One of the hottest topics in cybersecurity today is Zero Trust. Just in the past 20 months, DoD[i] and NIST[ii] published Zero Trust Architectures, CISA published a Zero Trust Maturity Model[iii], an Executive Order[iv] and OMB Memorandum[v] levying requirements on government organizations to implement Zero Trust were issued, and GSA released a Zero Trust Architecture Buyer’s Guide[vi]. Not to mention all the vendors advertising Zero Trust solutions, Gartner and Forrester publications, and the other 3,660,000,000 results from a Google search on the term “Zero Trust.” Likewise, a search on the term "How to Implement Zero Trust" yielded 80,900,000 results. It’s safe to say there is a lot of interest in Zero Trust.

But what is Zero Trust? According to Gartner[vii], Zero Trust network security “starts with a default deny posture of [trusting nothing]. Access is granted based on the identity of the humans and their devices — plus other attributes and context, such as time/date, geolocation, device posture, etc. — and adaptively offers the appropriate trust required at the time.” This is a significant paradigm shift from traditional, "trust, then verify” perimeter-based network security that seeks to keep malicious actors out, while assuming that anyone who is already inside the network can be trusted. The Zero Trust security model eliminates the idea of a trusted network, assuming instead that threats exist both inside and outside a network, so no one human or thing can be trusted implicitly. Under this model’s principle of "verify, then trust," permissions are only granted to user accounts, devices, applications, or services once properly validated, and moreover trust must be continually revalidated to maintain access.

With all the buzz, you’d think Zero Trust is a brand-new silver bullet for all our cybersecurity concerns. But if you’ve worked in cybersecurity for a while, you’ll find much of Zero Trust to be hauntingly familiar. Let’s explore that further:

Since it seems that each publication addressing Zero Trust has a different take on the concept, for simplicity let’s just look at one of the Zero Trust frameworks, the DHS CISA Zero Trust Maturity Model.

 organizes capabilities required to achieve Zero Trust into five categories (referred to as pillars): Identity, Device, Network/Environment, Application Workload, and Data. The capabilities listed in each pillar are then divided into three maturity levels: Traditional, Advanced, and Optimal. It’s here that a sense of déjà vu begins to set in when looking at the security functions called out for each block of the Maturity Model.

As we begin to examine the CISA model, we see Multifactor Authentication and Federated Identity required under the Identity pillar. Nothing new here conceptually. The original patent[viii] for the SecurID token was filed in 1993, Chip and Pin for credit cards was introduced in France in 1984[ix], and Paypal began offering a token for multifactor authentication around 2006[x]. So multifactor authentication has been available to enhance identity security for decades. Standards for Federated Identity Management (Single Sign-On) such as OpenID have been around since 2005[xi], and many commercial solution providers have broad user bases today. Again, nothing new.

Under the Device pillar, Device Compliance Enforcement and Data access management based on initial device posture are specifically called out. Requirements for automated asset management, vulnerability scanning, and patching are also levied in the detailed descriptions of this pillar. Again, not really anything new. In the SANS Consensus Audit Guidelines[xii] (the precursor to the SANS Top 20 Security Controls) dated 02 Mar 2009, the first control requires an inventory of all devices on the network and the third requires secure configurations for all network devices. NIST 800-53[xiii] published in February 2005 addressed requirements for configuration management. For over a decade, we've had solutions associated with Network Access Control and VPNs that install a client on the user’s computer and assess device security status and compliance before admitting the device onto the network. More recent methods add other sources of data, such as endpoint security scanning, and network vulnerability scans to facilitate that determination. This is the basis of the DoD comply-to-connect strategy and associated implementation framework[xiv] developed over the past decade. Everything in the Traditional and Advanced blocks of this pillar are well-known security requirements with existing solutions.

In the Network/Environment pillar, we see macro-segmentation, traffic encryption, internal micro-segmentations using micro-perimeter controls, as well as basic network traffic analytics. Traditional firewall and VLAN technology to enable macro-segmentation have been available since the late 90s[xv]. Information Flow Enforcement controls to enforce segmentation was first added to NIST 800-53 in Rev. 1 published in 2006. Next Generation firewalls coupled with Active Directory (or other user-to-IP tie-in) have been capable of enabling network micro-segmentation for over a decade.

The concept of Micro-perimeters is a more recent development moving the firewall to the application. For comparison, network micro-segmentation might sit at the front of a data center and can control the IP addresses, and for web pages, the URL accessible by a user. The micro-perimeter sits with the application and can control access with finer granularity beyond just the URL, such as the type of queries allowed. While the term micro-perimeter is new, the ability to provide this level of data access control at the application level is not. The Multiplexed Information and Computing Services (Multics)xvi operating system designed in the late 1960s, and evolved through the 1980s, provided an application-based data protection capability similar to a micro-perimeter. The operating system could prevent direct user access to data thus enabling the application as the enforcement control point for data access. The concepts are the same, differing only in the method of access to the application.

Other Network/Environment pillar capabilities have also been around. We have had the capability to do basic traffic analysis for 20+ years. And strong encryption for data-at-rest and data-in-motion has been recommended and commercially available for decades.

The Application Workload pillar for the Advanced Maturity level requires centralized authentication and authorization for access to applications and integration of threat protections into application workflows. Standards and solutions to meet these requirements have been available for almost forty years, dating back to when MIT developed Kerberos[xvi] in the 1980s. Requirements for application security date back to the early publications of both the Sans Top 20 Security Controls and NIST 800-53. The migration to cloud services has accelerated the use of centralized authentication services.

The final pillar, Data, requires application of least privilege data access, and encryption of data at rest. The concept of Least Privilege dates back to 1983 when the National Computer Security Center (NCSC) Trusted Computer System Evaluation Criteria (TCSEC, aka. Orange Book)[xvii] was initially released. The original 2009 SANS critical controls included “Controlled Access Based on Need to Know,” and the 2005 release of NIST 800-53 v1 included the Least Privilege security control. It is not until the third revision of 800-53 in 2010 that we see a control specifically addressing Protection of Information at Rest recommending encryption, but that was added twelve years ago. Again, all well-known cybersecurity principles.

