Bluetooth (in)security

by Pascal Steichen

Date:

25th January, 15:30

Abstract:

"how a nice technology, developped with security in mind, has become a real black cheap in the mobile world"

- what is bluetooth
- bluetooth security mechanisms
- blueZ the gnu/linux bluetooth stack
- vulnerabilities and cracking techniques
- protection and future stuff

About the speaker

Pascal Steichen
    Ministère de l'Economie et du Commerce extérieur
    Chargé de mission CASES/LuxTrust
    MB member ENISA
    CA member CLUSSIL
    Secretary LiLux
    Member CNLSI

Open Source Technologies for SMEs Secure Services

by Belkacem Kechicheb

Date:

25th January, 15:30

The emergence of Linux as an open source operating system for business use over the past decade, and of the WWW as platform for distributed applications development, has led to the availability of a complete software environment based on open source components, consequently allows the development of secure on-line services for SMEs. This paper analyses the various open source options available in order to construct typical web based secure solutions. It also explores the experience of ACCES-PME Project in offering a subset of secure components for SMEs.

About the Speaker:

Research engineer, network security consultant

Managing a set of machines remotely

by William Robinet and Jean-Charles Fellet

Date:

25th January, 16:30

Abstract:

Remotely managing a set of machines raises several issues. You need the ability to evolve the system, so as to keep a hand on it, whatever happens. Crash recovery and hardware failure recovery is a plus, to some extent. What makes the machines different from each other is what you need to manage. With the help of Linux and some tools, we will present a solution for remote management.

Compiere - an alternative for the SME

by Didier Van Ginkel

Date:

25th January, 16:30

Abstract

Date:

26th January, 15:30

Abstract

Enterprise Application Integration is a much-discussed subject these days with different appendages and architectures already designed and established. During the presentation ‘Introduction into OpenSource Enterprise Application Integration’ you will obtain a short introduction into the different architectures like SOA, ESB, EII and ETL to identify the varieties.
Based on this, the project Freegate will be introduced. The ambition of Freegate is to offer a free and open source based alternative to commercial EAI products. In form of a study, the existing products have been analyzed and evaluated and the results will be presented. Finally it will be carried out a short overview over the progress of Freegate.

About the Speaker:

Florian Teepen studies computer science at the university of applied science in Trier. At present he is working on his diploma thesis at the CRP Henri Tudor in Luxembourg within the project Freegate and the objective to develop of a graphical configuration tool for the open source based ESB system Mule.

Ubuntu

by Daniel Holbach

Date:

26th January, 15:30

Abstract

Ubuntu, the Debian-based Linux distribution, founded by IT Entrepeneur and space tourist Mark Shuttleworth has had quite some impact on the Open Source world and some tremendous feedback from the community. This talk will describe how Ubuntu is different from other distributions, what its community's goals are, what to expect next, how it works, what is special in the current release (Breezy Badger) and what goals are followed for the next one in April (Dapper Drake).

Certifications, a comparison

by Machtelt Garrels

Date:

26th January, 16:30

Abstract

Certifications, a comparison, is about Linux certifications.  I look at the different kinds of certifications, both from the point of view of the vendors and of the examinees.  I also give a short discours about the differences between Linux and non-Linux certifications.  We look at the importance of having standard certifications: prove that there is support
for Linux, help facilitate adoption of Linux, help for HR managers,
growing market share.  We discuss what I call the "certification game": is
is a machine made for making money, but there are Linux certifications
that do help the community, too.  The value of a certification is
analyzed, both for employees and employers.  Last but not least, we take a
look at advantages and disadvantages of having a certification.  We end
with a comparison between RedHat, SuSE and LPI certifications: validity,
install-base, accessability, performance or experience-based,
dependencies, psychometrics, pricing, course materials, acceptance.

Intended audience: both employees and employers, HR Managers specifically,
people who are thinking about getting a Linux certification.

