text:
Attachment Q5. Voice over Internet Protocol (VoIP)
- Violet Fox
- 3 years ago
- Views:
1 DHS 4300A Sensitive Systems Handbook Attachment Q5 To Handbook v Voice over Internet Protocol (VoIP) Version 11.0 December 22, 2014 Protecting the Information that Secures the Homeland
2 This page intentionally blank V11.0, December 22, 2014 ii
3 Document Change History Version Date Description HB version 11.0 December 22, 2014 New document. V11.0, December 22, 2014 iii
4 CONTENTS 1.0 INTRODUCTION Purpose and Scope... 1 VoIP Security Requirements Checklist VoIP System Overview VoIP System Architecture... 1 Federal Guidance and Polices THREAT OVERVIEW VoIP Threats and Vulnerabilities Eavesdropping Network Vulnerabilities Software Flaws and malware Other Voice Service Related Threats SECURING VoIP COMPONENTS VoIP Security Mechanisms... 5 Authentication... 5 Virus Protection... 5 Disabling Undesirable VoIP Features... 5 Monitoring of System Configuration Change SECURING VoIP Networks Voice and Data Separation... 6 Data Protection... 6 Firewalls... 6 URL... 6 Logs... 6 Configuration Control... 6 Physical Security... 7 Security Assessment... 7 Security Incident Response Communication Service Convergence Unified Communications... 7 V11.0, December 22, 2014 iv
5 Appendix A: Checklist for Securing VoIP Systems... 9 Appendix B: Referenced Publications Appendix C: Acronyms and Definitions V11.0, December 22, 2014 v
6 1.0 INTRODUCTION This document provides techniques and procedures for the secure use of Voice over Internet Protocol (VoIP) within the Department of Homeland Security (DHS) Information Technology (IT) Program. It is published as an Attachment to the DHS 4300A Sensitive Systems Handbook, which is based on DHS Sensitive Systems Policy Directive 4300A. DHS Components should use the guidance in this Handbook Attachment as a foundation for developing and implementing VoIP IT related security programs. This Attachment incorporates many security techniques and procedures already in use by DHS Components and other Federal entities such as the National Institute of Standards and Technology (NIST), the Department of Defense (DoD), and communication standardization organizations; and general VoIP security best practices commonly recommended and followed by private industry and academic communities. 1.1 Purpose and Scope The guidance outlined in this document is intended to address security policy requirements pertinent to VoIP, and to provide a detailed explanation of security threats and corresponding countermeasures that can be applied to VoIP systems deployed by DHS Components. The security checklist in Appendix A provides a summary of VoIP security guidelines. Authorizing Officials (AO) should understand the risks associated with each particular VoIP system, and apply some or all of the countermeasures outlined in this Attachment. They should ensure that each risk is measured and mitigated to an acceptable level according to DHS IT security policies defined by the DHS Sensitive Systems Policy Directive 4300A and other related directives. 1.2 VoIP Security Requirements Checklist Use the Security Requirements Checklist for VoIP Systems, Appendix A to this document, to ensure Component compliance with Policy Directive 4300A and with underlying Government directives. The Checklist items identified as must be implemented by Component policies, SOPs, or other methodological documents; furthermore, implementation of the items identified as or equivalent provisions, will ensure that Components are compliant with best security practices. 2.0 VOIP SYSTEM OVERVIEW This section gives a brief introduction of VoIP system architecture and technologies in an enterprise environment, and provides a high-level summary of Federal guidance and policies for VoIP systems. 2.1 VoIP System Architecture VoIP is a technology that converts voice into digital data packets that are transmitted over IP data networks such as enterprise networks or the Internet. VoIP is a mature technology that has been widely deployed across public and private sectors since it uses existing IP data network infrastructure, V11.0, December 22,
7 eliminating expensive traditional dedicated voice circuits. The following diagram describes typical enterprise VoIP system architecture and key system components. Figure 1: Enterprise VoIP System Architecture. The VoIP server is the control and management hub of all VoIP components. It is responsible for VoIP call session management, voice mail management, directory assistance, and other additional services such as conference bridge. The gateway is connected to telephone service providers Public Switched Telephone Networks (PSTN), and is the bridge between the internal VoIP system and general PSTN: all calls to or from outside telephone numbers go through the gateway. In addition to VoIP telephone instrument hardware, VoIP softphones are widely deployed. A VoIP softphone is a computer program that runs on desktop or laptop computers, mobile devices etc., allowing users to make VoIP calls through those devices. 2.2 Federal Guidance and Polices The U.S. Federal Communications Commission (FCC) requires VoIP systems to support enhanced 911 (E911) emergency services that provide caller identification and location information to the answering Public Safety Answering Point (PSAP). NIST Special Publication , "Security Considerations for Voice over IP Systems, provides agencies with guidance for establishing secure VoIP networks and makes several recommendations to establish a secure VoIP and data network. Key recommendations are as follows: V11.0, December 22,
8 Develop appropriate network architecture. Ensure that the organization has examined and can acceptably manage and mitigate the risks to their information, system operations, and continuity of essential operations when deploying VoIP systems. Carefully consider such issues as level of knowledge and training in the technology; maturity and quality of security practices; controls, policies, and architectures; and understanding of associated security risks. Be aware that physical controls are especially important in a VoIP environment and deploy them accordingly. Enable, use, and routinely test the security features that are included in VoIP systems. Deploy VoIP-ready firewalls and other appropriate protection mechanisms. If mobile units are to be integrated with the VoIP system, use products that implement Wi-Fi Protected Access (WPA), rather than Wired Equivalent Privacy (WEP). Carefully review statutory requirements regarding privacy and record retention with competent legal advisors. 3.0 THREAT OVERVIEW This section discusses VoIP threats and vulnerabilities in an enterprise environment, and outlines corresponding countermeasures and security best practices. 3.1 VoIP Threats and Vulnerabilities VoIP systems are vulnerable to specifically engineered attacks as well as to general network attacks. VoIP is fundamentally different from the traditional circuit-based telephony, and these differences introduce significant security threats and vulnerabilities. A VoIP system is part of the overall enterprise IT infrastructure and is directly connected to the enterprise core IP network. Therefore strict security controls and governance must be developed and enforced by Components to mitigate constant and ever- increasing threats to DHS IT infrastructure and resources Eavesdropping Eavesdropping describes the threat whereby an attacker secretly captures data. Eavesdropping on conventional telephone transmissions requires physical access to tap a telephone line or Private Branch Exchange (PB). With VoIP, the eavesdropping attack surface increases dramatically: besides telephone lines and PB, any network node or line can be tapped to capture the VoIP data (and thereby the phone conversation). Many packet capture tools (also known as packet analyzers) are readily available, often free from open sources that can be easily deployed to record VoIP conversations. Eavesdropping risk can be mitigated by using data encryption validated by Federal Information Processing Standard (FIPS) 140-2, mandated by the Government, for all sensitive data communications within the data network. Mobile users are required by their Rules of Behavior to use the DHS Virtual Private Network (VPN) service for remote access from locations not controlled by DHS. A robust network and physical security will also help to mitigate the risk. Network firewalls, Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS) can be used to filter data traffic, V11.0, December 22,
9 monitor the network infrastructure, detect and block abnormal network traffic, and send notifications to administrators if unusual events occur. Unused network access ports should be shut down and only be activated by authorized network administrators Network Vulnerabilities Since VoIP systems are part of the overall enterprise IP network infrastructure, they will face similar network attack vectors. A Distributed Denial of Service (DDoS) attack on the network occurs when an attacker floods the network with bogus data packets, preventing or inhibiting legitimate users from accessing the network. In addition, VoIP data is often prioritized over other data traffic by DDoS attacks since VoIP systems must meet a strict set of network performance requirements such as short latency and low packet loss rates. Therefore, a lot of network resources serve VoIP systems at high priority. A well-crafted DDoS attack on VoIP systems will not only severely affect voice service, but will also impair other critical network activities and services. To counter DDoS attacks, Components must implement a comprehensive defense-in-depth security strategy to secure their networks. A robust IT security system must be implemented that includes firewalls, IDS, IPS, and VoIP-aware network monitoring and management systems Software Flaws and malware VoIP systems have many software components. The key VoIP component, the VoIP server, is often built upon commercial operating system platforms (for example, Microsoft Windows or Linux systems). Computer-based softphones will be exposed to all kind of malware including key-loggers, Trojan horses, and others) currently experienced by end users. As a result, VoIP systems inevitably will be exposed to software flaws and potential attacks from various malware. Regular checking for software updates and patches is essential to reduce these vulnerabilities. Automated patch handling can help in reducing the window of opportunity for intruders to exploit a known software vulnerability. Standardized enterprise anti-virus tools and VoIP-related software security management systems can also greatly mitigate software threats Other Voice Service Related Threats Other threats to VoIP systems are similar to those to traditional telephony, such as unauthorized voice devices and endpoints attempting to connect to the system, voic tampering, caller ID spoofing, toll fraud, etc. Toll fraud, for example is a phone hacking scheme where a compromised VoIP system is controlled by external attackers to route long distance or international calls through enterprise networks. This can result in substantial financial loss and legal liabilities for VoIP system owners. Existing security measures, such as requiring strong voice passwords, security awareness training, robust logging and monitoring mechanisms, and in-depth network security are some of the effective countermeasures to protect against these threats. 4.0 SECURING VOIP COMPONENTS A VoIP system should be considered to be a critical component of the DHS network and an extension of the DHS IP network infrastructure. Critical tasks associated with securing the system include V11.0, December 22,