The question is then “Is Zero Trust just old wine in a new bottle?” or does it bring something new to the fight? Zero Trust is at least shining a new spotlight on required security controls that haven’t been universally applied despite having been known and recommended for many years. If so many of the tenets of Zero Trust have been recommended by security practitioners for decades, why aren’t they already in widespread use? The answer lies in the fact that security is the enemy of ease of use. Network users don’t want to be burdened with carrying tokens for multifactor authentication, strong passwords that are hard to remember, having to ask for access to data that they didn’t need to do their job until just now, networks slowed by the need to encrypt and decrypt data, and all the other “burdens” of strong cybersecurity. Security is also hard, often requiring restructuring of network architecture and additional capital investment. Security is often seen as an unnecessary cost by senior executives, at least until after they experience a ransomware attack or major security breech. Mandatory requirements for Zero Trust may be just the incentive needed to get network owners to finally implement all those well-known security controls we’ve recommended for decades.

Zero Trust also brings with it several newer concepts. The core tenet of Zero Trust is to assume that the network has already been compromised, and malicious actors are inside the network perimeter. This idea encourages stronger identity management and access controls and shifts the defensive focus from boundary defense to role-based and attribute-based access, network segmentation, data segmentation, and treats each application as a boundary. This leads to a key new concept: The user logs into applications, not the network, and data is accessed through the application based on the user’s need to know, and right to know. The paradigm shifts from blanket trust to transactional trust.

The truly innovative elements of Zero Trust are found in the requirements for the Optimal level of the CISA Zero Trust Maturity Model. Continuous validation isn't that hard to achieve. Most centralized security authentication/authorization systems issue a token that has a lifetime forcing continuous validation. When the token expires, re-authentication/authorization is required. In Contrast, real time analysis, continuous monitoring, machine learning, encryption of all data at rest and in motion, and other requirements are beyond the scope of most current enterprises. Virtualization, cloud services, artificial intelligence, machine learning and automation capabilities are required to achieve these goals. Technology is truly still evolving as new approaches and techniques improve how this can be done by machines, because in most places there aren't enough human resources to manage and analyze the data flow, much less do it in real-time. For most network owners, this will require significant investment and rebuild of their networks to add these capabilities. These investments and changes are unlikely to happen overnight. Network owners can still implement those legacy elements of Zero Trust that are well understood and for which many commercial solutions are available in the near term.

The bottom line is that Zero Trust can serve as a forcing function for the implementation of good security practices that have been recommended by cybersecurity practitioners for many years, while encouraging adoption of even stronger controls enabled by newer technologies. Adoption of Zero Trust principles will help minimize the blast radius of data breaches to single user sessions rather than the entire enterprise. And the increased automation and centralized control required for an optimal implementation of Zero Trust will reduce the burden on administrators implementing required security controls, making them more dynamic and transparent to users. Finally, remember Zero Trust is a journey not a destination, with each step taken providing more protection to organizational data, and well worth the trip.


[i] Joint Defense Information Systems Agency (DISA) and National Security Agency (NSA), Department of Defense (DOD) Zero Trust Reference Architecture (2021).

[ii] Rose, S., Borchett, O., Mitchell, S., & Connelly, S., NIST Special Publication 800-207 Zero Trust Architecture (2020).

[iii] CISA Cybersecurity Division, Zero Trust Maturity Model (2021).

[iv] Exec. Order No. 14028, 86 Fed. Reg. 93 (May 12, 2021).

[v] Office of Management and Budget, Memorandum M-22-09 Moving the U.S. Government Toward Zero Trust Cybersecurity Principles (2022).

[vi] GSA, Zero Trust Architecture Buyer's Guide (2021).

[vii] McQuaid, A., MacDonald, N., Watts, J., & Handa, S. (2022). (tech.). Market Guide for Zero Trust Network Access. Gartner

[viii] Weiss, K. P. (1996, January 16). Enhanced security for a secure token code.

[ix] Roos, D. (2014, May 16). How chip and PIN credit cards work. HowStuffWorks. Retrieved May 18, 2022, from https://money.howstuffworks.com/personal-finance/debt-management/chip-and-pin-credit-cards.htm

[x] Gibson, S. (2007, August 2). Security now! Transcript of Episode #103. Retrieved May 18, 2022, from https://www.grc.com/sn/sn-103.htm

[xi] Fitzpatrick, B. (2005, May 16). Distributed identity: Yadis. LiveJournal. Retrieved May 18, 2022, from http://community.livejournal.com/lj_dev/683939.html

[xii] Gilligan, J. (2009, February 27). Consensus Audit Guidelines - Draft 1.0. SANS.org. Retrieved May 18, 2022, from http://www.sans.org/cag/guidelines.php

[xiii] NIST, Recommended security controls for Federal Information Systems and organizations (2005). Gaithersburg, MD; U.S. Dept. of Commerce, National Institute of Standards and Technology.

[xiv] Defense Information Systems Agency. Fact Sheets. (n.d.). Retrieved May 23, 2022, from https://www.disa.mil/about/fact-sheets

[xv] "IEEE Standards for Local and Metropolitan Area Networks: Virtual Bridged Local Area Networks," in IEEE Std 802.1Q-1998 , vol., no., pp.1-214, 8 March 1999, doi: 10.1109/IEEESTD.1999.89204.

[xvi] S. P. Miller, B. C. Neuman, J. I. Schiller, and J. H. Saltzer, Section E.2.1. Kerberos Authentication and Authorization System, M.I.T. Project Athena, Cambridge, Massachusetts (December 21, 1987).

[xvii] National Computer Security Center, DoD 5200.28-STD Department of Defense Trusted Computer System Evaluation Criteria (1985).

Zero Trust: Same Old Controls, or Something New and Shiny?

