region, will be announced by the Association on www.nfca.infocus-llc.com every Monday during the spring season.


text:
Westheimer (Houston): 10707 Westheimer Rd. Houston, TX 77042 713-977-0057 [Print]
July 4th Weekend Holiday Schedule - Members and guests, in observance of the 4th of July holiday, please check the weekend schedule for modifications and full class details.
Every Aqua Zumba and Zumba Gold class is Endorsed by Silver&Fit®
Notes: {*} - Space is limited; sign up at front desk required; {esp} - Se habla espanol


text:
We love juicing and blending beverages for so many reasons — added nutrition and hydration, help with weight loss and the delicious taste are just a few. We also know that selecting the right juicer or blender can be confusing, so we've created this handy guide! More »
All Citrus Juicers
Chef'n® FreshForce™ Lime Citrus Juicer
This is our favorite way to quickly and easily juice limes. The...
Metrokane® Commercial Juicer
Effortlessly squeeze oranges, grapefruits, lemons, limes and more...
Joseph Joseph® Catcher™ Citrus Seed Reamer and Pulp Catcher
We love this for how easy it makes enjoying juice. Unique design...


text:
by Nancy Rones
October 2013
reviews (0)
make it again
Be the first to rate and review this recipe
Photo by Johnny Miller
Start with 2 slices of
whole-grain bread. Stuff
with 1 ounce turkey bacon,
2 lettuce leaves, 2 slices
tomato, 1/4 sliced avocado
and 1 tablespoon mayo. Add a
medium apple, and
bam!a nice, healthy
468-calorie lunch.
Can you believe no one has reviewed this recipe yet? Insightful and well-informed reviews by our members are part of what makes Epicurious the best food site on the planet. Sign in to be the first to review this recipe, and make your opinion heard.


