Articles

Interview and Book Excerpt: CERT Resilience Management Model

CERT Resilience Management Model (CERT-RMM), developed at Software Engineering Institute (SEI), defines the processes for managing operational resilience in complex risk-evolving environments. InfoQ spoke with Rich Caralli, Technical Manager of the CERT Resilient Enterprise Management Team, about RMM framework and the book he co-authored.

Omnipresent Synching and Availability with Mobile Couchbase

Omnipresent synchronisation will be easy with CouchDB not only hosted as server side database but also being embedded in mobile applications. Couchbase made the NOSQL Document Database available for the mobile platforms to enable developers to benefit from the replication and offline capabilities while using the convenient and uniform HTTP based protocol to interact with it locally or remotely.

SOA in 2011 Panel

To better understand what makes SOA special, its current state and its relationships with other architectures and technologies, InfoQ conducted a virtual panel on SOA asking a group of experts to share their opinion on the topic and make some predictions about SOA future.

Challenges and Opportunities in Mobile Application Development and Mobile DSLs

Converged Mobile Solutions differ significantly from their Web and Desktop counterparts: they often rely on a sophisticated compared to their scope, while the User Experience and Device Capabilities are paramount to their success. We review the Mobile Technologies, Development Tools and Processes and detail how a DSL can simplify the delivery of Rich Cross Platforms Mobile Solutions.

The Curse of the Change Control Mechanism

Unprecedented levels of change caused by the pace of innovation are stretching traditional contract models to the breaking point. As more organizations adopt Agile and Lean for the development of innovative/complex products and services, new contract models are needed that accommodate change. The Evolutionary Contract Model, based on Agile / Lean principles, offers promise as a possible solution.

A Process for Managing Risks in Distributed Teams

In this IEEE article, John Stouby Persson and Lars Mathiassen discuss a process for managing risks associated in managing the distributed software projects. The process includes identifying and analyzing distributed-team risks in the areas of task distribution, geographical and cultural distribution, stakeholder relations and communication infrastructure.

Threat Modeling Express

In this article, authors Rohit Sethi and Sahba Kazerooni discuss an agile threat modeling approach called "Threat Modeling Express" that can be used to collaboratively define threats and countermeasures based on the business priorities.

Interview and Book Excerpt: ActiveMQ in Action

In this article, InfoQ spoke with Bruce Snyder, co-author of ActiveMQ in Action book, about the main motivation for writing the book, transaction management and messaging security aspects in ActiveMQ container and emerging trends in the messaging space.

Cloud Computing Roundtable

In this IEEE panel discussion article, guest editors Ivan Arce and Anup Ghosh facilitated the discussion on cloud computing security risks. The panelists are Eric Grosse (Google Security), John Howie (Microsoft), James Ransome (Cisco), Jim Reavis (Cloud Security Alliance) and Stephen Schmidt (Amazon Web Services).

Key Takeaway Points and Lessons Learned from QCon London 2011

This article presents the main takeway points as seen by the many attendees who blogged or tweeted about QCon. Comments are organized by tracks and sessions: Keynotes, Tutorials, Architectures You've Always Wondered About, Building Systems With REST, Design and Objects 2011, Enterprise Agile Transformation, Functional Web, HTML5, the Platform, iOS4 and Android, NoSQL: Where and How, and many more!

How ALM Drives Business/IT Alignment, Competitive Advantage

ALM and Business Processes