…But my dad, my sister, and my brother-in-law did, and I genuinely respect all those who have. With Applied Network Solutions (ANS), I am excited to be part of a company that shares my passion to honor the commitment of those in the armed services who are transitioning to private sector life via the DoD SkillBridge program.

A program in which military members on the cusp of separation can apply to be interns at commercial companies while still being paid their military pay and benefits for the final few months of their enlistment.

The program creates positive opportunities for both parties involved.

The transitioning military member gets to experience real-life working in the business world. For some, this can be a refreshing change; for others a bit more difficult to adapt to. In the case of the latter, even more reason to take a few months to gradually adapt to life outside of the structure and rigor of military life. In addition, military members may gain assistance and mentoring with regards to interviewing and job searching. In the case of my company, they are afforded training, study time, and vouchers to test for information technology and/or cybersecurity industry certifications – the backbone of DoD contractor hiring and qualifications. In short, ANS desires to do everything we can to set our interns up for success in their new work-life beyond the military.

Participating companies gain the potential to hire vetted, disciplined, quality candidates while potentially leapfrogging the wickets of general recruiting processes and procedures. So much more than just “free labor” that the term “intern” may conjure in the minds of some, companies gain a chance to build engagement, loyalty, and goodwill from a qualified pool of candidates appreciative of the opportunities being offered. ANS simply believes it’s the right thing to do for those who have given of themselves in service to our country.

Anthony, one of our current SkillBridge interns put it this way: “It’s like the DoD partnering with industry to give back to the military members a chance to gain a skillset for better employment opportunities. There’s not a lot of call for a mortarman or artillery gunner in the commercial sector!” Anthony started his internship days before our company-wide annual kick-off party. It was there that we learned that Anthony already knew many of our employees. They were contractors working with him previously! We are selective in who we employ and bring on as interns, as we look for people with aptitude and a love for the mission they support. Anthony is no exception.

Former SkillBridge beneficiary at our company, David, recently related to me, “I genuinely feel lucky to have found ANS!” We assisted David in his relocation and transition, allowing him ample time for out-processing and attending to his few remaining military responsibilities. We provided training which he leveraged to gain additional desired IT certifications. We happily cheered him on as he successfully applied to and negotiated a great paying job 

 – but that’s totally okay as it was never about us in the first place! All credit goes to him!

With internship locations in both San Antonio, TX and Columbia, MD we have been fortunate enough to employ many of our interns. One intern immediately joined ANS at the end of his internship and was accepted onto a cyber protection team in TX. Another learned the ropes of becoming a Software Developer during his internship and proved essential in creating our new website - a task that not many others were up for completing!

Don’t Just Say “Thank You” … Show Your Gratitude!

Working and living in San Antonio, Texas, I meet and know a great many current and former military members. I often say to them, “Thank you for your service!” and sincerely mean it, but simply 

 “Thank You” to show my appreciation is easy, and ultimately profits them nothing. It is 

something to show that appreciation that takes deliberate effort.

Comprised of 52% Veterans, ANS takes great pride in hiring and taking care of our prior military servicemen and women. As a business community, may we always be about 

Want to become a SkillBridge Industry Partner?

More information on SkillBridge can be found at 

Reflections On The SkillBridge Experience

My name is Emily. I am a 31-year-old cybersecurity enthusiast, and I have been in the Information Technology and Cybersecurity field for eight years. I specialize in network threat detection and mitigation and enjoy forensic analysis and studying adversary behavioral patterns. Some of my hobbies include hiking, kayaking, reading Fantasy Fiction, and crafting. I am married to my best friend and have a 4-year-old German Shepherd, Cipher.

Some of the brightest minds in Information Technology were and are women. From the mid to late 1800s to the current day, women have been pioneers in the world of computing. Great minds like Ada Lovelace, Grace Hopper, Katherine Johnson, Margaret Hamilton, Adele Goldberg, Hedy Lamar, and many more have designed and developed computations still used today. Without women, the computing world we live in today may look very different. Women worldwide are breaking down barriers and announcing that women can do anything with the correct equation of motivation and passion.

The Cybersecurity workforce is ever-changing, and amongst these changes, the most popular topic of change is the rise of women in the industry. More women are applying and being hired for cybersecurity roles every day. Women are also earning higher-level positions faster than their male counterparts. According to The International Information System Security Certification Consortium (ISC)² survey conducted in 2018, 24% of the cyber workforce is women 

. The study includes women in positions where at least 25% of their daily duties are Cybersecurity responsibilities. The study comprises traditionally prominent government roles and small businesses nationwide and worldwide 

. So why are women still only making up a quarter of the workforce? There are many contributing factors to the slow rise of women in cyber. Experts say, “access to opportunities, education, and the lack of value on diversity could be some contributing factors 

.” Although these barriers to entry still exist, many companies are working hard to provide more opportunities for women and encourage women to join the workforce.

To continue to increase our female workforce in cyber, we should be inspiring young women and girls to act on their curiosities about Science, Technology, Engineering, and Math (STEM). Marketing to them the benefits of participating in STEM programs can give them the freedom to explore their passions when they are young. They may feel confident enough to enter the workforce knowing they have the skills and abilities to be valued team members.STEM field jobs are typically challenging and rigorous. Working in STEM roles requires copious amounts of training and education to be competent, so expressing passions and working towards goals early in life can contribute to their success. It is also essential to teach all young people to follow their passions regardless of their race, color, national origin, religion, sex (including pregnancy, sexual orientation, gender identity, or transgender status). Inclusivity is the way of the future.

A common theme in most communities right now is inclusivity. What does it look like to be an inclusive workforce? Where do we start? These questions are all valid and not always easy to answer. People are different and have different needs. Our paths are all different, and how we arrive at a conclusion may never be the same. So, how do we inspire people from all walks of life to work together with synergy and maintain productivity? We start by being people-focused. We consider that exultant employees are more productive and benefit the bottom line. We support employees’ passions because that leads to inspiration and innovation. We believe in their goals and develop pathways to help them reach them. We encourage diversity because it provides unique perspectives, and we do all these things for everyone, including the women aspiring to be great leaders in the industry.

