Cisco’s Settlement Over Video Surveillance Flap Signifies a New Era in Vendor Accountability

Amy Larsen DeCarlo – Principal Analyst, Security and Data Center Services

Summary Bullets:

• After a protracted legal battle that spanned nearly a decade, Cisco settled a lawsuit accepting accountability for a security flaw in a video surveillance system sold to Homeland Security, the Secret Service, and other U.S. government agencies.

• As part of the settlement, the partner’s employee who originally reported the vulnerability will receive $1.5 million.

Eight years after the filing of a lawsuit against Cisco on behalf of U.S. public sector customers and more than a decade after a Cisco contractor initially called attention to a serious security flaw in one of the vendor’s video surveillance solutions, the IT equipment maker reached an $8.6 million settlement with the aggrieved parties and admitted culpability. In a blog posted in late July, Cisco General Counsel Mark Chandler wrote that software developed by Broadware – a company acquired by Cisco – used an open architecture that could be vulnerable to a breach. The settlement amount equates to a partial refund to the U.S. federal government and 16 states that bought products between 2008 and 2013. And the $8.6 million settlement included a $1.6 million payment to the person who first identified the vulnerability, although ultimately, no breach ever occurred. Continue reading “Cisco’s Settlement Over Video Surveillance Flap Signifies a New Era in Vendor Accountability”

Are CBRS-powered Private Nets a Threat to Operators?

Kathryn Weldon – Research Director, Business Network and IT Services – Americas

Summary Bullets:

• Operators and network infrastructure providers are vying to provide enterprises with “private” in-building networks that use cellular alternatives to WiFi (4G LTE and 5G), for advanced speed, reliability, security, and low latency.

• The supplier ecosystem for private nets is already crowded, and now Amazon and Google are among the applicants for 3.5 Ghz CBRS shared-spectrum management licenses. Enterprises can also apply for licenses themselves.

CBRS is a wireless technology that operates in three tiers: Tier 1 is used by the Navy, DoD, and by military satellites, while the other two tiers are for commercial use. Applicants can apply for: a Priority Access License (PAL), a non-renewable three-year license to use a 10MHz channel within the 3500-3650MHz portion of the band, in a limited geographical area. They can also apply for General Authorized Access (GAA), which is unlicensed, like WiFi, and provides dynamic allocation of available 100MHz channels so that access does not interfere with communications in the higher tiers. There are also applications for Special Temporary Authority (STA) to use the technology for testing purposes. Continue reading “Are CBRS-powered Private Nets a Threat to Operators?”

Will Low-Code Development Take Over App Modernization Projects?

C. Dunlap

Summary Bullets:

  • New low-code app development platforms are leveraging AI to make apps more intuitive by providing recommendations during guided user interactions.
  • New low-code platforms address the application lifecycle, including speeding the process of app development, integrations, and automating workflow controls.

New complex development architectures, a shortage of professional software developers, and the need to modernize customer-facing apps quickly have increased pressure on DevOps development teams to accelerate software delivery. As a result, the concept of low-code application development tools has received heightened attention. New offerings are being rolled out with AI integrations, making the software even more intuitive and providing non-coders with even more clout in helping companies create business-to-consumer (B2C) apps with advanced capabilities. Continue reading “Will Low-Code Development Take Over App Modernization Projects?”

HPE’s Acquisition of MapR Underscores That AI is All About Data

R. Bhattacharyya

Summary Bullets:

• HPE announced plans to acquire MapR, augmenting its data analytics portfolio with proprietary file system technology.

• HPE’s purchase reinforces the message that to derive true value from an artificial intelligence (AI) implementation, enterprises need to master the basics of data management.

Life isn’t always as it seems, and the same can be said of AI. Sure, the sexy parts of AI are the platforms, the algorithms, the APIs, and the use cases. We are enamored with the natural language processing capabilities, the predictive maintenance, the improved decision making, and the ability to provide a more personalized customer experience. But there is also the intrigue. The seedy underbelly of AI is comprised of the ethical concerns that reveal the potential dark sides of the technology. What if models result in unfair bias against a specific gender or race? What about privacy concerns? What if it’s used for destructive rather than constructive purposes? Continue reading “HPE’s Acquisition of MapR Underscores That AI is All About Data”

TM ONE Smart Services: End-to-End IoT Solutions Tailored for Local Needs

A. Amir

Summary Bullets:

  • TM ONE leverages its wide ICT capabilities, research and development, and local knowledge to offer IoT solutions and gain a competitive edge in the market by addressing the needs of domestic enterprises.
  • However, the applications offered are limited and there are still gaps in its platform features compared to others in the market.

IoT in Malaysia and the Main Inhibitor

IoT has become a business need rather than a good-to-have technology. With benefits such as reducing operational expenditure, the technology is implemented by enterprises across verticals as a new solution or a replacement of the existing process. In Malaysia, the IoT deployment is growing, driven by the manufacturing sector, which accounts for over 80% of the country’s total exports and 23% of the GDP. However, overall adoption is still low, mainly due to the high solution cost and intangible business case, as revealed by a recent study done by GlobalData. For example, the labour and utility costs are low in the country, making it challenging for enterprises to justify the investment needed to implement IoT solutions. An IoT solution that replaces a human role needs to cost less than the minimum annual wage in the country (US$3,100) before the enterprise can start seeing the cost benefits. In another example, a solution that offers 25% of energy reduction from street lights offers savings of only US$20 per light, per year. While the benefits are proven and promising, the total investment required for end-to-end IoT solutions (connectivity, devices, platform, security and services) is often higher than the cost benefits a solution can offer in Malaysia. Continue reading “TM ONE Smart Services: End-to-End IoT Solutions Tailored for Local Needs”

Making Money from AI: Use Cases and Experimentation

G. Barton
G. Barton

Summary Bullets:

  • Enterprises should be prepared to be ‘guinea pigs’ for large tech companies seeking to develop replicable AI solutions.
  • Off-the-shelf AI solutions for vertical and horizontal use cases are being offered by a growing number of providers.

