YOUR FEEDBACK
Java Application Development wrote: Good post in article........
AJAXWorld RIA Conference
$300 Savings Expire August 22
Register Today and SAVE!


2008 East
DIAMOND SPONSOR:
Data Direct
Frontiers in Data Access: The Coming Wave in Data Services
PLATINUM SPONSORS:
Red Hat
The Opening of Virtualization
Intel
Virtualization – Path to Predictive Enterprise
Green Hills
IT Security in a Hostile World
JBoss / freedom oss
Practical SOA Approach
GOLD SPONSORS:
Software AG
The Art & Science of SOA: How Governance Enables Adoption
PlateSpin
Effective Planning for Virtual Infrastructure Growth
Fujitsu
Automated Business Process Discovery & Virtualization Service
Ceedo
Workspace Virtualization
Click For 2007 West
Event Webcasts

2008 East
PLATINUM SPONSORS:
Appcelerator
Think Fast: Accelerate AJAX Development with Appcelerator
GOLD SPONSORS:
DreamFace Interactive
The Ultimate Framework for Creating Personalized Web 2.0 Mashups
ICEsoft
AJAX and Social Computing for the Enterprise
Kaazing
Enterprise Comet: Real–Time, Real–Time, or Real–Time Web 2.0?
Nexaweb
Now Playing: Desktop Apps in the Browser!
Sun
jMaki as an AJAX Mashup Framework
POWER PANELS:
The Business Value
of RIAs
What Lies Beyond AJAX?
KEYNOTES:
Douglas Crockford
Can We Fix the Web?
Anthony Franco
2008: The Year of the RIA
Click For 2007 Event Webcasts
SYS-CON.TV
TOP LINKS YOU MUST CLICK ON


Virtualization Ranks Highest on the Energy-Efficiency Project List
Cassatt Survey Finds Data Center Energy Waste in Development and Test Centers

Nearly two-thirds of IT and facilities personnel consider their data center energy efficiency "average" or worse -- and their development and test environments might be the biggest cause of that, according to a survey conducted by Cassatt.

More than a quarter of survey respondents said that greater than 60 percent of their development and test servers are idle during off-peak hours. There is some good news, though: 62 percent are working on a data center energy-efficiency project now or expect to within the next year, according to the "Cassatt 2008 Data Center Energy Efficiency Survey." And, contrary to conventional wisdom, 59 percent would consider turning off computers that are idle.

As expected, virtualization ranks highest on the energy-efficiency project list, with 69 percent of respondents pursuing a server consolidation/virtualization strategy, and nearly 49 percent pursuing storage consolidation/virtualization. But, while nearly half of the companies (46 percent) say they need a payback on energy efficiency projects in less than two years, organizations are primarily pursuing consolidation, which is frequently a longer-term project.

More than half of respondents recognize the importance of using more efficient equipment, but only a quarter (24 percent) have plans in the works to improve the efficient operation of that equipment with approaches like active power management software to shut off unused servers. Even though the survey shows server power management to be a missed opportunity for many organizations, a number are looking to complement their long-term energy-efficiency projects with innovative techniques designed to deliver compelling, short-term benefits.

"We conducted the 'Cassatt 2008 Data Center Energy Efficiency Survey' to learn more about the extent to which companies are pursuing energy-efficiency initiatives and the rationale behind the ones they choose," said Bill Coleman, chairman and CEO of Cassatt Corp. "Many of the findings were expected, such as those that emphasize the data center power crunch, the popularity of virtualization as a potential solution, and the massive waste in development and test environments.

"Less expected," Coleman continued, "and very problematic for the industry, are the findings that show that many companies simply don't measure their power consumption at all, or do so at a very superficial level. If you can't measure it, as they say, you can't manage it. And it may be that companies are fixing only part of the problem with initiatives based on incomplete information. While organizations are showing a willingness to try some new ideas, many are still ignoring simpler solutions that could help them with energy efficiency almost immediately."

Justifying Turning Off Servers to Save Energy
Are companies that are engaging in complex, long-term, costly server consolidation projects based on virtualization also thinking about simple steps, like turning their unused servers off? According to the Cassatt survey, some are -- which goes against conventional wisdom in IT operations today. In fact, 59 percent said that, yes, they could justify turning off servers for some period of time. When asked how many hours each day a server needs to be idle to justify turning it off, 11 percent say one to three hours, 20 percent say four to five hours, nearly 16 percent say five to seven hours, and nearly 11 percent say eight to 10 hours. Forty-one percent say they cannot justify turning a server off.

While a solid majority of respondents are willing to consider turning off servers they aren't using, only 24 percent are pursuing server power-management software as an energy-efficiency strategy today. On the face of it, a solution like server power management is a simple strategy, like turning off the lights when leaving a room. What's holding them back? Companies cite a range of reasons, including "impact of turning off idle machines on application availability" (45 percent), "application stability when shut down and restarted" (42 percent), "impact on physical reliability" (36 percent), "difficulty determining ROI for a power-management solution" (28 percent), and "lack of integration into existing systems management tool" (26 percent).

