The Concept of Super Information Highway

21 08 2008

The Internet is the super highway where any sort of information can be published, retrieved or exchanged. Every Internet Server stores a large number of information on different topics. And there are millions of such servers, which are active all day long, even days or months together. There is no break, no pause. So information is available any time, any moment. We may just hook with Internet and get the piles of information.

The WWW is a very famous term, used to define the information population by any Internet server. It is basically a worldwide publication of the web pages to demonstrate peoples, societies and organizations. Every web page is technically a page of information, where different connecting heads/subheads are available to go through next pages of related information, which are bundled together Bulletin Boards are actually simple forums where news, software, games, articles are bundled together with access to every member where they can directly contribute to or collect from the system, according to everybody’s prerequisite. In a bulletin board, you may have the opportunity of conferencing with others, sending items without worrying whom you want to communicate with. Every member may have same freedom to collect anything at any time, according to his/her own convenience.

Chat forums are basically forums of people to make some grouping to create small conference among them. However there may not be different types of items other than chatting or just news. In above descriptions, it was mentioned that Internet is the worldwide Information Super Highway. But to collect the information, you must get help of the information retrieval procedures. There are several popular websites which use powerful search engines to collect various types of information within seconds. They are Yahoo, Excite, AltaVista and like. There also search sites for specific topics, like MEDLINE, Library of Congress, and Amazon etc. They also act as publication centres of different news, advertisements and other items. Browser is another kind of Internet software, which is used to browse or search and collect information in the Internet. Example: Internet Explorer, Netscape Navigator etc.

The following are the great aspects of a browser as significantly a browser must have the following features:

· It should be user friendly.

· It should allow all up-to-date techniques of web browsing.

· It should have different formatting facilities to choose among different options to control the presentation format or speed of the web pages.

We should make a choice of a browser – Netscape Navigator due to the fact that Netscape Navigator is the first very easy and also popular tool to browse in the Internet using efficient technology. It has most of the important features that a browser should have.

In view of the above it is evident that if someone has an account or user permission he/she can enter into his/her ISP’s Internet Server, through which he/she can access any Internet Server in the world. Any person can browse through any information from millions of computers after he/she enters an Internet server. For this reason, Internet is a great wonder of modern science, the so-called information super highway. A web-site is a hard disk space in one of the billions of computers in the Internet. A certain web-site will have information on a specific topic. For example Education, Sports, Shopping, Business or any other topic will have several web-sites dedicated to those topics. We can get the news from web-sites of CNN or BBC. A web-site is identified on the Internet by a unique address.





The importance of Email/Internets

21 08 2008

Email is basically for mail transmission electronically among people. There are also mailboxes, mail servers and other features like those in traditional post office systems. Only the difference is the simplicity and speed in the information transmission via computer and Internet (It is also discussed later on).

E-mail is a vast accomplishment in the world of communication. It is a great attainment because it allows messages reach its recipients within a very short time. If anybody asks how much time it would take for a letter to reach Bangladesh from EU or USA, even the top officials of the Post department would not be able to react. The fastest mail delivery system of the world, DHL takes a minimum of three days to deliver mail to a client. There are of course other communication devices like phone, fax, telex, but often those are too costly. Among all the media of information transmission, email is the best as it is the cheapest and also the fastest. Also it ensures privacy or confidentiality, as the message is stored in the mailbox of the recipient directly. The sender can be sure that the recipient will obtain the message, which is sometimes impossible to assume in case of Fax. Another great benefit of email is that a user can access his/her messages from any computer of the world that has Internet access, whenever he/she wants to check for e-mail.

Email address

Every email recipient must have an email address to be identified and to temporarily store the message in the mail server. If there is no address, how you will be able to locate any person among millions of people. You must have an address, and so email is sent to addresses. Example: alam@bangla.net is an email address. Every address must be specified according to the mail server. The unique name before the @ sign would give the identification of the recipient. Here alam is the user or recipient and bangla.net is the mail server.

Choice of an email program – Eudora

Eudora is one of the simplest to use and easy to install software. So it is very popular and also available everywhere. This software is discussed in the next lesson.

Using Email

Email works like a postal system. When someone mails a message (letter), first it is stored in a mail server. This is just like posting the letters in the local post office or letterbox.

Mail servers are the storage points like the postal department’s post offices, which act as temporary storage during transfer of letters from sender to receiver. In case of electronic mail, mail servers serve as the sender’s post office; the e-mails are then forwarded to numerous other mail servers before it reaches the recipient’s mail server. The sender’s mail server also plays important role in controlling data traffic. When in any network junction there are jams, then server stores some messages and sends the messages after the network gets free. In this way it protects the traffic jams in the message paths. Besides, there are different email systems, which acts as gateways or translators among POP3 or X.400.

When the message reaches the destination mail-server, it is stored there until the recipient checks for it and receives it.

Starting the Email program – Eudora

· Eudora Pro is the most popular among the email softwares.

·


After having the dial-up connection OK, we should open the Eudora.

Sending Mail

To create and send an email you have to go thrugh the following steps-

Procedure

1. Select Message menu

2. Select New Message.

3. Write the email address of the recipient.

4. Then type your necessary message.

5. Then click on send button.

Address Books

It is the place where you can create, store and retrieve the important addresses of the recipients of your emails.

Mailing Lists

Every time you want to mail, you have to type various addresses. You may keep mailing lists for this purpose. If you have already addresses in the address books, you may create mailing lists choosing from them.

Mail Attachments

You may send mail attachments with your mail. This may be any document to be opened using other softwares, games, software itself, or photos and so on.

Receiving Mail

You can check to see if you have received any email message. To check for any e-mails receipts you have to connect with the Internet server through the Dial-up network. After having the connection OK you have to open the Eudora Pro. Then you have to follow the following two steps:

Procedure

1. Select File menu

2. Select Check mail.

Type your password in the window that appears. If there were any messages for you i.e. assuming that someone has sent you e-mail you would be able to see it then. Actually the received e-mails then are transferred from the mail server into your computer’s hard disk.

Responding to Mail

After receiving any mail you may respond to it by choosing Reply option in the Message menu. Then a similar screen like that for sending email would be appeared.

Forwarding Mail

When you want to share any mail with other(s), you may just forward it to another address by chossing Forward option in the Message menu.


Web Browsing

Web Browsing involves going to different Internet sites and read the information available there. In the Internet you can get daily news, weather reports, book airline tickets, order stationary from on-line shops, get scientific information, papers, read books, view movies etc. If you want to buy any item through Internet, you can order that item. You can even pay through Internet. In short, in the Internet you can do almost anything and everything, most of all, all the information of the world is assembled here.

The steps to browse the Internet are described below:

Procedure

1. First connect to your ISP through the dial-up networking.

2. Then open any of the browser software listed below:

§ Netscape Navigator Gold

§ Internet Explorer

3. Then in the address prompt, give the web address of any web site and press Enter.

4. The web site appears and information is available there.

How to connect to the Internet

Dial up Networking

· We use telephone lines to log into the Internet server.

· Logging into any remote server by telephone line is called dial-up networking.

Procedure

1. Start menu

2. Programs

3. Accessories

4. Dial-up networking

5. A black screen appears, asking for your User ID and Password

6. Type your username and password

7. It might ask for other information which will be provided by your ISP

As shown in the above figure, it is physically possible to interconnect millions of computers through satellite system and using telephone lines creating a large network. Direct cable connection is an alternative to satellite connection among LANs. Basically Internet is the network of numerous worldwide networks. A server called Internet Server also known as ISP (Internet Service Provider) plays the role of the server computer.

If someone has an account or user permission he/she can enter into his/her ISP’s Internet Server, through which he/she can access any Internet Server in the world. Any person can browse through any information from millions of computers after he/she enters an Internet server. For this reason, Internet is a great wonder of modern science, the so-called information super highway.

A web-site is a hard disk space in one of the billions of computers in the Internet. A certain web-site will have information on a specific topic. For example Education, Sports, Shopping, Business or any other topic will have several web-sites dedicated to those topics. We can get the news from web-sites of CNN or BBC. A web-site is identified on the Internet by a unique address.

The Internet is the super corridor or super highway where any sort of information can be published, retrieved or exchanged. Every Internet Server stores a large number of information on different topics. And there are millions of such servers, which are active all day long, even days or months together. There is no break, no pause. So information is available any time, any moment. You may just hook with Internet and get the piles of information!

The WWW is a very famous term, used to define the information population by any Internet server. It is basically a worldwide publication of the web pages to demonstrate peoples, societies and organisations. Every web page is technically a page of information, where different connecting heads/subheads are available to go through next pages of related information, which are bundled together Bulletin Boards are actually simple forums where news, software, games, articles are bundled together with access to every member where they can directly contribute to or collect from the system, according to everybody’s requirement.

In a bulletin board, you may have the opportunity of conferencing with others, sending items without worrying whom you want to communicate with. Every member may have same freedom to collect anything at any time, according to his/her own convenience.


Chat forums are basically forums of people to make some grouping to create small conference among them. However there may not be different types of items other than chatting or just news.In above descriptions, it was mentioned that Internet is the worldwide Information Super Highway. But to collect the information, you must get help of the information retrieval procedures. There are several popular websites which use powerful search engines to collect various types of information within seconds. They are Yahoo, Excite, AltaVista and like. There also search sites for specific topics, like MEDLINE, Library of Congress, and Amazon etc. They also acts as publication centres of different news, advertisements and other items.

Browser is another kind of Internet software, which is used to browse or search and collect information in the Internet. Example: Internet Explorer, Netscape Navigator etc.

Aspects of a browser

A browser must have the following features:

· It should be user friendly.