10 authentication, virus protection, configuration management, continuous monitoring, and disabling unused features. 4.1 VoIP Security Mechanisms VoIP systems support a whole set of security mechanisms either specified by or used by VoIP protocols to protect the VoIP signaling and voice data messages. Secure Session Initiation Protocol (SIP) is a security mechanism that protects VoIP signaling messages over an Internet Protocol Security (IPsec) or Transport Layer Security (TLS) encrypted channel. The Secure Real-time Transport Protocol (SRTP) provides encryption, message authentication and integrity for voice messages over the communication path. 4.2 Authentication Identification management and authentication will be implemented to access the VoIP system. 4.3 Virus Protection Standard anti-virus software tools, -regular software updates and patches are essential to reduce software vulnerabilities to the VoIP system. 4.4 Disabling Undesirable VoIP Features VoIP systems provide a rich set of features such as video teleconferencing. If some features are not being used but left in default unprotected configuration, they become vulnerabilities that an attacker can exploit to access the VoIP system and the network infrastructure. Components should carefully evaluate the business and operations requirements for their VoIP services and only enable the VoIP features required. For example, unprotected File Transfer Protocol (FTP) and Trivial FTP (TFTP) are often enabled by default by some VoIP systems between the VoIP server and the end-user devices for configuration management. These features should be disabled or replaced by secured ones such as Secure File Transfer Protocol (SFTP) that provide similar functionality. 4.5 Monitoring of System Configuration Change Information Systems Security Officers (ISSO) should implement mechanisms that periodically scan for unauthorized changes to VoIP system configurations. 5.0 SECURING VOIP NETWORKS VoIP systems are part of overall enterprise IP network infrastructure, and they introduce a number of new elements, complications and challenges to existing network management and security. The integration of voice and data in a single network is a complex process that requires greater effort than that required for data-only networks. Critical risks that must considered when securing VoIP networks include voice and data separation, data protection, operation management, physical security, security assessment, and incident response. V11.0, December 22,
11 5.1 Voice and Data Separation Although voice and data share the same network infrastructure, they should be logically or physically separated into two segments in order to apply different security measures (for example, different firewall rules) to reduce the likelihood of an attacker using one segment to access the other. Other benefits of separation include easier network management and troubleshooting. Separation makes attacker success more difficult and helps to provide a layered approach to VoIP and network security. 5.2 Data Protection Data protection security means that messages are encrypted between sending device and receiving device. VoIP telephone instruments and softphones can support encryption capabilities, and data traversing the enterprise s backbone network is also protected by FIPS validated encryption. In addition, TLS, IPSec, VPN, and Secure Shell (SSH) are common means of providing end-to-end encryption for VoIP administrators when remotely accessing the VoIP systems. 5.3 Firewalls A firewall helps to secure the network by inspecting inbound and outbound network traffic and only allowing pre-defined data traffic. Protocols for VoIP systems specify the traffic type that is used for voice service. For example, the Session Initiation Protocol (SIP), a VoIP signaling communications protocol, requires SIP clients to use Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) on port numbers 5060 or 5061 to connect to SIP servers and other SIP endpoints. Any signaling attempt via other port numbers should be blocked by firewalls. 5.4 URL In some cases a VoIP endpoint will be configured with one or more Uniform Resource Locators (URLs) pointing to the locations of various servers with which they are associated such as their call controller. The use of URLs in this manner permits an endpoint to find the server it is looking for in the event the server s IP address is changed. This also permits the endpoint to locate its assigned or home call controller from a remote location on a network that is not their home network. While use of URLs adds flexibility to the system and to endpoint location, it also exposes the endpoint and the home system to DNS vulnerabilities. 5.5 Logs Logs serve as part of the VoIP monitoring and management capabilities to ensure that VoIP systems are constantly monitored. They provide a traceable mechanism for recording communication activities and they reveal network intrusions. Access to logs should be strictly controlled to ensure their integrity. 5.6 Configuration Control Establishing configuration requirements and baseline configurations for VoIP systems can help ensure that they are deployed in a secure manner in accordance with DHS security policies. VoIP systems are usually initially configured with default vendor settings that are common knowledge. These settings can include network information such as default channels; modulation specifications; V11.0, December 22,
12 security information such as network name, encryption methods, pass phrases or keys; and systems management information such as administration usernames, passwords, management port numbers, and default application services running. 5.7 Physical Security Routine inspections and surveillance to detect suspicious behavior will reduce the likelihood of unauthorized equipment tampering and theft. Because VoIP end user equipment is susceptible to physical tampering, users should report any suspicious individuals or activities to appropriate security personnel. 5.8 Security Assessment Regular security assessments should be performed to evaluate the security posture of VoIP systems and to determine corrective actions needed to ensure that the systems remain secure. Regular assessments help to determine whether VoIP systems are communicating correctly and are on correct channels. Assessments can also help Components determine whether controls are appropriately designed and operating effectively to achieve organizational control objectives. The DHS 4300A Sensitive Systems Handbook describes assessment areas and procedures in great detail. 5.9 Security Incident Response Most security controls are designed to protect an organization against security threats; regardless of how effective those controls are, some security incidents are inevitable, and organizations need to have an effective response capability in place before they occur. DHS 4300A Sensitive Systems Handbook, Attachment F, Incident Response covers incident response in detail 6.0 COMMUNICATION SERVICE CONVERGENCE UNIFIED COMMUNICATIONS The convergence of voice, video, and data services, also referred as Unified Communications (UC), has been gaining popularity in both public and private sectors. UC integrates voice, video, teleconferencing, messaging, , and other enterprise applications to meet the critical and ever-increasing demand for an efficient and effective enterprise communications service. Unlike isolated traditional voice or video systems, the UC presents an attack surface and associated vulnerabilities that have increased substantially; threats can originate from many sources: network, individual communication system, Web, the array of end-user devices, social engineering, etc. UC s integration brings greater complexity to system architecture. In addition, UC systems must address increased regulatory requirements for privacy, confidentiality, and other Government mandates such as E911 and the Health Insurance Portability and Accountability Act (HIPAA). All these factors increase the difficulty of securing UC systems. Conventional network security measures, such as a firewall at the network boundary, help to mitigate UC risks, but are not adequate, since they are neither designed to protect UC-specific attacks nor are they aware of the complicated interaction among different UC components, and do not provide an integrated security capability for voice, video and other communication channels. An integrated security mechanism for UC is required to protect network, communication system, enterprise application V11.0, December 22,
13 and data, and end-user device in a seamless fashion. In addition, the new UC security mechanism needs to work in conjunction with existing network security measures to provide layered protection of UC systems. V11.0, December 22,
14 APPENDI A: CHECKLIST FOR SECURING VOIP SYSTEMS SECURITY REQUIREMENTS CHECKLIST FOR VOIP SYSTEMS SECTION 4.0: SECURING VOIP COMPONENTS Section 4.1: VoIP Security Mechanisms The Secure Session Initiation Protocol and Secure Real-time Transport Protocol are enabled to protect the VoIP systems. From locations not physically controlled by DHS, users access DHS systems only via the DHS Virtual Private Network (VPN) service Section 4.2: Authentication No password is required to access the end user VoIP phone sets. Passwords used by administrators to access key VoIP system components follow the password strength guidance given in DHS 4300A Sensitive Systems Handbook Section , Selecting Strong Passwords. Passwords to access key VoIP system components by administrators are combined with the use of a smart card or a biometrics authentication method. Numerical passwords used for the VoIP voic access contain a minimum of eight digits, or the maximum allowed by the system is used if the device s maximum is less than eight. Section 4.3: Virus Protection Anti-virus software is deployed, centrally managed, and continuously updated on VoIP systems. Section 4.4: Disabling Undesirable VoIP Features Unapproved or unnecessary VoIP features are disabled or removed whenever possible. Device-integrated capabilities such as cameras and recording mechanisms are subject to the approval of the AO. These capabilities have varying degrees of risk and are disabled unless specifically required, in order to mitigate the risk of exposing sensitive information End user VoIP telephone sets issued by Components are distributed and restricted to an approved baseline configuration. Section 4.5: Monitoring of System Configuration Change Integrity verification mechanisms are deployed to perform system configuration integrity checks automatically, by means such as routinely comparing a cryptographic hash of the current system configuration files to a previously recorded hash known to be valid. V11.0, December 22,
