Spring Boot ist derzeit wohl das beliebteste Java-Framework. Wir haben ausprobiert, wie es mit Microsofts Visual Studio Code zusammenarbeitet. Eine Anleitung von Dirk Koller (Softwareentwicklung, Java)
Quelle: Golem
Sicherheitsforscher und Experten streiten derweil, ob Github beim Löschen des Codes richtig gehandelt hat. (Exchange, Groupware)
Quelle: Golem
“Ich hätte gerne eine PS5, weil …”: Alternate liefert die Sony-Konsole nur an Spieler aus, die sich beworben haben. (Playstation 5, Sony)
Quelle: Golem
Han inledde sin IT-karriär för över 20 år sedan med att installera modem som supporttekniker hos en internetleverantör. Idag är Nima Ashaier CIO på Poolia och Uniflex där han dagligdags fungerar som en brygga mellan bolagets tech-avdelning och ledningsgrupp: “Jag får en annan trovärdighet eftersom jag förstår och kan tala båda språken”, säger han.
Quelle: CloudForms
Nima Ashaier aloitti IT-uransa yli 20 vuotta sitten tukitehtävissä ja asensi modeemeja internetpalveluntarjoajan palveluksessa. Nyt hän on konsernin tietohallintojohtaja Pooliassa ja Uniflexissä, jotka ovat henkilöstövuokrausyrityksiä. Hän toimii siltana teknologiayksikön ja johtoryhmän välillä: “Minulla on erityistä uskottavuutta, koska osaan puhua molempien kieltä”, hän sanoo.
Quelle: CloudForms
Nima Ashaier innledet sin IT-karriere for over 20 år siden med å installere modem som tekniker hos en internettleverandør. I dag er Nima Ashaier CIO på det svenske rekrutteringsselskapet Poolia og Uniflex. Der jobber han både med selskapets tech-avdelingen og ledergruppe, og fungerer som en bro mellom disse avdelingene. “Det har gitt meg en annen troverdighet”, forteller han.
Quelle: CloudForms
Han indledte sin IT-karriere for over 20 år siden med at installere modemmer som supporttekniker hos en internetleverandør. I dag er Nima Ashaier CIO hos Poolia og Uniflex, hvor han til daglig fungerer som et forbindelsesled mellem virksomhedens tekniske afdeling og ledelsesgruppe: “Jeg får en anden troværdighed, eftersom jeg forstår og kan tale begge sprog”, siger han.
Quelle: CloudForms
Banks are among the most highly regulated businesses on the planet, subject to regulations based on geography as well as their own internal policies and procedures. HSBC, a global giant in commercial and personal banking, has experts all over the world who support thousands of their risk management colleagues each time they need an internal policy question answered. The sheer volume of HSBC’s business means that making everyday risk management decisions can result in tens of thousands of calls to internal policy experts every year. Because questions can come from all over the world, naturally there can be delays due to time zone differences and individual workloads. And depending on the day, people’s responses can vary. Steve Suarez, HSBC’s Global Head of Innovation, Finance & Risk and Gareth Butler, Head of Risk Transformation and innovation Lead for Asia Pacific, thought the bank could use artificial intelligence (AI) to take a fresh approach to operational risk and resilience. The goals would be to answer questions faster and to improve the overall consistency and quality of policy response. Building with Contact Center AI to answer questions quickly and consistentlyHSBC wanted to use AI and machine learning (ML) to reduce the time employees were spending on manually intensive queries, improve the consistency of policy response, and understand what kinds of questions were being asked. The bank envisioned building a solution that would support its large-scale, global environment. After evaluating the main AI solutions on the market, HSBC selected Google Cloud for the project, leveraging their existing strategic relationship. The bank worked with the customer engineering team at Google Cloud, who helped it to connect with partner KPMG’s Innovation Division. Together they formed a project team to architect and deliver Operational Resilience and Risk Application (ORRA), the first of what HSBC hopes will be many FAQ and document search-enabled chatbots. ORRA performs dynamic document search and powers natural conversations with Google Cloud Dialogflow, a core component ofGoogle Cloud Contact Center AI. Easily accessible to all employees from the