· It should allow all up-to-date techniques of web browsing.

· It should have different formatting facilities to choose among different options to controll the presentation format or speed of the web pages.

Choice of a browser – Netscape Navigator

Netscape Navigator is the first very easy and also popular tool to browse in the Internet using efficient technology. It has most of the important features that a browser should have.





The concept of relational database

4 07 2008

It is noteworthy that behind the introduction of SQL, the regular data base he largest part of popular data storage model is the relational database, which was bedded on a formative paper named “A Relational Model of Data for Large Shared Data Banks,” written by Dr. E. F. Codd in 1970. SQL steps forward to service on the conception of the relational database introduced by Dr. Codd who had promulgated such new exploration for creating and building object orient programming software to be based on the 13 rules, referred to as Codd’s 12 Rules, for the relational model which are the basic milestone in RDBMS concept.: The following rules have been explored by Dr. Codd which are basically known as ‘Dr. Codd’s Database rules.

All information in a relational database in respect rows and column according to table names is representing explicitly as values in tables. Every value in a relational database is guaranteed to be accessible by using a combination of the table name, primary key value, and column name. The DBMS provides logical support for the treatment of null values (unknown or inapplicable data), distinct from default values, and independent of any domain. The description of the database and its contents is represented at the logical level as tables and can therefore be queried using the database language. At least one supported language must have a well-defined syntax and be comprehensive. It must support data definition, manipulation, integrity rules, authorization, and transactions. All views that are theoretically updatable can be updated through the system. The DBMS supports not only set-level retrievals but also set-level inserts, updates, and deletes. Application programs and ad hoc programs are logically impervious when physical access methods or storage structures are altered. Application programs and ad hoc programs are logically unaffected, to the extent potential, when changes are made to the table structures. Dr Codd has introduced and promulgated the database languages which need to be capable of crucial integrity rules. They must be stockpiled in the online catalog, and they cannot be bypassed. Application programs and ad hoc requests are logically unaffected when data is first circulated or when it is reallocate. It ought not to be potential to get around the integrity rules defined through the database language by using lower-level languages.

A good number database has had a “parent-child” relationship; that is, a parent node would contain file pointers to its children. This method has several advantages and many disadvantages. In its favor is the fact that the physical structure of data on a disk becomes unimportant. The programmer simply stores pointers to the next location, so data can be accessed in this manner. Also, data can be added and deleted easily. However, different groups of information could not be easily joined to form new information. The format of the data on the disk could not be arbitrarily changed after the database was created. Doing so would require the creation of a new database structure. Codd’s idea for an RDBMS uses the mathematical concepts of relational algebra to break down data into sets and related common subsets. For the reason that information can naturally be grouped into distinct sets, Dr. Codd organized his database system around this concept. Under the relational model, data is separated into sets that resemble a table structure. This table structure consists of individual data elements called columns or fields. A single set of a group of fields is known as a record or row. For instance, to create a relational database consisting of employee data, you might start with a table called EMPLOYEE that contains the following pieces of information: Name, Age, and Occupation. These three pieces of data make up the fields in the Job holder table.

Job holder table.

Name

Age

Occupation

Mehedi

12

Electrical engineer

Gias

44

Museum curator

Kaium

42

Assistant Chef

Abdul Karim

29

Student

Mohammad

32

Game programmer

Kamruzzaman

46

Singer

The six rows are the records in the EMPLOYEE table. To retrieve a specific record from this table, for example, Dave Davidson, a user would instruct the database management system to retrieve the records where the NAME field was equal to Dave Davidson. If the DBMS had been instructed to retrieve all the fields in the record, the employee’s name, age, and occupation would be returned to the user. SQL is the language that tells the database to retrieve this data. A sample SQL statement that makes this query is

SELECT *

FROM EMPLOYEE

It is important to note that the exact syntax is not important at this point. Due to the fact that the various data items can be grouped according to obvious relationships, the relational database model gives the database designer a great deal of flexibility to describe the relationships between the data elements. Through the mathematical concepts of join and union, relational databases can quickly retrieve pieces of data from different sets (tables) and return them to the user or program as one “joined” collection of data. The join feature enables the designer to store sets of information in separate tables to reduce repetition.

Duty table.

Name

Duties

Skender

Cook

Lily Huq

Teacher

Shovon

Dancer

Idiorty

Superintendent

It is evident from above scenario that a regular Data Base must support the completion of OLE program based software. In case of using language based software, we need to follow the rules of SQL for a distinct customized software. From the relational database concept, we have to set linkage like string, period, print, insert, update and delete, Dr Codd’s rule is inevitable in computerized database panorama. Ideally, Structured Query languages envisage some rules which are very sophisticated to utilize on the Parent child relational database virtually.





Model Database

14 12 2007

It is a significant fact that after the introduction of SQL, the regular data base being the largest part of popular data storage model is the relational database, which was bedded on a formative paper named “A Relational Model of Data for Large Shared Data Banks,” written by Dr. E. F. Codd in 1970. SQL steps forward to be operative in the world data base management system on the conception of the relational database introduced by Dr. Codd who had promulgated such new exploration for creating and building object orient programming software to be based on the 12 rules, referred to as Codd’s 12 Rules, for the relational model which are considered as a great milestone in RDBMS concept.:

The following rules have been explored by Dr. Codd which are basically known as ‘Dr. Codd’s Database rules.

According to relational database concept, all information in a relational database in respect of rows and column according to table names need to be represented explicitly as values in tables. Every value in a relational database is fail-safe to be accessible by using a combination of the table name, primary key value, and column name. The DBMS provides systematic support for the treatment of null values distinct from default values, and independent of any domain. The description of the database and its contents is to be symbolized at the logical level as tables and can consequently be queried by using respective database language. At least one supported language must have a well-defined syntax and be comprehensive. It must support data definition, manipulation, integrity rules, authorization, and transactions. All views that are theoretically updatable can be modernized through the system to which such reprogrammable concept pertains to as a tentative flow. The DBMS supports not only set-level retrievals but also set-level inserts, updates, and deletes. Application programs and any temporary programs are logically unaffected when physical access storage structures are tainted.

Application programs and ad hoc programs are logically unaffected, to the extent possible, when changes are made to the table structures. Dr Codd has introduced and promulgated the database languages which need to be capable of crucial integrity rules. They must be stored in the online catalog, and they cannot be bypassed. Application programs and ad hoc requests are logically unaffected when data is first circulated or when it is reallocate. It ought not to be potential to get around the integrity rules defined through the database language by using lower-level languages. A good number database has had a “parent/child” relationship; that is, a parent node would contain file pointers to its children. This method has several advantages and many disadvantages. It is a significant fact that the physical structure of data on a disk becomes unimportant. The programmer simply stores pointers to the next location, so data can be accessed in this manner. Also, data can be added and deleted easily. However, different groups of information could not be easily joined to form new information. The format of the data on the disk could not be arbitrarily changed after the database was created. Doing so would require the creation of a new database structure.

Suffice it to say that basically Dr. Codd’s suggestion for an RDBMS can be used in mathematical concepts of relational algebra of Standard measurement to break down data into sets and related common subsets. Due to the fact that such information can naturally be grouped into distinct sets, Dr. Codd organized his database system around this concept. Under the relational model, data is separated into sets that resemble a table structure. This table structure consists of individual data elements called columns or fields. A single set of a group of fields is known as a record or row. For instance, to create a relational database consisting of employee data, you might start with a table called EMPLOYEE that contains the following pieces of information: Name, Age, and Occupation.

These three pieces of data make up the fields in the Job holder table.

Job holder table.

Name

Age

Occupation

Mehedi

12

Electrical engineer

Gias

44

Museum curator

Kaium

42

Assistant Chef

Abdul Karim

29

Student

Mohammad

32

Game programmer

Kamruzzaman

46

Singer

The six rows are the records in the EMPLOYEE table. To retrieve a specific record from this table, for example, Mr. J.U.Khan, a user would instruct the database management system to retrieve the records where the NAME field was equal to J.U.Khan. If the DBMS had been instructed to retrieve all the fields in the record, the employee’s name, age, and occupation would be returned to the user. SQL is the language that tells the database to retrieve this data. A sample SQL statement that makes this query is

SELECT *

FROM Duty table

It is important to note that the exact syntax is not important at this point. Due to the fact that the various data items can be grouped according to obvious relationships, the relational database model gives the database designer a great deal of flexibility to describe the relationships between the data elements. Through the mathematical concepts of join and union, relational databases can quickly retrieve pieces of data from different sets (tables) and return them to the user or program as one “joined” collection of data. The join feature enables the designer to store sets of information in separate tables to reduce repetition.

Duty table.

Name

Duties

Eskender

Cook

Lily Huq

Teacher

Waliullah

Dancer

Jasim

Superintendent

It is evident from above scenario that a regular Data Base must support the completion of OLE program based software. In case of using language based software, we need to follow the rules of SQL for distinct customized software. From the relational database concept, we have to set linkage like string, period, print, insert, update and delete, Dr Codd’s rule is inevitable in computerized database panorama. Ideally, Structured Query languages envisage some rules which are very sophisticated to utilize on the Parent-child relational database virtually for independent Programme Oriented customized software.





A Security Technique for database perception

29 11 2007

A Security Technique for database perception

A security technique represents in many organizations as an elementary change in the fortification of network data and even altering the guidelines and measures designed for a security system based on a password applied on an ID file being tricky to protect data for an ideal administration. There is no denying the fact that the changes affect users, administrators, and management where policies and procedures need to be formulated in the sense that a sophisticated as well as integrated data is possible to be set up for overall security of the administration. In real life situation, we face some common scenarios which illustrate the issues in respect of the administrators facing when planning a systematic note installations are concerned.

