Computer und IT
Datenbanken
Fundierte Einführung in relationale Datenbanken und die Anfragesprache SQL Datenbanken für die Berufspraxis verstehen, anwenden und entwickelnMit zwei durchgängigen Beispielen und zahlreichen ÜbungenDatenbanken haben sich zu einem unverzichtbaren Bestandteil jeglicher Informationssysteme entwickelt, um größere Mengen strukturierter Daten verwalten, wiederauffinden und analysieren zu können.Die Autoren vermitteln fundiert und kompakt die zum Verständnis und auch zur Entwicklung solcher Systeme notwendigen Kenntnisse aus den Bereichen Datenbankentwurf, Datenmodellierung, Datenänderungen und Datenanalysen und stellen die relationale Datenbanksprache SQL ausführlich vor. Alle Konzepte und Sprachelemente erläutern die Autoren anhand von zwei durchgängigen Beispielen. Des Weiteren besprechen die Autoren Themen wie Nutzersichten, Datenschutz, Integritätssicherung, Tuning von Datenbankanwendungen sowie statistische Datenanalysen (Data Warehousing, Data Mining). Sie erläutern auch neuere Entwicklungen wie NoSQL-Datenbanksysteme, spaltenorientierte Speicherungsformen und die Analyse von Big Data.Das Buch richtet sich vor allem an Schüler und Studenten außerhalb des Fachbereichs Informatik, die schnell und dennoch fundiert die Grundlagen zur Entwicklung und zum Einsatz von Datenbanken lernen wollen. Übungsaufgaben am Ende jedes Kapitels machen das Buch ideal für Studium und Selbststudium.Aus dem Inhalt:Was sind Datenbanken? Relationale Datenbanken:Daten als Tabellen Das Entity-Relationship-Modell Datenbankentwurf Normalisierung für eine redundanzfreie DatenbankDatendefinition und Updates in SQLAnfragen in SQLSichten und DatenschutzIntegrität und TriggerStatistische Datenanalysen (Data Warehousing, Data Mining)Arbeitsweise eines DBMS und TuningOLTP- und OLAP-SystemRow und Column Stores, NoSQL und NewSQLAusblick inklusive Verarbeitung von Big DataZwei durchgängige Beispiele mit Datenbankentwurf und relationaler RepräsentationAndreas Heuer, Gunter Saake und Kai-Uwe Sattler sind Professoren für Informatik an den Universitäten von Rostock, Magdeburg und Ilmenau. Holger Meyer ist wissenschaftlicher Oberrat und Hannes Grunert wissenschaftlicher Mitarbeiter an der Universität Rostock.
macOS Big Sur For Dummies
YOUR "GET-STARTED" GUIDE TO THE WORLD OF MACOS BIG SURWherever you like to Mac—at home in front of your trusty iMac or over a coffee with your portable MacBook Air—macOS provides you with the seamless, efficient, and reliable user experience that makes these devices so famously a pleasure to use. macOS Big Sur For Dummies is here to heighten the experience for new users and upgraders alike by providing the very latest on the ways macOS Big Sur can enhance how you work and play.Written in a no-jargon style by Bob LeVitus—the Houston Chronicle’s much-loved "Dr. Mac" since 1996—this guide starts with the basics, like getting set up, and explains more advanced uses, like making music and movies, exploring the expanding universe of apps and giving tips on how to save time and enhance productivity along the way. With this book, you'll learn to* Set up and connect your Mac* Get friendly with Siri* Enhance your world with apps* Work better and fasterUse the comprehensive capabilities of macOS Big Sur to do anything and everything you would like to do—and do it even better. For beginners and experts alike, macOS Big Sur For Dummies is the best way to step into the magical world of getting things done with Mac.BOB “DR. MAC” LEVITUS has written the “Dr. Mac” column for the Houston Chronicle since 1996. A devoted Mac enthusiast, he has written or cowritten a long list of how-to books about macOS, iPhone, iPad, Office for the Mac, and GarageBand. He’s also a regular contributor to various tech publications.INTRODUCTION 1About This Book 1Foolish Assumptions 3Icons Used in This Book 3Beyond the Book 4Where to Go from Here 4PART 1: MACOS BASICS 5CHAPTER 1: MACOS BIG SUR 101 (PREREQUISITES: NONE) 7Gnawing to the Core of macOS 8A Safety Net for the Absolute Beginner (or Any User) 10Turning the dang thing on 10What you should see on startup 11Shutting down properly 15A few things you should definitely not do with your Mac 16Point-and-click 101 17Not Just a Beatles Movie: Help and the Help Menu 19CHAPTER 2: DESKTOP AND WINDOWS AND MENUS (OH MY!) 23Touring Finder and Its Desktop 24Anatomy of a Window 25Top o’ the window to ya! 27A scroll new world 29(Hyper)active windows 30Dialog Dealie-Boppers 32Working with Windows 34Opening and closing windows 34Resizing windows and window panes 35Moving windows 35Shuffling windows 36Menu Basics 38The ever-changing menu bar 38Contextual (shortcut) menus: They’re sooo contextual! 