15 SECURITY REQUIREMENTS CHECKLIST FOR VOIP SYSTEMS SECTION 5.0: SECURING THE VOIP NETWORKS Section 5.1: Voice and Data Separation Voice and data are logically or physically separated across the enterprise network. Common traffic separation techniques include IPSec tunnels or Virtual Local Area Network (VLAN) separation mechanisms. A different, dedicated, IP address block or range is defined for the VoIP system that is separate from the IP address blocks/ranges used by the rest of the data network. If the VoIP system design uses Dynamic Host Configuration Protocol (DHCP) for VoIP initial endpoint address assignment or configuration, a different and dedicated DHCP server is used than that used for data components and hosts. In the event Domain Name System (DNS) is used in the VoIP system, a different and dedicated DNS server is used and any VoIP DNS server interaction with other DNS servers is limited. Section 5.2: Data Protection VoIP data traversing the DHS backbone network is encrypted with the FIPS validated Advanced Encryption Standard [AES]-256 encryption to protect the confidentiality of data. Remote access to the VoIP system uses FIPS validated AES-256 encryption to ensure secure access. Section 5.3: Firewalls Firewalls for VoIP systems allow only the pre-defined VoIP traffic and block all other traffic. Section 5.4: URL VoIP endpoint limits the use of URLs. Section 5.5: Logs VoIP systems are configured to create logs and capture important events such as successful and unsuccessful administrator login attempts, user attempts, device MAC and IP addresses, access violations, ports and protocols used, and application activities. VoIP log entries are captured, analyzed, and correlated by a centralized log management system. Section 5.6: Configuration Control Configuration requirements and baselines are established for VoIP systems in accordance with DHS security policies. All sensitive settings for VoIP systems are changed from vendor defaults to protect against unauthorized intrusion and modification of system settings. V11.0, December 22,
16 SECURITY REQUIREMENTS CHECKLIST FOR VOIP SYSTEMS Section 5.7: Physical Security Users are made aware of the importance of VoIP devices and the likelihood of potential theft or tampering, able to recognize signs of tampering or attempts by unauthorized individuals to access the devices. Section 5.8: Security Assessment Annual security assessments are performed to assess VoIP system security capabilities and to discover any potential vulnerability components. Section 5.9: Security Incident Response The security incident response standard operating procedures (SOP) specifies methods for VoIP system users and other personnel to report security incidents in accordance with DHS Sensitive Systems Policy Directive 4300A. V11.0, December 22,
17 APPENDI B: REFERENCED PUBLICATIONS DHS Publications ISSM Guide to the DHS Information Security Program, Version 2.0, July 19, 2004, ISSO Guide to the DHS Information Security Program, Version 0.6, July 26, 2004 DHS Sensitive Systems Policy Directive 4300A, Version 9.1, July 24, 2012 DHS Sensitive Systems Handbook, Version 9.1, July 24, 2012 IT Security Architecture Guidance Volume I: Network and System Infrastructure, Version 2.0, tecture%20guidance%20vol%201.doc IT Security Architecture Guidance Volume II: Security Operations Support, Version 2.0, tecture%20guidance%20vol%202.doc IT Security Architecture Guidance Volume III: Application Infrastructure Design (Draft), ver. 1.0, Guidance%20vol%203.doc Defense Information Systems Agency (DISA) Publications Wireless Security Technical Implementation Guide (STIG), and Addendums Current versions at: National Institute of Standards and Technology (NIST) Publications NIST SP , Security Considerations for Voice Over IP Systems, January 2005 NIST SP , Rev 4, Security and Privacy Controls for Federal Information Systems and Organizations, April 2013 National Security Agency (NSA) Publications National Security Agency / Central Security Service Web Site, Committee on National Security Systems (CNSS) Instructions CNSS Instruction No (Revised), National Information Assurance Glossary, April 2010 Other Publications FAQS.ORG, Network Working Group, Request for Comments (RFC) 2828, Internet Security Glossary SANS Institute, VoIP Security Vulnerabilities V11.0, December 22,
18 APPENDI C: ACRONYMS AND DEFINITIONS Acronym Definition AES Advanced Encryption Standard AO Authorizing Official ATO Authority to Operate C&A Certification and Accreditation CISO Chief Information Security Officer CSIRC Computer Security Incident Response Center DAA Designated Approving Authority DHS Department of Homeland Security DDOS Distributed Denial of Service DHCP Dynamic Host Configuration Protocol DNS Domain Name System DoD Department of Defense E911 Enhanced 911 FCC Federal Communications Commission FIPS Federal Information Processing Standard FTP File Transfer Protocol HIPAA Health Insurance Portability and Accountability Act HTTP Hypertext Transfer Protocol HTTPS Hypertext Transfer Protocol Secure MAC Media Access Control IPsec Internet Protocol Security ISSM Information System Security Manager ISSO Information System Security Officer IT Information Technology NIST National Institute of Science and Technology NSA National Security Agency OSI Open Systems Interconnection PB Private Branch Exchange PSTN Public Switched Telephone Network RTP Real-time Protocol SIP Session Initiation Protocol SOP Standard Operating Procedure SRTP Secure Real-time Protocol SSH Secure Shell V11.0, December 22,
19 Acronym Definition SSIP SSL TCP TFTP TLS UDP VLAN VoIP VPN Secure Session Initiation Protocol Secure Sockets Layer Transmission Control Protocol Trivial File Transfer Protocol Transport Layer Security User Datagram Protocol Virtual Local Area Network Voice over Internet Protocol Virtual Private Network V11.0, December 22,
Recommended IP Telephony Architecture
Report Number: I332-009R-2006 Recommended IP Telephony Architecture Systems and Network Attack Center (SNAC) Updated: 1 May 2006 Version 1.0 firstname.lastname@example.com This Page Intentionally Left Blank ii WarningsMore information
CTS2134 Introduction to Networking. Module 8.4 8.7 Network Security
CTS2134 Introduction to Networking Module 8.4 8.7 Network Security Switch Security: VLANs A virtual LAN (VLAN) is a logical grouping of computers based on a switch port. VLAN membership is configured byMore information
Securing SIP Trunks APPLICATION NOTE. www.sipera.com
APPLICATION NOTE Securing SIP Trunks SIP Trunks are offered by Internet Telephony Service Providers (ITSPs) to connect an enterprise s IP PBX to the traditional Public Switched Telephone Network (PSTN)More information
A host-based firewall can be used in addition to a network-based firewall to provide multiple layers of protection.
A firewall is a software- or hardware-based network security system that allows or denies network traffic according to a set of rules. Firewalls can be categorized by their location on the network: A network-basedMore information
FDIC Division of Supervision and Consumer Protection
FDIC Division of Supervision and Consumer Protection Voice over Internet Protocol (VoIP) Informational Supplement June 2005 1 Summary In an attempt to control expenses, consumers and businesses are consideringMore information
Enterprise Cybersecurity Best Practices Part Number MAN-00363 Revision 006
Enterprise Cybersecurity Best Practices Part Number MAN-00363 Revision 006 April 2013 Hologic and the Hologic Logo are trademarks or registered trademarks of Hologic, Inc. Microsoft, Active Directory,More information
PROTECTING INFORMATION SYSTEMS WITH FIREWALLS: REVISED GUIDELINES ON FIREWALL TECHNOLOGIES AND POLICIES Shirley Radack, Editor Computer Security Division Information Technology Laboratory National InstituteMore information
Mandated by the Federal Information Security Management Act (FISMA) of 2002, the National Institute of Standards and Technology (NIST) created special publication 800-53 to provide guidelines on securityMore information
VOICE OVER IP SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in part withoutMore information
SIP Trunking Configuration with
SIP Trunking Configuration with Microsoft Office Communication Server 2007 R2 A Dell Technical White Paper End-to-End Solutions Team Dell Product Group - Enterprise THIS WHITE PAPER IS FOR INFORMATIONALMore information
Information Technology Security Guideline. Network Security Zoning
Information Technology Security Guideline Network Security Zoning Design Considerations for Placement of s within Zones ITSG-38 This page intentionally left blank. Foreword The Network Security ZoningMore information
Avaya G700 Media Gateway Security - Issue 1.0
Avaya G700 Media Gateway Security - Issue 1.0 Avaya G700 Media Gateway Security With the Avaya G700 Media Gateway controlled by the Avaya S8300 or S8700 Media Servers, many of the traditional EnterpriseMore information
VOIP for Telerehabilitation: A Risk Analysis for Privacy, Security, and HIPAA Compliance
VOIP for Telerehabilitation: A Risk Analysis for Privacy, Security, and HIPAA Compliance Valerie J.M. Watzlaf, PhD, RHIA, FAHIMA, Sohrab Moeini, MS, and Patti Firouzan, MS, RHIA Department of Health InformationMore information
State of New Mexico Statewide Architectural Configuration Requirements. Title: Network Security Standard S-STD005.001. Effective Date: April 7, 2005
State of New Mexico Statewide Architectural Configuration Requirements Title: Network Security Standard S-STD005.001 Effective Date: April 7, 2005 1. Authority The Department of Information TechnologyMore information
Guideline on Auditing and Log Management
CMSGu2012-05 Mauritian Computer Emergency Response Team CERT-MU SECURITY GUIDELINE 2011-02 Enhancing Cyber Security in Mauritius Guideline on Auditing and Log Management National Computer Board MauritiusMore information
VoIP Security regarding the Open Source Software Asterisk
Cybernetics and Information Technologies, Systems and Applications (CITSA) 2008 VoIP Security regarding the Open Source Software Asterisk Prof. Dr.-Ing. Kai-Oliver Detken Company: DECOIT GmbH URL: http://www.decoit.deMore information
ENTERPRISE VOICE OVER IP AUGUST 2007 Abstract Voice over IP (VoIP) is the term used for a set of technologies that enable real time voice or video conversations to take place across IP networks. VoIP devicesMore information
Avaya TM G700 Media Gateway Security. White Paper
Avaya TM G700 Media Gateway Security White Paper March 2002 G700 Media Gateway Security Summary With the Avaya G700 Media Gateway controlled by the Avaya S8300 or S8700 Media Servers, many of the traditionalMore information
Mitigating the Security Risks of Unified Communications
2009 International Conference on Computer Engineering and Applications IPCSIT vol.2 (2011) (2011) IACSIT Press, Singapore Mitigating the Security Risks of Unified Communications Fernando Almeida 1 +, JoseMore information
White Paper A SECURITY GUIDE TO PROTECTING IP PHONE SYSTEMS AGAINST ATTACK. A balancing act
A SECURITY GUIDE TO PROTECTING IP PHONE SYSTEMS AGAINST ATTACK With organizations rushing to adopt Voice over IP (VoIP) technology to cut costs and integrate applications designed to serve customers better,More information
Cconducted at the Cisco facility and Miercom lab. Specific areas examined
Lab Testing Summary Report July 2009 Report 090708 Product Category: Unified Communications Vendor Tested: Key findings and conclusions: Cisco Unified Communications solution uses multilayered securityMore information
Best Practices for Securing IP Telephony
Best Practices for Securing IP Telephony Irwin Lazar, CISSP Senior Analyst Burton Group Agenda VoIP overview VoIP risks Mitigation strategies Recommendations VoIP Overview Hosted by VoIP Functional DiagramMore information
Did you know your security solution can help with PCI compliance too?