HSBC intranet, ORRA answers queries on internal policy and framework areas applicable across the bank. And with Dialogflow, HSBC was able to build a conversational platform that quickly and accurately addressed user needs at scale. HSBC chose Dialogflow as a cost efficient, feature-rich solution for large scale conversational FAQ flow. The team created the initial knowledge base consisting of intents, utterances, and answers and used the bulk upload function to load it into the Dialogflow console. The wide range of native features was utilized to finesse intents, train responses, and to create synonyms and entities. They added smalltalk to humanize the bot responses and to create a “real-world personality”. Within the Google Cloud chatbot architecture the team implemented an inhouse document search capability which returns search responses through the friendly user interface (UI). Dialogflow coupled with this search capability enabled a groundbreaking solution for HSBC employees. Users now get direct answers to questions with the flexibility of an app using Natural Language Processing (NLP) to interrogate large documents for supplementary answers in milliseconds – all through the same UI. Dialogflow’s native machine learning and NLP technologies improve the user experience and reduce the setup required to develop complex conversation architectures.Using machine learning to inform decision making“The knowledge gained from analyzing the type, frequency, and source of queries is in itself valuable business intelligence on internal demands for information,” said Suarez. “ORRA learns from every conversation, and at the most basic level, the more questions employees have about a specific policy, the more likely that policy may be due for simplification or revision.” “In addition to providing rapid access to information, ORRA also brings important benefits for learning and development and the embedding of policies and procedures” said Butler. “As query flow increases, the architecture uses machine learning and user feedback to determine the best response to give”.“It’s about the speed of getting your information,” said Suarez. “Before the FAQ chatbot, somebody would ask you a question and if you didn’t know the answer or you gave an inconsistent answer, you’d have to do a bit of research and then come back to them. People go out and use Google to answer questions every day and receive instant, precise responses. Similarly, we’re now getting information to users in a way that feels familiar to them without having to read through an entire policy document.“ He said this gives risk managers access to immediate, accurate policy information and frees up time for subject matter experts to focus on adding value in less routine areas of their jobs. Creating conversation architecture that scales across the organizationFuture versions of ORRA will include guidance on judgment calls. “As we move forward, we’ll be adding in more around risk acceptance, risk issue, and risk relevance,” said Chris Wilson, Head of Architecture, Policy & Regulatory Mapping at HSBC. The next evolution of HSBC’s FAQ chatbot will involve scaling the architecture to capture other policies and procedural data. “This is only the beginning of our conversational AI journey,” adds Butler. The solution can accommodate more policies and documents, it can also be enhanced to support multiple languages, mobile interactions, and speech and can search numeric as well as text-based data stores. “This opens up more possibilities in this space as more information is hosted on the cloud,” Butler said.The bank is focused on how the AI/ML solution can be extended to other areas of the organization. Having invested the resources to develop and implement ORRA, they believe future expansion will be simple and cost-effective. Given the pervasiveness of chatbots across all areas of our lives, Suarez sees this as an imperative for the bank. “In the future, we are going to be interacting with chatbots frequently for routine transactions,” he said. “As a leader in the financial services industry and a technology innovator, HSBC is taking the first steps in using cloud-based chatbot technology to get fast, accurate answers to our customers.”