39Recognizing disabled options 41Navigating submenus 41Under the Apple menu tree 42Using keyboard shortcut commands 44CHAPTER 3: WHAT’S UP, DOCK? 45A Quick Introduction to Your Dock 46The default icons of the dock 47Trash talkin’ 48Opening application menus on the dock 51Reading dock icon body language 53Opening files from the dock 54Customizing Your Dock 54Adding dock icons 54Removing an icon from the dock 57Resizing the dock 58What should you put on your dock? 58Setting your dock preferences 60CHAPTER 4: GETTING TO KNOW FINDER AND ITS DESKTOP 65Introducing Finder and Its Minions: The Desktop and Icons 66Introducing the desktop 66Bellying up to the toolbar 68Figuring out what an icon is 71Identifying your Finder icons in the wild 72Aliases Are Awesome! 73Creating aliases 74Deleting aliases 75Hunting down an alias’s parent 75The View(s) from a Window 76Moving through folders fast in Column view 76Perusing in Icon view 78Listless? Try touring folders in List view 78Hangin’ in the Gallery (view) 80What’s next on the (View) menu? 81Finder on the Menu 83The actual Finder menu 83Like a road map: The current folder’s pop-up menu 86Going places with the Go menu 86Customizing Finder Windows 89Adding folders to the sidebar 89Setting Finder preferences 90Digging for Icon Data in the Info Window 93CHAPTER 5: DELVING EVEN DEEPER INTO BIG SUR’S DESKTOP AND FINDER 97Cleaning Up Your Desktop Automatically with Stacks 97Managing your Stacks 100Quick Actions: Now Playing All Over Big Sur 101Getting the most out of Markup 101Trimming video without launching an app 104Do It Quicker with Finder Quick Actions 105Creating PDFs without launching an app 105Creating custom Finder Quick Actions 106Four More Cool Big Sur Tricks 107Shooting screens 107Dynamic desktop images 109Recently used apps in the dock 109Mentions of Gallery view 110PART 2: HOW STUFF WORKS 111CHAPTER 6: HAVING IT YOUR WAY 113Introducing System Preferences 113The Desktop & Screen Saver System Preferences Pane 116The Desktop tab 117The Screen Saver tab 118The General System Preferences Pane 119Adjusting the Keyboard, Mouse, Trackpad, and Other Hardware 122The Keyboard System Preferences pane 122The Mouse System Preferences pane 128The Bluetooth System Preferences pane 129The Trackpad System Preferences pane 129The Sound System Preferences Pane 131Changing sound effects 132Choosing output and input options 132CHAPTER 7: OPENING AND SAVING FILES 133A Quick Primer on Finding Files 134Understanding the macOS Folder Structure 134Understanding nested folders 136From the top: The Computer folder 137Peeking into the Applications folder 138Visiting the Library folders 138Let it be: The System folder 139There’s no place like Home 140Your personal library card 141Saving Your Document Before It’s Too Late 143Stepping through a basic save 145Save As versus Duplicate: Different names for the same result 151Open, Sez Me 153With drag-and-drop 154With a Quick Look 155When your Mac can’t open a file 155With the application of your choice 156CHAPTER 8: FILE AND FOLDER MANAGEMENT MADE EASY 159Organizing Your Stuff in Folders 159Files versus folders 160Organizing your stuff with subfolders 160Creating new folders 163Navigating with spring-loaded folders 163Smart folders 164Shuffling Files and Folders 167Moving files and folders 167Selecting multiple icons 169Playing the icon name game: Renaming icons 170Renaming multiple icons at once 171Compressing files 171Getting rid of icons 172The Incredible iCloud Drive 172CHAPTER 9: COMPREHENDING THE MACOS CLIPBOARD 175Introducing the Clipboard 175Copying Files and Folders 177Pasting from the Clipboard 179Big Sur’s Universal Clipboard 179PART 3: GETTING THINGS DONE 181CHAPTER 10: FIVE TERRIFIC TIME-SAVING TOOLS 183With a Quick Look 184Share and share alike with the Share menu 185Slide into Slideshow (full-screen) mode 186Spotlight on Finding Files and Folders Faster 187Using the Find command 187Using the Spotlight menu and its keyboard shortcut 190Blast Off with Mission Control 191The Mission Control pane: It’s painless 191Hot corners are hot stuff! 