Did you know your security solution can help with PCI compliance too? High-profile data losses have led to increasingly complex and evolving regulations. Any organization or retailer that accepts paymentMore information
Best Practices for Outdoor Wireless Security
Best Practices for Outdoor Wireless Security This paper describes security best practices for deploying an outdoor wireless LAN. This is standard body copy, style used is Body. Customers are encouragedMore information
A Brief Overview of VoIP Security. By John McCarron. Voice of Internet Protocol is the next generation telecommunications method.
A Brief Overview of VoIP Security By John McCarron Voice of Internet Protocol is the next generation telecommunications method. It allows to phone calls to be route over a data network thus saving moneyMore information
2. From a control perspective, the PRIMARY objective of classifying information assets is to:
MIS5206 Week 13 Your Name Date 1. When conducting a penetration test of an organization's internal network, which of the following approaches would BEST enable the conductor of the test to remain undetectedMore information
Recommended 802.11 Wireless Local Area Network Architecture
NATIONAL SECURITY AGENCY Ft. George G. Meade, MD I332-008R-2005 Dated: 23 September 2005 Network Hardware Analysis and Evaluation Division Systems and Network Attack Center Recommended 802.11 WirelessMore information
Global Partner Management Notice
Global Partner Management Notice Subject: Critical Vulnerabilities Identified to Alert Payment System Participants of Data Compromise Trends Dated: May 4, 2009 Announcement: To support compliance withMore information
Building A Secure Microsoft Exchange Continuity Appliance
Building A Secure Microsoft Exchange Continuity Appliance Teneros, Inc. 215 Castro Street, 3rd Floor Mountain View, California 94041-1203 USA p 650.641.7400 f 650.641.7401 ON AVAILABLE ACCESSIBLE BuildingMore information
Chapter 1 The Principles of Auditing 1
Chapter 1 The Principles of Auditing 1 Security Fundamentals: The Five Pillars Assessment Prevention Detection Reaction Recovery Building a Security Program Policy Procedures Standards Security ControlsMore information
7 Network Security. 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework. 7.5 Absolute Security?
7 Network Security 7.1 Introduction 7.2 Improving the Security 7.3 Internet Security Framework 7.4 Firewalls 7.5 Absolute Security? 7.1 Introduction Security of Communications data transport e.g. riskMore information
SECURITY FOR ENTERPRISE TELEWORK AND REMOTE ACCESS SOLUTIONS Karen Scarfone, Editor Computer Security Division Information Technology Laboratory National Institute of Standards and Technology Many peopleMore information
Villains and Voice Over IP
Villains and Voice Over IP Heather Bonin ECE 578 March 7, 2004 Table of Contents Introduction... 3 How VOIP Works... 3 Ma Bell and her Babies... 3 VoIP: The New Baby on the Block... 3 Security Issues...More information
DHS 4300A Sensitive Systems Handbook. Attachment Q2. Mobile Devices
DHS 4300A Sensitive Systems Handbook Attachment Q2 Mobile Devices Version 11.0 August 5, 2014 Protecting the Information that Secures the Homeland DOCUMENT CHANGE HISTORY Version Date Description 1.0 SeptemberMore information
REPORT ON AUDIT OF LOCAL AREA NETWORK OF C-STAR LAB Conducted: 29 th March 5 th April 2007 Prepared By: Pankaj Kohli (200607011) Chandan Kumar (200607003) Aamil Farooq (200505001) Network Audit Table ofMore information
SAFE-T RSACCESS REPLACEMENT FOR MICROSOFT FOREFRONT UNIFIED ACCESS GATEWAY (UAG) A RSACCESS WHITE PAPER 1 Microsoft Forefront Unified Access Gateway Overview 2 Safe-T RSAccess Secure Front-end OverviewMore information
Security. TestOut Modules 12.6 12.10
Security TestOut Modules 12.6 12.10 Authentication Authentication is the process of submitting and checking credentials to validate or prove user identity. 1. Username 2. Credentials Password Smart cardMore information
THE TOP SECURITY QUESTIONS YOU SHOULD ASK A CLOUD COMMUNICATIONS PROVIDER How to ensure a cloud-based phone system is secure. BEFORE SELECTING A CLOUD PHONE SYSTEM, YOU SHOULD CONSIDER: DATA PROTECTION.More information
Security Guidance for Deploying IP Telephony Systems
Report Number: I332-016R-2005 Security Guidance for Deploying IP Telephony Systems Systems and Network Attack Center (SNAC) Released: 14 February 2006 Version 1.01 firstname.lastname@example.com ii This Page IntentionallyMore information
Network Security Guidelines. e-governance
Network Security Guidelines for e-governance Draft DEPARTMENT OF ELECTRONICS AND INFORMATION TECHNOLOGY Ministry of Communication and Information Technology, Government of India. Document Control S/L TypeMore information
Top Three POS System Vulnerabilities Identified to Promote Data Security Awareness
CISP BULLETIN Top Three POS System Vulnerabilities Identified to Promote Data Security Awareness November 21, 2006 To support compliance with the Cardholder Information Security Program (CISP), Visa USAMore information
a) Encryption is enabled on the access point. b) The conference room network is on a separate virtual local area network (VLAN)
MIS5206 Week 12 Your Name Date 1. Which significant risk is introduced by running the file transfer protocol (FTP) service on a server in a demilitarized zone (DMZ)? a) User from within could send a fileMore information
INTERNET VOICE OVER IP AUGUST 2007 Abstract Voice over IP (VoIP) is the term used for a set of technologies that enable real time voice or video conversations to take place across IP networks. VoIP devicesMore information
TLS and SRTP for Skype Connect. Technical Datasheet
TLS and SRTP for Skype Connect Technical Datasheet Copyright Skype Limited 2011 Introducing TLS and SRTP Protocols help protect enterprise communications Skype Connect now provides Transport Layer SecurityMore information
Cisco Virtual Office Express
. Q&A Cisco Virtual Office Express Overview Q. What is Cisco Virtual Office Express? A. Cisco Virtual Office Express is a solution that provides secure, rich network services to workers at locations outsideMore information
Securing VoIP Networks using graded Protection Levels
Securing VoIP Networks using graded Protection Levels Andreas C. Schmidt Bundesamt für Sicherheit in der Informationstechnik, Godesberger Allee 185-189, D-53175 Bonn email@example.com AbstractMore information
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs
Overview of Network Security The need for network security Desirable security properties Common vulnerabilities Security policy designs Why Network Security? Keep the bad guys out. (1) Closed networksMore information
SIP Security Controllers. Product Overview
SIP Security Controllers Product Overview Document Version: V1.1 Date: October 2008 1. Introduction UM Labs have developed a range of perimeter security gateways for VoIP and other applications runningMore information
Ingate Firewall/SIParator SIP Security for the Enterprise
Ingate Firewall/SIParator SIP Security for the Enterprise Ingate Systems February, 2013 Ingate Systems AB (publ) Tel: +46 8 600 77 50 BACKGROUND... 1 1 NETWORK SECURITY... 2 2 WHY IS VOIP SECURITY IMPORTANT?...More information
74% 96 Action Items. Compliance
Compliance Report PCI DSS 2.0 Generated by Check Point Compliance Blade, on July 02, 2013 11:12 AM 1 74% Compliance 96 Action Items Upcoming 0 items About PCI DSS 2.0 PCI-DSS is a legal obligation mandatedMore information
Achieving PCI-Compliance through Cyberoam
White paper Achieving PCI-Compliance through Cyberoam The Payment Card Industry (PCI) Data Security Standard (DSS) aims to assure cardholders that their card details are safe and secure when their debitMore information
CS 665: Computer System Security. Network Security. Usage environment. Sources of vulnerabilities. Information Assurance Module
CS 665: Computer System Security Network Security Bojan Cukic Lane Department of Computer Science and Electrical Engineering West Virginia University 1 Usage environment Anonymity Automation, minimal humanMore information
WICKSoft Mobile Documents for the BlackBerry Security white paper mobile document access for the Enterprise
WICKSoft Mobile Documents for the BlackBerry Security white paper mobile document access for the Enterprise WICKSoft Corporation http://www.wicksoft.com Copyright WICKSoft 2007. WICKSoft Mobile DocumentsMore information
SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity
SSL-VPN Combined With Network Security Introducing A popular feature of the SonicWALL Aventail SSL VPN appliances is called End Point Control (EPC). This allows the administrator to define specific criteriaMore information
Question Name C 1.1 Do all users and administrators have a unique ID and password? Yes
Category Question Name Question Text C 1.1 Do all users and administrators have a unique ID and password? C 1.1.1 Passwords are required to have ( # of ) characters: 5 or less 6-7 8-9 Answer 10 or moreMore information
United States Department of Agriculture Marketing and Regulatory Programs Grain Inspection, Packers and Stockyards Administration Directive GIPSA 3140.5 11/30/06 WIRELESS LOCAL AREA NETWORK (WLAN) IMPLEMENTATIONMore information
CONTENTS. PCI DSS Compliance Guide
CONTENTS PCI DSS COMPLIANCE FOR YOUR WEBSITE BUILD AND MAINTAIN A SECURE NETWORK AND SYSTEMS Requirement 1: Install and maintain a firewall configuration to protect cardholder data Requirement 2: Do notMore information
The following chart provides the breakdown of exam as to the weight of each section of the exam.