One of the biggest challenges to adopting AI is knowing where to start. In theory, AI can be applied to any and all aspects of an organization’s day-to-day operations. Furthermore, even if AI enhances a particular part of a business’s operations, it does not necessarily mean that the value returned will be worth the investment. One of the biggest beasts in the telecoms technology world, Cisco, has acknowledged that it has not brought as many AI-enhanced solutions to the market as it anticipated because it is still developing the use cases for AI. Continue reading “Making Money from AI: Use Cases and Experimentation”

At Last, We Can Bid a Fond Farewell to Microsoft’s Troubled Skype for Business Online

B. Shimmin

Summary Bullets:

  • Starting on September 1, 2019, Microsoft will begin onboarding new Office 365 users directly into Microsoft Teams, in essence removing the option for customers to run both Teams and the soon-to-be-retired Skype for Business Online.
  • Though somewhat extreme, this migration plan has been coming on for some time now, frankly ever since Microsoft introduced Microsoft Teams in 2017.

Via blog post earlier this week, Microsoft made the wholly unsurprising announcement that it would officially retire its long-term messaging solution, Skype for Business Online, on July 31st, 2021. Unlike many similar migration plans, where rival products can linger for years after closure, Microsoft does not intend to let Skype for Business Online slowly fade away. Continue reading “At Last, We Can Bid a Fond Farewell to Microsoft’s Troubled Skype for Business Online”

CSPs Need to Digitize, Automate, and become More Agile

S. Soh

Summary Bullets:

• There is an urgency for communications service providers (CSPs) to transform their businesses, including systems, processes, and people/culture.

• Agile product development, digital platforms, automation, and SDN/NFV solutions are key aspects of CSP transformation.

CSPs face declining carriage revenue and increasing competition from traditional rivals and disruptive players in the form of OTT players, cloud-based service providers and new market entrants with leaner operating models. Against this backdrop, CSPs see an urgency to improve customer service to minimize churn, develop digital sales channels, and embrace cloud and digital solutions to achieve operational agility. At the same time, technology advancement is opening up new opportunities for CSPs in the enterprise segment. Examples include SDN/NFV, big data, cloud, AI/ML, cybersecurity, IoT, and 5G. Enterprises across various industry verticals are tapping insights from customer data to gain competitive advantages. CSPs hold vast amount of data and operate very complex IT systems and networks. There are opportunities for CSPs to transform their business and operations through the use of digital solutions but major changes need to occur for a CSP to be successful. These include developing new partnerships, upskilling/reskilling their workforce, changing the culture, and streamlining systems and processes. Continue reading “CSPs Need to Digitize, Automate, and become More Agile”

Video Analytics for Public Safety Will Require Digital Transformation

M. Rogers

Summary Bullets:

  • AI and machine learning-powered video analytics are revolutionizing the video capabilities of public safety departments, with solutions like Scene from Nokia and Appearance Search from Motorola Solutions-owned Avigilon leading the way.
  • Further integration into other public safety infrastructure will be critical to leverage the full potential of this technology, but that presents a challenge, as many critical communications systems rely on siloed radio networks.

Video analytics has been a hot topic for the past few years, but only recently have we seen larger-scale deployments in the public safety sphere. Government spend on these technologies is set to increase in the coming years, and plenty of vendors are readying their portfolios to meet this demand. While there is a wealth of small players specializing in this field, Nokia has developed its Scene Analytics platform and Motorola Solutions purchased AI-based video analytics company Avigilon in March 2018. Both these vendors have seen some significant return on these investments, with Nokia launching its Scene Analytics service in Belgium through security company Room40. Meanwhile, Motorola Solutions has a host of wins for its Aviligon service across public safety, logistics, and education, including the New Bedford Housing Authority in the US, Express Cargo in Ireland and Copenhagen Business School in Denmark. Continue reading “Video Analytics for Public Safety Will Require Digital Transformation”

Microservices Apps Prompt New API Security Solutions

Charlotte Dunlap – Principal Analyst, Application Platforms

Summary Bullets:

• New trends in API security include supporting Istio service mesh technology as part of API management/security solutions

• Vendors are targeting solutions at developers looking to inject security early on in the API lifecycle.

Along with new application development architectures come heightened security concerns within the DevOps process. Enterprises are beginning to move into application modernization projects, adopting new architectures such as microservices and serverless computing. These next-generation architectures, which create distributed applications, require security participation beyond operations and security teams so that app developers and architects can help address new types of vulnerabilities. There is also greater interest in segmenting and monitoring the new app architecture (e.g., access control, authentication, metering, and throttling) so that enterprises have a better understanding of, not only security vulnerabilities, but also how their infrastructure is being used. Continue reading “Microservices Apps Prompt New API Security Solutions”