SQL-Ledger more than just accounting

by Pim Van Heuven

Date:

26th January, 16:30

Abstract

According to the website SQL-Ledger is a double entry accounting system. But that only says so much. From our experience SQL-Ledger is typically used to administrate ones customer and vendors, create invoices and orders, manage the catalogue of parts and services and control your inventory. Obviously you can do your accounting on it too.

The presentation runs through the functionality of the system. Followed by a description of the architecture and some pointers on how to start working on the source code. Finally it will focus on some cool features which sets SQL-Ledger apart.

Project url: www.sql-ledger.org

Le modèle économique du libre

by Brent Frére

Date:

27th January, 15:30

Abstract

On entend de plus en plus parler de «logiciels libres» ou de logiciels «OpenSource» sans généralement savoir exactement de quoi il s'agit. La confusion est à ce sujet générale: on parle de Linux comme d'un système OpenSource alors qu'il s'agit d'un système libre, on confond souvent le logiciel libre (free software) avec le logiciel gratuit (freeware) alors qu'ils sont en fait des concepts opposés.
On ignore généralement que le logiciel libre existe depuis bien avant le début de l'écriture de Linux et on rate souvent le fait que les principes sous-jacents au libre ne sont pas d'ordre technique, mais bien d'ordre éthique et légaux. Les contre-vérités se multiplient, qualifiant les logiciels libres de «cancer du logiciel» ou le mouvement du libre comme «contraire aux valeurs américaine».

Malgré tout, le modèle du libre, appliqué principalement aux logiciels, est en forte croissance: quasiment en situation de monopole dans les secteurs des applications embarquées, en Asie et dans les applications Internet, il met à mal les produits concurrents basés sur un autre modèle économique. S'étendant maintenant à d'autres secteurs, comme les documents ou les photos, le modèle économique du libre construit de nouvelles opportunités de business, certains ayant déjà abouti à de fantastiques réussites (Wikipedia, Google, RedHat, MySQL, ...) Il est donc important pour tous les acteurs économiques, quels que soient leurs domaines de compétences, de connaître et de comprendre le modèle économique du libre, afin d'en saisir les 7opportunités au lieu de le combattre, le plus souvent par ignorance.

Automating Xen Virtual Machine Deployment

by Kris Buytaert

Date:

27th January, 15:30

Abstract

While consolidating physical to virtual machines using Xen,we wanted to be able to deploy and manage a virtual machines in the same way we manage and deploy physical machines. For operators and support people there should be no difference between virtual and physical installations.

Integrating Virtual Machines with the rest of the infrastructure, should have a low impact on the existing infrastructure. Typically Virtual machine vendors have their own tools to deploy and manage virtual machine, Apart from the vendor lock-in to that specific virtual machine platform , it requires the administrators to learn yet another platform that they need to understand and manage, something we wanted to prevent.

This paper discusses how we integrated SystemImager with Xen, hence creating a totally open source deployment framework for the popular opensource Virtual Machine monitor. We'll document both development of our tools and go more in depth on other infrastructure related issues when using Xen

System Imaging environments in combination with Virtual machines can also be used to ensure safe production deployments. By saving your current production image before updating to your new production image, you have a highly reliable contingency mechanism. If the new production environment is found to be flawed, simply roll-back to the last production image on the virtual machines with a simple update command!

Xen has become one of the most popular virtualisation platforms during the last 9 months, although not such a young project, it is now gaining acceptance in the corporate world as a valuable alternative to VMWare.

About the speaker

Kris Buytaert is the CTO of X-Tend, the leading Linux and Open Source integrator in Belgium. He has consulting and development experience with multiple enterprise clients and government agencies. He is a contributor to the Linux Documentation Project and author of different technical publications. Kris is maintainer of the openMosix HOWTO.

Delivering multimedia at a very large scale using free software.

by Laurent Kratz

Date:

27th January, 16:30

Abstract

NEOFACTO is involved in the development of Jamendo. www.jamendo.com is a music platform that distibute Creative Commons content using popular peer to peer technologies like BitTorrent and eMule/eDonkey.