text:
Premier Program JOIN FREE!
Premier Members Enjoy:
Exclusive pricing and volume discounts
3% BACK on every purchase
Fast & FREE shipping on thousands of items
Save time with your account manager
Over 7 million products to choose from
Quick & easy PO terms for qualifying accounts
Buying for a business, school, or organization?Save even more with our FREE Premier Program for business professionals. CONTINUE
Penco Guardian 2 Tier 1 Wide Contemporary Locker
12" x 18" x 30" Dimensions (W x D x H)
12" x 15" x 30" Dimensions (W x D x H)
12" x 12" x 30" Dimensions (W x D x H)
15" x 18" x 36" Dimensions (W x D x H)
15" x 15" x 36" Dimensions (W x D x H)
12" x 18" x 36" Dimensions (W x D x H)
12" x 15" x 36" Dimensions (W x D x H)
12" x 12" x 36" Dimensions (W x D x H)
Penco Guardian 2 Tier 1 Wide Contemporary Locker
Weights & Dimensions
12" x 18" x 30" Dimensions (W x D x H)
12" x 15" x 30" Dimensions (W x D x H)
12" x 12" x 30" Dimensions (W x D x H)
15" x 18" x 36" Dimensions (W x D x H)
15" x 15" x 36" Dimensions (W x D x H)
12" x 18" x 36" Dimensions (W x D x H)
12" x 15" x 36" Dimensions (W x D x H)
12" x 12" x 36" Dimensions (W x D x H)
Additional Weights & Dimensions
|Application: School Lockers
|Suggested Use: Commercial; Educational
|Size: 1-Wide
|Tiers: 2
|Material: Metal
|Door Type: Solid
|Compartments: 2
|Country of Manufacture: United States
About the ManufacturerIn 1869, a man named L. Lewis Sagendorph fulfilled his ambition to begin his own company that would produce the finest metal products in America. He called his fledgling business the Penn Metal Corporation of Pennsylvania, and began by making steel culvert pipe on Oregon Avenue in South Philadelphia.
Over the years, Penn Metal's product lines broadened to include lockers, shelving and even aircraft landing mats. A reputation for quality fabrication spread, and the company's influence became nationwide. In the 1950's, the name was shortened to Penco Products and the plant and offices were expanded to a modern facility in Oaks, Pennsylvania, near Valley Forge, PA.
Penco became a subsidiary of Vesper Corporation in 1979 and continued to grow. In 1994 the company added a manufacturing plant in Salt Lake City, Utah. In 2001, the East coast manufacturing facilities were moved from Oaks to a 400,000 square foot manufacturing facility in Hamilton, North Carolina, allowing significant room for expansion. The corporate headquarters remains in Pennsylvania.
The need for storage products is universal, and Penco's markets span the spectrum of industrial, service, governmental and institutional organizations. Shelving and pallet rack products are popular with warehousing and manufacturing applications, ranging from a few units to multi-level installations. Lockers are widely used in educational facilities, fitness centers, health care, commercial and industrial locations. Other products such as storage cabinets, work benches and shop furniture are used wherever material gets shipped, received or stored.
Penco's mission is to provide customers with value in the form of the finest storage products available.
Penco Guardian 2 Tier 1 Wide Contemporary Locker
Still have questions about this product? We're here to help
Customer Reviews
|5 star
|4 star
|3 star
|2 star
|1 star
OUR SKU # PN1370Guardian 2 Tier 1 Wide Contemporary Locker is also sometimes listed under the following manufacturer numbers: 62, 6211G-1W-012A, 6211G-1W-021A, 6211G-1W-028A, 6211G-1W-073A, 6211G-1W-701A, 6211G-1W-715A, 6211G-1W-720A, 6211G-1W-722A, 6211G-1W-723A, 6211G-1W-736A, 6211G-1W-767A, 6211G-1W-806A, 6211G-1W-812A, 6211G-1W-822A, 6211G-1W-826A, 6211G-1W-952A, 6211G924 (Assembled), 6213G-1W-012A, 6213G-1W-021A, 6213G-1W-028A, 6213G-1W-073A, 6213G-1W-710A, 6213G-1W-715A, 6213G-1W-720A, 6213G-1W-722A, 6213G-1W-723A, 6213G-1W-736A, 6213G-1W-767A, 6213G-1W-806A, 6213G-1W-812A, 6213G-1W-822A, 6213G-1W-848A, 6213G-1W-949A, 6213G924 (Assembled), 6213R-1W-701A, 6213R-1W-826A, 6215G-1W-012A, 6215G-1W-021A, 6215G-1W-028A, 6215G-1W-073A, 6215G-1W-701A, 6215G-1W-710A, 6215G-1W-715A, 6215G-1W-720A, 6215G-1W-722A, 6215G-1W-723A, 6215G-1W-736A, 6215G-1W-767A, 6215G-1W-806A, 6215G-1W-812A, 6215G-1W-822A, 6215G-1W-826A, 6215G-1W-952A, 6215G924 (Assembled), 6231-1W-021A, 6231-1W-723A, 6231-1W-812A, 6231-1W-848A, 6231G-1W-012A, 6231G-1W-028A, 6231G-1W-073A, 6231G-1W-701A, 6231G-1W-710A, 6231G-1W-715A, 6231G-1W-720A, 6231G-1W-722A, 6231G-1W-723A, 6231G-1W-736A, 6231G-1W-767A, 6231G-1W-806A, 6231G-1W-826A, 6231G-1W-925A, 6231G-1W-949A, 6231G-1W-952A, 6231G924 (Assembled), 6233G-1W-012A, 6233G-1W-021A, 6233G-1W-028A, 6233G-1W-073A, 6233G-1W-701A, 6233G-1W-710A, 6233G-1W-715A, 6233G-1W-720A, 6233G-1W-722A, 6233G-1W-723A, 6233G-1W-736A, 6233G-1W-767A, 6233G-1W-806A, 6233G-1W-812A, 6233G-1W-822A, 6233G-1W-826A, 6233G-1W-848A, 6233G-1W-949A, 6233G-1W-952A, 6233G924 (Assembled), 6235G-1W-012A, 6235G-1W-021A, 6235G-1W-028A, 6235G-1W-073A, 6235G-1W-701A, 6235G-1W-710A, 6235G-1W-715A, 6235G-1W-720A, 6235G-1W-722A, 6235G-1W-723A, 6235G-1W-736A, 6235G-1W-767A, 6235G-1W-806A, 6235G-1W-812A, 6235G-1W-822A, 6235G-1W-826A, 6235G-1W-848A, 6235G-1W-949A, 6235G-1W-952A, 6235G924 (Assembled), 6241G-1W-012A, 6241G-1W-021A, 6241G-1W-028A, 6241G-1W-073A, 6241G-1W-701A, 6241G-1W-710A, 6241G-1W-715A, 6241G-1W-720A, 6241G-1W-722A, 6241G-1W-723A, 6241G-1W-736A, 6241G-1W-767A, 6241G-1W-806A, 6241G-1W-812A, 6241G-1W-822A, 6241G-1W-826A, 6241G-1W-848A, 6241G-1W-949A, 6241G-1W-952A, 6241G924 (Assembled), 6243G-1W-012A, 6243G-1W-021A, 6243G-1W-028A, 6243G-1W-073A, 6243G-1W-701A, 6243G-1W-710A, 6243G-1W-715A, 6243G-1W-720A, 6243G-1W-722A, 6243G-1W-723A, 6243G-1W-736A, 6243G-1W-767A, 6243G-1W-806A, 6243G-1W-812A, 6243G-1W-822A