            We can’t depend on expertise alone to protect one’s Notes data. All effectual security systems integrate well planned process. A systematic procedure is the only way to deal with the largest threat we face—the possibility that someone within the organization will gain access to hush-hush information. When we install a Lotus Notes server, we can establish a password that is required to boot the software. If we don’t want to constantly walk from one’s office to the site housing one’s Notes servers, we will want one’s Notes server to boot without human intercession. The only way to complete this objective is to install the Notes server without any password. This system is a potential security leak. Anyone with access to the server has administrative access to all databases stockpiled on the server. Without password shield on startup, one’s data is absolutely open to anyone with physical access to the server. This system causes people to rely on physical security and safekeeping provided by one’s operating system to protect one’s Notes servers. Windows NT users of Lotus Notes can start Notes automatically without having to enter a password at the Notes console—and not compromise security. Instead of requiring a password at the Notes console, protect Notes using NT’s security. Windows NT users can start Notes in a session and require a password in order to access programs running in that session. This strategy allows NT users of Notes to set up Notes servers without any Notes password, but still protect the server from this method is rarely used access. OS/2’s password setup isn’t reliable. OS/2 comes with the capacity to set a keyboard password, and the password can be in effect at startup. In theory, this technique would protect all programs running on the machine from anyone who doesn’t know the keyboard password. However, because bypassing OS/2’s startup password is relatively easy, if we are using the OS/2 version of Notes I recommend that we provide physical security for all servers. We should provide physical security for all one’s Notes servers in any case. It’s a good idea. This section uses several databases shipped with Notes to demonstrate effective use of Notes security. The key databases that we need to protect are the Name and Address Explanation, MAIL.BOX, and a personal mailbox. When setting up security for any database, we need to keep in mind the purpose that that database serves and even incorporated in that purpose is one’s method of managing that particular database. For example, the Name and Address book is set up to allow distributed management, meaning that multiple administrators at different geographic sites should have the ability to add, change, and delete documents in the Name and Address book. This system allows us to have a single Name and Address Explanation for use in a large organization, without requiring a single administrator to be the sole point of contact for administration.

            By using Notes, we may have multiple administrators with access to the Name and Address Explanation. In addition, users should have access to their person records. Users can assume part of the responsibility for maintaining their personal information, such as their address, phone number, and fax number. This technique is certainly less burdensome than some other e-mail programs that force users to manage complete address explanations, and can significantly reduce the amount of administrative effort required to maintain a working Notes network. The default settings for the Name and Address Explanation furnish all these goals. The default access is set at this method is rarely used access without giving users the ability to create personal agents and personal folders. The administrator has manager access and can create and delete documents. Other servers that need to reproduce one’s Name and Address Explanation also have manager access. The Name and Address book also has roles, which provide the capability to create and edit groups, networks, servers, and users. These roles enable we to give administrators limited access, based on their specific job responsibilities. This enables administrators to specialize and allows organizations to further distribute the responsibility for maintaining the Address Explanation.  One’s procedures for changing the Name and Address Explanation should detail who has access to the Name and Address Explanation and their responsibilities. We should log all attempts to make changes to the Name and Address Explanation.

As a net work management tool MAIL.BOX is a special database used by the mail router in the delivery of e-mail, and is scanned by the mail router on a regular basis. Any document placed in MAIL.BOX which has a “send to” field is processed by the mail router. MAIL.BOX holds

  • Mail in shipment
  • Mail that can’t be conveyed to a individual mailbox

            As a net work management tool, one’s target for MAIL.BOX should be to avert unofficial access to e-mail. Administrators need to be able to evaluate dead mail but shouldn’t be viewing mail in transit. Users should have only the potential to add mail that they want delivered. Therefore, the default access for a MAIL.BOX file is depositor. It is important to mention that a person with depositor access can create documents but can’t view or update any document in the database, including those he creates. The administrators need at least editor access to view, change, and delete dead mail. Each user has his own or her own personal mailbox. The mail router places all mail for that person in his personal mailbox. Personal mailboxes are generally stored on a server, although a mobile user might create a replica of his personal mailbox on his laptop. A user should be able to access, view, and change any data in his personal mailbox. Most organizations don’t want users to change the design of the personal mailbox, however; therefore, editor access should be provided to users. Editor access gives full rights to the data stored in the database, while preventing any changes to the design or access control list. The administrators need to be able to change the design and access control list for personal mailboxes and therefore need manager access to the personal mailboxes. This may be a quick-tempered situation, especially concerning mailboxes for executives. Administrators with manager access have the capability to read and change mail as they see fit. If this is a concern, we may want to provide a special trusted group of administrators with the ability to have access to personal mailboxes. If we create a special group of administrators with access to personal mailboxes, make sure that only members of this group have access to MAIL.BOX.

            As a net work management tool Notes security is based on ID files. ID files hold a user’s name, his public and private key, and any certificates that he may have (and some other information—see Explanation 19, “Administering Notes Security,” for details). The ID file is encrypted and requires a password in order to access it. ID files are created by the administrator, certified by certifiers, and strewn to users. The two methods of distributing ID files may be enumerated as follows:

  • By means of the Notes Name and Address Explanation
  • By handling a floppy disk

            As a net work management tool the whole process of creating and distributing ID files is fundamentally different from creating and distributing passwords. Passwords used to log on to systems are easy to re-create. Nothing is lost if someone forgets a password; a quick phone call to the help desk creates a new password. Administrators never need to have access to the password; this isn’t true for an ID file. It needs to take care when planning the creation and distributions of ID files are promulgated. There is no central collection point for ID files; in most organizations, ID files are strewn throughout the organization, on each user’s workstation. Some organizations collect ID files on a file server, with each user’s ID file placed in a protected directory accessible only by that user. Using a file server can help minimize problems associated with widely distributed ID files, but even then mobile users will have to carry copies of their ID files on their laptops. One’s first step in designing one’s ID file creation and distribution procedures is to make one’s mind up whether we are going to store ID files centrally on a file server or share out them to users. Most organizations dole out ID files to users, although this method is rarely used.  Most users simply aren’t being able of securing their ID files against theft, and wouldn’t know if their ID files had been stolen. This situation represents a real threat to the security of one’s Notes network. If we elect to store ID files on individual workstations, make sure that one’s user information is clear on the need to keep these files secured. In case of storing ID files on a file server has two advantages:

  • Users’ ID files are easier to deal out securely
  • Users can log on from any point in the network, not just their workstations

            As a net work management tool if we opt for to share out ID files, the next decision that we need to make in designing one’s distribution policy is whether to distribute the ID files using Notes’ Name and Address Explanation or on a floppy disk. The advantage of using the Name and Address Explanation is that Notes provides preset support. The ID file is deleted from the Name and Address Explanation the first time the user accesses his person record. Of one’s the user would be forced to use his person record before proceeding with any other usage of Notes. Distributing ID files on floppy disk provides a ready-made backup copy of the ID file that the user can store and have available should he lose his hard disk.

            As a net work management tool when a user fails to memorize a password, providing the user with a new password is a relatively easy task. There is no permanent loss of data involved with forgetting a password. A user who loses an ID file faces far more serious consequences. Any data encrypted using that user’s communal key is lost forever, because that user’s private key is needed in order to decrypt anything that was encrypted with his unrestricted key. In addition, replacing a lost ID file entails more administrative burden than replacing a lost or forgotten password. For this reason, keeping a backup copy of an ID file is a measure of safety and security.

            As a net work management tool, there is no way to re-create an ID file once it has been lost. We can have a policy that users keep backup copies of their ID files, but quite often users will forget to update backups when their ID files are updated. It often falls to the administrator to keep a backup of all ID files that have been issued. Of course, keeping the administrator’s copy of ID files updated is also a large task. A compromise used by many organizations is to have administrators keep a backup of the user’s original ID file. This means that the administrator can replace a lost ID file with a backup. The user still must be recertified with any additional certificates that he held in the lost ID file, and get new copies of any encryption keys, but no data is lost. The one exception to this rule is when the user was storing the only copy of an encryption key. If the only copy of an encryption key is lost, any data encrypted with that key is lost. We may be able to find someone capable of breaking the encryption even in cases when no key is available, but we certainly can’t rely on this scenario. No ideal solution predominates to the problem of replacing a lost ID file. Users creating and keeping backups are unreliable, and many users will not understand this requirement. Most users need to perform this task less than once a year, and their unfamiliarity with backing up an ID file can lead to confusion, or simply choosing not to do the backup. If we choose to have one’s administrators keep a backup of all ID files, we are forced to provide one’s administrators with a level of trust that many organizations may not be willing to do. Administrators with access to backups of the ID files have the ability to use an ID file to read any encrypted mail and to assume the identity of any person. Because identities are based on ID files, access to the ID file is synonymous with being able to steal the person’s identity. Administrator access to backup ID files is a controversial point if one’s administrator is also one’s certifier, as a certifier can create IDs and guess an identity basically by creating the distinctiveness as a tentative flow.