Jamendo is based on a low cost infrastructure of linux machines, on an optimized use of the bandwidth thanks to peer to peer technologies.

NEOFACTO has developped an infrastructure based on PHP, Python, Linux and the BitTorrent protocol to deliver a huge amount of data to the Internet.

This presentation will explain the different technical choices that NEOFACTO took for the infrastructure of Jamendo.

About the speaker

Laurent KRATZ was born in 1965, he is a software engineer graduated from the ENSIMAG (Ecole Nationale Supérieur d’Informatique et de Mathématiques Appliquées Grenoble – France). He also followed the post-graduate program on business management and administration of the Ecole de Commerce Solvay (Brussels – Belgium).

Laurent KRATZ started is career in Ariane II, a french and belgian software services company. He was assigned to various missions acting from software developer, project manager to consultant, in various businesses from bank, insurance, industry to European administrations.

In 1995, he joined Case Consult Luxembourg, a Belgian high-end software services company as technical manager. Case Consult was one of the early promoters of object oriented, data warehouse or Internet technologies. The Company was selling associated products and services in the Benelux market.

In 1997, Laurent KRATZ was promoted Managing Director of the Luxembourg subsidiary of Case Consult, and held this position after the Company was acquired by USWeb/CKS and finally by marchFIRST. In 1999, the subsidiary was 80 employees, 10M€ turnover, 15% contribution.

In 2000, Laurent KRATZ founded NEOFACTO, a software services company based in Luxembourg. NEOFACTO allows customers to choose Linux, Apache, Perl or PHP with confidence and provide vendor independent and competent interface to the advantages of Free Software. As proof of concept and capabilities, NEOFACTO develops software, an open source portal, and operates with this product www.lesfrontaliers.lu a popular website dedicated to the cross-border commuters community of Luxembourg.

In November 2004, Laurent KRATZ co-founded PEERMAJOR. This company operates www.jamendo.com, a music plateform that distributes Creative Commons licensed music in popular peer to peer networks like BitTorrent and eMule/eDonkey.

Open-source SAN infrastructure or Iscsi, scsi on steroids

by Matthias Rechenburg

Date:

27th January, 16:30

Abstract

The Open Source & Free Software movement made it possible now for everyone to deploy its data-center with a free SAN infrastructure based on "Iscsi".

"Iscsi" is a new star on the sky of enterprize storage-solutions and means "scsi over ip". It is one possible answer for the need of a generic, robust, fast and (last but not least) cheap network-filesystem for enterprize data-centers.

The tcp-ip protocol is used to transport generic scsi-commands over the network to access a remote blockdevice. This mechanism allows flexible management of scsi-storage devices for huge server-farms, e.g. plugging in or removing harddisks from a running server.

Much effort from the Open-source community has been done to implement and stableize Iscsi according to the Iscsi-RFC/Standard for the GNU/linux operation system. Various Iscsi-related Open-source projects are currently dealing with better  Desktop-integration, booting from Iscsi-devices and to make Iscsi more user-friendly.

Iscsi has become one of the most popular new server-storage components during  the last year and is now gaining acceptance in the enterprize computing world  as a valuable and cheap alternative to the SAN- and NAS-technologies.

It is now to get to know more about the benefits and advantages but also  about the disadvantages, common pitfalls and the hype of this new technology.

This paper deals with the role of the Open-source community according Iscsi and introduces diffrent Iscsi-related Open-source projects. It covers planning, installation, configuration, management and maintainance of an iscsi-environment in a modern data-center.

About the speaker

Matthias Rechenburg is the author of the openMosixview project. Since some years he is involved in all kinds of data-center related open-source projects like high-performance and high-availibility clustering, consolidation, network and enterprize storage management. He lives in Bonn, Germany, and is working as a freelancer developing for Qlusters.