194Mission Control’s Spaces from 30,000 feet (an overview) 194Getting around in space(s) 197Taking Control of Essential Settings 198Launchpad: The Place for Applications 200CHAPTER 11: ORGANIZING YOUR LIFE 203Keeping Track with Calendar 204Navigating Calendar views 204Creating calendars 205Deleting a calendar 206Creating and managing events 207Reminders: Protection Against Forgetting 210Getting started with Reminders 210To do or not to do: Setting reminders 211Sharing lists and assigning reminders 213Everything You Need to Know about Notification Center 213Tweaking Notification settings 214Widget management 101 216Using Notification Center 217Use Notes for Making Notes 218Tracking Productivity with Screen Time 221CHAPTER 12: ARE YOU SIRI-OUS? 223What Siri Can Do for You 224Working with Siri 226Making Siri Your Own 226CHAPTER 13: MAPS ARE WHERE IT’S AT 229Finding Your Current Location with Maps 229Finding a Person, Place, or Thing 230Views, Zooms, and Pans 231Maps and Contacts 233Time-saving Map Tools: Favorites, Guides, and Recents 234Favorites 234Guides 235Recents 235Smart Map Tricks 236Get route maps and driving directions 236Get walking directions 237Get directions for public transportation 237Get traffic info in real time 238Flyovers and look arounds 238Do more on the Info sheet 240CHAPTER 14: APPS BORN IN IOS 241Taking Stock of the Market with Stocks 241Adding and deleting stocks, funds, and indexes 243Details, details, details 244Charting a course 244Read All about It in News 245What are your interests? 246How News works 247Managing your news 247Recording Memos with Voice Memos 248Recording a voice memo 248Listening to a voice memo 249Naming a voice memo 249Trimming a voice memo 250Controlling Lights, Locks, and More with Home 251PART 4: GETTING ALONG WITH OTHERS 253CHAPTER 15: (INTER)NETWORKING 255Getting Connected to the Internet 256Your Internet service provider and you 257Plugging in your Internet-connection settings 258Browsing the Web with Safari 259Owning your toolbar 261Using the Safari sidebar 263Searching with Google 267Protect yourself from malice (and ads) 269Checking out Help Center 270Audio and Video Calls with FaceTime 270CHAPTER 16: DEALING WITH PEOPLE 273Collecting Your Contacts 273Adding contacts 274Importing contacts from other programs 276Creating a basic group 276Setting up a smart group (based on contact criteria) 277Deleting a group or smart group 279Sync + Contacts = your contacts everywhere 279CHAPTER 17: COMMUNICATING WITH MAIL AND MESSAGES 281Sending and Receiving Email with Mail 281Setting up Mail 282A quick overview of the toolbar 283Composing a new message 284Sending email from the Contacts app 286Checking your mail 288Dealing with spam 289Mailboxes smart and plain 289Changing your preferences 292Sign here, please 293Mail rules rule 294Take a (Quick) look and (Slide) show me some photos 296Markup and Mail Drop 297Communicating with Messages 299Chit-chatting with Messages 300CHAPTER 18: SHARING YOUR MAC AND LIKING IT 303Introducing Networks and File Sharing 304Portrait of home office networking 305Three ways to build a network 307Setting Up File Sharing 309Access and Permissions: Who Can Do What 311Users and groups and guests 311Creating users 312macOS knows best: Folders shared by default 317Sharing a folder or disk by setting permissions 318Useful settings for permissions 322Unsharing a folder 324Connecting to a Shared Disk or Folder on a Remote Mac 325Changing Your Password 328Changing your account password on your Mac 329Changing the password of any account but your own on your Mac 329More Types of Sharing 330Sharing a screen 330Sharing the Internet 331And yet more ways to share 