Once we have provided a thriving working environment for all, we all must take a moment to do a personal moral and ethical inventory every day and in everything that we do.“We should remain aware of unconscious bias, communicate the significance of managing bias, endorse pay equity, acknowledge all cultures, make company resources available to everyone, and never stop tracking progress over time 

.” Awareness and acknowledgment of personal bias and developing ways to thwart the tendency to discriminate in the workplace can help make all employees feel safe and welcome. Being an advocate for women in the workplace can help women feel safe and welcome.

The relationship between a mentor and mentee can be very beneficial. Mentorship programs have proven to be helpful for employees eager to increase their skill level, responsibilities, and career advancement. Employees who have mentorship in the workplace have higher job satisfaction, retention, productivity, and career growth 

. Mentors have all the previously stated benefits and have the pride of developing the next generation of leaders and innovators. The lack of mentorship in the workplace can be detrimental to the organization’s overall success. A mentorship program decreases employee conversation, experience sharing, and direction.

I am a woman. I have been in a male-dominated field since I was 19 years old. I have also spent my entire career in Information Technology and Cybersecurity. After graduating high school in 2010, I joined the United States Army as an Information Technology Specialist. In Basic Training and Advanced Individual Training, I was one of the very few women pursuing a career in Communications and IT. The environment in the military was still very much a “boy’s club.” I had to learn quickly how to identify allies and advocate for myself. I believe the less-than-welcoming environment made me resilient and creative. Even though the military setting wasn’t always accepting women, it wasn’t bad all the time. Over the six years I was in the service; I had one great mentor. One of my mentors was my Non-Commissioned Officer in Charge or NCOIC for the IT shop. She was a fierce Sergeant. She was loyal to her team and engaged with us on what we wanted for our futures. She helped me not only with career advancement but also with personal and life tribulations. She was my first example of how powerful career women can be assets to the workforce. She also taught me to treat others with dignity and respect regardless of rank or position.

After leaving the Army in 2016, I went back to school for my degree in Cybersecurity. Once again, as I walked through the doors of the enormous lecture hall in the business building, I saw rows and rows of young men with few young women. I honestly wasn’t expecting anything else. I knew I wanted to be friends with the women who sat before me. I knew I wanted to share my experiences and allow them to share theirs with me as well. I knew we would be strongest together. So, that is precisely what I did. I made friends. Some of those women graduated and became financial advisors, statical analysts, and, yes, cybersecurity professionals. As for the teaching population, I had exactly four female professors in 4 ½ years of schooling. Every single one of them taught an Information Systems or Cybersecurity course. Each of them brought their perspective into the classroom and made me feel like I could do anything if I wanted to. College was a pivotal moment in my career when I realized the Cybersecurity industry needed more women, and I would do everything I could to make that happen…starting with me.

Following my graduation, I joined Applied Network Solutions. I started with the corporate team developing security postures and capabilities procurement, which I had never done before. I was in a group of five, and I was the only woman. I enjoyed the work I was doing, and the men on my team were very bright and welcoming. They pushed me out of my comfort zone and provided feedback on my work. I learned so much from them in the short time I worked in the position. A few weeks after joining the ANS team, I moved to my current position on contract. I currently work with nearly all men. There are four or five other women, but I am the only full-time female operator. I now have two mentors that have been incredible in helping me navigate my new role and helping me advance to the next step in my career. They have guided me through onboarding, shared their expertise, and saved me from repeating their blunders from the past. They have become wonderful friends, and I cherish their guidance and perspective. They also happen to both be male. I share this because women do not always need a woman mentor. The mentor/mentee relationship should never be restricted to gender.

The future looks bright for women in cyber. We look back to the past and the women who paved the way before us. We look forward to the future and encourage the next generation of women to act on their passions for cyber. We foster a working environment fit for everyone. We support diversity, innovation, inspiration, and inclusion. We work together as a team to build brighter futures and support the changing workforce for “doing what we have always done will get us what we have always gotten [5].”  Change is coming, and the women of today and tomorrow will be the best in the business.

https://www.isc2.org/-/media/ISC2/Research/ISC2-Women-in-Cybersecurity-Report.ashx?la=en&hash=4C3B33AABFBEAFDDA211856CB274EBDDF9DBEB38

https://www.lifewire.com/why-we-need-more-women-working-in-cybersecurity-5116378

https://www.ceridian.com/blog/support-diversity-and-inclusion-in-the-workplace

https://www.mentorscout.com/benefits-of-workplace-mentoring.cfm

https://www.goodreads.com/quotes/904186-if-you-always-do-what-you-ve-always-done-you-ll-always

Right Where We Belong

Welcome to Applied Network Solutions, Inc. (ANS). We are the same ANS, with an improved, updated look. We have spent many months refreshing our site to reflect our focus on people and technology. We are a company that doesn't try to do everything. Instead, we are hyper-focused on networking and cybersecurity. 

22 years ago, ANS was formed out of a passion for technology and the desire to deliver solutions with impact. We have always been equally focused on our employees and securing the network to protect our national security. Often, defense contractors rent contracts and rent people. We hire for the person, not the position and we are invested in continuous development and opportunities for our employees. Our engineers are encouraged to think beyond a single contract or customer and focus on development and opportunities; call it “Passion over Profit.”

As we reflect on the last two decades and fast forward to years to come, I am humbled to say ANS has not waivered on the solutions we deliver and the commitment to our employees. I am honored to work alongside some of the most talented and passionate people in the industry and that they have chosen ANS to be part of their career. We continuously strive to be better and have excelled in doing so entirely due to the dedication and passion of our employees. I cannot thank them enough!

Please check back periodically as we will be posting updates and refreshed content.

New Look, Same ANS 

Filling cybersecurity roles can be costly, slow, and chancy. More firms are working with third-party service providers to quickly procure needed expertise.

