Abstract: Cloud computing has evolved from previous computing paradigms going back as far to the days of mainframes, but is it really different? Do the explosive new capabilities from cloud computing solve any of the problems left unsolved from three decades ago? The authors in this issue discuss their views on what cloud computing is leaving the reader to decide for themselves.

Abstract: Industry panelists at an IEEE Computer Society conference in Beijing look at the opportunities and challenges emerging from cloud computing and how their companies are addressing them.

Abstract: Recommender systems play a significant role in reducing information overload for people visiting online sites, but their accuracy could be improved by using data from online social networks and electronic communication tools.

Abstract: This tutorial article describes some definitions of "ontology" as it relates to computer applications and gives an overview of some common ontology-based applications.

Abstract: The attention the IT community has given cloud computing recently rivals that given to American Idol judges by the public. This magazine alone dedicated its March/April 2009 issue and significant other space throughout the year to the topic. Cloud computing's potential lies not only in the evolution of technology but also in a sourcing strategy that uses resources shared by increasingly larger volumes of users. Further potential lies in the commoditization of cloud computing services - that is, a market in which price primarily differentiates cloud computing services. Although the entire IT community will need to address significant challenges, the result will be decreased prices, increased numbers of services, and improved performance not only in the near term but also the longer term. The result should be a decade or more in which cloud computing providers and users all benefit from future technology advancements, cloud efficiencies, and market competition. In response to the as to whether cloud computing is just the same old IT packaged in a new bottle, or is it really new wine?The authors believe that not only is it new wine, but one of a vintage that will improve with maturity.

Abstract: PC energy use is a growing cost to enterprises, with most machines remaining fully powered on, even while idle, for most of the time. The Network Connectivity Proxy maintains network presence for PCs but lets them sleep while idle, thus saving energy and reducing total cost of ownership.

Abstract: History demonstrates that hysteria is optional only in a bear market because the market always recovers given enough time With people's life savings at stake, however, the influence of panic can't be brushed aside Market conditions in 2008 are unique in that they're far more volatile and seem to inspire the greatest fear factor in the history of the modern market Moreover, because of extensive global networking and border-transcending fiscal interdependence, initial fluctuations in a single market resonate almost simultaneously world wide

Abstract: A review of semantic Web use in the EU shows that its related technologies are finding their way into real-world applications. Rather than being a fashionable research issue, the semantic Web is slowly but surely becoming a reality.

Abstract: New blogs appear every day, and a lot of their content is useful for applications in various domains. The authors propose a framework for mining blogs to gather this information automatically.

Abstract: The main objective of this paper is to define and evaluate the professional abilities of an engineer who works as an IT professional in Spain, primarily telecommunications engineers and computer scientists. Their occupational profiles will provide us with a useful tool for defining and conceptualizing curriculum plans for new qualifications, which the EU Higher Education Area project will require in 2010. European universities, institutes of higher education, and learning centers are currently drawing up such proposals. This article presents a first attempt at defining the professional characteristics-in terms of competence and aptitude-that an IT professional should possess. It focuses more on interpersonal skills and abilities than to knowledge and technical expertise.

Abstract: The US healthcare industry is a massive information enterprise, yet it's surprisingly inefficient when it comes to information management. Some estimates put it decades behind other industries with respect to information technology (IT) adoption and utilization. In fact, an article in the Journal of Healthcare Management described the industry as a knowledge-based enterprise that doesn't consider knowledge part of its value proposition. A 2003 report found the healthcare industry spending 2 percent of gross revenues on IT compared to 10 percent for other information-intensive industries, such as banking. The consequences of this health IT gap are matters of life and death. In 1999, the US National Academies' Institute of Medicine published a report, To Err Is Human: Building a Safer Health System, which attributed between 44,000 and 98,000 deaths per year to medical errors. Subsequent studies have confirmed a general assessment of healthcare delivery system as inefficient, unreliable, and even dangerous.

Abstract: The amount of time to protect enterprise systems against potential vulnerability continues to shrink. Enterprises need an effective patch management mechanism to survive the insecure IT environment. Effective patch management is a systematic and repeatable patch distribution process which includes establishing timely and practical alerts, receiving notification of patches or discovering them, downloading patches and documentation, assessing and prioritizing vulnerabilities, performing testing, deploying patches, and auditing.

Abstract: Trust in the workplace is both an ethical and a management issue. Virtual teams have become common in IT, but the importance of building trust in such teams is often under-appreciated. In this installment of IT Ethics, the authors look at several definitions and theories of trust and their application in virtual IT teams. The human dimensions of virtual teams are a crucial factor in their chances of success. Both for the project's sake-and for the participants' - the issue of trust should be a central concern. As virtual teams become the norm, such teams will require additional effort in creative trust-building activities.