There are some steps we can take to secure backup copies of ID files:

  • Store backup copies of ID files in a secure locked safe
  • Require multiple passwords for backup copies of ID files

            As a net work management tool backup copies of ID files should be kept in a secure, locked safe—not in the administrator’s desk where anyone has casual access. Because ID files are the basis of Notes security, access to ID files must be carefully controlled. ID files are encrypted and protected with a password, but backup copies of ID files often share a common password. Because we don’t want to rely on a single administrator knowing the password to one’s ID files, this password can become fairly well known throughout the organization, at least among the administrative staff. Thus, the backup copies of one’s ID files can become an easy target for hackers wishing to penetrate one’s security system. Requiring multiple passwords can minimize the chance that an administrator will use a backup copy of an ID file to impersonate another user. To replace a lost ID file using a copy with multiple passwords, we first make a copy of the backup ID. Two administrators together can then remove one of the passwords on the ID file and deliver it to the user. If someone has lost an ID file, and we fear that it may have been stolen, don’t just redistribute a backup copy of the ID file. If an ID file is stolen, we need to issue a new ID and prevent anyone from using the old ID file. Before destroying the backup copy of the ID file, we need to use it to decrypt any data encrypted with the original ID file. One’s procedure for decrypting documents using a backup copy of an ID file after someone has lost their ID file should specify that this should take place only in the presence of the person owning the file. We should be prepared to immediately re-encrypt the files with the new ID file.

            As a net work management tool, Notes ID files are protected by passwords. This strategy leads many organizations to attempt to extend their policies and procedures regarding passwords to the passwords protecting Notes ID files—a waste of company’s resources. Passwords used to log on to a system and passwords used to protect an ID file are protecting fundamentally different things. Passwords used to log on to a system are part of an authentication system. A person is identified by presenting the correct user ID/password combination. A password protecting an ID file is an access control mechanism that attempts to restrict access to the ID file. A password on an ID file isn’t involved in authentication at all. Common policies regarding passwords include the life span of a password, the minimum length of a password, and requirements for both numeric and alpha characters in a password. Policies surrounding passwords are generally designed to make passwords hard to guess. In traditional password-protected systems, knowledge of a password is all that is needed to gain access to a system. But knowing the password to a person’s ID file is useless without having a copy of the ID file. The password alone provides no access to the Notes system. Only the Notes ID file can provide access to the Notes system. If someone has a copy of the ID file, but doesn’t know the password, he can try to guess the password protecting the ID file. If the hacker has a copy of the ID file, changing the password on an ID file held by one of one’s users does nothing to the copy of the ID file held by the hacker. In addition, the hacker is free to attempt to guess as many passwords as he cares to in an attempt to break into the ID file. Because this process takes place on a system disconnected from the service, we have no way of knowing if someone is attempting to guess a password associated with an ID file. This problem is why Lotus hasn’t incorporated a method of forcing users to change the passwords on their ID files. It’s simply pointless even though changing passwords on ID files is meaningless; in some organizations it is easier to go along than to change policies. Explaining the difference between a log on password and a Notes ID password may be a difficult process in some organizations. Satisfying one’s auditors may mean having a policy asking users to change their passwords on their ID files. Even with a policy, Notes provides no way to enforce this policy. The only resource we have, if an ID file has fallen into this method, is rarely utilized which needs to create a new public and private key for the user and to issue a new ID file for that user. Before scribing the old ID file, one has to make sure, one needs to decrypt all information that was encrypted earlier by using the old ID file, and then re-encrypting this information using the new ID file is virtually important.

            As a net work management tool, a security check is concerned with ensuring that a company can track all changes to its databases and has the capability of detecting a security violation when one occurs. When designing one’s policies and procedures, ask one self, “How would I know if a security violation occurred?” To restrict a security audit, we need to know the answer to this question for all databases in one’s Notes network. We need a virtual but a written process for updating the design of one’s Notes applications which may be stated as follows:

  • Scrutinizing access to one’s Notes resources
  • Knowing who makes changes and when changes are made to one’s Notes designs
  • Changing the Name and Address Explanation
  • Replacing a lost ID file
  • Decrypting documents after someone loses an ID file

            If we work in a financial institution, we probably have lived through a few security audits and have experience meeting audit requirements. We probably have already written procedures for controlling updates to one’s applications and databases. Similar policies would need to be developed to control updates to one’s Notes application designs and databases. Keep in mind that a Notes database is data and application in one package and that data, application, and access control are tightly integrated. Keeping track of all changes to a Notes design and access control list is even more important than tracking code changes for many other applications. Although authentication and access control form the basis of all security systems, we should record activity so that we can reconstruct any security violations. There are two levels of recording we need to consider:

  • Logging
  • Audit trails

            As a net work management tool, Logging is simply collecting information about any security-related event, such as logging into a system. Most systems today, including Notes, routinely log this type of information. The second level of monitoring, audit trails, is based on logging. A log becomes a useful audit trail when it contains context information, such as the time and the specific actions (such as documents accessed) that occurred. For example, knowing that a person attempted to access a server is fine, but logging the fact that a user attempted to access the system at 10:23, typed in three wrong passwords, along with those three wrong passwords, is far more useful. The second thing that must happen for a log to become a useful audit trail is that the log must be protected. It must be impossible for the log to be deleted or modified. This includes all users, including administrators. The Notes log meets the first essential characteristic of an audit trail. It logs essential access-control events and it records much of the context surrounding each event. However, in Notes there is no way to prevent an administrator from changing the log, so the Notes log in and of itself isn’t a foolproof audit trail. There are two reasons why we would want to keep an audit trail:

  • To analyze an incident after the fact, we need to be able to analyze an audit trail
  • A true audit trail provides a higher confidence level that the log is accurate

We need to have a significant exemplification databases to e-mail all changes to one’s personal mailbox, with which we can set up a central database to record all changes. This feature helps track changes to ACL phenomena but isn’t a true audit trail. Typical procedures for updating a Notes design include having servers specifically designated as production servers and not allowing application designers to make changes directly to the production server should be considered. By requiring administrators to approve and then roll out changes, we can track the resources and time of all design changes. Such significant exemplification shows the recommended process for updating Notes applications. Discovering that a security violation has occurred is more difficult in Notes than in a password-protected system. The primary method used by many organizations to detect attempted break-ins on password-protected systems is to track the number of logon attempts for a single user ID. Repeated failed attempts to log on are a sign of hackers attempting to break into one’s system. However, with Notes we have no way of tracking hackers’ attempts to guess passwords for ID files. Anyone with a copy of an ID file can run a guessing program on his or her local machine until finding the password. The Notes server isn’t involved in the process of protecting ID files, and therefore can’t track attempts to break into a Notes ID file.

            It is a significant fact that once a hacker gains access to an ID file and has guessed the password for that ID file, he can gain instant access to one’s Notes systems. His access won’t appear any different initially than an ordinary access by the real user. Notes authentication succeeds because the hacker has the correct certificates. We need to know the typical usage patterns of one’s users for clues that a hacker is accessing the system. Perhaps the access is being made at an unusual operation for that user, or the hacker may be attempting to access databases not normally used by that account. Currently, automated tools to detect these user patterns don’t exist, making detection difficult in large Notes networks. We should focus one’s efforts on the critical portions of the Notes system: the Name and Address Explanation, mailboxes, and any highly sensitive databases within one’s organization. Monitoring is a critical part of any security system. For now, Notes relies on administrators haphazardly scanning log records to notice any particular potential violations.

            Tracking changes to one’s system requires that all users have and use personal ID files. There is little point in tracking changes if we can’t tell exactly who is making the changes. Many organizations try to ease their administrative burden by using a common ID file for all administrators. This makes changing/creating access control lists easier. Don’t do it!!! If we are serious about security, avoid issuing a common ID file to all administrators. Because administrators will make most of the changes to one’s database design and access control lists, they represent the most serious security threat. Tracking the person actually making the changes is important for one’s security audits. Certifiers are extremely powerful. They can masquerade as any user in one’s organization. Through the ability to create ID files, certifiers have complete access to one’s Notes resources. Both Notes servers and Notes clients rely on certificates to authenticate identities. Authentication succeeds because both the server and client trust a common third party—the certifier who issued the certificate they have in common. Note the word “trust.” If the certifier who issued the certificates isn’t trustworthy, one’s Notes network isn’t secure. Choose one’s certifiers carefully. If a certifier should leave one’s corporation under less than ideal circumstances, we will be faced with the large task of recertifying all users certified by that certifier. We must discard any certificates for which this certifier had access, and create new certificates for each user. Because we can’t know in advance whether we will face this situation, proper planning is required. Fortunately, a proper scheduling can reduce the effort required to recover from a disgruntled certifier. One thing one’s certifiers should never do is certify people by using the organizational certificate. If one’s organizational certificate is used to certify ID files, we would need to recertify every user in the organization when a certifier left the company. We should only use the organizational certificate to create organizational unit certificates. ID files should only be certified using organizational unit certificates. This reduces the number of users that must be recertified when a certifier leaves. Such significant exemplification 4.2 shows the users who would need to be recertified if the Marketing/L3Comm certifier leaves the company. By using an organizational unit certifier to certify ID files, L3Comm reduces the number of users who need to be recertified. In this case, only the marketing department needs to be recertified. One other way to reduce the threat posed by certifiers is to require at least two passwords on all certifier ID files. Access to certifier ID files is what gives certifiers the ability to issue certificates. By requiring two certifiers to be present to use a certifier ID file, we look the odds that a certifier will create fraudulent ID files for his personal use. We should require two passwords on all organizational unit certifier ID files and three passwords on the organization certifier ID file.

