DSW Attends ITECH

DSW will also be attending ITEC. The conferences are designed to bring you the latest in Second Circle Innovation™ - those cutting edge technologies that can and will help your company improve productivity and bottom line – through longer term vision in our keynote presentations, real-world answers and applications in our conference sessions, and productivity enhancing solutions available today on our exposition floor.

ITECH runs from 9/24 – 9/25
Los Angeles Convention Center

DSW: Lead Architect for EastSide Cannery Las Vegas

By Ryan Peterson, Regional Director for Data Systems Worldwide.

On August 28th, 2008, the Las Vegas Boulder Strip saw a historical event when a Hotel and Casino opened its doors. The first time in 14 years a Casino has opened since Boulder Station opened in 1994. Don’t let the Eastside Cannery’s industrial 60’s feel fool you though, some of the most advanced technology systems run the many different services that Eastside Cannery offers. With Cisco 6500 switches at the Core of the network using Cisco’s VSS technology, Eastside Cannery is offering the first Active-Active networking service where all switches work together in a much more efficient way. For all the high tech guys: Cannery is running 10GB backbone with 40 Gigs between MDF and IDFs, etherchannel between 2960s in the slot banks and each VSS node. With this topology, the chances of any part of the slot floor going down (more than 1 bank) are improbable. With the network as a platform for applications, the other technologies that followed were easy to implement and better yet have significant redundancy.

Data Systems Worldwide was the lead technical architect for this property. In addition, DSW implemented the Cisco Network (including a Slot machine network), the Cisco Voice platform (including the 307 room hotel), and a 600 camera Cisco Surveillance system (including 600 Pelco Cameras).

Data Systems Worldwide Announces B2N Maintain Superior Care Together with Cisco Services.

What is B2n Maintain Superior Care?

• DSW and Cisco backed support contract that includes continuously updated picture of each device in your network plus tech support and Advanced Hardware Replacement

• Cisco and DSW work together for you to proactively identify potential issues preventing network downtime

• Enables the ability to make remote repairs such as correcting configuration errors and updating software to keep your network secure

• Simplifies your contract management and maintenance requirements through a single service contract that covers all of your Cisco devices

• Continuously updated status of your network available on a secure online dashboard

• Provides optional periodic Network Security Assessment and Optimization

• Tech support from the engineers most familiar with your unique environment

• SAVES MONEY

Data Systems Worldwide B2N Maintain Superior Care, together with Cisco® Services, proactively verifies that the network is secure, reliable, and functioning optimally so that you can improve your employee productivity and customer responsiveness and get the most from your technology investments.

Data Systems Worldwide B2N Maintain Superior Care
Modern businesses rely on network applications more than ever before – and are more vulnerable to the lost productivity and profitability that can result from a network outage. As the network becomes the platform for business success in companies of all sizes, the service and support needs of many organizations are changing. While device-by-device support services provide excellent protection for individual devices, they cannot provide insight into the overall health and security of the network – or help businesses identify potential problems before they arise.

Now, organizations have a cost-effective solution. Cisco and Data Systems Worldwide offer an innovative service that combines network-wide technical support with ongoing network monitoring and proactive maintenance to deliver a comprehensive approach to the care and continuous improvement of your network. With this collaborative service offering that combines the complementary strengths of Cisco and Data Systems Worldwide, you can increase your visibility into the health and security of your network, improve network reliability and performance, identify potential problems before they affect your business, and reduce the time and effort necessary to maintain your network.

Data Systems Worldwide B2N Maintain Superior Care provides:

• Peace of mind: Backed by powerful tools and in-depth training from Cisco, Data Systems Worldwide proactively verifies that your network is secure, reliable, and functioning optimally at all times, improving your employee productivity and helping you get the most from your technology investments.
• Network visibility: Data Systems Worldwide B2N Maintain Superior Care delivers visibility into the health and security of your network, giving you the information you need to improve performance and increase your operational efficiency. Through a secure online dashboard, you can view the status of your overall network health, security, and voice performance anywhere, anytime. Data Systems Worldwide maintains a clear, continuously updated picture of each device in your network to provide you with up-to-date status reports, identify potential problems, and make remote repairs such as correcting configuration errors and updating software.
• Continuous improvement: Data Systems Worldwide can perform periodic assessments of your network health and availability to proactively identify potential issues and help ensure that all of your Cisco devices are configured optimally, according to Cisco best practices. Depending on the technologies in your network, assessments also can include in-depth reviews of your network security systems and the performance and availability of your Cisco Unified Communications IP voice solutions. Data Systems Worldwide can notify you if there is an issue with any Cisco device in your network and recommend how to address problems before they affect your employees and your business profitability. Data Systems Worldwide can even perform a comprehensive analysis of your network to assess its readiness to support advanced IP voice communications solutions.
• A simple, complete solution: Data Systems Worldwide B2N Maintain Superior Care provides technical support for your entire business network (including advanced security and IP voice solutions) with a single support contract. You receive expert technical support directly from Data Systems Worldwide, ongoing operating system and application software updates for all covered devices and applications, next-business day hardware replacement in the event of a failure, and a wealth of Cisco tools and resources through registered access to cisco.com. As a result, you can take a comprehensive approach to the care and continuous improvement of your network for a single price, with a single point of contact.
• Customized support and maintenance: The Data Systems Worldwide B2N Maintain Superior Care is customized by Data Systems Worldwide specifically for you, to give you just the right level of network service to support the size and complexity of your business. By combining Data Systems Worldwide’s personalized service and in-depth understanding of your business with industry-leading tools, training, and resources from Cisco, you gain a consistently excellent service experience that addresses all of your requirements throughout the lifecycle of your network.

BUSINESS BENEFITS

Data Systems Worldwide B2N Maintain Superior Care

• Increases network visibility and provides you with the information you need to efficiently manage and continually improve your network
• Improves the uptime, security, and performance of your network through ongoing monitoring and periodic assessments that allow you to address problems before they affect your business
• Allows your IT staff to operate more efficiently by reducing the time and effort required to keep your network running optimally
• Enhances your employee productivity and your responsiveness to customers through improved availability of your essential business applications
• Optimizes your business profitability by helping you get the most from your technology investments
• Combines the expertise and service advantages of both Cisco and Data Systems Worldwide into a single offering

An Intelligent Technology Evolution Path

Data Systems Worldwide B2N Maintain Superior Care is delivered as part of the Cisco Smart Business Roadmap, a structured, prioritized evolution path for growing companies that combines customized technology solutions, world-class service, and flexible financing options to help you keep pace with change and make more informed technology decisions. The Cisco Smart Business Roadmap improves the long-term competitiveness of your business by helping you to address the business challenges of today while maximizing the future potential of your technology investments. With most technology providers, the relationship ends after the sale. When you invest in Cisco and Data Systems Worldwide, you can be confident that they are working continuously to expand the capabilities of your network and extend the value of your technology investment.

Comprehensive Support for Your Business

The satisfaction of your customers, the productivity of your employees, and the overall profitability of your business increasingly depend on your network. Now, you can take a comprehensive approach to the care and continuous improvement of your network that delivers greater network visibility, improves your ongoing network health and security, increases your operational efficiency, and extends the value of your Cisco investments. For more information about Data Systems Worldwide B2N Maintain Superior Care , contact Data Systems Worldwide.

FOR MORE INFORMATION CONTACT DAN LAKE AT 818-226-1739 OR DLAKE@DSW.NET

Using Broadcast Data as an Attack Vector...

By Boni Bruno, Chief Technology & Security Officer, Data Systems Worldwide

It's amazing how much information you can gather from computers via the data they openly broadcast on the network. This article discusses how such information can be used as an attack vector to compromise data security and other informational assets.

First, let me begin with a true story that I was personally involved with. I was working on a new project as a network architect for a large organization that has 18B in assets and listed on the NYSE. This particular organization had a working area for consultants to use, and since I was on-site for several months, I was privy to the other projects and the other consulting companies also working for said organization. As you would expect, SOX compliance is a big deal for organizations that have their stocks traded on the NYSE, and yep, they had one of the big four accounting firms on-site with a audit team that grew to 12 auditors, 2 project managers, and 1 supervisor handling a SOX audit while I was there.

To make a long story short, the consulting area could not accommodate all the consultants so certain liberties were taken. This team of auditors had the audacity to set up their own wireless access point (open - no encryption) without telling the client. They used this AP to extend access to the team so everyone could access my client's network as well as share resources among themselves. I told upper management about this, but to my dismay, no immediate action was taken, apparently the team convinced them it was a necessity and the AP remained on the network - WOW!