text:
It snowed Sunday in Palatine. All the rest is speculation.
What really happened at the Brown's Chicken & Pasta in town remained a grim mystery early Monday, some 48 hours after bullets ended seven lives inside and turned the cookie-cutter building into a monument to human savagery.
Material described as evidence was taken during a search in the home of an Elgin man whom police have questioned.
In an interview, Cook County Medical Examiner Robert Stein let slip a single gory fact. Found in the restaurant, Stein said, was a bloody broom.
It was a detail that only deepened the mystery. Did the killer or killers take time to sweep up, hoping to obliterate evidence?
Stein also said that some of the bodies had multiple gunshot wounds.
Each massacre develops its own dark character, and this one's-an information void-made it all the more horrific for those who stood vigil over the weekend in the restaurant's frozen parking lot, or who slowed as they drove by.
The gawkers served, in a way, to memorialize the once-generic place, their presence testifying not only to morbid curiosity but to the sense of community that is the opposite of the impulse to kill.
What they and thousands wanted to know is, at its core, unanswerable, no matter how many facts eventually come out: Why would somebody gun down a hard-working couple, the restaurant's owners, and five of their workers, leaving their corpses in walk-in coolers? What mind could conceive of, much less execute, such a scenario?
There were, apparently, no witnesses to explain. There was still no arrest. And Palatine police, investigating a crime no department could prepare for, were steadfast in their unwillingness to provide facts, clues or even theories.
In the absence of information-police would not even clarify if they believed it was only one murderer-rumors and morbid fantasy spread through the suburb.
Police discovered the seven bodies about 2:30 a.m. Saturday after the parents of an employee had called them, concerned that their son hadn't returned home after the restaurant closed at 9 p.m.
Found shot to death in refrigeration units were the owners, Richard E. Ehlenfeldt, 50, and his wife, Lynn W. Ehlenfeldt, 49, of Arlington Heights; Palatine High School students Michael C. Castro, 16, and Rico L. Solis, 17; and Palatine residents Thomas Mennes, 32, Marcus Nellsen, 31, and Guadalupe Maldonado, 46.
Martin Blake, a 23-year-old taken into custody Saturday at his Elgin home, was being questioned by investigators Sunday, according to police sources. Police did not identify him as a suspect, and no charges had been brought against him.
Blake was employed on the night shift in the Brown's kitchen until a few days ago, Brown's workers said.
Friends and employees said Blake was fired by Richard Ehlenfeldt.
Police obtained a search warrant to go into Blake's two-story house, according to police sources.
After a daylong search Sunday, five officers from Elgin, Cook County and Palatine emerged from Blake's home with two large plastic bags.


text:
- About
- For Businesses
- Newsroom
- Newsletter
- Client Links
Videos on things to do, shopping, restaurants and businesses in Kansas City
Upcoming Events
No upcoming events scheduled. Please check back soon.
More Finds in Kansas City
What is FINDitKC
FINDitKC is your video guide to Kansas City. Find videos on places to eat, drink, shop and play in and around the KC metro; whether you are living here or just visiting.
Want to see a restaurant or bar before you try it with friends? FINDit gives you an inside look. We will introduce you to boutiques, neighborhoods and things to do; allow you to meet dentists, doctors, chiropractors, business owners and much more. Take the FINDit experience a step further and download our mobile app that will help you stay local and stay loyal with our loyalty program. The more you shop, share and check-in at a FINDit family member's establishment, the more points you earn and the more freebies you get. FINDit will even buy you a beer from time to time… So CHEERS to you, savvy shopper! Join the family that helps you find it, watch it, try it, then stay local and stay loyal.