Easing the Cyber-Skills Crisis With Staff Augmentation

Cadence Design Systems has collaborated with GlobalFoundries (GF) to accelerate 5G and mobile design innovation through the delivery of the Cadence RF and mmWave flow for the GF 22FDX platform.&nbsp;As a proof point, the Cadence full-flow RF solution was used to design and tape out a 28GHz 5G mmWave IC on the GF 22FDX platform and design an integrated antenna as a complete system-in-package (SiP) solution. Furthermore, the mmWave IC design was simulated with the Cadence AWR Virtual System Simulator (VSS)—using the combined Rohde &amp; Schwarz signal creation and analysis tools within the R&amp;S VSESIM-VSS supporting 5G NR—and showed a high correlation to silicon measurements and lab testing performed by the German institute, Fraunhofer IIS/EAS.<span style="caret-color: rgb(85, 85, 85); clear: right; color: #555555; float: right; font-family: Arial, Helvetica, sans-serif; font-size: 12px; margin-bottom: 1em; margin-left: 1em; padding: 0px 10px 5px 0px;"><img height="150px" src="https://2.bp.blogspot.com/-qQq_u3SxKH8/VjwjZJzDDMI/AAAAAAACgKs/4Z9wvdPwWds/s320/Screen%2BShot%2B2015-11-05%2Bat%2B7.49.22%2BPM.png" style="background-color: white; border: 1px solid rgb(238, 238, 238); padding: 6px;" width="200px" />“By collaborating with Cadence, we’re making it faster and easier for customers to design 5G and mobile applications, leveraging both the Cadence RF and mmWave flows and our 22FDX platform,” said Dr. Bami Bastani, SVP and GM, Mobile &amp; Wireless Infrastructure Strategic Business Unit at GF. “Our 22FDX platform delivers the power efficiency and performance levels that customers need for 5G design, and we’re looking forward to seeing mutual customers accelerate mobile innovation.”“5G mobile designs require advanced technology integrations and semiconductor processes to meet aggressive size, weight and performance targets, and the Cadence flows were developed to support the GF 22FDX platform and improve overall design efficiency,” said Tom Beckley, senior vice president and general manager in the Custom IC &amp; PCB Group at Cadence. “Through our collaboration with GF, we’ve demonstrated success with a 28GHz 5G mmWave IC in a package, which, in turn, provides our customers with confidence that they can achieve their own design goals.”

Cadence Design Systems has collaborated with GlobalFoundries (GF) to accelerate 5G and mobile design innovation through the delivery of the Cadence RF and mmWave flow for the GF 22FDX platform. 
As a proof point, the Cadence full-flow RF solution was used to design and tape out a 28GHz 5G mmWave IC on the GF 22FDX platform and design an integrated antenna as a complete system-in-package (SiP) solution. Furthermore, the mmWave IC design was simulated with the Cadence AWR Virtual System Simulator (VSS)—using the combined Rohde & Schwarz signal creation and analysis tools within the R&S VSESIM-VSS supporting 5G NR—and showed a high correlation to silicon measurements and lab testing performed by the German institute, Fraunhofer IIS/EAS.

“By collaborating with Cadence, we’re making it faster and easier for customers to design 5G and mobile applications, leveraging both the Cadence RF and mmWave flows and our 22FDX platform,” said Dr. Bami Bastani, SVP and GM, Mobile & Wireless Infrastructure Strategic Business Unit at GF. “Our 22FDX platform delivers the power efficiency and performance levels that customers need for 5G design, and we’re looking forward to seeing mutual customers accelerate mobile innovation.”
“5G mobile designs require advanced technology integrations and semiconductor processes to meet aggressive size, weight and performance targets, and the Cadence flows were developed to support the GF 22FDX platform and improve overall design efficiency,” said Tom Beckley, senior vice president and general manager in the Custom IC & PCB Group at Cadence. “Through our collaboration with GF, we’ve demonstrated success with a 28GHz 5G mmWave IC in a package, which, in turn, provides our customers with confidence that they can achieve their own design goals.”

Cadence and GlobalFoundries collaborate on RF and mmWave

The state-sponsored threat actor has switched up its tactics, also adding an automated SQL-injection tool to its bag of tricks for initial access.

China's APT41 Embraces Baffling Approach for Dropping Cobalt Strike Payload

Lazarus continues to expand an aggressive, ongoing spy campaign, using fake Coinbase job openings to lure in victims.

Mac Attack: North Korea's Lazarus APT Targets Apple's M1 Chip

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-N9k4DcwB2HJCAazolUliGlgbEMQxI129YQoEm-nOy400K2Xo9P03zjd6d55QbOAZMJHA1-5X9GHoNB5MNJi_Dz1gWodgnaJ34W5_-7hSg_H-tmjo4dFnVpTGJQmQwAzNv_tVGTEcd6kcPQ3KnfX2q73ANA2StjCAGPn-hlGfbjMYH1YH8EvYWhpm/s947/Screen%20Shot%202022-08-18%20at%2010.37.56.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" data-original-height="557" data-original-width="947" height="188" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-N9k4DcwB2HJCAazolUliGlgbEMQxI129YQoEm-nOy400K2Xo9P03zjd6d55QbOAZMJHA1-5X9GHoNB5MNJi_Dz1gWodgnaJ34W5_-7hSg_H-tmjo4dFnVpTGJQmQwAzNv_tVGTEcd6kcPQ3KnfX2q73ANA2StjCAGPn-hlGfbjMYH1YH8EvYWhpm/s320/Screen%20Shot%202022-08-18%20at%2010.37.56.png" width="320" /></a></div>SKY Perfect JSAT selected SpaceX’s Starship for launch of its Superbird-9 communications satellite in 2024 to geosynchronous transfer orbit.This is the first publically-announced commercial launch contract for the upcoming Starship rocket.Superbird-9 will deliver broadcast and broadband missions in Ku band primarily over Japan and Eastern Asia.&nbsp;<a href="https://www.skyperfectjsat.space/en/news/detail/sky_perfect_jsat_signed_launch_service_contract_for_superbird-9_satellite_with_spacex.html">https://www.skyperfectjsat.space/en/news/detail/sky_perfect_jsat_signed_launch_service_contract_for_superbird-9_satellite_with_spacex.html</a><ul style="text-align: left;"><li>In 2021, SKY Perfect JSAT signed Airbus for the Superbird-9 satellite.</li></ul>

SKY Perfect JSAT selected SpaceX’s Starship for launch of its Superbird-9 communications satellite in 2024 to geosynchronous transfer orbit.