Day in day out, the team would come in the morning, turn on their laptops, and proceed with their daily routines. I use various network tools to conduct my work, while using my tools I began to observe various broadcast data coming from the audit team laptops in the consulting area.

First, I saw ARP/DHCP broadcasts which exposed MAC addresses, previously used IP leases, routing information, etc. (There is a handy tool for you Unix/Linux enthusiasts called Passifist available at http://www.cqure.net ) that clearly shows how much one can gather from broadcast traffic.

Anyway, in the mornings, when the audit team came in and booted their laptops, I was able to see the DHCP request of their previous IP addresses - interestingly enough, many of these addresses came from the DHCP servers located in their corporate office. I know this by the IP addresses and NETBIOS information. In this case, some of the team members were last connected to the network back in their corporate office and I was able to learn various IP specifications just by observing their broadcast traffic. Hence, not only did they expose my clients network by installing that damn wireless AP, but the broadcast data clearly exposed information about their corporate network as well. (Mental note here - Broadcast data can tell you about multiple environments you have been connected to.)

Furthermore, NETBIOS/SMB broadcasts disclosed the teams NETBIOS names, login IDs, and various server information they typically used back in there own office. Many people I know consider broadcast traffic as harmless bits and bytes that are just part of normal day to day network communications - you should now be aware that there is more to it than that!

You should also be aware that Startup Applications can also cause additional broadcast information to be sent out on the network. Some of the team members had IM accounts that were broadcasted. I saw VPN related broadcasts, iTunes broadcasts and even virus software broadcast data for signature updates. There is definitely more to broadcast data than many people understand, and this so called audit team was just clueless...
When I turned on my wireless sniffer, I was able to see even more information. I saw all the wireless access points that were cached in the audit teams laptops being broadcasted, including the one the team put up in the consulting area. I couldn't help but imagine computer hackers sitting in airports, hotels, internet cafes collecting this kind of broadcast data.

There are a slew of tools available on the net that can easily take advantage of such broadcast information to the point that traffic can be diverted to spying machines with little effort. If you get the chance, try playing with a little tool called DSNIFF available at http://monkey.org/~dugsong/dsniff/. This tool allows you to redirect traffic to your machine so you can easily inspect data.

Another interesting tool that specifically takes advantage of broadcast data is a tool called Karma available at http://www.theta44.org/karma/index.html. With this tool you can impersonate a wireless AP, DHCP/DNS servers, email and chat servers, etc.

With tools like these available on the net, it should be very clear that broadcast data can be used as an attack vector for hackers, and with the slew of exploits available with Metasploit - see http://framework.metasploit.com/msf/, you simply need to protect yourself and enforce good security practices!

Anyway, getting back to the story, my immediate concern was to shutdown the AP since any nearby resident could hop on the network and see what was going on. Running packet captures gave me visibility into a lot of the data that was being accessed by the audit team. I ran a wireless site survey showing the range of this rogue AP (yeah, it extended to the public streets) and hit management over the head with all of the information I obtained. They finally took down the AP, but only after I had install a new switch with more ports for these clowns in the consulting area! ;)

It still amazes me how many risks you have to manage on a day to day basis and how little senior managers know and understand information security. I hope you enjoyed this article and that your information security awareness has increased as a result of reading this and the associated web links provided.


Stay well and stay secure...

Seminar: The Nuts and Bolts of Smart Buildings

Registered with American Institutes of Architects

DSW, along with Cisco Systems and our partners will co-host a seminar on Smart Buildings on June 19^th in Long Beach, California.

This program will provide simple, straight-forward information on smart buildings for commercial real estate property managers and technology industry leaders. Both new development and existing buildings will be addressed. The program covers the economics of the approach, and the basic design foundations, technology systems, and management systems associated with a smart building. Beyond the technical aspects of smart buildings, participants will learn about the financial metrics of smart and green buildings. A specific approach to existing buildings will also be presented that involves energy conservation, technology amenities and efficient facility management. Participants will be able to identify the systems, their interrelationships and the financial impact of smart buildings.

The presentation is registered with the American Institute of Architects (AIA), and participants will be provided a certificate for Continuing Education for AIA or other cooperating organizations.

