IT baseline protection

IT baseline protection

The IT baseline protection (German: IT-Grundschutz) approach from the German Federal Office for Information Security (BSI) is a methodology to identify and implement computer security measures in an organization. The aim is the achievement of an adequate and appropriate level of security for IT systems. To reach this goal the BSI recommends "well-proven technical, organizational, personnel, and infrastructural safeguards". Organizations and federal agencies show their systematic approach to secure their IT systems (e.g. Information Security Management System) by obtaining an ISO/IEC 27001 Certificate on the basis of IT-Grundschutz. == Overview baseline security == The term baseline security signifies standard security measures for typical IT systems. It is used in various contexts with somewhat different meanings. For example: Microsoft Baseline Security Analyzer: Software tool focused on Microsoft operating system and services security Cisco security baseline: Vendor recommendation focused on network and network device security controls Nortel baseline security: Set of requirements and best practices with a focus on network operators ISO/IEC 13335-3 defines a baseline approach to risk management. This standard has been replaced by ISO/IEC 27005, but the baseline approach was not taken over yet into the 2700x series. There are numerous internal baseline security policies for organizations, The German BSI has a comprehensive baseline security standard, that is compliant with the ISO/IEC 27000-series == BSI IT baseline protection == The foundation of an IT baseline protection concept is initially not a detailed risk analysis. It proceeds from overall hazards. Consequently, sophisticated classification according to damage extent and probability of occurrence is ignored. Three protection needs categories are established. With their help, the protection needs of the object under investigation can be determined. Based on these, appropriate personnel, technical, organizational and infrastructural security measures are selected from the IT Baseline Protection Catalogs. The Federal Office for Security in Information Technology's IT Baseline Protection Catalogs offer a "cookbook recipe" for a normal level of protection. Besides probability of occurrence and potential damage extents, implementation costs are also considered. By using the Baseline Protection Catalogs, costly security analyses requiring expert knowledge are dispensed with, since overall hazards are worked with in the beginning. It is possible for the relative layman to identify measures to be taken and to implement them in cooperation with professionals. The BSI grants a baseline protection certificate as confirmation for the successful implementation of baseline protection. In stages 1 and 2, this is based on self declaration. In stage 3, an independent, BSI-licensed auditor completes an audit. Certification process internationalization has been possible since 2006. ISO/IEC 27001 certification can occur simultaneously with IT baseline protection certification. (The ISO/IEC 27001 standard is the successor of BS 7799-2). This process is based on the new BSI security standards. This process carries a development price which has prevailed for some time. Corporations having themselves certified under the BS 7799-2 standard are obliged to carry out a risk assessment. To make it more comfortable, most deviate from the protection needs analysis pursuant to the IT Baseline Protection Catalogs. The advantage is not only conformity with the strict BSI, but also attainment of BS 7799-2 certification. Beyond this, the BSI offers a few help aids like the policy template and the GSTOOL. One data protection component is available, which was produced in cooperation with the German Federal Commissioner for Data Protection and Freedom of Information and the state data protection authorities and integrated into the IT Baseline Protection Catalog. This component is not considered, however, in the certification process. == Baseline protection process == The following steps are taken pursuant to the baseline protection process during structure analysis and protection needs analysis: The IT network is defined. IT structure analysis is carried out. Protection needs determination is carried out. A baseline security check is carried out. IT baseline protection measures are implemented. Creation occurs in the following steps: IT structure analysis (survey) Assessment of protection needs Selection of actions Running comparison of nominal and actual. === IT structure analysis === An IT network includes the totality of infrastructural, organizational, personnel, and technical components serving the fulfillment of a task in a particular information processing application area. An IT network can thereby encompass the entire IT character of an institution or individual division, which is partitioned by organizational structures as, for example, a departmental network, or as shared IT applications, for example, a personnel information system. It is necessary to analyze and document the information technological structure in question to generate an IT security concept and especially to apply the IT Baseline Protection Catalogs. Due to today's usually heavily networked IT systems, a network topology plan offers a starting point for the analysis. The following aspects must be taken into consideration: The available infrastructure, The organizational and personnel framework for the IT network, Networked and non-networked IT systems employed in the IT network. The communications connections between IT systems and externally, IT applications run within the IT network. === Protection needs determination === The purpose of the protection needs determination is to investigate what protection is sufficient and appropriate for the information and information technology in use. In this connection, the damage to each application and the processed information, which could result from a breach of confidentiality, integrity or availability, is considered. Important in this context is a realistic assessment of the possible follow-on damages. A division into the three protection needs categories "low to medium", "high" and "very high" has proved itself of value. "Public", "internal" and "secret" are often used for confidentiality. === Modelling === Heavily networked IT systems typically characterize information technology in government and business these days. As a rule, therefore, it is advantageous to consider the entire IT system and not just individual systems within the scope of an IT security analysis and concept. To be able to manage this task, it makes sense to logically partition the entire IT system into parts and to separately consider each part or even an IT network. Detailed documentation about its structure is prerequisite for the use of the IT Baseline Protection Catalogs on an IT network. This can be achieved, for example, via the IT structure analysis described above. The IT Baseline Protection Catalog’s' components must ultimately be mapped onto the components of the IT network in question in a modelling step. === Baseline security check === The baseline security check is an organisational instrument offering a quick overview of the prevailing IT security level. With the help of interviews, the status quo of an existing IT network (as modelled by IT baseline protection) relative to the number of security measures implemented from the IT Baseline Protection Catalogs are investigated. The result is a catalog in which the implementation status "dispensable", "yes", "partly", or "no" is entered for each relevant measure. By identifying not yet, or only partially, implemented measures, improvement options for the security of the information technology in question are highlighted. The baseline security check gives information about measures, which are still missing (nominal vs. actual comparison). From this follows what remains to be done to achieve baseline protection through security. Not all measures suggested by this baseline check need to be implemented. Peculiarities are to be taken into account! It could be that several more or less unimportant applications are running on a server, which have lesser protection needs. In their totality, however, these applications are to be provided with a higher level of protection. This is called the (cumulation effect). The applications running on a server determine its need for protection. Several IT applications can run on an IT system. When this occurs, the application with the greatest need for protection determines the IT system’s protection category. Conversely, it is conceivable that an IT application with great protection needs does not automatically transfer this to the IT system. This may happen because the IT system is configured redundantly, or because only an inconsequential part is running on it. This is called the (distribution effect). This is the case, fo