Introduction The CWSP-205 exam, covering the 2015 objectives, will certify that the successful candidate understands the security weaknesses inherent in WLANs, the solutions available to address thoseMore information
Section 12 MUST BE COMPLETED BY: 4/22
Test Out Online Lesson 12 Schedule Section 12 MUST BE COMPLETED BY: 4/22 Section 12.1: Best Practices This section discusses the following security best practices: Implement the Principle of Least PrivilegeMore information
Chapter 9 Firewalls and Intrusion Prevention Systems
Chapter 9 Firewalls and Intrusion Prevention Systems connectivity is essential However it creates a threat Effective means of protecting LANs Inserted between the premises network and the to establishMore information
Ron Shuck, CISSP, CISM, CISA, GCIA Infrastructure Security Architect Spirit AeroSystems
Ron Shuck, CISSP, CISM, CISA, GCIA Infrastructure Security Architect Spirit AeroSystems VOIP Components Common Threats How Threats are Used Future Trends Provides basic network connectivity and transportMore information
LOGIIC Remote Access. Final Public Report. June 2015 1 LOGIIC - APPROVED FOR PUBLIC DISTRIBUTION
LOGIIC Remote Access June 2015 Final Public Report Document Title LOGIIC Remote Monitoring Project Public Report Version Version 1.0 Primary Author A. McIntyre (SRI) Distribution Category LOGIIC ApprovedMore information
Security issues in Voice over IP: A Review
www.ijecs.in International Journal Of Engineering And Computer Science ISSN:2319-7242 Volume 3 Issue 2 February, 2014 Page No. 3879-3883 Security issues in Voice over IP: A Review Rajni a, Preeti a, RituMore information
Deploying Firewalls Throughout Your Organization
Deploying Firewalls Throughout Your Organization Avoiding break-ins requires firewall filtering at multiple external and internal network perimeters. Firewalls have long provided the first line of defenseMore information
Networking: EC Council Network Security Administrator NSA
coursemonster.com/uk Networking: EC Council Network Security Administrator NSA View training dates» Overview The EC-Council's NSA certification looks at network security from a defensive view. The NSAMore information
SonicWALL PCI 1.1 Implementation Guide
Compliance SonicWALL PCI 1.1 Implementation Guide A PCI Implementation Guide for SonicWALL SonicOS Standard In conjunction with ControlCase, LLC (PCI Council Approved Auditor) SonicWall SonicOS StandardMore information
NATIONAL SECURITY AGENCY Ft. George G. Meade, MD
NATIONAL SECURITY AGENCY Ft. George G. Meade, MD Serial: I732-010R-2008 30 April 2008 Network Infrastructure Division Systems and Network Analysis Center Activating Authentication and Encryption for CiscoMore information
DATA SECURITY 1/12. Copyright Nokia Corporation 2002. All rights reserved. Ver. 1.0
DATA SECURITY 1/12 Copyright Nokia Corporation 2002. All rights reserved. Ver. 1.0 Contents 1. INTRODUCTION... 3 2. REMOTE ACCESS ARCHITECTURES... 3 2.1 DIAL-UP MODEM ACCESS... 3 2.2 SECURE INTERNET ACCESSMore information
A Model-based Methodology for Developing Secure VoIP Systems
A Model-based Methodology for Developing Secure VoIP Systems Juan C Pelaez, Ph. D. November 24, 200 VoIP overview What is VoIP? Why use VoIP? Strong effect on global communications VoIP will replace PSTNMore information
Basic Vulnerability Issues for SIP Security
Introduction Basic Vulnerability Issues for SIP Security By Mark Collier Chief Technology Officer SecureLogix Corporation email@example.com The Session Initiation Protocol (SIP) is the futureMore information
Network Security Administrator
Network Security Administrator Course ID ECC600 Course Description This course looks at the network security in defensive view. The ENSA program is designed to provide fundamental skills needed to analyzeMore information
Developing Network Security Strategies
NETE-4635 Computer Network Analysis and Design Developing Network Security Strategies NETE4635 - Computer Network Analysis and Design Slide 1 Network Security Design The 12 Step Program 1. Identify networkMore information
Lucent VPN Firewall Security in 802.11x Wireless Networks
Lucent VPN Firewall Security in 802.11x Wireless Networks Corporate Wireless Deployment is Increasing, But Security is a Major Concern The Lucent Security Products can Secure Your Networks This white paperMore information
IT Security Standard: Network Device Configuration and Management
IT Security Standard: Network Device Configuration and Management Introduction This standard defines the steps needed to implement Bellevue College policy # 5250: Information Technology (IT) Security regardingMore information
Best Practices For Department Server and Enterprise System Checklist
Best Practices For Department Server and Enterprise System Checklist INSTRUCTIONS Information Best Practices are guidelines used to ensure an adequate level of protection for Information Technology (IT)More information
Architecture Overview
Architecture Overview Design Fundamentals The networks discussed in this paper have some common design fundamentals, including segmentation into modules, which enables network traffic to be isolated andMore information
Voice over Internet Protocol. Kristie Prinz. The Prinz Law Office
Voice over Internet Protocol Kristie Prinz The Prinz Law Office I. What is Voice over Internet Protocol ( VoIP )? Voice over Internet Protocol ( VoIP ) is a technology, which facilitates the transmissionMore information
SCADA System Security. ECE 478 Network Security Oregon State University March 7, 2005
SCADA System Security ECE 478 Network Security Oregon State University March 7, 2005 David Goeke Hai Nguyen Abstract Modern public infrastructure systemsMore information
Cisco Advanced Services for Network Security
Data Sheet Cisco Advanced Services for Network Security IP Communications networking the convergence of data, voice, and video onto a single network offers opportunities for reducing communication costsMore information
8. Firewall Design & Implementation
DMZ Networks The most common firewall environment implementation is known as a DMZ, or DeMilitarized Zone network. A DMZ network is created out of a network connecting two firewalls; i.e., when two orMore information
Basics of Internet Security
Basics of Internet Security Premraj Jeyaprakash About Technowave, Inc. Technowave is a strategic and technical consulting group focused on bringing processes and technology into line with organizationalMore information
Voice Over IP (VoIP) Denial of Service (DoS)
Introduction Voice Over IP (VoIP) Denial of Service (DoS) By Mark Collier Chief Technology Officer SecureLogix Corporation firstname.lastname@example.com Denial of Service (DoS) is an issue for any IP network-basedMore information
Topics in Network Security
Topics in Network Security Jem Berkes MASc. ECE, University of Waterloo B.Sc. ECE, University of Manitoba www.berkes.ca February, 2009 Ver. 2 In this presentation Wi-Fi security (802.11) Protecting insecureMore information
March 2012 www.tufin.com
SecureTrack Supporting Compliance with PCI DSS 2.0 March 2012 www.tufin.com Table of Contents Introduction... 3 The Importance of Network Security Operations... 3 Supporting PCI DSS with Automated Solutions...More information
VOIP Security Essentials. Jeff Waldron
VOIP Security Essentials Jeff Waldron Traditional PSTN PSTN (Public Switched Telephone Network) has been maintained as a closed network, where access is limited to carriers and service providers. EntryMore information
INSTANT MESSAGING SECURITY February 2008 The Government of the Hong Kong Special Administrative Region The contents of this document remain the property of, and may not be reproduced in whole or in partMore information
Security Frameworks. An Enterprise Approach to Security. Robert Belka Frazier, CISSP firstname.lastname@example.com
Security Frameworks An Enterprise Approach to Security Robert Belka Frazier, CISSP firstname.lastname@example.com Security Security is recognized as essential to protect vital processes and the systems that provide thoseMore information
Famly ApS: Overview of Security Processes
Famly ApS: Overview of Security Processes October 2015 Please consult http://famly.co for the latest version of this paper Page 1 of 10 Table of Contents 1. INTRODUCTION TO SECURITY AT FAMLY... 3 2. PHYSICALMore information
Networking for Caribbean Development