text:
Highsnobiety is hiring
Highsnobiety is an online publication covering forthcoming trends and news in fashion, art, music, and culture, all on one platform.
As a wholly independent online magazine, we provide our readership with strong editorial coverage, featuring cultural commentaries that cover a range of our topics.
The growth of Highsnobiety over the years has seen us to become an essential portal for trend forecasters, fashion enthusiasts and tastemakers alike, and fashion's current climate now sees us influencing the very trends we began reporting.
The progress of Highsnobiety has seen us expand into publication, with a twice-yearly magazine that reflects the trends and content of our site.
Here at Highsnobiety we are always on the lookout for talented new contributors to become a part of our dynamic and exciting workforce.
Look out for current job vacancies in our Berlin and NYC offices, and we look forward to hearing from you.
Highsnobiety is looking for a Junior Social Media Editor in Berlin to drive traffic and increase engagement through social posts, editorial partnerships and creative activations on social channels.
- Drive traffic and social engagement
- Come up with catchy, engaging copies and visuals
- Write, schedule and publish posts for all applicable social platforms
- Stay current with the best social practices as well as developments on existing and emerging platforms
- Track progress through social media analytics tools (e.g. Socialflow, CrowdTangle)
- Initiate take-overs and activations
- Come up with content based on conversations unfolding on social channels
- At least 1 year of experience in writing, editing and professional social media engagement
- A deep understanding of fashion, street culture and digital trends
- Fluency in social media platforms (including, but not limited to Facebook, Twitter, Snapchat, Google+, Instagram)
- Excellent English writing skills
- Editorial judgement
- Good interpersonal skills to work with the editorial and audience development team
- Must be based in Berlin
Start Date: Immediately
If you think you're the right candidate for this position apply with cover letter, CV and examples of your work at email@example.com.
Sales Account Executive (New York City & Berlin)
Highsnobiety is currently looking for a Sales Account Executive in Berlin that will be working alongside the Sales and Marketing team helping in driving revenue growth and profitability for all our entities including digital properties, offline activations and print.
Are you a driven and tenacious advertising sales professional with an excellent track record and a proven relationship with media agencies in the EU and US?
To be considered you must have relevant sales experience in print and online, working with clients directly and agencies alike, and a proven track record of hitting and overachieving targets.
You must be hard-working, reliable, self-motivated and confident in dealing with people at all levels.
All candidates with no previous sales experience in digital or publishing domain will not be considered.
- Managing current Accounts
- Prospecting and pitching new accounts/clients
- Focus sales efforts by monitoring existing and potential campaigns
- Creating avenues/products to increase the brand portfolio and total sales revenue
- Utilizing your own contact book to drive further revenue to the titles
- You will be offering advertising solutions through print and online projects
- You should enjoy the challenges and rewards of a creative multi-discipline solution sale.
- Understanding and utilizing contracts and pricing structures
- Developing Market and Competitor Knowledge (Market Research)
- Degree holder of business studies, marketing, advertising or branding
- Minimum 1 – 2 years of Sales/Account management experience
- Previous experience within a publishing group or media agency
- Proficient knowledge in Microsoft Excel, PowerPoint and Word
- Knowledge of Google Advertising Programs/ DoubleClick(DFP) and Google Analytics is a must
- You should be very comfortable and experienced in negotiating with senior business professionals, be articulate and resilient and able to handle multiple projects
- Need to perform well under pressure and enjoy working in a forward-thinking, dynamic team.
- Fluent in English is a must
- Fluent in German will be considered a plus
- Proactive
- Must be based in Berlin or willing to relocate
Start Date: Immediately
We welcome all applications but before you apply please take under consideration that this is a sales driven role. We offer an attractive remuneration package plus commission to the right candidates.
Candidates for this position in Berlin, please apply at email@example.com with cover letter, CV and desired salary.
Junior Sales Executive (Berlin)
Highsnobiety is currently looking for a Junior Sales Executive in Berlin, that will be working alongside the Sales and Marketing team helping in driving revenue growth and profitability for all our entities including sites and print magazine.
- Assisting the head of sales and sales team manage current accounts
- Coordinate and plan campaigns for the sales team
- Manage the work-flow of advertising and sales projects between our sales team and outsourced contributors and agencies.
- Creating Sales Proposals for the sales team alongside the Head of Sales
- Maintaining Sales Reports
- Understanding and utilizing contracts and pricing structures
- Developing Market and Competitor Knowledge (Market Research)
- Degree holder of business studies,IT, marketing, advertising or branding
- Minimum 1 – 2 years of Sales Administration experience or Sales/Fashion Background
- Previous experience within a publishing group will be deemed a plus
- Proficient knowledge in Microsoft Excel, PowerPoint and Word
- Knowledge of Google Advertising Programs/DoubleClick(DFP) and Google Analytics will be considered a bonus
- Proactive
- Must be based in Berlin
If you think you are the right candidate for this position please apply with CV at firstname.lastname@example.com.
Front-End Developer (Berlin)
Our content sites run mainly on WordPress and our community platforms are built on Ruby on Rails. We serve more than 40 million impressions per month. You will be building responsive websites and working on new modules and features for our existing sites. Also you will be part of our long term goal to create a seamless Highsnobiety experience across our applications and to build a modular architecture, where we can easily introduce new features and keep up with upcoming technology and design challenges.
- Implementing great user-experiences
- Working in a team
- Writing clean code and refactoring it
- Ensure maintainability, performance and scalability
- Skilled in CSS3 (SASS/Compass), writing maintainable and scalable CSS code
- Javascript (jQuery, Ajax, RESTful services)
- Solid experience in building WordPress sites from scratch and a deep understanding of Responsive Web Design
- Templating in PHP (we also use ERB, SLIM, HAML and Underscore)
- Understanding separation of view and business logic
- Basic Git and UNIX knowledge
Start Date: Immediately
Candidates for this position in Berlin, please apply at email@example.com with cover letter and CV.
Graphic Design Internship (Berlin)
Titel Media UG is currently looking for a 6-months Graphic Design Intern to join our team in Berlin.
- Design engaging presentations
- Craft banner designs for us and our clients
- Support our editorial and web team
- Excellent Adobe Photoshop and Illustrator skills
- Proactive
- Internship must be mandatory within your
- Web Design/Basic HTML & CSS is a plus
- Understanding of screendesign
- Good English skills
- Must be based in Berlin
- Internship must be part of the mandatory undergraduate curriculum
If you think you are the right candidate fort his position and would like to join our Berlin team, please apply with cover letter, CV and examples of your work at email@example.com.
Editor (Freelance)
Highsnobiety is currently looking for freelance editors all over the globe.
- Prepare, write and edit posts for Highsnobiety
- Develop content and ideas for features with consideration of reader and audience
- Maintain a good communication and dialogue with fellow staff writers and editors
- Review and moderate all stories on the sites, ensuring all text and images are
consistent with our standards
- Eligible to work and based in Berlin
- Strong grasp of the English language
- Online editors must have excellent writing and editing skills
- Excellent spelling, grammar and punctuation skills
- Understanding of the special requirements for writing online, such as the use of
keywords, hyperlinks, navigation and the importance of brevity
- Good interpersonal skills to work effectively with contributors and designers
- Interest in fashion and basic knowledge in streetfashion is a plus
- Critical eye for details in all aspects of visual design, including typography, color
and aesthetic
- Creativity and problem solving skills
- Photoshop and Illustrator skills is a plus
Candidates for this position, please apply at firstname.lastname@example.com with cover letter, CV, desired salary and include three short writing samples (not more than 500 words) in relevant topics to our industry.
Web Designer (Berlin)
Highsnobiety is currently looking for a Web Designer in Berlin, that will be working alongside the Web Development and Editorial team helping in creating exciting designs for all our platforms.
- Creating web designs for our sites, exciting upcoming projects and shaping the look of the future Highsnobiety
- Crafting special features and ad campaigns for our clients
- Finding visual solutions to complex problems and building prototypes to present them
- Reinforce our brand identity
- Working closely with front-end developers
- Support our editorial team
- Excellent Adobe Creative Suite skills
- Experience designing web applications / websites (app design is a plus)
- Ability to code prototypes in the browser (HTML5 / CSS3)
- Experience with web-based type, layout and interactive design
- Knowledge of best-practice design principles
- Strong interest in latest web design trends
- Good English skills
- Must be based in Berlin
Candidates for this position in Berlin, please apply at firstname.lastname@example.com with cover letter, CV, portfolio and desired salary.
Videographer (Freelance)
Highsnobiety is currently looking for some talented freelance videographers located in New York, London, Paris or Berlin to create engaging and exciting visual content.
- Conceptualization, direction & postproduction; from shoot through to edit, including sound, color and grade
- Responsible for all camera setups, lighting, and proper camera operation on production projects
- Responsible for providing own equipment / ability to source proper equip- ment for shoots, audio recordings, lighting, etc…
- Understand copyright responsibilities
- Scout and source locations, stories and talent on our behalf (plus)
- projecting job turnaround times accurately
- very high interest in fashion/street fashion
- experience in creative shooting, possess a strong creative vision and a passion for delivering quality content
- Excellent sense of visual composition, movement and perspective
- Ability to combine creativity with technical skills
- Constant aspiration to keep up date with filming methods and equipment
- Proficiency in using editing programs such as Final Cut pro, audio software and the CS Creative Suite
- motion graphics using tools like After Effects is a plus
If you think you are the right candidate for this position please apply with CV and examples of your work/portfolio at firstname.lastname@example.com.
Internships – Editorial / Marketing (New York City and Berlin)
Titel Media UG offers internships in Marketing and Editorial Teams in Berlin and New York on a regular basis.
- Maintenance and preparation of content for our e-commerce platform
- Support the team in day-to-day business
- General administration duties
- High interest in media and fashion
- Strong computer skills
- Basic skills in using Photoshop is a must
- Strong verbal and written communication skills in English is a must
- German is beneficial
- Reliable, initiative and self motivated
- Strong interpersonal skills
- Excellent organisation and project management skills
- Ability to work independently
If you are interested in gaining work experience, please send your cover letter and CV to firstname.lastname@example.com to receive more information on current vacancies.