Actifsource

Actifsource is a domain-specific modeling workbench. It is realized as plug-in for the software development environment Eclipse. Actifsource supports the creation of multiple domain models which can be linked together. It comes with a UML-like graphical editor to create domain-specific languages and a general graphical editor to edit structures in the created languages. It supports code generation using user-defined generic code templates which are directly linked to the domain models. Code generation is integrated into Eclipse's incremental build process. == Interoperability == Actifsource can use models from other modelling tools by importing and exporting the ecore format which is defined by the Eclipse Modeling Framework. == Licensing policy == There are two versions of actifsource available: The free community edition which can be used freely for non-commercial projects and the enterprise edition which contains additional features. The enterprise edition comes with customer support and maintenance for a limited period of time. This package allows the customers to upgrade to new versions and maintenance releases during their support period.

SQLf

SQLf is a SQL extended with fuzzy set theory application for expressing flexible (fuzzy) queries to traditional (or ″Regular″) Relational Databases. Among the known extensions proposed to SQL, at the present time, this is the most complete, because it allows the use of diverse fuzzy elements in all the constructions of the language SQL. SQLf is the only known proposal of flexible query system allowing linguistic quantification over set of rows in queries, achieved through the extension of SQL nesting and partitioning structures with fuzzy quantifiers. It also allows the use of quantifiers to qualify the quantity of search criteria satisfied by single rows. Several mechanisms are proposed for query evaluation, the most important being the one based on the derivation principle. This consists in deriving classic queries that produce, given a threshold t, a t-cut of the result of the fuzzy query, so that the additional processing cost of using a fuzzy language is diminished. == Basic block == The fundamental querying structure of SQLf is the multi-relational block. The conception of this structure is based on the three basic operations of the relational algebra: projection, cartesian product and selection, and the application of fuzzy sets’ concepts. The result of a SQLf query is a fuzzy set of rows that is a fuzzy relation instead of a regular relation. A basic block in SQLf consists of a SELECT clause, a FROM clause and an optional WHERE clause. The semantic of this query structure is: The SELECT clause corresponds to the projection. It specifies the relations’ attributes (or attribute expressions) that will be selected. The resulting table is a fuzzy set and it is given in decreasing ordered of satisfaction degree. The SELECT clause specifies also a calibration that is intended to restrict the set of rows retrieved. There are two kinds of calibrations: quantitative and qualitative. In quantitative calibration the user specifies the number of results to be retrieved, so that the query will retrieve the rows with highest membership degrees up to the number of required answers. In qualitative calibration the user specifies a minim level of satisfaction that must have any retrieved row. The FROM clause corresponds to the Cartesian Product. The consult is made on the Cartesian Product of the relations that are specified in this clause. The WHERE clause corresponds to the selection. It specifies the condition for which the satisfaction degree will be calculated. Rows that do not satisfy at all the condition are rejected. This condition is a fuzzy predicate that may involve any attribute of the relations. The following is an example of a SELECT query that returns a list of hotels that are cheap. The query retrieves all rows from the Hotels table that satisfice the fuzzy predicate cheap defined by the fuzzy set μ=(∞, ∞, 25, 30). The result is sorted in descending order by the membership degree of the query.