Quelle: Google Cloud Platform
When you want to protect data in-motion, at rest or in use, you usually think about data discovery, data loss detection and prevention. Few would immediately consider transforming or modifying data in order to protect it. But doing so can be a powerful and relatively easy tactic to prevent data loss. Our data security vision includes transforming data to secure it, and that’s why our DLP product includes powerful data transformation capabilities.So what are some data modification techniques that you can use to protect your data and the use cases for them?Delete sensitive elementsLet’s start with a simple example: one of the best ways to protect payment card data and comply with PCI DSS is to simply delete it. Deleting sensitive data as soon as it’s collected (or better yet, never collecting it in the first place) saves resources on encryption, data access control and removes – not merely reduces – the risk of data exposure or theft.More generally, deleting the data is one way to practice data minimization. Having less data that attracts the attackers is both a security best practice (one of the few that is as true in the 1980s as in 2020s) and a compliance requirement (for example, it serves as one of the core principles of GDPR)Naturally, there are plenty of types of sensitive data that you can’t simply delete, and for which this strategy will not work, like business secrets or patient information at a hospital. But for many cases, transforming data to protect it satisfies the triad of security, compliance and privacy use cases.In many cases, data retains its full value even when sensitive or regulated elements are removed. Customer support chat logs work just as well after an accidentally shared payment card number is removed. A doctor can make a diagnosis without seeing a Social Security Number (SSN) or Medical Record Number (MRN). Transaction trend analysis works just as well when bank account numbers are not included. For many contexts, the sensitive, personal or regulated parts don’t matter at all. Another area this works well is when a communication’s purpose is satisfied even with data removed. For example, a support rep can help a customer use an app without knowing that customer’s first name and last name.As another example, our DLP system can clean up the datasets used to train an AI, so that the AI systems can learn without being exposed to any personal or sensitive data. Even first and last names can be automatically removed from a stream of data before it’s used to train an AI. Does your DLP do that? In practice, this tactic can be applied to both structured (databases) and unstructured (email, chats, image captures, voice recordings) data. Removing “toxic” elements that are a target for attackers or subject to regulations reduces the risk, and preserves the business value of a dataset.sourceTransforming data as part of DLP goes beyond just deleting it. Various forms of data masking (both static and dynamic) are key to this approach. DLP can mean simply removing sensitive data from view, like obscuring what is shown to a call center employee. Notably, Cloud DLP works on stored or streamed data including unstructured text, structured tabular data, and even images. Paired with services like Speech-to-Text, Cloud DLP can even be used to redact audio data or transcripts. Ultimately, the goal of any DLP strategy is to reduce the risk of sensitive data falling into the wrong hands. This is subtly different and broader than merely securing the data. If we can reduce the risk of holding the data, we in turn reduce the risk of losing it. Replace sensitive elements with safe equivalentsSometimes we can’t remove even small parts of sensitive data, but we can replace them with safer elements through tokenization. This is alsoa feature of Google Cloud DLP.One of the advantages of tokenization is it can be reversible. Tokenization both reduces risk and helps ensure compliance with PCI DSS or other regulations—depending on the data being replaced. We can tokenize sensitive elements of data in storage or during display in order to reduce its risk. An insurance company may collect and use customer driver’s license numbers for record validation, and replace those numbers with a token when displayed elsewhere.Another situation in which tokenization is particularly helpful is when two datasets need to be joined for analysis, and the best place to join them is a sensitive piece of data like an SSN. For instance, when a patient records database needs to be joined to a lab results database, or loan applications to financial records, we can tokenize the sensitive columns of both datasets using the same algorithm and parameters, and they can be joined without exposing any sensitive data. Take fraud analysis as another example. Our case study shows that DLP can be used to remove international mobile subscriber identity (IMSI) numbers from the data stored in BigQuery. The data can be restored later, such as when fraud is confirmed and the investigation is ongoing. Note the staggering volumes of data being processed.Now, some readers may point out that tokenization and DLP are traditionally considered different technologies. Cloud DLP is a broader system that covers both of these functions, as well as several others in one scalable, cloud-native solution. This allows us to solve for the greater goal of reducing risk while retaining the business value of a dataset.Transform personal dataThe risk of losing data is not only that criminals may steal and use it to defraud your company. There’s also the risk of privacy violations, off-policy use and other situations that come from the