About Virtualization News Desk
SYS-CON's Virtualization News Desk trawls the news sources of the world for the latest details of virtualization technologies, products, and market trends, and provides breaking news updates from the Virtualization Conference & Expo.

YOUR FEEDBACK
keerthi wrote: Hi Duncan and Frank, This article is really an interesting one. I found it at a right moment of time as I was trying to implement Page level security in a Project based on JSF. I was wondering the article is based on Container-Managed Security or reading roles from web.xml. I have a requirement where I need to read the roles from database and not from web.xml, can I achieve this security feature by implementing the points mentioned in this article. Awaiting for your response. Thanks and Regards, Keerthi.
SYS-CON Italy News Desk wrote: Application security - the art of applications defending themselves - represents an important line of defence in an overall in-depth security strategy. Web applications that follow the Model-View-Controller (MVC) architecture can, and should, have security implemented on all three layers. Normally it's the controller component that handles page authorization in MVC, the view layer that hides controls and information based on user authorization, and the model that enforces the business rules and input validation. However, it's up to the developer, based on an individual security policy and the programming technology used, to decide where to put security. Using pluggable validator components in JavaServer Faces (JSF), for example, developers may decide to verify user input on the view layer as well as on the model layer.
AJAXWorld News Desk wrote: Application security - the art of applications defending themselves - represents an important line of defence in an overall in-depth security strategy. Web applications that follow the Model-View-Controller (MVC) architecture can, and should, have security implemented on all three layers. Normally it's the controller component that handles page authorization in MVC, the view layer that hides controls and information based on user authorization, and the model that enforces the business rules and input validation. However, it's up to the developer, based on an individual security policy and the programming technology used, to decide where to put security. Using pluggable validator components in JavaServer Faces (JSF), for example, developers may decide to verify user input on the view layer as well as on the model layer.
JDJ News Desk wrote: Application security - the art of applications defending themselves - represents an important line of defence in an overall in-depth security strategy. Web applications that follow the Model-View-Controller (MVC) architecture can, and should, have security implemented on all three layers. Normally it's the controller component that handles page authorization in MVC, the view layer that hides controls and information based on user authorization, and the model that enforces the business rules and input validation. However, it's up to the developer, based on an individual security policy and the programming technology used, to decide where to put security. Using pluggable validator components in JavaServer Faces (JSF), for example, developers may decide to verify user input on the view layer as well as on the model layer.
JDJ News Desk wrote: Application security - the art of applications defending themselves - represents an important line of defence in an overall in-depth security strategy. Web applications that follow the Model-View-Controller (MVC) architecture can, and should, have security implemented on all three layers. Normally it's the controller component that handles page authorization in MVC, the view layer that hides controls and information based on user authorization, and the model that enforces the business rules and input validation. However, it's up to the developer, based on an individual security policy and the programming technology used, to decide where to put security. Using pluggable validator components in JavaServer Faces (JSF), for example, developers may decide to verify user input on the view layer as well as on the model layer.
ENTERPRISE OPEN SOURCE MAGAZINE LATEST STORIES . . .
Money is being made with Open Source. Some make spectacular money by exploiting Open Source (Google, Apple) and some things wouldn't even exist without it (Internet, Software as a Service, Cloud Computing) - so it really boils down to finding the right business model.
ELASTRA announced Elastra Cloud Server support for the Eucalyptus platform. ELASTRA’s products are designed for portability across compute clouds and currently provide support for the Amazon EC2 and S3 compute and storage environments. Because Eucalyptus exposes its virtual machines ...
Jitterbit has announced the availability of Jitterbit 2.0 Enterprise, which includes new capabilities, scalability and management tools. With this new release, organizations have the ability to solve integration challenges between legacy, enterprise, and on-demand applications and data...
A new API is supposed to integrate LinMin Bare Metal Provisioning 5.2 into environments that haven’t been able to do bare metal provisioning of Windows, Red Hat, Novell, Ubuntu, CentOS, Fedora or Asianux on physical systems or virtual machines before. The rev also features single-com...
The United States Court of Appeals for the Federal Circuit Wednesday overturned a year-old San Francisco district court decision that deprived the aggrieved plaintiff in a dispute over open source software governed by the Artistic License of the right to sue for copyright infringement ...
Google has waded into the encryption business with an open source cross-platform toolkit called Keyczar that’s supposed to make it easier for ISVs to put cryptography in their applications. It says Keyczar supports both encryption and authentication with both symmetric and asymmetric...
SUBSCRIBE TO THE WORLD'S MOST POWERFUL NEWSLETTERS
SUBSCRIBE TO OUR RSS FEEDS & GET YOUR SYS-CON NEWS LIVE!
Click to Add our RSS Feeds to the Service of Your Choice:
Google Reader or Homepage Add to My Yahoo! Subscribe with Bloglines Subscribe in NewsGator Online
myFeedster Add to My AOL Subscribe in Rojo Add 'Hugg' to Newsburst from CNET News.com Kinja Digest View Additional SYS-CON Feeds
Publish Your Article! Please send it to editorial(at)sys-con.com!

Advertise on this site! Contact advertising(at)sys-con.com! 201 802-3021


SYS-CON FEATURED WHITEPAPERS

ADS BY GOOGLE