text:
Comedians from Chelsea Lately
LivingSocial's 918 F Street • Washington, DC
Select Friday and Saturday Nights through April 20
What you get
- Comedy Series with Chelsea Lately Regulars
- Natasha Leggero February 15 or 16
- $29 for One Ticket
- $39 for One Ticket + Three Beers or Glasses of Wine
- Ryan Stout February 22 or 23
- $19 for One Ticket
- $29 for One Ticket + Three Beers or Glasses of Wine
- Brad Wollack March 22 or 23
- $29 for One Ticket
- $39 for One Ticket + Three Beers or Glasses of Wine
- Ben Gleib April 19 or 20
- $19 for One Ticket
- $29 for One Ticket + Three Beers or Glasses of Wine
Believe it or not, Chelsea Handler has friends -- and with today's offer you can catch them live: Pay $19 to $29 for one ticket to a Comedians from Chelsea Lately stand-up event. Or, pay $29 to $39 for a ticket plus three beers or three glasses of wine. (Price varies based on comedian.) Beginning Friday, February 15, Natasha Leggero, Ryan Stout, Brad Wollack, and Ben Gleib will each visit the stage at LivingSocial's 918 F Street to deliver their aggressive brand of pop culture humor sure to make you laugh until you cry.
laugh reel
Get ready for some side-splitting stand-up from these comedians:
Natasha Leggero: Regular on Chelsea Lately and Are You There, Chelsea?; played Amber in He's Just Not That Into You; record Coke Monkey reached Top Ten on iTunes
Ryan Stout: Regular on Chelsea Lately; winner at Boston International Comedy Festival; record Touché reached Top Ten on iTunes
Brad Wollack: Co-executive producer, writer, and guest on Chelsea Lately; co-executive producer, co-creator, and a co-star of After Lately; commercial star
Ben Gleib: Regular on Chelsea Lately; voice in Ice Age: Continental Drift; named one of six comedians who could be comedy's next big thing by Esquire
about livingsocial's 918 f street
Showcasing the best of DC, LivingSocial's 918 F Street offers culinary experiences, fitness classes, beer tastings, and more. So dip your brush or tune your ear to what's happening on F Street -- you won't be disappointed. Coming for a special occasion? Email us at email@example.com. Interested in holding a private event 918 F Street? Email firstname.lastname@example.com or visit us here. Follow us on Twitter and Facebook for exclusive content and news.
Fine printEach guest must have their own voucher for the event • This is a 21+ event; valid ID required • No late arrivals; voucher subject to forfeiture • A refund may be collected within 24 hours of purchase, no full or partial refunds are given to customers who miss an event; purchases made within 24 hours of event start time are not subject to refunds • One reschedule per event; reschedules must be made more than 7 days prior to event date, and new date must be more than 24 hours from time of request • Food & beverage services for LivingSocial 918 F Street provided by VSLS LLC • No menu substitutions • Participants will be asked to sign a waiver; preview it here: bit.ly/ZJBHFp • Entire value must be used in a single visit
Comedians from Chelsea Lately
times for
More upcoming events
use by Aug 16
Summit Point, WV
Xtreme Xperience: Exotic Supercar Racetrack Drive
Summit Point Raceway
use by Jul 11
Monkton, MD
5K or 15K Entry Package to Holi Color Run
use by Dec 23
Bowie, MD
Four-Week Intermediate Cooking Class for 1
AMG Hospitality
Saturday Jul 18 through Sunday Aug 2
La Tasca Sangria-Making Class with Dinner
La Tasca DC, Baltimore, and Rockville
Saturday Jul 11
Arlington, VA
Admission to La Tasca's Flamenco Dinner
La Tasca Arlington
Thursday Jul 30 through Sunday Aug 2
Gainesville, VA
Clubhouse Ticket Package to the Quicken Loans® National
Robert Trent Jones Golf Club
use by Jul 24
Columbia, MD
Sam Smith Concert on July 24
Merriweather Post Pavilion
Friday Jul 10 through Saturday Jul 25
Washington, DC
Magic Show & 3-Course Meal for 2 at Primi Piatti
Primi Piatti
Nearby deals
Georgetown Electrolysis
Three or Six Laser Hair-Removal Sessions
Bravo Salon
Brazilian Wax, Haircut Package, Color, or More
Dupont Circle Chiropractic
Chiropractic Package Including X-Ray & Adjustments
Cascades Chiropractic
Facial; Massage & Foot Soak; or Cold Laser Session
Jindal Andre Automotive Services
Summer Auto Package or Three Oil Changes
Green Maidworks
Eco-Friendly House Cleaning
House Studio
Arts and Entertainment Workshop
Angels Salon & Barber
Haircut + Color, or Relaxer, Rinse & Trim