332PART 5: GETTING CREATIVE 333CHAPTER 19: THE MUSICAL MAC 335Apple Music and iTunes Match Rock! 336Introducing Music (the App Formerly Known as iTunes) 337Working with Media 340Adding songs 341Listening to Radio 343All about Playlists 344Creating a regular playlist 344Filtering your library 346Working with smart playlists 347Burning a playlist to CD 348Looking at the Genius playlist 348CHAPTER 20: THE MULTIMEDIA MAC 351Playing Movies and Music in QuickTime Player 351Watching TV 353Using the Books App 354Buying an e-book or audiobook 355Shopping for e-books without Apple 357Reading an e-book 358Finding and Listening to Podcasts with the Podcasts App 360You’re the Star with Photo Booth 361Viewing and Converting Images and PDFs in Preview 363Importing Media from a Camera or Camcorder 365CHAPTER 21: WORDS AND LETTERS 369Processing Words with TextEdit 370Creating and composing a document 370Working with text 371Adding graphics to documents 374Font Mania 375Types of fonts 376Managing your fonts with Font Book 376CHAPTER 22: PUBLISH OR PERISH: THE FAIL-SAFE GUIDE TO PRINTING 379Before Diving In 380Ready: Connecting and Adding Your Printer 380Connecting your printer 381Setting up a printer for the first time 381One last thing: Printer sharing 383Set: Setting Up Your Document with Page Setup 384Print: Printing with the Print Sheet 386Printing a document 386Choosing among different printers 387Choosing custom settings 387Saving custom settings 390Preview and PDF Options 390PART 6: CARE AND FEEDING 393CHAPTER 23: FEATURES FOR THE WAY YOU WORK 395Finally, a Dark Mode 396App Shopping, Improved 397Using Your iPhone as Your Mac’s Camera or Scanner 399Talking and Listening to Your Mac 402Keyboard System Preferences pane: You talk and your Mac types 402Commanding your Mac by voice 404Listening to your Mac read for you 406Automatic Automation 409Script Editor app: Write and edit AppleScripts 409Automator app: Automate almost anything 410A Few More Useful Goodies 413Accessibility System Preferences pane: Make your Mac more accessible 413Battery and Energy Saver System Preferences panes: For energy conservation and sleep 415Bluetooth System Preferences pane: Where Bluetooth lives 416Ink System Preferences pane: Visible to pen-input tablet users only 417Automatic Login in the Users & Groups System Preferences pane: Don’t bother with the login screen 417Allow your Apple Watch to unlock your Mac 418Boot Camp Assistant app: Run Windows on your Mac really 418AirPlay Mirroring 419Handoff 420CHAPTER 24: SAFETY FIRST: BACKUPS AND OTHER SECURITY ISSUES 421Backing Up is (Not) Hard to Do 422Backing up with Big Sur’s excellent Time Machine 422Backing up by using the manual, brute-force method 426Backing up by using commercial backup software 427Why You Need Two Sets of Backups 428Non-Backup Security Concerns 429About viruses and other malware 429Firewall: Yea or nay? 431Install recommended software updates 433Protecting Your Data from Prying Eyes 434Blocking or limiting connections 434Locking down files with FileVault 434Setting other options for security 435CHAPTER 25: UTILITY CHEST 439In the Applications and Utilities Folders 439Calculator 439Activity Monitor 441Disk Utility 442Grapher 447Keychain Access 447Migration Assistant 449System Information 450Terminal 450Capturing Your Screen 451Big Sur screen-shooting 101 452Big Sur screen-shooting options 453Big Sur screen recording 454CHAPTER 26: TROUBLESHOOTING MACOS 457About Startup Disks and Booting 457Finding or creating a startup disk 458They call it a prohibitory sign for a reason 458Recovering with Recovery HD 460Step 1: Run First Aid 460Step 2: Safe boot into Safe mode 461Step 3: Zapping the PRAM/NVRAM 462Step 4: Reinstalling macOS 463Step 5: Things to try before taking your Mac in for repair 463If Your Mac Crashes at Startup 464Optimizing Storage 465PART 7: THE PART OF TENS 467CHAPTER 27: TEN WAYS TO SPEED UP YOUR MAC EXPERIENCE 469Use Those Keyboard Shortcuts 470Improve Your Typing Skills 471Change Your Resolution 471Purchase a Faster Mac 473Add RAM 473Add a Second Display 474Use Your iPad as a Second Display 474Upgrade to a Solid-State Drive (SSD) 475Get More Storage 476Subscribe to My Free Newsletter 477CHAPTER 28: TEN GREAT WEBSITES FOR MAC FREAKS 479The Mac Observer 480Macworld 480TidBITS 480iMore 481AppleWorld.Today 481The Wirecutter 481Apple Support 482Other World Computing 482dealmac/dealnews 483Working Smarter for Mac Users 483Index 485
