Articles

Threat Modeling Express

In this article, authors Rohit Sethi and Sahba Kazerooni discuss an agile threat modeling approach called "Threat Modeling Express" that can be used to collaboratively define threats and countermeasures based on the business priorities.

Interview and Book Excerpt: ActiveMQ in Action

In this article, InfoQ spoke with Bruce Snyder, co-author of ActiveMQ in Action book, about the main motivation for writing the book, transaction management and messaging security aspects in ActiveMQ container and emerging trends in the messaging space.

Cloud Computing Roundtable

In this IEEE panel discussion article, guest editors Ivan Arce and Anup Ghosh facilitated the discussion on cloud computing security risks. The panelists are Eric Grosse (Google Security), John Howie (Microsoft), James Ransome (Cisco), Jim Reavis (Cloud Security Alliance) and Stephen Schmidt (Amazon Web Services).

Key Takeaway Points and Lessons Learned from QCon London 2011

This article presents the main takeway points as seen by the many attendees who blogged or tweeted about QCon. Comments are organized by tracks and sessions: Keynotes, Tutorials, Architectures You've Always Wondered About, Building Systems With REST, Design and Objects 2011, Enterprise Agile Transformation, Functional Web, HTML5, the Platform, iOS4 and Android, NoSQL: Where and How, and many more!

How ALM Drives Business/IT Alignment, Competitive Advantage

ALM and Business Processes

Architectural Decisions as Reusable Design Assets

Service-Oriented Architecture Decision Modeling (SOAD) framework helps to capture the recurring architectural decisions and use them to guide design in related projects. In this IEEE article, author Olaf Zimmermann discusses this decision-centric approach to guiding the design work. He also talks about the two model types in SOAD metamodel, the guidance models and the decision models.

Meet the Goliath of Ruby Application Servers

PostRank Labs released an open source version of their Ruby web server framework powering PostRank. Goliath, is an asynchronous server designed for speed, leveraging key features of Ruby 1.9+. Goliath creates fast web and data services not unlike node.js but sticking with what Ruby developers know..Ruby. Discover how easy it can be to create manageable server-side services with Ruby.

The Top Five Challenges of Building Software Platforms in the Agile World

When scaling Agile to the enterprise new concerns arise that require revisiting the values and practices of Agile software development. One such concern relates to a common strategy to achieve reuse at the enterprise level - building software platforms. This article lists the top five challenges that an Agile organization should expect to face when deciding to adopt a software platform strategy.

Concurrency Controls in Data Replication

Learn about leading concurrency control mechanisms used for data replication in distributed environments, comparing synchronous and asynchronous implementations with/without locking - techniques used by Oracle RAC, TimesTen, and GigaSpaces and NoSQL databases. Explore tradeoffs among performance, consistency, deadlocks, and conflicting updates in the context of a sample distributed application.

Implementation Decision Rationales – Program Comprehension in Agile

Given the fact that the bulk of a developer's work is maintaining and enhancing existing code, Fabian Kiss makes the case for a lightweight approach to documenting the rationale and decision process behind design decisions to help later developers tie the source code syntax to its meaning in the application domain. Using simple tags and clearly thought out rationale to provide just-enough value.

Concrete: Rich, Customizable DSL Editors for the Browser

Text-based DSLs are useful, an custom editor for the DSL is even better. Concrete allows to build customized editors for JSON-based DSLs/Models. InfoQ talks to Concrete's creator Martin Thiede.