text:
Notice Something Different?
We all need an occasional makeover. Welcome to ours. Even though we may look different, we're still the same great bank on the inside. So, take a look around, and enjoy the new view.
Quicksilver® Cash Back Rewards
Earn unlimited 1.5% cash back on every purchase. Plus, earn a one-time $100 bonus. Apply for Quicksilver today.
What's 360 Savings®?
A savings account with no fees, a great everyday rate and up to a $500 bonus.
Get started today.
$1000 Off Closing Costs
When you buy a new home or refinance your mortgage with us. Learn more.
Capital One InvestingSM
A straightforward experience to help you shape your financial plan. Plus up to $600 with a funded online account.
Instantly know if your card was used to buy something you didn't authorize
"It alerts me when, where, and how much was spent, so if I send my daughter somewhere to buy one specific thing I will know if she tries to sneak anything else way before my statement comes." — Google Play review
"Capital One has my back. They are proactively checking in with me to make sure I'm not being mistakenly charged."
Know what to expect when buying a home.
Mortgage rates, good faith estimates, gobs of paperwork, lenders, and closing - buying a home is a big process. Navigate the home buying process in 6 steps that make sense.
Attention Homeowners:
Need help making your mortgage payments? Find out about mortgage assistance options.
Learn more about FDIC insurance changes.
Banking, Credit Card, Auto Finance, and Home Loan products and services are offered by the Capital One family of companies, including Capital One Bank (USA), N.A., and Capital One, N.A., NMLS ID 453156, Members FDIC.
All entities are separate but affiliated legal entities of Capital One Financial Corporation, each is responsible for its own products and services.
Securities are offered by Capital One Investing, LLC, a registered broker-dealer and Member FINRA/SIPC. Advisory services are provided by Capital One Advisors, LLC, an SEC-registered investment advisor. Insurance products are offered through Capital One Agency LLC. All are subsidiaries of Capital One Financial Corporation.
Securities and services are: Not FDIC insured • Not bank guaranteed • May lose value • Not a deposit • Not insured by any federal government agency