exposure of personal data. The loss of personal data is a twofold risk; both that of security and of privacy.This makes transformation of data for DLP a worthwhile tactic for both privacy and security purposes. For example, an organization may be sharing data with a partner to run a trend analysis of their mutual customers. Generalizing demographics such as age, zip code, and job title can help reduce the risk of these partial identifiers from linking to a specific individual. This is useful for both citizen data collected by government agencies and healthcare research done by the Universities, for example.Similarly, a user may share transactional data that includes dates that someone could use to triangulate their location, like travel dates, purchase dates, or calendar information. Cloud DLP can prevent this misuse with a date shifting technique that shifts dates per “customer” so that behavioral analysis can still be done, but the actual dates are blurred. Again, this is not a feature of any traditional DLP system.Note that many of these methods are not reversible, and irrevocably change or destroy elements of a dataset. Yet they preserve the value of that dataset for specific business use cases, while reducing the risk inherent in that data. This makes using DLP a worthy consideration for teams looking to reduce both security and privacy risk, while retaining the ability to derive value from a dataset, without having to waste compute resources on encryption and granular access control. The constant balancing act between risk and utility becomes significantly easier when employing this approach.Google Cloud DLP can help you employ all of these strategies. Read more about the future of DLP in Not just compliance: reimagining DLP for today’s cloud-centric world. If you are Google Cloud customer, go here to get started with DLP.Related ArticleNew whitepaper: Designing and deploying a data security strategy with Google CloudOur new whitepaper helps you start a data security program in a cloud-native way and adjust your existing data security program when you …Read Article
Quelle: Google Cloud Platform
February might be the shortest month of the year, but it was certainly one of our busiest for data analytics at Google! From our partnership announcement with Databricks to the launch of Dataproc Hub and BigQuery BI Engine, and the incredible journeys of Twitter, Verizon Media, and J.B. Hunt—this month was full of great activities for our customers, partners, and the community at large.Our commitment to an open approach for data analyticsMuch has been written about our launches over the past month, and while it would be too much to list all the great reviews and articles, I thought I’d direct you to SiliconAngle Maria Deutscher’s story from last week on our commitment to an open data analytics approach. Her piece, covering last week’s BI Engine and Materialized Views launches, does a great job highlighting how data analytics, and BigQuery in particular, play a key role in our overall strategy. The average organization has tens (sometimes hundreds) of BI tools. These tools might be ours, our partners’, or custom applications customers have built using packaged and open-source software. We’re delighted by the amazing support this effort has gathered from our partners: from Microsoft to Tableau, Qlik, ThoughtSpot, Superset, and many more.Getting started with BI Engine PreviewWe are committed to creating the best analytics experience for all users by meeting them in the tools they already know and love. That’s why BI Engine works seamlessly with BI tools without requiring any additional changes from end-users. We can’t wait to tell you how customers are adopting this new offering. Join our webinar “Delivering fast and fresh data experiences” by registering here.Running data science securely at scale Running data science at scale has been a challenge for many organizations. Data scientists want the freedom to use the tools they need, while IT leaders need to set frameworks to govern that work. Dataproc Hub is the solution that provides freedom within a governed framework. This new functionality lets data scientists easily scale their work with templated and reusable configurations and ready-to-use big data frameworks. At the same time, it provides administrators with integrated security controls, the ability to set auto scaling policies, auto-deletions, and timeouts to ensure that permissions are always in sync and that the right data is available to the right people. Dataproc Hub is both integrated and open. AI Platform Notebooks customers who want to use BigQuery or Cloud Storage data for model training, feature engineering, and preprocessing greatly benefit from this new functionality. With Dataproc Hub, data scientists can leverage APIs like PySpark and Dask without much setup and configuration work, as well as accelerate their Spark XGBoost pipelines with NVIDIA GPUs to process their data 44x faster at a 14x reduction in cost vs. CPUs. You’ll find more information about our Dataproc Hub launch here, and if you’d like to dive into model training with RAPIDS, Dask, and NVIDIA GPUs on AI Platform, this blog is a great place to start.As Scott McClellan, Sr Director, Data Science Product Group at NVIDIA wrote this past week, it’s time to make “data science at scale more accessible”. We’re proud to count NVIDIA as a partner in this journey!Dataproc in a minuteAs I wrote in my post last month, our goal is to democratize access to data science and machine learning for everyone. You don’t have to be a data scientist to take advantage of Google’s Data Analytics machine learning capabilities. Any Google Workspace