Abstract: The authors offer practical guidelines for companies to effectively structure service-level agreements (SLAs) for successful IT outsourcing. Specifically, they describe how foundation accords of SLAs are important to operationally oriented outsourcing, whereas change accords nurture relationships intended to achieve strategic benefits.

Abstract: Understanding an enterprise's IT requirements and providing innovative IT solutions are essential to keeping a business flourishing. An IT strategic plan based on a shared vision with stakeholders is critical to any successful enterprise and requires continual updating. The three building blocks for constructing an IT strategic plan are performing an IT assessment to understand the issues, problems, and needs for delivering outstanding service to customers; aligning the IT strategy with business drivers, management expectations, and customer requirements to ensure that the enterprise receives the right solutions; and formulating initiatives to improve business performance and IT services over time. Key elements common to most enterprises, such as IT assessment approach, business drivers, and management and customer expectations, can serve as a baseline for constructing the IT strategic plan.

Abstract: Software maintenance engineers devote a significant amount of work to repairing user-identified errors. But user, maintainer, and manager perceptions of an error's importance can vary, and bug-repair assignment policies can adversely affect those perceptions.

Abstract: Business organizations and government agencies that depend on an Internet presence but operate without effective DDoS protection mechanisms put their operations at unacceptable risk. Unfortunately, the varieties of DDoS attacks, the incomplete information we have about them, the difficulty of large-scale testing, and the need for a distributed response at many points make defending against DDoS attacks a challenge. Because no silver bullet exists, businesses and government entities should have comprehensive mechanisms in place if they hope to prevent an attack-or failing that, survive one.

Abstract: To effectively align business and IT using a service-oriented architecture (SOA), a proposed integrated service model divides service construction into three loosely coupled perspectives according to the service's business logic, interface, and implementation. The resulting hierarchical model and associated methodology can help software architects more effectively and efficiently design and develop services-oriented systems.

Abstract: The concepts of privacy and security are distinct, but they're often considered synonymously when applied to computational systems. This article explores the conceptual differences between computational privacy and security and suggests four mutually exclusive models that define four different fundamental approaches to privacy and security during design. It's crucial that developers make a conscious and explicit decision how the two concepts should be approached early during system design.

Abstract: IT executives frequently must be able to communicate value in real economic terms, characterizing how technology infrastructure financially benefits the business relative to the company's financial performance objectives. A new financial metric-return on infrastructure employed (ROIE)-recognizes IT as both an asset and a service.

Abstract: To effectively design, integrate, and understand the functional operations of metasystems, researchers and practitioners need a standard definition and common understanding of metasystems as an extended system-of-systems.

Abstract: In this age of increasingly complex, Internet-based technologies, it's very difficult to protect original works of authorship. This article examines the problem of copyright infringement and the copyright law's desire to balance the interests of creators with the interests of the public. The author also offers some insight in how to reduce the problem of copyright infringement.

Abstract: This article focuses on the "trust" portion of the trust and dependability duet. Both concepts are important and delicately intertwined, but in this short discussion, the authors say they can only hope to explore one.

Abstract: This article reviews risks and vulnerabilities in interdomain routing and best practices that can have near-term benefits for routing security. It includes examples of routing failures and common attacks on routers, and countermeasures to reduce router vulnerabilities.

Abstract: Surveying business and IT executives from the pharmaceutical industry provides empirical data that offers new insight into how IT and business strategic-alignment maturity affects firm-level productivity and profitability.

Abstract: As information technology permeates all societal layers and its use crosses increasingly national boundaries, information security has become of paramount importance Understanding what motivates information security is part of the hard work in planning the mechanisms that will assure it Arguably, ubiquitous networking—for a wide range of personal, commerce, enterprise, and national purposes—is responsible for many recent productivity gains But with this convenience has come vulnerability to those who seek to do damage or benefit illegally Today's dynamic technology marketplace—with product generations now measured in months—gives increased choice of functionality and style to millions of potential buyers and their escalating expectations However, with every new device comes at least some segment of the user population that doesn't understand new functionality and, consequently, experiences decreased reliability and reduced privacy

Abstract: This article introduces "insecure IT", a new department for IT Professional that will cover security weaknesses in IT systems, ranging from desktops to global e-commerce networks. This regular feature will offer ideas to improve IT security, both by looking at ways it can go wrong as well as by covering good practices.

Abstract: Risk assessment involves gathering and evaluating risk information so that enterprise stakeholders can make mitigation decisions. Once we identify the risks, we can rank the probability of each one's occurrence and its impact on the organization. Some risks are more likely to occur than others, and different risks can affect an organization in different ways, so a practical risk assessment can help ensure that enterprises identify the most significant risks and determine the best actions for mitigating them.

Abstract: The authors discuss the pros and cons of IT certification by exploring why so much attention is focused on it, as well as the different kinds of certifications that are available, current changes in requirements, and where IT professionals can get certified.