            Firewalls protect one’s company’s computers from external threats for which the security problem generally arises when a company is trying to connect to the Internet, but Internet protection need not be the only use of firewalls within one’s company. Firewalls can be established between divisions of one’s company. Firewalls attempt to isolate two networks from each other. A firewall attempts to prevent this method is rarely used network packets from passing through to one’s protected networks. Firewalls are a relatively expensive security feature, ranging in price from a few thousand to several hundred thousand dollars. Complex firewalls can easily run tens of thousands of dollars in hardware costs alone. If we’re looking for a low-cost way to provide moderate protection from Internet attacks, we can use two Notes servers as a firewall. Notes can serve as an effective firewall. A Notes-based firewall is different in nature from typical firewalls. Typical firewalls rely on rules specified by administrators to filter TCP/IP packets that can enter or exit the network. Notes-based firewalls rely on Notes security features to block attacks. If we decide to use Notes as a firewall, we need to purchase additional software to provide access to FTP, Usenet newsgroups, the World Wide Web, and e-mail.

Firewalls are designed primarily to prevent TCP/IP network packets from passing through the firewall. An extremely good technique of isolating one’s internal network from this method is rarely used.  A TCP/IP packet is to not use TCP/IP on one’s internal network. Notes firewalls are based on this technique. The connection between the external server and the internal server shouldn’t be a TCP/IP connection. This system forces all traffic from the Internet to be translated into a different protocol. In Such significant exemplification 4.4, the two Notes servers are connected with a null modem cable. Notes does all protocol conversions to allow Notes users to access the Internet. We could also set up each server with two network interface cards. In each server, one NIC runs IPX and one runs TCP/IP. All communications between these two servers is done using IPX. This prevents any TCP/IP packets coming from the Internet to travel through one’s server to one’s internal network. Notes traffic is automatically handled by the Notes server. The Notes server will transfer the data coming in from the Internet to the correct protocol when passing it on to the internal server. This method is rarely used Notes traffic can pass through, but no TCP/IP packets are allowed into one’s internal network. In this case, we can use all the security features of Notes to filter the Notes traffic that is allowed into one’s internal network. The real benefit to using Notes as a firewall is that it enables us to tightly control access from within the corporation to the Internet. We can use Notes add-on products such as news readers and Web page readers to translate Internet data into Notes format and provide this data to one’s employees. Because this add-ins are controlled by one’s Notes administrator, users who want to access a new portion of the Internet must have one’s administrator first set up the add-on product to read that portion of the Internet. This technique enables us to provide unlimited access for business uses, while off-putting or purging personal access to the Internet. For example, we can limit access to specific Usenet groups by configuring one’s Notes server to monitor only the desired groups. In Such significant exemplification 4.5, the administrator has selected a subset of all possible Usenet groups. Employees can access only the groups stored as a Notes database on the local server.

            Suffice it to say that Notes firewalls enable us to filter the traffic going from one’s internal employees to the Internet. Because all Internet data is translated to/from documents in Notes databases, we can use all of one’s Notes administrative tools to restrict or monitor the information being sent and type of access being allowed. It also makes sense to integrate Internet data into one’s Notes network. Users will appreciate having the worked on Notes to view and search Internet data. By providing a common tool for accessing internal and external data, we eliminate the criteria which are used as special tools just used to access Internet data. Users also appreciate—or at least tend to be less dissatisfied with—an administrator who does a good job of identifying useful Internet resources and making them available through Notes. We can expect to lose access to some of the latest, greatest Web features. We will only have access to the features supported by the products that connect Notes to the Internet. Also, Notes isn’t designed to be a firewall, and only provides a moderate amount of protection. A complete discussion of firewalls and all the desirable features is beyond the scope of this explanation.

For a Notes firewall to be effective at limiting access to the Internet, it must be the only connection from one’s company to the Internet. Otherwise, employees can use the alternate path to access Internet resources.  As with all Notes servers, Notes firewalls shouldn’t be used as file servers, FTP servers, or distributed file system servers. Many organizations will never need to worry about encryption. However, data security goes beyond controlling access to data. What if we need to verify that a memo sent two months ago came from the person listed in the “from” field? What if we need to encrypt one’s data while it is being sent from the server to the client? We can accomplish these things with Notes. If we need to send a “For Eyes Only” memo that we want only one person to be able to read, we can encrypt that memo, using one’s intended recipient’s public key. Because we have used the recipient’s public key to encrypt a message, only that recipient’s private key can decrypt that message.

            As a net work management tool, when we need to guarantee that a memo came from the person listed in the “from” field, we should use digital signatures. Digital signatures use the user’s private key to attach an encrypted field to the memo. If the memo is altered or distorted in any way after the memo has been digitally signed, we can tell. This is prepared in a way that makes it impossible to know anything about the original document from just the fingerprint. The next step is to use the signer’s private key to encrypt the fingerprint. The encrypted fingerprint is the digital signature. Digital signatures are verified using the public key of the signer. The signature is decrypted to give the original fingerprint. The verifier then generates a new fingerprint based on the current state of the document.  If the document hasn’t been changed, and the correct public key is used to decrypt the signature, we know that the document hasn’t been changed since the document was signed and we know the identity of the person signing the document.

As a net work management tool, a note doesn’t make default to encrypt data being transmitted over a network. Notes makes the reasonable assumption that either

  • We have a secured network
  • We don’t care if data is captured while being transmitted

            This is the way for which the most corporations have been operating for many years and is therefore a reasonable assumption for Lotus to make. If these aren’t valid assumptions for one’s network, we can be significant exemplification Notes to provide its own secure communications channel. In order to use digital signatures or privacy-enhanced memos, both users need to have access to a common Name and Address Explanation. The Name and Address Explanation is where public keys are stored. Of one’s, private keys are stored in the ID file, which should be in a secure place accessible only by the actual owner of that ID file. For example, we digitally sign a memo using one’s own private key, but someone needs access to one’s public key stored in the Name and Address Explanation before they can verify the signature. The same is true for privacy-enhanced mail. We need access to someone’s public key, stored in the Name and Address Explanation, in order to send that person private mail. This level of coordination, having each person have access to a common Name and Address Explanation, is a major drawback to using Notes as a basis for private communications across separate enterprises. Users can mail copies of encryption keys to other users, but only regular users of encryption are likely to do this. One question that many organizations have is, “How can we allow users read-access to data while preventing them from printing or copying this data?” Of one’s resources, there is no way to absolutely prevent users from copying data that they can read, because they can always get out a pencil and paper and write down all the information. Let’s wrap up the discussion of the security basics by using the Notes security elements to accomplish some specific goals. These scenarios are meant as illustrations to help we understand the intent behind each of the Notes security features. We can protect parts of a document by using protective sections. When creating the form, divide the form into sections. For the section that we want to protect, assign a group name that will hold all users with rights to edit that section. The default access to the database should be this method is rarely used access. Users with this method is rarely used access can create documents and read documents, but not edit documents. Only those sections of one’s documents specifically granting editor access can be edited—and then only by those users specifically listed in the group name for that protected section. This ability is often useful in workflow applications. For example, a user may have the right to generate a purchase order document, but shouldn’t be allowed to change the document. This technique would prevent someone from changing a purchase order after it has been this method is rarely used. This method is rarely used Names fields in documents. Users can create documents but, because they aren’t listed. This method is rarely used Names field; they don’t have the ability to edit any document. When we are collecting sensitive information, we want to make sure that users can’t read information submitted from other users. In this case, we want to protect documents from everyone except the person who created it. We do this using reader fields. When the document is created, a reader field that lists the user should be created automatically by using a macro to evaluate data integrity within a remote view of any object oriented utilities. Don’t forget to include any administrative groups and servers that will need access to the document.

            If one’s application uses fields that should be personalized only by one’s programs and macros, we want to protect that field from fortuitous alteration by users. We can achieve this by locoing the field as premeditated and entering the name of that field in its formula. As a Notes administrator, we will need to be particularly concerned with the security setup for each database on one’s server. Security is the primary of one’s resources of problems in many Notes installations. A note uses a combination of certificates, public and private keys, and access control lists to provide a finely granulated level of security. The primary weakness in Notes security is the security policies that one’s organization chooses to implement. The most likely route for an attack on one’s Notes system is to gain access ID files containing the private keys and certificates from one’s organization. We will need to carefully design and plan out one’s policies and procedures for managing one’s ID files. Each organization will have to balance the costs versus the benefits. Notes have tightly integrated encryption capabilities based on public-key cryptography technology licensed from RSA. Public-key encryption is the basis for mail encryption, digital signatures, and secure communications channels. Public-key encryption is useful only when there is a convenient way to exchange public keys. Other Internet software, such as PGP, has already spawned a small industry to support the exchange of public keys. Let’s hope that, in the near future, public-key management in inter-enterprise and extra-enterprise applications becomes easier for Notes. Until that time, privacy-enhanced mail and digital signatures are primarily useful within a single domain. If we need to transmit data between two servers and we don’t have a trusted connection between the two servers, we can use port encryption. The data is decrypted by the receiving server. This eliminates the possibility of anyone eavesdropping on one’s conversation virtually in question.

            In view of the above, it is evident that data security is inevitable to develop the integral part of a systematic data management which is a central component for smooth administration. For this reason, protection of information in security point of view is vitally important for which a management needs a sophisticated network system for developing RDBMS to ensure value for money audit in terms of the necessity of IT inspection system.





Information Technology Analyzed as a Corporate Asset

25 11 2007

There is no denying the fact that we are in the focal point of a deep-seated change in both technology and its application. Any institutions in our day expect to get more value from their investments in technology. In the “Post dearth era of calculation” the user-friendliness of dispensation power is not a check where cost of platform technology has become a minor factor in selecting among alternatives to build the business solution and as such the constraining factors are the managerial impact of reengineering the business process and the costs and time required for system development. Additionally, the need to re-educate personnel to the compulsory level of expertise can be an extremely expensive scheme. Open systems enable organizations to buy off-the-shelf solutions to business problems. Open systems standards set apart the design in which data is swapped, remote systems are accessed, and services are attracted. The receipt of open systems standards supports the creation of system architectures that can be built from technology components. These standards enable us, as follows:

  • To build reusable class libraries to use in object-oriented design and development environments.
  • To build functional products those interact with the same data which are bedded on object oriented as well as bedded on full integrity.
  • To modify a correspondence at an individual desktop workstation to include data, addressing and graphics input from a word processor, a personal spreadsheet, a workgroup database, and an existing project host relevance to be propelled by electronic mail to someplace in the world.