This is the first publically-announced commercial launch contract for the upcoming Starship rocket.
Superbird-9 will deliver broadcast and broadband missions in Ku band primarily over Japan and Eastern Asia. 
https://www.skyperfectjsat.space/en/news/detail/sky_perfect_jsat_signed_launch_service_contract_for_superbird-9_satellite_with_spacex.html


In 2021, SKY Perfect JSAT signed Airbus for the Superbird-9 satellite.

SKY Perfect JSAT signs SpaceX’s Starship

Information on the attributed cyberattacks conducted since the beginning of the Russia-Ukraine war shows that a handful of groups conducted more than two dozen attacks.

5 Russia-Linked Groups Target Ukraine in Cyberwar

<div class="separator"><img height="150px" src="https://blogger.googleusercontent.com/img/a/AVvXsEgFuYgTNS3tkiS8r0iR3wHEtvI8sMAxFc8kiHIqKCqZNVWpEjAJ1b39e2KDR9EkbGAh_OUgOHPumCz9zoAoZQZg8AuPnHM8NgnyQKC2qpi0kLqNWef1MZu6tDNsxjxT5giHgH0F5s2YjKZevsLrYn6GsYg_3Q_ggHQnp61nHfT8rj_pTCe0diyHT8-o=w640-h360" style="background-color: white; border: 1px solid rgb(238, 238, 238); caret-color: rgb(85, 85, 85); color: #555555; font-family: Arial, Helvetica, sans-serif; font-size: 12px; padding: 6px;" width="200px" /></div>BlastWave, a start-up which offers a zero-trust stack that combines state-of-the-art passwordless multi-factor authentication with high-performance, resilient encrypted connectivity and built-in microsegmentation, announced the appointment of Keao Caindec as Chief Marketing Officer (CMO) and Vince Zappula as Chief Revenue Officer (CRO).&nbsp;Zappula previously served in CRO and revenue growth roles at CoSoSys, Data Endure and Newchip Accelerator.Caindec will oversee BlastWave’s brand strategy, marketing and communications. His previous experience includes roles at Yipes (acquired by Reliance), OpSource (acquired by Dimension Data) and Mocana, a leading provider of cybersecurity protection solutions for the industrial sector.&nbsp;“Ultimately, it’s about the mission, not any one person,” said Tom Sego, BlastWave Founder and CEO. “High emotional intelligence is a core value of BlastWave’s culture. These executive additions reinforce our cultural values of no-nonsense bias toward action. Keao and Vince will further BlastWave’s go-to-market strategy and enhance the execution of our company vision to provide an integrated ZTNA solution that simplifies security, performance and manageability.”<a href="http://www.blastwave.io">http://www.blastwave.io</a>

BlastWave, a start-up which offers a zero-trust stack that combines state-of-the-art passwordless multi-factor authentication with high-performance, resilient encrypted connectivity and built-in microsegmentation, announced the appointment of Keao Caindec as Chief Marketing Officer (CMO) and Vince Zappula as Chief Revenue Officer (CRO).
 Zappula previously served in CRO and revenue growth roles at CoSoSys, Data Endure and Newchip Accelerator.
Caindec will oversee BlastWave’s brand strategy, marketing and communications. His previous experience includes roles at Yipes (acquired by Reliance), OpSource (acquired by Dimension Data) and Mocana, a leading provider of cybersecurity protection solutions for the industrial sector. 
“Ultimately, it’s about the mission, not any one person,” said Tom Sego, BlastWave Founder and CEO. “High emotional intelligence is a core value of BlastWave’s culture. These executive additions reinforce our cultural values of no-nonsense bias toward action. Keao and Vince will further BlastWave’s go-to-market strategy and enhance the execution of our company vision to provide an integrated ZTNA solution that simplifies security, performance and manageability.”
http://www.blastwave.io

BlastWave expands its management team

How critical is that vulnerability? University researchers are improving predictions of which software flaws will end up with an exploit, a boon for prioritizing patches and estimating risk.

Which Security Bugs Will Be Exploited? Researchers Create an ML Model to Find Out

The cybercriminal crew has used 15 malware families to target travel and hospitality companies globally, constantly changing tactics over the course of its four-year history.

Summertime Blues: TA558 Ramps Up Attacks on Hospitality, Travel Sectors

T-Mobile is touting a series of 5G upgrades delieverd in New York’s iconic Yankee Stadium.&nbsp;<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgexxbxFS2XohN9vC4Ec86Dot-FKoCs8LF4ypQIvnEMBL55T6z1MlPCwLGkjLda4Lz_GUtbxSxN3WYV8rJP-23dr6jHWM7FsQ8kklo6CvrqWzI7hYwJm3LVv5mKs_Hd7NQOiUdyYdP1M63qO72CVoqdhohSUWdU3GSXp4zEujSVKG3tYOCxP14CSkbw/s1918/Screen%20Shot%202022-08-18%20at%2017.39.24.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" data-original-height="1258" data-original-width="1918" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgexxbxFS2XohN9vC4Ec86Dot-FKoCs8LF4ypQIvnEMBL55T6z1MlPCwLGkjLda4Lz_GUtbxSxN3WYV8rJP-23dr6jHWM7FsQ8kklo6CvrqWzI7hYwJm3LVv5mKs_Hd7NQOiUdyYdP1M63qO72CVoqdhohSUWdU3GSXp4zEujSVKG3tYOCxP14CSkbw/s320/Screen%20Shot%202022-08-18%20at%2017.39.24.png" width="320" /></a></div>T-Mobile customers with 5G devices average speeds up to 10 times faster than before. The upgrades include launching Ultra Capacity 5G in select sections and, for those with older LTE phones, doubling the capacity for LTE in the stadium. Fans at Yankee Stadium will get even more 5G upgrades for the 2023 season.“Yankee Stadium is home to one of the most iconic franchises in the history of American sports,” said Neville Ray, President of Technology at T-Mobile. “Now, New Yorkers and people visiting from across the country to catch a game have access to ultra-fast, reliable 5G so they can share more of that experience.”<a href="http://www.T-Mobile.com/coverage">http://www.T-Mobile.com/coverage</a>

T-Mobile is touting a series of 5G upgrades delieverd in New York’s iconic Yankee Stadium. 