Connected Real Estate comprises solutions that focus on the convergence of IT and building systems onto a common IP infrastructure, reducing operating costs and improving productivity. Key topics at the seminar include both business and technology ranging from understanding the value of connected buildings, energy efficiency, green facilities, building – IT convergence, current architectures, existing and upcoming technologies to name a few.

DSW and Cisco will demonstrate how IP technology can:

• Reduce the capital expenditure on constructing a new building

• Reduce the costs of building operation

• Increase security and staff productivity

• Offer owners and tenants flexible and adaptable working environments

• Generate new revenue streams

• Green buildings and synergies related to real estate and technology in carbon reduction

Attendees will learn how the IP network is emerging as the 4th utility, delivering more services and increasing productivity while also reducing costs.

Participants:

Real estate and technology industry leaders

Location:

Parker’s Lighthouse – 5:30pm start followed by dinner and harbor cruise on a private yacht

Address: Parker's Lighthouse at 435 Shoreline Village Drive, Long Beach, CA. 90802

Speakers:

James Sinopoli, Managing Principal, RCDD, PE

For over 25 years, Mr. Sinopoli has worked extensively on projects involving the configuration and optimization of technology systems and networks. Mr. Sinopoli has facilitated the design, engineering and implementation of several hundred building technology systems. His expertise includes assessment, programming, detailed design, procurement and project management. Mr. Sinopoli has spoken on numerous occasions at conferences and seminars focusing on high technology issues and has received the “Harry J. Pfister” award from the Building Industry Consulting Service International (BICSI).

Mr. Sinopoli has experience in the healthcare, corporate, education, manufacturing, finance and government industry sectors. His clients have included Fortune 100 corporations, the US Postal Service, the US Air Force, major K-12 school districts throughout the county, statewide university systems, airports and ports, the Internal Revenue System, large private and public hospitals, technology companies, and nationwide developers. His international experience includes projects in Asia, Europe, South America and Africa.

Mr. Sinopoli's educational credits include a B.S. in Engineering from Purdue University and a M.A. in Applied Science and Management from Governor's State University. He is a licensed Professional Engineer, a Registered Communications Distribution Designer, and a registered Continuing Education Provider for architects, School Board Members and others, and a published author in numerous industry publications. He currently is engaged with the Building Industry Consulting Services International association in authoring part of their new manual titled “Electronic Safety and Security Systems”. In 2006 he published a book titled “Smart Buildings”.

Robert E. Gary, Jr., Principal, Smart Buildings

Mr. Gary has over 20 years experience in different sales and strategic planning roles across several different industries. He has worked for Fortune 500 companies and start-up organizations. For the past year he has worked exclusively in the Smart Building arena working with a variety of clients including Mixed-Use Developers, Office Buildings, Hospitals, and Educational. Prior to joining Smart Buildings, Mr. Gary was responsible for placing a company on the Inc. 500, fastest growing privately help companies in the US.

Mr. Gary’s educational background includes a B.A. from The Citadel, The Military College of South Carolina.

Mike Mogavero, Executive Vice President, Data Systems Worldwide

The head of DSW’s Sales and Marketing operations, Mike is responsible for managing the DSW sales support organization that maintains client relationships to deliver DSW solutions that are based on our four strategic practice areas: Intelligent Facilities, Intelligent Networks, Intelligent Security and Intelligent Data Centers. Previously, Mike has led DSW’s Consulting Services organization, managed development services, technical support, and the information consulting group’s delivery of services to improve and maintain client satisfaction. The brain behind DSW’s iSpeed consulting methodology, Mike is currently a member of the Cisco Connected Real Estate program and has served on several of the industry’s elite advisory boards, including Sun Microsystems Java Council, Sun Microsystems Pacific Coast Advisory Council, Oracle Advisory Council, and CMP Media Member Council. Prior to joining DSW, Mike worked the City of Portland, Oregon for the Bureau of Housing and Community Development.

Mike holds a Masters Degree in Community and Regional Planning from the University of Oregon.

Jonathan Cowen, Partner Technologist, Panduit Corporation

Jonathan has worked for Panduit for the past 5 years as both a Datacom Specialist and a Channel Manager. His past work experience includes with working in distribution and system integration. In his current position he works to develop strategies for system integrators and customer by showing them how to achieve increased operational excellence in building automation.

Cisco Systems Speaker, TBD

To Register to Attend (Attendance is by invitation only):

To express your interest in attending, please call Dan Lake at (818)226-1739 or email dlake@dsw.net