It is worth mentioning that opposing to the claims of groups variety from the Open Software base to the user consortium Open User Recommended Solutions, open systems are not exclusively systems that conform to OSF UNIX specifications. The client/server model makes the enterprise available at the desk. It provides access to data that the previous architectures did not. Standards have been defined for client-server figuring. If these principles are understood and used, a society can rationally expect to buy solutions today that can grow with their business needs without the constant need to revise the solutions. Architectures based on open systems standards can be implemented throughout the world, as global systems become the norm for large organizations. While a supportable common platform on a global scale is far from standardized, it certainly is becoming much easier to accomplish. From the desktop, enterprise-wide applications are indistinguishable from workgroup and personal applications. Powerful enabling technologies with built-in conformance to open systems standards are evolving rapidly. Examples include object-oriented development, relational and object-oriented databases, multimedia, imaging, expert systems, geographic information systems, voice recognition and voice response, and text management. These technologies provide the opportunity to integrate their generic potential—with the particular necessities of a business—to create a cost-effective and personalized business solution. The client/server model provides the ideal platform with which to integrate these enabling technologies. Well-defined interface standards enable integration of products from several vendors to provide the right application solution. Enterprise systems are those that create and provide a shared information resource for the entire corporation. They do not imply centralized development and control, but they do treat information and technology as corporate resources. Enterprise network management requires all devices and applications in the enterprise computing environment to be visible and managed. This remains a major challenge as organizations move to distributed processing. Standards are defined and are being implemented within the client/server model. Client/server applications give greater viability to worker empowerment in a distributed organization than do today’s host-centered environments.

Prospects are accessible to society and populace who are equipped and capable to compete in the global market and there is no denying the fact that a competitive global economy will ensure obsolescence and obscurity to those who cannot or are unwilling to compete. All organizations must look for ways to demonstrate value. We are in conclusion bearing in mind that an enthusiasm has to rethink upon existing managerial structures and commerce in putting into practice. Organizations are aggressively downsizing even as they try to aggressively expand their revenue base. There is more willingness to continue improvement practices and programs to eliminate redundancy and increase effectiveness. Organizations are becoming market-driven while remaining true to their business vision. To be competitive in a global economy, organizations in developed economies must employ technology to gain the efficiencies necessary to offset their higher labor costs. Reengineering the business process to provide information and decision-making support at points of customer contact reduces the need for layers of decision-making management, improves responsiveness, and enhances customer service. Empowerment means that knowledge and responsibility are available to the employee at the point of customer contact. Empowerment will ensure that product and service problems and opportunities are identified and finalized. Client/server computing is the most effective source for the tools that empower employees with authority and responsibility. The following are some key drivers in organizational philosophy, policies, and practices. Competitiveness is forcing organizations to find new ways to manage their business, despite fewer personnel, more outsourcing, a market-driven orientation, and rapid product obsolescence. Technology can be the enabler of organizational nimbleness. To survive and prosper in a world where trade barriers are being eliminated, organizations must look for partnerships and processes that are not restrained by artificial borders. Quality, cost, product differentiation, and service are the new marketing priorities. Our information systems must support these priorities.

Contesting demands that information systems organizations justify their costs and it is evident that business are in the way to question the return on their existing investments and as such Centralized IS an operation in particular are under the microscope. Manufactured goods obsolescence has never been so vital a factor. Purchasers have more options and are more demanding. Technology must enable organizations to anticipate demand and meet it. Quality and flexibility require decisions to be made by individuals who are in touch with the customer. Many organizations are eliminating layers of middle management. Technology must provide the necessary information and support to this new structure. If a business is run from its distributed locations, the technology supporting these units must be as reliable as the existing central systems. Technology for remote management of the distributed technology is essential in order to use scarce expertise appropriately and to reduce costs. Each individual must have access to all information he or she has a “need and right” to access, without regard to where it is collected, determined, or located. We can use technology today to provide this “single-system image” of information at the desk, whatever the technology used to create it. Standardization has introduced many new suppliers and has dramatically reduced costs. Competition is driving innovation. Organizations must use architectures that take advantage of cost-effective offerings as they appear. Desktop workstations now provide the power and mainframe capacity that mainframes did only a few years ago. The challenge is to effectively use this power and capacity to create solutions to real business problems. Downsizing and empowerment require that the workgroup have access to information and work collectively. Decisions are being made in the workplace, not in the head office. Standards and new technologies enable workstation users to access information and systems without regard to location. Remote network management enables experts to provide support and central, system-like reliability to distributed systems. However, distributed systems are not transparent. Data access across a network often has unpredictable result sets; therefore, performance on existing networks is often inadequate, requiring a retooling of the existing network infrastructure to support the new data access environment.

Standards enable many new vendors to enter the market. With a common platform target, every product has the entire marketplace as a potential customer. With the high rate of introduction of products, it is certain that organizations will have to deal with multiple vendors. Only through a commitment to standards-based technology will the heterogeneous multiple vendor environment effectively service the buyer. Workstation power, workgroup empowerment, preservation of existing investments, remote network management, and market-driven business are the forces creating the need for client/server computing. The technology is here; what is missing is the expertise to effectively apply it. Organizational pressures to demonstrate value apply as much to the information systems functions as to any other element or operating unit of the business. This is a special challenge because most IS organizations have not previously experienced strong financial constraints, nor have they been measured for success using the same business justification “yardstick” as other value-creating units within the business enterprise. IS has not been under the microscope to prove that the role it plays truly adds value to the overall organization. In today’s world, organizations that cannot be seen to add value are either eliminated or outsourced. It has been found out on a survey that about 1000 companies, on average, spend 90 percent of IS dollars maintaining existing systems. Major business benefits, however, are available only from “new” systems. Dramatic reductions in the cost of technology help cost justify many systems. Organizations that adapt faster than their competitors demonstrate value and become the leaders in their marketplace. Products and services command a premium price when these organizations are “early to market.” As they become commodities, they attract only commodity prices. This is true of both commercial organizations wishing to be competitive in the market with their products and of service organizations wishing to demonstrate value within their department or government sector. “It only took God seven days to create the world because he didn’t have an existing environment to deal with.”3 Billions of dollars have been invested in corporate computing infrastructure and training. This investment must be fully used. Successful client/server solutions integrate with the existing applications and provide a gradual migration to the new platforms and business models.

To meet the goals of the 1990s, organizations are downsizing and eliminating middle-management positions. They want to transfer responsibility to empower the person closest to the customer to make decisions. Historically, computer systems have imposed the burden of data collection and maintenance on the front-line work force but have husbanded information in the head office to support decision making by middle management. Information must be made available to the data creators and maintainers by providing the connectivity and distributed management of enterprise databases and applications. The technology of client/server computing will support the movement of information processing to the direct creators and users of information. OLTP applications traditionally have been used in insurance, financial, government, and sales-related organizations. These applications are characterized by their need for highly reliable platforms that guarantee that transactions will be handled correctly, no data will be lost, and response times will be extremely low, and only authorized users will have access to an application. The IS industry understands OLTP in the traditional mainframe-centered platforms but not in the distributed client/server platforms. Organizations do (and will continue) to rely on technology to drive business. Much of the IS industry does not yet understand how to build mission-critical applications on client/server platforms. As organizations move to employee empowerment and workgroup computing, the desktop becomes the critical technology element running the business. Client/server applications and platforms must provide mainframe levels of reliability. Executive information systems provide a single-screen view of “how well we are doing” by comparing the mass of details contained in their current and historical enterprise databases with information obtained from outside sources about the economy and competition. As organizations enter into corporation with their customers and suppliers, the need to integrate with external systems becomes essential in order to capture the necessary information for an effective EIS. Organizations want to use the EIS data to make strategic decisions. The DSS should provide “what if” analyses to project the results of these decisions. Managers define expectations, and the local processing capability generates decision alerts when reality does not conform. This is the DSS of the client/server model. Information is now recognized as a corporate resource. To be truly effective, organizations must collect data at the source and distribute it, according to the requirements of “need and right to access,” throughout the organization. Workgroups will select the platforms that best meet their needs, and these platforms must integrate to support the enterprise solution. Systems built around open systems standards are essential for cost-effective integration. Los Angeles County issued a request for information stating simply that its goal was “to implement and operate a modern telecommunications network that creates a seamless utility for all County telecommunications applications from desktop to desktop. The United States government has initiated a project—the National Information Interchange that has the simple objective of “making the intellectual property of the United States available to all with a need and right to access.