T-Mobile customers with 5G devices average speeds up to 10 times faster than before. The upgrades include launching Ultra Capacity 5G in select sections and, for those with older LTE phones, doubling the capacity for LTE in the stadium. Fans at Yankee Stadium will get even more 5G upgrades for the 2023 season.

“Yankee Stadium is home to one of the most iconic franchises in the history of American sports,” said Neville Ray, President of Technology at T-Mobile. “Now, New Yorkers and people visiting from across the country to catch a game have access to ultra-fast, reliable 5G so they can share more of that experience.”
http://www.T-Mobile.com/coverage

T-Mobile delivers 5G upgrades for Yankee Stadium

&nbsp;Zayo introduced its Application Programming Interface (API) Developer Portal to help enterprise customers to explore, on-board and test live environments with existing API offerings, and stay informed about upcoming developments.<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLqIBcDkq6PIb9ypR2vX6AumtJcmFmggT2tNyC53XJ7huvgTRwQ08SuC1eI8K3HrSDy9el3NW_lOOuiElpnHNx3tyzRE12PpPFqrRzG1HG8-pxA-tKQXWQOhhtnqqcZ-1OegXMxLUWW2mjvjW5tV-B_OyBG_fJ2hHhyqm1nSnGWdgFoSsvupz6vbnf/s1966/Screen%20Shot%202022-08-17%20at%2022.07.12.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" data-original-height="1190" data-original-width="1966" height="194" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLqIBcDkq6PIb9ypR2vX6AumtJcmFmggT2tNyC53XJ7huvgTRwQ08SuC1eI8K3HrSDy9el3NW_lOOuiElpnHNx3tyzRE12PpPFqrRzG1HG8-pxA-tKQXWQOhhtnqqcZ-1OegXMxLUWW2mjvjW5tV-B_OyBG_fJ2hHhyqm1nSnGWdgFoSsvupz6vbnf/s320/Screen%20Shot%202022-08-17%20at%2022.07.12.png" width="320" /></a></div>Currently, Zayo receives hundreds of thousands API calls a month originating from 100+ customers. These requests come through key partners such as Connectbase, ACS Solutions, GeoTel, Upstack, NDA Corp, Masterstream and LMX as well as direct integrations. Benefits of Zayo’s existing API offerings include:<ul style="text-align: left;"><li>Network Discovery: Zayo’s Building Validation, Location, and Cloud Service Provider APIs enable customers to analyze how Zayo’s network availability powers their business footprint.</li><li>Quote and Order: Customers can grow their business capabilities by leveraging Zayo products in its Product Catalog API, generating quotes with the Quote API, and automating the ordering process through the Order API.</li><li>Service Management: Customers are able to retrieve critical service information, get support for issues, and keep track of planned outages with the Service Inventory, Ticketing, Ticket Catalog and Maintenance Cases APIs.</li></ul>In addition to the API developer portal, Zayo has started the roll out of MEF API “Lifecycle Service Orchestration” (LSO) Sonata “Billie” release for quoting and ordering as well as performance monitoring. Further incorporation of MEF standards will enable Zayo to better serve its global carrier and enterprise customers to buy services in a standardized way and to automate MEF 3.0 Carrier Ethernet.“We want to empower our customers through every step of their digital transformation journey, and APIs are where that journey comes to life in the form of automation at our customers' fingertips,” said Leidy Perez, vice president of product, strategic software at Zayo. “With our developer portal, customers now have a live environment where they can easily find the information they need to understand, design and build the best software integration strategy to make an impact and drive business results.”“Too often, customers must work around their system of record to manage multiple vendors. The swivel-chair of that information back into each system of record causes massive inefficiencies that can impact service delivery time and revenue,” said Stan Hubbard, MEF Principal Analyst. “MEF LSO APIs offer an automated, standardized way for service providers to buy and sell services and maximize return on their investment in interface development. We are excited that MEF LSO Sonata APIs enable Zayo’s innovative API Developer Portal.”<a href="https://developer.zayo.com">https://developer.zayo.com</a>https://developer.zayo.com/

Zayo introduced its Application Programming Interface (API) Developer Portal to help enterprise customers to explore, on-board and test live environments with existing API offerings, and stay informed about upcoming developments.


Currently, Zayo receives hundreds of thousands API calls a month originating from 100+ customers. These requests come through key partners such as Connectbase, ACS Solutions, GeoTel, Upstack, NDA Corp, Masterstream and LMX as well as direct integrations. Benefits of Zayo’s existing API offerings include:


Network Discovery: Zayo’s Building Validation, Location, and Cloud Service Provider APIs enable customers to analyze how Zayo’s network availability powers their business footprint.
Quote and Order: Customers can grow their business capabilities by leveraging Zayo products in its Product Catalog API, generating quotes with the Quote API, and automating the ordering process through the Order API.
Service Management: Customers are able to retrieve critical service information, get support for issues, and keep track of planned outages with the Service Inventory, Ticketing, Ticket Catalog and Maintenance Cases APIs.