text:
By Mark Ross, Knicks Fan Since '88
On Saturday night, the Knicks dropped a tough one to the Atlanta Hawks, 107-98. Carmelo Anthony notched another strong scoring game and Tyson Chandler had his best rebounding performance of the season but they weren't able to hang on for the victory. The team now travels back to New York to prepare for the Dallas Mavericks on Monday.
Here are my Five Takeaways from the matchup with Atlanta.
Photo by Scott Cunningham/NBAE via Getty Images


text:
Search for any place in the USA:
Cost of Living,
Profile: Beach town / suburban complex Location: Southern California in the Santa Clara River coastal area and inland valley northwest of Los Angeles Elevation: 49 Time zone: Pacific Standard Time
Click here to View Profile
Click here to Hide Profile
Ventura is a beach town along the original Pacific Coast Highway (U.S. 101). The inhabited portion of Ventura County also includes numerous towns including Oxnard, Simi Valley, Thousand Oaks and Santa Paula. Aside from Ventura and its beaches, the area is a mix of agriculture, small industry, and residential areas.
Oxnard is set along the coast in a broad, mainly agricultural plain dotted with subdivisions. The city is the area's industrial center, with Procter & Gamble and food processor Sysco among others operating plants in the area. There is a small high tech industry, and shipping and import-export companies are tied to a small port and naval facility just south of town.
While most of the area is prosperous and attractive, Oxnard has some gritty areas largely absent in the nearby towns. Thousand Oaks is a mostly residential and family oriented community in the valley 20 miles inland, and has been a leader among the region in controlled growth practice.
The Cost of Living Index is high and rising but the area has the lowest crime rates in the state and a high level of educational attainment. The location is isolated by mountains and long freeway drives- Los Angeles is too far for a practical commute but some may commute to its northern areas in or near the San Fernando Valley. Public transportation facilities are lacking for an area its size. The coast and Channel Islands ("America's Galapagos") offer plenty of recreational opportunities. While costs are rising, the rest of the package is complete and on the upswing, hence the high ranking.
The east-west running valley is flat to gently rolling with a gradual slope toward the coast. The inhabited area is bounded by two coastal ranges rising 4,000 feet. The mountains are dry and covered with oaks at lower elevations and some coniferous trees at higher ones. The climate is coastal Mediterranean with a winter rainy season and summer dry season. Clear, sunny days are the rule in summer, with occasional incursions of coastal low clouds called "fog" locally. Excessive heat is rare but may occur, especially inland.
As of 2014, Oxnard's population is 197,456 people. Since 2000, it has had a population growth of 16.05 percent.
The median home cost in Oxnard is $355,300. Home appreciation the last year has been 16.60 percent.
Compared to the rest of the country, Oxnard's cost of living is 42.20% Higher than the U.S. average.
Oxnard public schools spend $10,282 per student. The average school expenditure in the U.S. is $12,435. There are about 22.8 students per teacher in Oxnard.
The unemployment rate in Oxnard is 8.40 percent(U.S. avg. is 6.30%). Recent job growth is Positive. Oxnard jobs have Increased by 0.71 percent.
Ranked #3 Drought-Riskiest CitiesRanked #3 America's Best and Worst Cities for Crime (Large Metro Areas)Ranked #5 Best Cities for Teleworking - Medium Metro AreasRanked #20 High Gas Prices - Which Cities are Hit the Hardest?Ranked #48 America's Best (and Worst) Cities for DatingSee More Rankings Click Here
Average Commute time is 23 minutes. The National Average is 25 minutes.
Oxnard's Real Estate Market (click to see properties) • Newly Listed Homes • Most Expensive Listing • Million Dollar Houses • Homes from $750,001 to $1,000,000 • Homes from $500,001 to $750,000 • Homes from $250,000 to $500,000 • Homes under $250,000 • Median Priced Homes
A real review from an actual resident: You'll see a lot of folks come on here to rip on the 'Nard. Judging from their descriptions, I'd say most either live in Ventura or up the grade in the Conejo Valley.... (read more)A real review from an actual resident: You'll see a lot of folks come on here to rip on the 'Nard. Judging from their descriptions, I'd say most either live in Ventura or up the grade in the Conejo Valley.... (read more)Over development and poor city planning: Many folks go on here and rant about how the Mexicans ruined Oxnard, I can tell you as a non-Latino Oxnard Local my who has lived his whole life in this city, the... (read more)Have an opinion about Oxnard? Leave a commentTo See All SperlingViews for Oxnard Click Here