“Computers will become a truly useful part of our society only when they are linked by an infrastructure like the highway system and the electric power grid, creating a new kind of free market for information services. The feature that makes the highway and electric power grids truly useful is their pervasiveness. Every home and office has ready access to these services; thus, they are used—without thought—in the normal course of living and working. This pervasive accessibility has emerged largely because of the adoption of standards for interconnection. If there were no standards for driving, imagine the confusion and danger. What if every wall plug were a different shape, or the power available on every plug were random? If using a service requires too much thought and attention, that service cannot become a default part of our living and working environment. “Imagine the United States without its highways. Our millions of cars, buses, and trucks driven in our own backyards and neighborhood parking lots, with occasional forays by the daring few along uncharted, unpredictable, and treacherous dirt roads, full of unspeakable terrors.”7 The parking lot analogy illustrated in Figure 1.1 represents the current information-processing environment in most organizations. It is easy and transparent to locate and use information on a local area network (LAN), but information located on another LAN is almost inaccessible. End-user access to enterprise data often is unavailable except for predefined information requests. Although computers—from mainframes to PCs—are numerous, powerful, flexible, and widely used, they are still used in relative isolation. When they communicate, they usually do so ineffectively, through arcane and arbitrary procedures. Information comes with many faces. As shown in Figure 1.2, it can take the form of text, drawings, music, speech, photographs, stock prices, invoices, software, live video, and many other entities. Yet once information is computerized, it becomes a deceptively uniform sequence of ones and zeros. The underlying infrastructure must be flexible in the way it transports these ones and zeros. To be truly effective besides routing these binaries to their destinations the infrastructure must be able to carry binaries with varying degrees of speed, accuracy, and security to accommodate different computer capabilities and needs.

Because computers are manufactured and sold by vendors with differing views on the most effective technology, they do not share common implementation concepts. Transporting ones and zeros around, however flexibly, isn’t enough. Computers based on different technologies cannot comprehend each other’s ones and zeros any more than people comprehend foreign languages. We therefore need to endow our IS organizations with a set of widely understood common information interchange conventions. Moreover, these conventions must be based on concepts that make life easier for humans, rather than for computer servants. Finally, the truly useful infrastructure must be equipped with “common servers”—computers that provide a few basic information services of wide interest, such as computerized white and yellow pages.


Technological innovation proceeds at a pace that challenges the human mind to understand how to take advantage of its capabilities. Electronic information management, technological innovation in the personal computer, high-speed electronic communication, and digital encoding of information provide new opportunities for enhanced services at lower cost. Personal computers can provide services directly to people who have minimal computer experience. They provide low-cost, high-performance computing engines at the site that the individual lives, works, or accesses the service—regardless of where the information is physically stored. Standards for user interface, data access, and intercrosses communications have been defined for the personal computer and are being adopted by a majority of the vendor community. There is no reason to accept solutions that do not conform to the accepted standards. Most large organizations today use a heterogeneous collection of hardware, software, and connectivity technologies. There is considerable momentum toward increased use of technology from multiple vendors. This trend leads to an increasingly heterogeneous environment for users and developers of computer systems. Users are interested in the business functionality, not the technology. Developers rarely are interested in more than a subset of the technology. The concept of the single-system image says that you can build systems that provide transparency of the technology platform to the user and—at the largest extent possible—to the developer. Developers will need sufficient knowledge of the syntax used to solve the business problem, but will need little or no knowledge of the underlying technology infrastructure. Hardware platforms, operating systems, database engines, and communications protocols are necessary technological components of any computer solution, but they should provide services—not create obstacles to getting the job done. Services should be masked; that is, they should be provided in a natural manner without requiring the user to make unnatural gyrations to invoke them. Only by masking these services and by using standard interfaces can we hope to develop systems quickly and economically. At the same time, masking (known as encapsulation in object-oriented programming) and standard interfaces preserve the ability to change the underlying technology without affecting the application. There is value in restricting imagination when you build system architectures. Systems development is not an art; it is an engineering discipline that can be learned and used. Systems can be built on the foundations established by previous projects.

Within the single-system image environment, a business system user is totally unaware of where data is stored, how the client and server processors work, and what networking is involved in gaining connectivity. Every application that the user accesses provides a common “look and feel.” Help is provided in the same way by every application. Errors are presented and resolved in the same way by every application. Access is provided through a standard security procedure for every application. Each user has access to all services for which he or she has a need and a right to access.

  • The security layer is invisible to the authorized and impenetrable to the unauthorized.
  • Navigation from function to function and application to application is provided in the same way in every system. New applications can be added with minimal training, because the standard functions work in the same way, and only the new business functions need be learned. It is not necessary to go to “boot camp for basic training” prior to using each new application. Basic training is a one-time effort because the basics do not change.

The complexity of a heterogeneous computing platform will result in many interfaces at both the logical and physical level. Organizations evolve from one platform to another as the industry changes, as new technologies evolve that are more cost effective, and as acquisitions and mergers introduce other installed platforms. All these advances must be accommodated. There is complexity and risk when attempting to interoperate among technologies from many vendors. It is necessary to engage in “proof of concept” testing to distinguish the marketing version of products and architectures from the delivered version. Many organizations use a test lab concept called technology competency centers to do this “proof of concept.” The TCC concept provides a local, small-scale model of all the technologies involved in a potential single-system, interoperable image. Installing a proposed solution using a TCC is a low-cost means of ensuring that the solution is viable. These labs enable rapid installation of the proposed solution into a proven environment. They eliminate the need to set up from scratch all the components that are necessary to support the unique part of a new application. Organizations—Merrill Lynch, Health Canada, SHL System house, BSG Corporation, Microsoft, and many others—use such labs to do sanity checks on new technologies. The rapid changes in technology capability dictate that such a resource be available to validate new products. The single-system image is best implemented through the client/server model.. Our experience confirms that client/server computing can provide the enterprise to the desktop. Because the desktop computer is the user’s view into the enterprise, there is no better way to guarantee a single image than to start at the desktop. Unfortunately, it often seems as if the number of definitions of client/server computing depends on how many organizations you survey, whether they’re hardware and software vendors, integrators, or IS groups. Each has a vested interest in a definition that makes its particular product or service an indispensable component. Throughout this book, the following definitions will be used consistently:

  • Client: A client is a single-user workstation that provides presentation services and the appropriate computing, connectivity, and database services and interfaces relevant to the business need.
  • Server: A server is one or more multi-user processors with shared memory providing computing, connectivity, and database services and interfaces relevant to the business need.

Client/server computing is an environment that satisfies the business need by appropriately allocating the application processing between the client and the server processors. The client requests services from the server; the server processes the request and returns the result to the client. The communications mechanism is a message passing interposes communication (IPC) that enables (but does not require) distributed placement of the client and server processes. Client/server is a software model of computing, not a hardware definition. This definition makes client/server a rather generic model and fits what is known in the industry as “cooperative processing” or “peer-to-peer.” Because the client/server environment is typically heterogeneous, the hardware platform and operating system of the client and server are not usually the same. In such cases, the communications mechanism may be further extended through a well-defined set of standard application program interfaces (APIs) and remote procedure calls. The modern diagram representing the client/server model was probably first popularized by Sybase. Figure 1.4 illustrates the single-system image vision. A client-user relies on the desktop workstation for all computing needs. Whether the application runs totally on the desktop or uses services provided by one or more servers—be they powerful PCs or mainframes—is irrelevant. Effective client/server computing will be fundamentally platform-independent. The user of an application wants the business functionality it provides; the computing platform provides access to this business functionality. There is no benefit, yet considerable risk, in exposing this platform to its user. Changes in platform and underlying technology should be transparent to the user. Training costs, business processing delays and errors, staff frustration, and staff turnover result from the confusion generated by changes in environments where the user is sensitive to the technology platform.


It is easily demonstrated that systems built with transparency to the technology, for all users, offer the highest probability of solid ongoing return for the technology investment. It is equally demonstrable that if developers become aware of the target platform, development will be bound to that platform. Developers will use special features, tricks, and syntax found only in the specific development platform. Tools, which isolate developers from the specifics of any single platform, assist developers in writing transparent, portable applications. These tools must be available for each of the three essential components in any application: data access, processing, and interfaces. Data access includes the graphical user interface (GUI) and stored data access. Processing includes the business logic. Interfaces link services with other applications. This simple model, reflected in Figure 1.5, should be kept in mind when following the evolution to client/server computing. The use of technology layers provides this application development isolation. These layers isolate the characteristics of the technology at each level from the layer above and below. This layering is fundamental to the development of applications in the client/server model. The rapid rate of change in these technologies and the lack of experience with the “best” solutions implies that we must isolate specific technologies from each other. This book will continue to emphasize and expand on the concept of a systems development environment (SDE) as a way to achieve this isolation. Developer tools are by far the most visible. Most developers need to know only the syntax of these tools to express the business problem in a format acceptable to the technology platform. With the increasing involvement of minicomputer professionals, as technology users and application assemblers, technology isolation is even more important. Very few—perhaps none—of an organization’s application development staff needs to be aware of the hardware, system software, specific database engines, specific communications products, or specific presentation services products. These are invoked through the APIs message passing, and generated by tools or by a few technical specialists. As you will see in Chapter 6, the development of an application architecture supported by a technical architecture and systems development environment is the key to achieving this platform independence and ultimately to developing successful client/server applications.

As organizations increase the use of personal productivity tools, workstations become widely installed. The need to protect desktop real estate requires that host terminal capabilities be provided by the single workstation. It soon becomes evident that the power of the workstation is not being tapped and application processing migrates to the desktop. Once most users are connected from their workstation desktop to the applications and data at the host mainframe or minicomputer, there is significant cost benefit in offloading processing to these powerful workstations. The first applications tend to be data capture and edit. These simplify—but still use—the transaction expected by an already existing host application. If the workstation is to become truly integrated with the application, reengineering of the business process will be necessary. Accounting functions and many customer service applications are easily offloaded in this manner. Thus, workgroup and departmental processing is done at the LAN level, with host involvement for enterprise-wide data and enforcement of interdepartmental business rules. In this “dumb” terminal (IBM uses the euphemism nonprogrammable to describe its 327x devices) emulation environment, all application logic resides in the minicomputer, mainframe, or workstation. Clearly a $5000 or less desktop workstation is capable of much more than the character display provided by a $500 terminal. In the client/server model, the low-cost processing power of the workstation will replace host processing, and the application logic will be divided appropriately among the platforms. As previously noted, this distribution of function and data is transparent to the user and application developer.