Digital fashion

Digital fashion is a field of fashion design that relies on 3D software or artificial intelligence to produce hyper-realistic, data-intensive digital 3D garment simulations that are digital-only products or digital models for physical products. Digital garments can be worn and presented in virtual environments, social media, online gaming, virtual reality (VR), and augmented reality (AR) platforms. The field aims to contribute to the development of a more sustainable future for the fashion industry. It has been praised as a possible answer to ethical and creative concerns of traditional fashion by promoting innovation, reducing waste, and encouraging conscious consumption. However, empirical research has questioned whether digital fashion communities embody the radical and anti-consumerist values they claim. A 2025 study presented by YeSeung Lee at the FACTUM international conference on fashion communication analysed 88,141 posts across nine platforms over eight months using Pulsar. It found that only 4.8% of author biographies indicated any sociopolitical focus, and that discourse predominantly relied on generic slogans and trending buzzwords, primarily reinforcing existing fashion hierarchies and consumerist frameworks rather than challenging them. Digital fashion is also the interplay between digital technology and couture. Human AI is an intersection of technology and human representation, in which human value is emphasized and enhanced by technology and the possibilities of discovering design. Information and communication technologies (ICTs) have been deeply integrated both into the fashion industry, as well as within the experience of clients and prospects. Such interplay has happened at three main levels. ICTs are used to design and produce fashion products, while the industry organization also leverages digital technologies. ICTs impact marketing, distribution and sales. ICTs are extensively used in communication activities with all relevant stakeholders and contribute to co-create the fashion world. The fashion industry in general has paved the way for digital fashion to be introduced with more technology being in the industry, like virtual dressing rooms and the gamification of the fashion industry. Digital fashion is also seen on many different online fashion retail websites. This evolution in the fashion industry has called for more education and research of digital fashion. == Design, production, and organization == Among the many applications available to fashion designers to model the fusion of creativity with digital avenues, the Digital Textile Printing can be mentioned here. === Digital textile printing === Digital textile printing has brought together the worlds of fashion, technology, art, chemistry, and printing to produce a new process for printing textiles on clothing. Digital printing is a process in which prints are directly applied to fabrics with a printer, reducing 95% of the use of water, 75% of the use of energy and minimizing textile waste. The main advantage of digital printing is the ability to do very small runs of each design (even less than 1 yard). Digital Textile printing also offers other benefits, such as fast printing speeds that help the time and space needed to print different patterns on garments of choice. == Marketing, distribution, and sales == While all digital channels can be used in order to market and sell fashion completely online (eCommerce), they usually are implemented in connection with offline channels (so-called "omni-channel"). Here, virtual and augmented reality play a crucial role. The fashion industry has faced its own problems including pollution and fabric waste, which has resulted in a shift to more sustainable methods like digital fashion. The industry is also constantly being intertwined with digital media and has allowed for the use of digital tools within the business itself and with consumers. Two of the ways digital fashion is utilized with consumers is through virtual dressing rooms and virtual cosmetic counters. Prospects and clients can use ICTs - own computers, tablets and smartphones - to virtually simulate fitting rooms and cosmetics counters and see how they look in specific outfits and makeup. Customers can give any look and decide on what suits them and buy products. Oftentimes, beauty retailers will feature virtual fitting rooms to allow users to experience the look of their product before committing to a purchase. Some examples