text:
The Pokémon Diamond & Pokémon Pearl: Super Music Collection is now available to purchase through iTunes, becoming the fifth soundtrack from the series to hit the digital music service.
This 101-track strong soundtrack joins those for Pokémon X and Pokémon Y, Pokémon HeartGold and SoulSilver, Pokémon FireRed and Pokémon LeafGreen, and Pokémon Ruby and Pokémon Sapphire, which have all been steadily released by The Pokémon Company International since November.
Released across North America and Europe in 2007, Diamond and Pearl signalled the series shift across to Nintendo DS and placed players in the Sinnoh region. Hitomi Sato, Junichi Masuda, Go Ichinose and Morikazu Aoki all contributed to the game's soundtrack.
Pokémon Diamond & Pokémon Pearl: Super Music Collection is priced at $9.99, and may be found through this link.
Alex Seedhouse+ Alex's early adoration for Nintendo began with a Yellow Game Boy and a copy of Donkey Kong Land. This developed over the years, later peaking when he hid in his room to play The Legend of Zelda: Ocarina of Time one Christmas. Nowadays, his enthusiasm is shared through Nintendo Insider, a place in which he can document his thoughts regarding the big N.
No comments yet. Be the first!


text:
Filter Results
Featured Events
- 49ers tickets
- Chargers tickets
- CONCACAF Gold Cup tickets
- Cowboys tickets
- Cubs tickets
- International Champions Cup tickets
- MLB All Star Game tickets
- MLB Home Run Derby tickets
- Notre Dame tickets
- Packers tickets
- Red Sox tickets
- SF Giants tickets
- UFC - Ultimate Fighting Championship tickets
- US Open Tennis tickets
- WWE - World Wrestling Entertainment tickets
We're sorry, but we currently have no tickets available for this event.
Check out our full selection of Baseball tickets or sign up to be notified when tickets for this event are available.
Vivid Seats will not sell, share or distribute your information. View our full privacy policy.
Lipscomb University Bison Baseball Ticket Information
Purchasing Lipscomb University Bison Baseball tickets from Vividseats.com is easy and secure. If you have any questions or concerns about placing your order, please read the guidelines below and call 866.848.8499 if we have not answered your question(s).
- All Lipscomb University Bison Baseball ticket sales are final.
- Lipscomb University Bison Baseball tickets are sold above face value.
- Lipscomb University Bison Baseball tickets are together, side by side, unless otherwise noted.
- Once your Lipscomb University Bison Baseball are received, they cannot be replaced if lost or stolen.
- Vividseats.com is a private company not affiliated with Lipscomb University Bison Baseball.


text:
Metropolitan Museum gets Cubist trove from Estee Lauder heir
The Metropolitan Museum of Art in New York will receive the largest gift of art in its history from cosmetics magnate Leonard A. Lauder, the museum announced Tuesday. The collection includes work by Pablo Picasso, Georges Braque, Juan Gris and Fernand Léger, is valued at $1.1 billion and is considered one of the foremost collections of Cubist works in the world.
Katy Perry; Motorhead; Trivium; Toad the Wet Sprocket; Brett Dennen; Brandy Clark
Katy Perry »Read Full Article
Candy Chang's 'Before I Die...' comes to Milwaukee
There is something about a death that can be focusing. For New Orleans artist Candy Chang, the loss of a dear friend, initially lead to a long period of grief and depression that eventually turned to gratitude and clarity.
She wanted to know what was important, to her and to those in her around her. So the artist, known for her placemaking projects and urban planning ideas, painted the side of an abandoned building with chalkboard paint and stenciled the words, "Before I die I want to..." onto it. »Read Full Blog Post(1)
On Tap Today: Ben Sollee at Shank Hall
Cellist Ben Sollee takes his "Ditch the Van" tour to Shank Hall tonight. Photo provided by Shank Hall. »Read Full Blog Post


text:
Island Lights
Showing 894 results
Most Popularˇ
^ Lighting
Narrow your search for
Island Lights...
Island Lights...
External Ads:
Up to 75% OFF
Mega Clearance
Open Box Deals
Up to 80% Off
10% Off Top Brands!*
Top Island Lights
$358.00 $536.99 In Stock
Elk Lighting Elysburg 2-Light Kitchen Island Pendant Satin Nickel/Tea Swirl 65012
$146.00 $218.99 In Stock
Elk Lighting Classics 3-Light Billiar/Pool/Kitchen Island Matte Black 190PBKG1
Still searching for Island Lights?
Live Chat with an Expert and we'll be happy to help you search.
Or try expanding your selection in Ceiling Lights...
Type: Show more than just island lights
Type: Show more than just island lights
Also see related categories below, or view our Full Site Map
Did you see these other categories in Ceiling Lights?
Also try these nearby departments