Networking for Caribbean Development BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b n o g. o r g N E T W O R K I N G F O R C A R I B B E A N D E V E L O P M E N T BELIZE NOV 2 NOV 6, 2015 w w w. c a r i b nMore information
Draft ITU-T Recommendation X.805 (Formerly X.css), Security architecture for systems providing end-to-end communications
Draft ITU-T Recommendation X.805 (Formerly X.css), architecture for systems providing end-to-end communications Summary This Recommendation defines the general security-related architectural elements thatMore information
ICANWK406A Install, configure and test network security
ICANWK406A Install, configure and test network security Release: 1 ICANWK406A Install, configure and test network security Modification History Release Release 1 Comments This Unit first released withMore information
Firewalls, Tunnels, and Network Intrusion Detection
Firewalls, Tunnels, and Network Intrusion Detection 1 Part 1: Firewall as a Technique to create a virtual security wall separating your organization from the wild west of the public internet 2 1 FirewallsMore information
Larry Wilson Version 1.0 November, 2013. University Cyber-security Program Critical Asset Mapping
Larry Wilson Version 1.0 November, 2013 University Cyber-security Program Critical Asset Mapping Part 3 - Cyber-Security Controls Mapping Cyber-security Controls mapped to Critical Asset Groups CSC ControlMore information
Network Security. Tampere Seminar 23rd October 2008. Overview Switch Security Firewalls Conclusion
Network Security Tampere Seminar 23rd October 2008 1 Copyright 2008 Hirschmann 2008 Hirschmann Automation and and Control GmbH. Contents Overview Switch Security Firewalls Conclusion 2 Copyright 2008 HirschmannMore information
PCI Requirements Coverage Summary Table
StillSecure PCI Complete Managed PCI Compliance Solution PCI Requirements Coverage Summary Table January 2013 Table of Contents Introduction... 2 Coverage assumptions for PCI Complete deployments... 2More information
Retention & Destruction
Last Updated: March 28, 2014 This document sets forth the security policies and procedures for WealthEngine, Inc. ( WealthEngine or the Company ). A. Retention & Destruction Retention & Destruction ofMore information
The next generation of knowledge and expertise Wireless Security Basics
The next generation of knowledge and expertise Wireless Security Basics HTA Technology Security Consulting., 30 S. Wacker Dr, 22 nd Floor, Chicago, IL 60606, 708-862-6348 (voice), 708-868-2404 (fax), www.hta-inc.comMore information
PAVING THE PATH TO THE ELIMINATION A RSACCESS WHITE PAPER 1 The Traditional Role of DMZ 2 The Challenges of today s DMZ deployments 2.1 Ensuring the Security of Application and Data Located in the DMZMore information
TABLE OF CONTENT. Page 2 of 9 INTERNET FIREWALL POLICY
IT FIREWALL POLICY TABLE OF CONTENT 1. INTRODUCTION... 3 2. TERMS AND DEFINITION... 3 3. PURPOSE... 5 4. SCOPE... 5 5. POLICY STATEMENT... 5 6. REQUIREMENTS... 5 7. OPERATIONS... 6 8. CONFIGURATION...More information


text:
Well, definitely a badge and "sterling silver to boot."
"Assuming" they all belonged to the same person, then can we assume we have a WW 1 soldier from the 9th (Wellington East Coast Rifles) Regiment who continued his relationship with firearms postwar and joined a rifle club? I doubt that there would be any muzzle loading clubs post WW 1 as the breach loader had been around since 1890.
Over to the gang to see if they can come up with a locality, Lower North Island perhaps whose name could start with M.M.
But of course we don't know if he returned to his home town after WW 1 or if the badge is New Zealand.
As a long shot, try this...............

subset: commoncrawl


text:
When author Maggie Stiefvater posted a writing critique partner loooove connection on her blog the other day, I thought, "Too bad I'm not done with my revision. This would have been a good opportunity to meet other writers and receive unbiased feedback on my story."
And then I thought, "Stop being a big fat baby, Marisa. Your first 50 pages of this draft are ready to go and that's all you're supposed to share anyway. You're really just scared that the only people who like your book are your friends - who only tell you they think your story is good because they like you too much to watch you fling yourself off a cliff." *note: I will not fling myself off a cliff.
And then I thought, "Yeah, that's true. And life is all about taking chances. Besides how else will this story get better? Let's do this thing." So I held my breath and posted an ad. My mind has been whirling ever since.
In the last week, I've read some great manuscripts by other writers - stories that I'm excited to watch these writers grow into something so amazing they get agents and book deals and I'll stand in a long, long line to get my copy signed.
I've also received critiques that have renewed my faith in the beast that has consumed my life for the last year and a half. (Not to mention a critique in which the reader did not like one. single. thing about my book. Ouch.) And though the critiques have been at times overwhelming, I'm relieved to have feedback I connect with and direction for making my story even better.
I know my kids have been picking up on my stress this week. Gracie has been slipping me more love notes with big fat kisses on them than usual.
How much do I love my kids? There aren't enough words in the world to answer that question.
Enjoy your weekend, folks! I'm going to be drinking lots of coffee, listening to lots of music, going on lots of walks with the girls to feed my muse, all the while thinking long and hard on how to tame my beast of a book.
It's going to be a great weekend!
Saturday, April 16, 2011
Love Notes and Writing Critiques
When author Maggie Stiefvater posted a writing critique partner loooove connection on her blog the other day, I thought, "Too bad I'm not done with my revision. This would have been a good opportunity to meet other writers and receive unbiased feedback on my story."
9 comments:
- A. McBay said...
Wow, M. It takes a lot to put your book out there like that. Our books are like peices of ourselves and its scary to sit and watch someone crit it to pieces. I'm far from being that brave. I think ill let my freinds and family feed my ego a bit longer before its time to take that plunge. As for your story I'm sure the crits will take it to new levels and agents will be flooding your inbox ;)
- April 16, 2011 at 2:21 PM
- Meeling said...
Good for you, putting your "baby" out there like that...that's tough. Glad to know that you're receiving feedback...sometimes it's good to have those unbiased fresh eyes look at things.
Don't you just love those little notes from our kids...my 12 year old still slides them under our bedroom in the early morning hours...always makes me smile!
- April 16, 2011 at 2:45 PM
- Laura Pauling said...
That was extremely courageous of you! Srsly. And if someone doesn't like anything, you can usually scrap it. Some writers just might not connect. That's so sweet your daughter picked up on your stress!
- April 16, 2011 at 3:07 PM
- mshatch said...
congrats on putting yourself out there, Marisa. There's nothing like a good partner.
- April 16, 2011 at 5:59 PM
- Amie Kaufman said...
Oh, that note is so, so precious. Hope it's a great weekend!
- April 17, 2011 at 2:33 AM
- Kearsie said...
My main thought reading this post is:
Why can't I have big juicy lips like this?
Also, you're awesome.
- April 17, 2011 at 11:53 AM
- Carolina Valdez Miller said...
What a cool idea! But man, takes guts to do what you do. You have so much to be proud of. It's a great sign you belong in this business, you know? Because it takes serious courage to put your book into the hands of readers.
- April 18, 2011 at 9:08 AM
- AlyGatr said...
I'm proud of you :) Now finish it! I'm so pushy, aren't I? Wow, I never get notes with big fat kisses on them!
- April 18, 2011 at 9:13 AM
- Melissa said...
Someone read your work and didn't like one single thing about it? Wow. That's really hard to believe. For a rough draft, you're off to a good start. Believe me. :-D
- April 19, 2011 at 9:21 AM


text:
From Casa Grande, we met Sheila and Chuck for a few days on Darby Wells Road – the trail that circles around the mine at Ajo.