are color contact retailers Freshlook, which allows users to simulate contact lens wear in their color contacts studio before purchase. Colorful Eyes also offers a virtual color contact lens try-on room. === Virtual dressing room === A virtual dressing room (also often referred to as virtual fitting room and virtual changing room although they do perform different functions) is the online equivalent of the near-ubiquitous in-store changing room – that is, it enables shoppers to try on clothes to check one or more of size, fit or style, but virtually rather than physically. Fashion retailer Topshop installed a Kinect-powered virtual fitting room at its Moscow store. Created by AR Door, the Augmented Fitting Room system overlays 3D augmented reality clothes on the customer. Simple gestures and on-screen buttons let users "try on" different outfits. However, the high variability of virtual fit platforms to predict consumer clothes sizes called into question the accuracy of these systems in their current form. AI-powered Wardrobe and Outfit Planning Beyond virtual fitting rooms, the integration of artificial intelligence has enabled the rise of digital wardrobe management. These platforms use computer vision and machine learning to catalog a user’s physical or digital garments, providing automated outfit recommendations based on weather, occasion, and personal style trends. Fashion-tech startups utilize AI-driven garment simulation to help users plan outfits virtually, bridging the gap between digital-only fashion and physical wardrobe utility. This "smart closet" approach aims to reduce "wardrobe fatigue" and decrease unnecessary consumption by maximizing the use of existing items through digital visualization. === Communication and experience co-creation === Fashion is also a matter of socially negotiating what is "in" or "out", fashionable or not. In other words, fashion items do not only play on the economic market of physical goods but also - and sometimes even more importantly - on the semiotic market of the production of social tastes and customs. Thanks to social media, and to all services offered by the so-called web2.0, laypeople can contribute to co-create the fashion world, shaping tastes, customs, and fashion-related values. Social media, in general, has catapulted the impact fashion has on our everyday lives and values. Fashion has taken a central role in mass production and is constantly evolving due to the ever-lasting digital transformation. Social media has also helped evolve to a point where not only can brands reach consumers, but consumers can reach brands as well. TikTok for example started a trend in 2020 with #GucciModelChallenge. This creates a space where the brand is gaining awareness from their consumers in the ever-changing digital age. === Gamification === Gaming has played an important role in fostering digital aspects of the fashion world, first beginning with dress-up games that used avatars and allowed players to select garments. Nevertheless, it seems it will now move on to the real world and start using avatars of real people. Garments from luxurious brands have been copied and adapted into the aesthetics of games such as Animal Crossing: New Horizons and The Sims. As to the former, during COVID-19 lock-downs players recreated outfits from a variety of fashion brands, including Chanel, Gucci and Versace. It became a platform for users to showcase their costume designs. In April 2019, Moschino collaborated with simulation game The Sims in a capsule collection that featured signature Jeremy Scott garments. The collection was made available to shop and the campaign was set against the backdrop of a Sims-like atmosphere. Furthermore, in May 2019, Nike partnered up with Fortnite to include their iconic Jordan sneakers. In similar fashion, in May 2020, Marc Jacobs designed 6 of the brand's favorite looks for Nintendo's Animal Crossing: New Horizons in a partnership with Instagram user @AnimalCrossingFashionArchive. They were made available to download. Similarly, the other luxury brands mentioned, Louis Vuitton partnered with game League of Legends to create skins for characters within the game. Digital fashion in different video games allows users to express themselves beyond their avatars and combine the self-expression of fashion into the digital gaming realm. == Digital fashion education and research == Nowadays, the fashion industry needs experts in digital fashion, equipped with the above-ske