In addition to the API developer portal, Zayo has started the roll out of MEF API “Lifecycle Service Orchestration” (LSO) Sonata “Billie” release for quoting and ordering as well as performance monitoring. Further incorporation of MEF standards will enable Zayo to better serve its global carrier and enterprise customers to buy services in a standardized way and to automate MEF 3.0 Carrier Ethernet.
“We want to empower our customers through every step of their digital transformation journey, and APIs are where that journey comes to life in the form of automation at our customers' fingertips,” said Leidy Perez, vice president of product, strategic software at Zayo. “With our developer portal, customers now have a live environment where they can easily find the information they need to understand, design and build the best software integration strategy to make an impact and drive business results.”
“Too often, customers must work around their system of record to manage multiple vendors. The swivel-chair of that information back into each system of record causes massive inefficiencies that can impact service delivery time and revenue,” said Stan Hubbard, MEF Principal Analyst. “MEF LSO APIs offer an automated, standardized way for service providers to buy and sell services and maximize return on their investment in interface development. We are excited that MEF LSO Sonata APIs enable Zayo’s innovative API Developer Portal.”
https://developer.zayo.com
https://developer.zayo.com/

Zayo launches API developer portal and rolls out MEF LSO Sonata

Prosimo, which offers an Application eXperience Infrastructure (AXI) platform for secure application delivery in multi-cloud environments, released a new NetDevOps Infrastructure-as-Code (IaC) toolkit that provides enterprises with orchestration of cloud networking assets.Prosimo said its goal is to simplify and abstract network and infrastructure management tasks.&nbsp;New features in the DevNetOps toolkit provide core capabilities that target cloud operations teams and orchestrate cloud service provider (CSP) networking functionality while automating per-application routing, security, performance, compliance, and cost management policies.&nbsp;Key capabilities:<ul style="text-align: left;"><li>Infrastructure as a code for cloud networking - Prosimo abstracts the API layer to CSP capabilities and networking constructs: simply click and set up. It also automates and ties network, micro-segmentation, policy control, and zero-trust into a deployment CI/CD pipeline aligned with application roll-outs. In addition, Prosimo provides repeatable pipelines to deploy and undeploy services quickly.</li><li>Infrastructure aligned to applications lifecycle - Onboarding new regions, clouds, and datacenters in greenfield and brownfield environments through efficient infrastructure orchestration using native constructs in multi-cloud, including the ability to connect and secure cloud-native endpoints (e.g., S3), understanding A/B, canary.</li><li>Service networking - Attach FQDNs, serverless, PaaS, and SaaS apps with enterprise workloads running in any cloud. This leverages cloud-native service networking techniques based on FQDN and layer 7 proxies, including network constructs at the IP layer.</li><li>Faster MTTR - Prosimo offers unparalleled end-to-end enterprise infrastructure observability for applications and networks across the entire path over multicloud environments. ML-driven insights quickly identify a problem's root cause and provide recommendations and automation to improve connectivity or performance. Prosimo is the only platform to offer programmatic query infrastructure across the full stack.</li></ul>"As Enterprises continue to embrace NetDevOps, the challenges are significant when it comes to reducing the barriers between development and operations," said Mani Ganesan, Head of Product, Prosimo. "The IAC Toolkit helps simplify operations and management of applications' life cycle. This improves business and IT alignment, accelerating business velocity. In today's competitive landscape, this is critical for organizations."<div class="separator" style="clear: both; text-align: center;"><a href="https://prosimo.io" imageanchor="1" style="margin-left: 1em; margin-right: 1em;" target="_blank"><img border="0" data-original-height="1696" data-original-width="3028" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTV9MTGlcWyHbAwejx0QITTeJ3H9PMt1gftRMVepfL0g117MLpXfhQgo8gkIJ1PZqRdNeF7JvTkDq_MyCdSg4v5bA7Z4qNCCakcL5cnMHEPMoS_eWNSZX3wqHSC6oidHuGjSlJBXFUrNIA1diL6MGdTo25Py4kd20y8U6pAwjRGC9aHGY5QLuOtw4C/w640-h358/Screen%20Shot%202022-08-17%20at%2022.49.54.png" width="640" /></a></div><a href="https://prosimo.io">https://prosimo.io</a>

Prosimo, which offers an Application eXperience Infrastructure (AXI) platform for secure application delivery in multi-cloud environments, released a new NetDevOps Infrastructure-as-Code (IaC) toolkit that provides enterprises with orchestration of cloud networking assets.
Prosimo said its goal is to simplify and abstract network and infrastructure management tasks. 
New features in the DevNetOps toolkit provide core capabilities that target cloud operations teams and orchestrate cloud service provider (CSP) networking functionality while automating per-application routing, security, performance, compliance, and cost management policies. 
Key capabilities:


Infrastructure as a code for cloud networking - Prosimo abstracts the API layer to CSP capabilities and networking constructs: simply click and set up. It also automates and ties network, micro-segmentation, policy control, and zero-trust into a deployment CI/CD pipeline aligned with application roll-outs. In addition, Prosimo provides repeatable pipelines to deploy and undeploy services quickly.
Infrastructure aligned to applications lifecycle - Onboarding new regions, clouds, and datacenters in greenfield and brownfield environments through efficient infrastructure orchestration using native constructs in multi-cloud, including the ability to connect and secure cloud-native endpoints (e.g., S3), understanding A/B, canary.
Service networking - Attach FQDNs, serverless, PaaS, and SaaS apps with enterprise workloads running in any cloud. This leverages cloud-native service networking techniques based on FQDN and layer 7 proxies, including network constructs at the IP layer.
Faster MTTR - Prosimo offers unparalleled end-to-end enterprise infrastructure observability for applications and networks across the entire path over multicloud environments. ML-driven insights quickly identify a problem's root cause and provide recommendations and automation to improve connectivity or performance. Prosimo is the only platform to offer programmatic query infrastructure across the full stack.


"As Enterprises continue to embrace NetDevOps, the challenges are significant when it comes to reducing the barriers between development and operations," said Mani Ganesan, Head of Product, Prosimo. "The IAC Toolkit helps simplify operations and management of applications' life cycle. This improves business and IT alignment, accelerating business velocity. In today's competitive landscape, this is critical for organizations."

https://prosimo.io

Featured Post

Zero Trust: Same Old Controls, or Something New and Shiny?

Our Insights