The mainframe-centric model uses the presentation capabilities of the workstation to front-end existing applications. The character mode interface is remapped by products such as Easel and Mozart. The same data is displayed or entered through the use of pull-down lists, scrollable fields, check boxes, and buttons; the user interface is easy to use, and information is presented more clearly. In this mainframe-centric model, mainframe applications continue to run unmodified, because the existing terminal data stream is processed by the workstation-based communications API. This protects the investment in existing applications while improving performance and reducing costs. Character mode applications, usually driven from a block mode screen, attempt to display as much data as possible in order to reduce the number of transmissions required to complete a function. Dumb terminals impose limitations on the user interface including fixed length fields, fixed length lists, crowded screens, single or limited character fonts, limited or no graphics icons, and limited windowing for multiple application display. In addition, the fixed layout of the screen makes it difficult to support the display of conditionally derived information. In contrast, the workstation GUI provides facilities to build the screen dynamically. This enables screens to be built with a variable format based conditionally on the data values of specific fields. Variable length fields can be scrollable, and lists of fields can have a scrollable number of rows. This enables a much larger virtual screen to be used with no additional data communicated between the client workstation and server. Windowing can be used to pull up additional information such as help text, valid value lists, and error messages without losing the original screen contents. The more robust GUI facilities of the workstation enable the user to navigate easily around the screen. Additional information can be encapsulated by varying the display’s colors, fonts, graphics icons, scrollable lists, pull-down lists, and option boxes. Option lists can be provided to enable users to quickly select input values. Help can be provided, based on the context and the cursor location, using the same pull-down list facilities. Although it is a limited use of client/server computing capability, a GUI front end to an existing application is frequently the first client/server-like application implemented by organizations familiar with the host mainframe and dumb-terminal approach. The GUI preserves the existing investment while providing the benefits of ease of use associated with a GUI. It is possible to provide dramatic and functionally rich changes to the user interface without host application change.

The next logical step is the provision of some edit and processing logic executing at the desktop workstation. This additional logic can be added without requiring changes in the host application and may reduce the host transaction rate by sending up only valid transactions. With minimal changes to the host application, network traffic can be reduced and performance can be improved by using the workstation’s processing power to encode the data stream into a compressed form. A more interactive user interface can be provided with built-in, context-sensitive help, and extensive prompting and user interfaces that are sensitive to the users’ level of expertise. These options can be added through the use of workstation processing power. These capabilities enable users to operate an existing system with less intensive training and may even provide the opportunity for public access to the applications. Electronic data interchange (EDI) is an example of this front-end processing. EDI enables organizations to communicate electronically with their suppliers or customers. Frequently, these systems provide the workstation front end to deal with the EDI link but continue to work with the existing back-end host system applications. Messages are reformatted and responses are handled by the EDI client, but application processing is done by the existing application server. Productivity may be enhanced significantly by capturing information at the source and making it available to all authorized users. Typically, if users employ a multipart form for data capture, the form data is entered into multiple systems. Capturing this information once to a server in a client/server application, and reusing the data for several client applications can reduce errors, lower data entry costs, and speed up the availability of this information.

There is no delay while the forms are passed around the organization. This is usually a better technique than forms imaging technology in which the forms are created and distributed internally in an organization. The use of workflow-management technology and techniques, in conjunction with imaging technology, is an effective way of handling this process when forms are filled out by a person who is physically remote from the organization. Intelligent Character Recognition (ICR) technology can be an extremely effective way to automate the capture of data from a form, without the need to key. Current experience with this technique shows accuracy rates greater than 99.5 percent for typed forms and greater than 98.5 percent for handwritten forms.


Rightsizing and rationalizing are strategies used with the client/server model to take advantage of the lower cost of workstation technology. Rightsizing and upsizing may involve the addition of more diverse or more powerful computing resources to an enterprise computing environment. The benefits of rightsizing are reduction in cost and/or increased functionality, performance, and flexibility in the applications of the enterprise. Significant cost savings usually are obtained from a resulting reduction in employee, hardware, software, and maintenance expenses. Additional savings typically accrue from the improved effectiveness of the user community using client/server technology. Eliminating middle layers of management implies empowerment to the first level of management with the decision-making authority for the whole job. Information provided at the desktop by networked PCs and workstations integrated with existing host (such as mainframe and minicomputer) applications is necessary to facilitate this empowerment. These desktop-host integrated systems house the information required to make decisions quickly. To be effective, the desktop workstation must provide access to this information as part of the normal business practice. Architects and developers must work closely with business decision makers to ensure that new applications and systems are designed to be integrated with effective business processes. Much of the cause of poor return on technology investment is attributable to a lack of understanding by the designers of the day-to-day business impact of their solutions. Downsizing information systems is more than an attempt to use cheaper workstation technologies to replace existing mainframes and minicomputers in use. Although some benefit is obtained by this approach, greater benefit is obtained by reengineering the business processes to really use the capabilities of the desktop environment. Systems solutions are effective only when they are seen by the actual user to add value to the business process. Client/server technology implemented on low-cost standard hardware will drive downsizing. Client/server computing makes the desktop the users’ enterprise. As we move from the machine-centered era of computing into the workgroup era, the desktop workstation is empowering the business user to regain ownership of his or her information resource. Client/server computing combines the best of the old with the new—the reliable multi-user access to shared data and resources with the intuitive, powerful desktop workstation.

In view of the above it is evident that object-oriented development concepts are embodied in the use of an SDE created for an organization from an architecturally selected set of tools. The SDE provides more effective development and maintenance than companies have experienced with traditional host-based approaches. Client/server computing is open computing. Mix and match is the rule. Development tools and development environments must be created with both openness and standards in mind. Mainframe applications rarely can be downsized—without modifications—to a workstation environment. Modifications can be minor, wherein tools are used to port existing mainframe source code—or major, wherein the applications are rewritten using completely new tools. In porting, native COBOL compilers, functional file systems, and emulators for DB2, IMS DB/DC, and CICS are available for workstations. In rewriting, there is a broad array of tools ranging from PowerBuilder, Visual Basic, and Access, to larger scale tools such as Forte and Dynasty. Micro Focus has added an Object Oriented (OO) option to its workbench to facilitate the creation of reusable components. The OO option supports integration with applications developed under Smalltalk/V PM. IBM’s CICS for OS/2, OS400, RS6000, and HP/UX products enable developers to directly port applications using standard CICS call interfaces from the mainframe to the workstation. These applications can then run under OS/2, AIX, OS400, HP/UX, or MVS/VSE without modification. This promises to enable developers to create applications for execution in the CICS MVS environment and later to port them to these other environments without modification. Conversely, applications can be designed and built for such environments and subsequently ported to MVS (if this is a logical move). Organizations envisioning such a migration should ensure that their SDE incorporates standards that are consistent for all of these platforms.

These harvests, pooled with the economical processing power available on the workstation, make the workstation Local Area Network an ideal expansion and maintenance environment for existing host processors. When an organization views mainframe or minicomputer resources as real dollars, developers can usually justify offloading the development in only three to six months. Explorers can be effective only when a proper systems development environment is put in place and provided with a suite of tools offering the host capabilities plus enhanced connectivity. Workstation operating systems are still more primitive than the existing host server MVS, VMS, or UNIX operating systems. Therefore, appropriate standards and procedures must be put in place to coordinate shared development. The workstation environment will change. Only projects built with common standards and procedures will be resilient enough to remain viable in the new environment.

The major reserves come up to from new projects that can create apposite values at the initiate and do all development using the workstation LAN environment. It is possible to retrofit standards to an existing environment and establish a workstation with a LAN-based maintenance environment. The benefits are less because retrofitting the standards creates some costs. However, these costs are justified when the application is scheduled to undergo significant maintenance or if the application is very critical and there is a desire to reduce the error rate created by changes. The discipline associated with the movement toward client/server-based development, and the transfer of code between the host and client/server will almost certainly result in better testing and fewer errors. The testing facilities and usability of the workstation will make the developer and tester more effective and therefore more accurate. Business processes use database, communications, and application services. In an ideal world, we pick the best servers available to provide these services, thereby enabling our organizations to enjoy the maximum benefit that current technology provides. Real-world developers’ make compromises around the existing technology, existing application products, training investments, product support, and a myriad other factors. Key to the success of full client/server applications is selecting an appropriate application and technical architecture for the organization. Once the technical architecture is defined, the tools are known.

The ultimate pace is to accomplish an SDE to categorize the principles desirable to use the tools in actual fact. This SDE is the collection of hardware, software, standards, standard procedures, interfaces, and training built up to support the organization’s particular needs. Many construction projects fail because their developers assume that a person with a toolbox full of carpenter’s tools is a capable builder. To be a successful builder, a person must be trained to build according to standards. The creation of standards to define interfaces to the sewer, water, electrical utilities, road, school, and community systems is essential for successful, cost-effective building. We do not expect a carpenter to design such interfaces individually for every building. Rather, pragmatism discourages imagination in this regard. By reusing the models previously built to accomplish integration, we all benefit from cost and risk reduction. Suffice it to say that the preamble of a whole new generation of Object Technology based on tools for client/server development demands that proper standards can be put in place to support shared development, reusable code, interfaces to existing systems, security, error handling, and an organizational standard “gaze and think.” As with any new technology, there will be changes. Developers can build application systems closely tied to today’s technology or use an SDE and develop applications that can progress along with the expertise podium.