The Fractal Prince

The Fractal Prince is the second science fiction novel by Hannu Rajaniemi and the second novel to feature the post-human gentleman thief Jean le Flambeur. It was published in Britain by Gollancz in September 2012, and by Tor in the same year in the US. The novel is the second in the trilogy, following The Quantum Thief (2010) and preceding The Causal Angel (2014). == Plot summary == After the events of The Quantum Thief, Jean le Flambeur and Mieli are on their way to Earth. Jean is trying to open the Schrödinger's Box he retrieved from the memory palace on the Oubliette. After making little progress, he is prodded by the ship Perhonen to talk to Mieli, who turns out to be possessed by the pellegrini again. This time, Jean identifies Mieli's employer as a Sobornost Founder, Joséphine Pellegrini, and gets her to reveal how he got captured, thereby picking up the clues to make plans for his next heist. No sooner is that done than an attack comes from the Hunter. The ship and crew barely survived that, and Jean realizes that he has to find a better way to open the Box - fast. Mieli has been very quiet after they left Mars. She has given up almost everything to the pellegrini, even her identity, as she has promised to let the pellegrini make gogols of her in exchange for rescuing the thief. Yet, having to work with the thief is testing her, especially when the thief eventually does something even more unforgivable than stealing Sydän's jewel from her. In the city of Sirr, on an Earth ravaged by wildcode, Tawaddud and Dunyazad are sisters and members of the powerful Gomelez family. Tawaddud is the black sheep of the family, having run away from her husband and consorted with a notorious jinn, a disembodied intelligence from the wildcode desert. Now Cassar Gomelez, her father, hopes to get her to curry favor with a gogol merchant, Abu Nuwas, so that he has enough votes in the Council for the upcoming decision to renegotiate the Cry of Wrath Accords with the Sobornost. Soon, Tawaddud is embroiled in an investigation with a Sobornost envoy into the murder that triggered the need for her father to forge a new alliance in the first place, and forced to confront old secrets that will change Sirr forever. Somewhere else, in a bookshop and on a beach, a young boy is at play. His mother has told him not to talk to strangers, but there has never been anyone here before. Until now. Should he talk to them? == Influences == In the acknowledgments, Rajaniemi cites the influence of "Andy Clark, Douglas Hofstadter, Maurice Leblanc, Jan Potocki and [...] The Arabian Nights." === Self-loops === In the novel, the idea that the mind is a self-loop may have been influenced by the theories of the Professor of Philosophy, Andy Clark, and the book I Am a Strange Loop by Douglas Hofstadter. === Frame stories === The novel uses frame stories rather extensively, a feature also of The Arabian Nights and Jan Potocki's The Manuscript Found in Saragossa. Several characters in Sirr are the namesakes of characters in these two earlier works as well. The events in The Quantum Thief are also retold at least once by Jean le Flambeur in the course of the events in this novel. == Reception == The novel has received generally positive reviews. However, criticisms of the novel still revolve around Rajaniemi's uncompromising "show, don't tell" style. For example, Amy Goldschlager, writing for the Los Angeles Review of Books, suggested that "[a] bit more explication of the physics involved (“surfing the deficit angle”?) would really be helpful, more helpful than the description of the Schrödinger’s Cat problem given earlier in the book".

Language Computer Corporation

Language Computer Corporation (LCC) is a natural language processing research company based in Richardson, Texas. The company develops a variety of natural language processing products, including software for question answering, information extraction, and automatic summarization. Since its founding in 1995, the low-profile company has landed significant United States Government contracts, with $8,353,476 in contracts in 2006-2008. While the company has focused primarily on the government software market, LCC has also used its technology to spin off three start-up companies. The first spin-off, known as Lymba Corporation, markets the PowerAnswer question answering product originally developed at LCC. In 2010, LCC's CEO, Andrew Hickl, co-founded two start-ups which made use of the company's technology. These included Swingly, an automatic question answering start-up, and Extractiv, an information extraction service that was founded in partnership with Houston, Texas-based 80legs.

Futuresport

Futuresport is a 1998 American made-for-television sports film directed by Ernest Dickerson, starring Dean Cain, Vanessa Williams, and Wesley Snipes. It originally aired on ABC in October 1998, was released on VHS and DVD in March 1999 and then distributed outside of the U.S. by Minerva Pictures. == Plot == The film is set in 2025, and centers on a sport called "Futuresport" (a combination of basketball, baseball and hockey that uses hoverboards and rollerblades) created as a non-lethal way to reduce gang warfare. Tre Ramzey (Dean Cain) along with his ex-girlfriend Alex Torres (Vanessa Williams) and his old coach Obike Fixx (Wesley Snipes) must prevent an all out war between the North American Alliance and the Pan-Pacific Commonwealth (The Com). At stake is who rules over the Hawaiian Islands—which are being terrorized by Eric Sythe (JR Bourne) and his gang the Hawaiian Liberation Organization (Hilo). It takes a revolutionary sport to stop a revolution. == Cast ==