Fred, Chuck and Sheila went out exploring the road and found this interesting Cemetery they said was Mexican.
We had been told about a place in Sells, (the centre of the Tohono O'odham Nation) that served traditional Tohono O'odham food and finally found the Desert Rain Cafe. As Betty said "Every item on the menu has at least one ingredient which has been part of the traditional Tohono O'odham culture. Hummus made using tepary beans, agave used as sweetener. My favourites were the dark tepary bean hummus and the Cholla bud Salsa: Fred liked the Prickly Pear salad dressing. Different and delicious.
Organ Pipe Cactus National Monument
We took the van tour again. This time our guide was Sardius – otherwise known as Ranger Rick because nobody could pronounce his name, His passion is the cacti and he managed to find ever so many anomalies for us to o-o-o-o and aw-aw-aw over.
There is an abundance of cacti up around Ajo and the mine but there was little other vegetation and therefore, wild-life or birds. I think I like the Why area better though.
Our Love-Hate Relationship with Yuma
We have an interesting Love/Hate relationship with Yuma: we keep going back and we keep leaving!
Mostly, we are drawn there by the best winter weather in the US Southwest; some exceptionally good friends; an easy trip to Algodones, Mexico; good shopping; and an Escapees Co-op Park that offers good spaces, good laundry; good people and a great hot tub.
On the other hand, we have been there so often and toured the area so much, there is not much new to find. As Sheila says, we've just seen too much. So, after we spend good quality time with friends; do our Algodones thing; shop ourselves out (or run out of space-whichever comes first); and spent too much time in the casinos; we are ready to leave the city.
Well, the four of us (Sheila, Chuck, Fred and me) headed off to California and Ogilby Road.
And we thought we had done our visiting!!
First we got a phone call from Don and Jan saying that Jan had fallen and broke her ankle so we wanted to visit them while they were still around. Then Stan and Tracy, a couple we met at the RV Lifestyle Seminars in Kelowna some eight or nine years ago – then they came out. Then an email from Colleen and Marc, new RVers we first met in Casa Grande a month or so ago; then Judy and Terry emailed that they were coming out!!
Busy, busy busy – it's tough to have quality time with so much company and it's nice to have friends that you can tell that you just can't take so many people all at one time and they understand and are not offended!
While we were out there, Chuck and Sheila got the sad news that a friend of theirs had been killed in an ATV accident near Florence, AZ.
We consoled ourselves by finding one of the finest Mexican buffets I have experienced. We did a day trip up towards Indio, CA did a bit of casino hopping and came back pleased; stuffed; and readily comforted.
Our rule-of-thumb (when we are dry camping) is to move when the waste tanks are full and that usually takes around 7 to 10 days - Our next move was back to Casa Grande for a massive clean-up; re-energize; and re-stocking.
So now we are back at Why and feeling somewhat liberated. We've only been here for a couple of days and Fred has been out taking pictures and I have been working on this post and enjoying watching the birds and little wild things.


text:
Phoenician glass - shown below is our current range of vases, bowls and other decorative vintage collectable Maltese glassware by Phoenician Glass.
Phoenician Glass was founded in Malta in 1989 by Leonard Sullivan, an ex-worker from the well known Maltese glass factory Mdina Glass. As a result, many of the early Phoenician Glass designs were similar to designs by Michael Harris at Mdina. Phoenician Glass was named after the ancient Phoenician civilisaion, which colonised Malta during the first millenium BC. The company is still in production to this day.


text:
You have to admit that for an economic study, this one has a great title: "The Puck Stops Here!: Canada challenges Australia's grain supply chains." The new study is by the Australian Export Grains Innovation Center (AEGIC), and it looks into Western Canada's export grain supply chain.
In fact, it looks at our grain system in such a comprehensive way that Australian farmers who read the report may emerge with a better understanding of our strengths and weaknesses than many Canadian farmers have, which should both embarrass and worry us.
This report is a testament to the fact that Australia's grain industry is working hard to grow into the global go-to supplier of wheat and coarse grains, likely at the expense of Canadian farmers.
Australia recognizes that the health of its agricultural industry does not start with the seeding of a crop. Nor does it end with the dumping of grain into an elevator pit. It understands that marketing isn't only about the price that farmers receive for their production. It's about a lot more as well.
It's also a sign that Australia realizes that in order to be competitive in the global grains market, it needs to know its competitors' supply chain systems as well as it knows its own.
Knowing your competitor is a fundamental business strategy across many industries. For example, Jeff Bezos, founder and CEO of Amazon says, "We watch our competitors, learn from them, see what they are doing for customers, and copy those things as much as we can."
In the same way, Richard Branson, founder of the Virgin Group, once tweeted, "Strike the right balance between respecting your rivals and focusing on how you can beat them, and you'll have a winning formula."
This is the strategy Australia is using to increase the efficiency and competitiveness of its grain supply chain. By analyzing Canada's system, it plans to learn from our mistakes in order to avoid making those same costly errors. Second, it will identify what is working well in the Canadian grain supply chain and highlight which practices are most appreciated by our customers. Then it can build similar features into its system.
The goal is for Australia to become more efficient and competitive in order to capture new markets, some of which are currently Canadian customers.
So what did the report reveal? Australia's and Canada's Prairies are relatively similar not only in their acreage, crops grown and production practices, but also in their need to find export markets for a large portion of the production.
However, there are major differences in how each country handles and markets its production, and it is largely because of those differences that it costs Canadian growers $20.50/tonne more to move grain from field to ship than it costs Australian growers.
Distance to port is a major disadvantage for western Canadian grain growers. Prairie growers must transport their production 1,300 to 1,800 km to reach tidewater compared to the 100 to 400 km for Australian growers. But even though we are moving grain about six times farther, the average cost of this movement is $49 per tonne in Canada versus $28 per tonne in Australia.
The reason is that rail rates are almost five times higher in Australia than in Canada ($0.14NTK versus $0.03NTK). While we decry the rail service for grain in Canada, our regulations, efficiencies, and multi-use rail lines keep our rail costs much lower than Australian rail lines, which are almost totally dependent on grain movement.
However, we have serious rail issues too. Australian researchers who visited Canada last winter were told of the problems Canada has had with grain movement by rail, as well as about the abandonment of branch lines and about our increasing highway costs as more grain is moved longer distances by road.
There is also a difference in the degree to which farmers rely on rail. In Canada, Prairie farmers have very limited options for bypassing their rail system, while in Australia half of the grain moves by road from farm gate to port terminals.
Our port terminals are not designed to receive grain by truck even if we were willing to move grain by road.
Because of the lower costs of Canadian rail movement of grain, the key recommendation of the Australian report is to improve the flow and efficiency of grain to port in Australia. The report calls for Australia to develop a new, clear, concise plan for least-cost grain movement to port. According to the report, that plan should encourage private as well as private/public investment to boost grain movement from farm to port.
Farm versus off-farm storage
Canadian grain-marketing specialists talk of the value of on-farm storage and the opportunities to capture higher prices by storing grain on farm. Rarely do we hear of the added costs to the Canadian grain supply system of on-farm storage, but those costs are identified in the Australian report.
According to the report, it costs Canada's grain system $17.70/per tonne for our on-farm grain storage of the entire crop. Correspondingly, on-farm storage costs in Australia are only $5/tonne for a system where farmers store as little as 20 per cent of their crop on farm. (In areas where there is strong local or domestic demand, farmers store up to 80 per cent. Areas which export more store very little.)
The Australian system has an additional cost of $3.90/tonne for the upcountry warehouse storage which Canadian farmers do not incur, but still our storage costs are double the cost of Australian farmers.
Australian farmers, by being able to move grain into upcountry storage at harvest, also do not have to worry about the risks associated with storing grain on farm. Those risks are assumed by the warehouse and/or grain trader.
The Australian storage system also offers individual producers access to many more buyers. Instead of being limited to selling to the few companies which are within trucking distance from farm gate to local facility, as is the case in Canada, once Australian farmers move the grain into upcountry warehouse storage, it is available for electronic purchase by any grain trader, so farmers can sell at any time to any buyer. This gives them the benefits of holding grain for later sale, but without the risks and additional costs of having to store the physical commodity on their own farm.
The farmer, grain merchant, and buyer also benefit by having the grain in commercial storage and available for immediate shipment instead of having to co-ordinate the movement of grain from farm to ship after a sale is made, as happens in Canada.
In other words, Australia has adopted a true PUSH system whereas Canada relies on a PULL system in the grain supply chain.
Based on its storage comparisons, the report recommends a rationalization of some of the receiving and storage facilities to increase efficiency and further reduce the cost of the Australian grain supply chain. However, the report makes it clear that the end result of any rationalization must be that "… grain farmers are the net beneficiaries."