user can use machine learning right from Connected Sheets. To get started, check out this blog: How to use a machine learning model from a Google Sheet using BigQuery ML. That’s right, you can tap into the power of machine learning right from Google Sheets, our spreadsheet application which, today, counts over 2 billion users. So, don’t be shy, start using data at scale and make an impact!Building the future together is betterThis past month, we were particularly inspired by Nikhil Mishra’s, Sr. Director of Engineering at Verizon Media, guest post about Verizon Media’s migration journey to the cloud. Mishra dives deep into the process that led to their final decision, from identifying problems to solution requirements to the entire proof of concept used to select BigQuery and Google’s Looker. This is a must-read for those looking for practical guidance to modernize and optimize for scale, performance, and cost.Employing the right cloud strategy is critical to our customers’ transformation journey and if you’re looking for straightforward guidance, another great customer example to follow is Twitter. In his interview with Venturebeat, Twitter platform leader Nick Torno explains how the company leverages Google BigQuery, Dataflow, and Machine Learning to improve the experience of people using Twitter. The piece concludes with guidance for breaking down silos and future-proofing your data analytics environment while delivering value quickly through business use cases.We were also delighted to support J.B. Hunt, one of the largest transportation logistics companies in North America, in their goal to develop new services to digitally transform the shipping and logistics experience for shippers, carriers, and service providers. Real-time data is a cornerstone in the $1 trillion logistics industry, and today’s carriers rely on a patchwork of IT systems across supply chain, capacity utilization, pricing, and transportation execution. J.B. Hunt’s 360 platform aims to centralize data from across these different systems, helping to reduce waste, friction, and inefficiencies.You might also find inspiration in hearing about how Google Cloud is helpingFord transform their automotive technologies and enabling BNY Mellon to better predict billions of dollars in daily settlement failures. We also recently agreed to extend our partnership with the U.S. National Oceanic and Atmospheric Administration (NOAA), empowering them to continue sharing their data more broadly than ever—with some pretty cool results. Feature highlights you might have missedAt Google Cloud, the aim is always to continuously improve and introduce new features and functionality that make a difference for our customers. Last month, we announced the public preview launch of the replication application in Data Fusion to enable low-latency, real-time data replication from transactional and operational databases such as SQL Server and MySQL directly into BigQuery. Data Fusion’s simple, wizard-driven interface lets citizen developers set up replication easily. It comes with an assessment tool that not only identifies schema incompatibilities, connectivity issues, and missing features prior to starting replication, but also provides corrective actions. Replication in Data Fusion means that you’ll benefit from end-to-end visibility: real-time operational dashboards to monitor throughput, latency, and errors in replication jobs, zero-downtime snapshot replication into BigQuery, and support for CDC streams, so users have access to the latest data in BigQuery for analysis and action.Cloud Data Fusion’s integration within the Google Cloud platform ensures that the highest levels of enterprise security and privacy are observed while making the latest data available in your data warehouse for analytics. This launch includes support for Customer-Managed Encryption Keys (CMEK) and VPC-SC. If you’re new to Data Fusion, I suggest you check out Chapter 1 of our blog series on data lake solution architecture with Data Fusion and Cloud Composer. Speaking of fast-moving and ever-changing data, you might want to check out the latest best practices for continuous model evaluation with BigQuery ML by Developer Advocates Polong Lin and Sara Robinson. Their post takes us through a full model’s life cycle—from creating it with BigQuery ML, evaluating data with ML.EVALUATE, creating a Stored Procedure to assess incoming data to using it to insert evaluation metrics into a table. This blog shows the power of an integrated platform built with BigQuery and Cloud Scheduler, and what you can achieve—from using Cloud Functions to visualizing model metrics in Data Studio. It has fantastic guidance that I hope you’ll enjoy!Finally, we also covered data traceability this past month with a post on how to architect a data lineage system using BigQuery, Data Catalog, Pub/Sub & Dataflow. Data lineage is critical for performing data forensics, identifying data dependencies, and above all, securing business data.Data Catalog provides a powerful interface that allows you to sync and tag business metadata to data across Google Cloud services as well as your own on-premises data centers and databases. Read thisgreat article for insights on our recommended architecture for the most common user journeys and start here to build a data lineage system using BigQuery Streaming, Pub/Sub, ZetaSQL, Dataflow, and Cloud Storage.See how BlackRock uses Data Catalog: Data discovery and Metadata management in Action!That’s it for February! I can’t wait to hear back from you about what you think, and I’m looking forward to sharing everything we’ve got coming up in March.
Quelle: Google Cloud Platform