Owning the Chain
While Canadian farmers and governments continue to divest themselves of grain-handling assets (pools, CWB, inland terminals, etc.), the co-operative model of infrastructure ownership and supply chain management remains strong in Australia. CBH, the dominant player in the grain supply chain in Western Australia is a farmer-owned co-operative with equity in receiving warehouses, port terminals, locomotives and rolling stock.
The Australians think their approach is right. Because we have sold the infrastructure in the grain supply chain, the report states, "The ownership structure of the Canadian export grain supply chains limits the proportion of the system from which the farmer can derive direct economic benefit."
Then the report continues: "… Lack of equity in other sectors of the grain supply chain typically weakens the bargaining strength of farmers, especially those located in a region only served by one rail operator and with only one or two nearby receival sites owned by large grain companies.
"This limited market power of the Canadian farmer could also limit their capacity to capture the significant benefits that will result from ongoing climatic change and improved production technologies such as new inputs, crops, and varieties. Much of the benefit from increased grain production in Canada will be extracted before and after the farm gate."
What Canada is doing right
Besides identifying problems and higher costs within the Canadian system, the report points to areas where we have an advantage, and it urges Australia farmers and governments to adopt or adapt these practices.
The Australian contingent was impressed with the work and reporting of the Grain Monitor. Its report suggests setting up a grain-monitoring program similar to ours which could lead to better policy formulation.
As well, the report encourages Australia to strengthen relationships in export markets by creating its own version of the Canadian International Grains Institute (Cigi).
Plus, the report also notes that Canada has both higher productivity and higher productivity trends. The report calls for increased research by farmers, industry and government to cost effectively boost production.
Interestingly, the report calls for a focus of this research to address climate change and the risks of declining production due to warmer and drier conditions, whereas in Canada many farmers still doubt that climate change is real.
It is important to realize that Australia, in spite of the lower productivity and a corresponding lower efficiency of infrastructure usage, is able to deliver grains into the critical Asian market at a lower cost than we can from Canada. Instead of sitting back and waiting for sales, AEGIC, Australian farmers, and their governments are actively seeking to increase both productivity and the efficiency of their grain supply chain.
Canadian farmers must take note. A good place to start may be for all Canadian farmers to read the AEGIC report and look at our system as seen through a major competitor's eyes.
This article was originally published as 'How it plans to beat us' in the Western Canada, July/August 2015 issue of Country Guide.


text:
We believe that if we work together, around a shared vision for reform and innovation, we can strengthen every school, and help every child succeed. The goal must be to have every child ready for kindergarten and enrolled in a high performing school.
Recently, we have been talking about school reform. While it's just one part of a much larger effort to help turn around every low performing school, strengthen what is working at more high performing schools, and expand options for students and parents, we believe CPS and CFT should pursue some common sense reforms as part of the pending CPS-CFT contract.
There is perhaps nothing more important to a student's success in school than a teacher, and the reforms we call for are aimed at empowering educators and strengthen the teaching profession.
Many of these reforms were part of a report delivered to CPS by The New Teacher Project (TNTP), which is a nationally recognized nonprofit education organization dedicated to helping school districts and states fulfill the promise of public education by ensuring that all students—especially those from high-need communities—get excellent teachers.
TNTP partnered with the CPS and CFT to examine human capital policies and practices in the district. They surveyed more than 1,200 teachers, principals and administrators to understand their current challenges and seek their ideas for innovative solutions. Their report provides suggestions for policy changes to the teachers' contract that lay the groundwork for dramatic improvements. Learn More
But our vision goes beyond the CPS-CFT contract. We know what it takes to create and sustain a high performing school: great leaders, great teachers, high expectations, more time in the classroom, especially for children who are falling behind, schools that rally around a mission, parent and community involvement, and a collective obsession with results. If we can come together around reform and innovation, we can do all of these things now.
In the coming months, Stand for Kids will begin to broaden its advocacy agenda, even though the goal will remain the same: every child will be ready for kindergarten and enrolled in a high performing school.


text:
Military Channel Debuts 'Triggers,' New Series on History of Modern Weapons
Want to know all the details surrounding the evolution of firearms and the role history, science and technology have played in changing the face of combat?
Then you have come to the right place.
Former Army Ranger and Air Force Pararescueman Wil Willis has joined forces with the Military Channel to host its latest jaw-dropping series "Triggers: Weapons That Changed the World."
USO Prez Praises Hollywood's Biggest Military Supporters.
"I'm hoping that the viewers learn a little bit about the history of the weapon systems that are currently used today, and what they were specifically developed for. I also want them to take away that there is a seriousness that comes with using these weapon systems," Willis told FOX411's Pop Tarts column. "We do a terminal ballistics, basically an explanation of what happens when a bullet hits a target, and it's educational, but at the same time, it's to educate the viewer in what's actually happening when a bullet strikes something. It's not a toy to be played with; these things are very serious."
Willis hopes the six-part series may give those staunchly opposed to guns a fresh perspective.
"The Second Amendment is very clear about the right to bear arms, and I don't think that it's something that I need to get in there and argue a whole lot. But I think that the most common misconception is that gun ownership promotes violence, gun violence, in the United States because typically, gun violence isn't perpetrated by people who legally own guns," he said. "It is perpetrated by people who are criminals.So legal gun ownership is something that a lot of people have a misconception about: that if you own a gun, you are perpetuating violence in the community, and I don't think that that is a fact at all."
And if Willis could spend a day out shooting with one Hollywood star?
"I would love to go shooting with Tom Selleck. Tom Selleck is a huge supporter of the military he's a quiet professional and I think that he's somebody that is very educated when it comes to guns," Willis said. "I would love to go shooting with Tom Selleck."
Tom, are you listening?
"Triggers: Weapons That Changed the World" premieres Wednesday, November 30 at 10PM EST on Military Channel.


text:
Lebanon Local Oilfield agent Can Be Fun For AnyoneTo contend with uncertainty and to satisfy the various safety challenges we encounter, The usa would require bases and stations within just and past Western Europe and Northeast Asia, along with short-term entry preparations with the prolonged-distance deployment of US forces".
Without the need of enough lubrication and cooling, the matrix on the drill little bit will soften. Though diamond is the toughest compound regarded to man at 10 over the Mohs hardness scale, it need to keep on being firmly while in the matrix to realize slicing.
The base are going to be linked to a community of communications satellites that should present frontline US armed service units with instantaneous use of significant grade intelligence and tactical facts.
Concerning social price of US army bases and presence, violation of national sovereignty and territorial integrity in the host state has the best affect.
a very low standing male who discovered way back that meticulously deciding on your terms would be the distinction between going for walks absent in a single piece or having in the struggle of your daily life when coping with "intriguing figures" at 2am.
Feb 26/15: April established as French arms delivery commencement. France is reportedly to start delivery its planned sale of $3 billion really worth of Saudi-obtained arms to Lebanon in April. The announcement appears to get taken many media organs abruptly, presented the previously unstable armed forces circumstance inside the region. Different reports ascribe many Saudi motives for the pressing of your weapons into Lebanese Military arms, starting from expressing pique on the U.
Below's the Saudi Predicament, inside of a nutshell: what to provide? If the money is made use of to deliver little arms, anti-tank missiles, and superior education, it might likely make the greatest variance on the ground. The terrible information? These things are smaller and moveable. Hezbollah's infiltration of your armed forces and electric power inside the government ensures that lots of the products here in problem won't remain in governing administration palms. On the other hand, if Saudi aid is employed to deliver bigger-finish products like armed helicopters, armored vehicles, etcetera.
A Eurozone nation with large relative price ranges could have a lower PPP Euro typical income values. Market exchange costs values may be received in our tailor made menus.
The base will supply a critical website link for your new network of armed service satellites that should help The united states's capacity to battle wars in the center East and Asia.
Air core drilling can achieve depths approaching two hundred metres in superior problems as being the cuttings are taken out inside the rods and they are less likely to clog. Having said that, this process is more expensive and slower than RAB.
Thomas Dimitroff has about twenty years' encounter as an attorney, chance analyst and business strategist. He has functioned like a Main member of many negotiating teams which have shipped globally substantial Electricity jobs such as the one million bbl/day Baku-Tbilisi-Ceyhan oil pipeline, the 10 billion cm/yr South Caucasus gas pipeline, the six.8 bcma gasoline income arrangement involving Turkey and Azerbaijan and also the ten bcma Trans-Adriatic Pipeline Company. He has encouraged governments such as the Azerbaijan Republic, through their multilateral Electricity Charter Transit Protocol negotiations, and he has led cross-purposeful teams in delivering feasibility scientific studies and system suggestions to governments and builders for assignments in Africa and the Middle East.
It could be really exciting and useful to learn the reality driving these services in New Zealand and how they lead to America' wars of aggression in the center East and its increasing army existence in Asia as well as the Pacific.
It will eventually offer a critical backlink while in the process that may carry orders and intelligence details to US and allied troops on functions on the planet's hotspots.
American shipbuilders have experienced mixed final results with composite hulls, but They can be coming into wider Worldwide use due to their body weight pros, which translates right into increased speed, elevated maneuverability and decrease fuel usage.