Vom Monolithen zu Microservices
Bestehende Systeme erfolgreich in eine Microservices-Architektur umgestaltenUnerlässliches Expertenwissen für Organisationen, die ihre Codebasis modernisieren wollen Autor des geschätzten Grundlagenwerks »Building Microservices« Orientierung und Anleitung für den anspruchsvollen Migrationsprozess Wie entflechtet man ein monolithisches System und überführt es in eine Microservices-Architektur? Und wie erhält man gleichzeitig den normalen Betrieb aufrecht? Sam Newman, Autor des viel beachteten Titels »Building Microservices«, beschreibt Szenarien und erprobte Strategien, um bestehende Systeme erfolgreich zu migrieren: von der ersten Planung bis zum Zerlegen von Anwendung und Datenbank. Newman greift hierbei auf viele anschauliche Beispiele zurück, stellt aufschlussreiche Pattern für die Migration vor und gibt praktische Ratschläge. Für Organisationen, die ihre Codebasis in Richtung einer Microservices-Architektur überführen und nicht komplett neu aufbauen wollen Unterstützt Unternehmen bei der Frage, ob und wann sie migrieren und wo sie konkret beginnen sollten Befasst sich mit der Integration und Migration von Legacy-Systemen und der Kommunikation mit diesen Systemen Stellt Migrationspattern vor und beschreibt, wo und wie sie am besten eingesetzt werden Bietet Beispiele für die Datenbankmigration und begleitende Synchronisationsstrategien Beschreibt das Zerlegen von Anwendungen einschließlich einer Reihe von Refaktorisierungspattern
Linux Containers and Virtualization
Get a novel perspective on Linux containers and understand the world of virtualization. This book takes you down the rabbit hole to discover what lies below the API. You’ll go on a journey of virtualization and see how containers are realized in the Linux world. Linux Containers and Virtualization details the data structures within the Linux kernel which make up Linux containers.You will start with the fundamentals of virtualization including how different resources such as memory, CPU, network, and storage are virtualized. Then you will move on to hypervisors and virtualization using the Kernel virtual Machine (KVM) and Quick Emulator (QEMU). Next, you will learn about Linux namespace, cgroups, and layered file systems, which are the essential building blocks of Linux containers. The explanation traverses the Linux kernel codebase to show how these are realized in the Linux kernel. In the final chapter, you will code your own container by applying the concepts learnt in the previous chapters.On completion of the book, you will have the knowledge to start coding a Linux container.WHAT YOU WILL LEARN* Understand the basics of virtualization* Discover how the Linux kernel supports virtualization * See how the evolution of the Linux kernel and CPUs led to the creation of containerization technologies* Develop the ability to create your own container frameworkWHO THIS BOOK IS FORDevelopers working on virtualized software deployment and containers. Architects designing platforms based on a container runtime as well as DevOps professionals who want to get a microscopic view on how containers and virtualization work would find the book useful.SHASHANK MOHAN JAIN has been working in the IT industry for around 20 years mainly in the areas of cloud computing and distributed systems. He has keen interests in virtualization techniques, security, and complex systems. Shashank has 25 software patents (many yet to be published) to his name in the area of cloud computing, IoT, and machine learning. He is a speaker at multiple reputed cloud conferences. Shashank holds Sun, Microsoft, and Linux kernel certifications.CHAPTER 1: VIRTUALIZATION BASICSVM Based VirtualizationContainer Based VirtualizationHypervisorMemory VirtualizationCPU VirtualizationIO VirtualizationCHAPTER 2: HYPERVISORVt-xQEMUSteps to Create VM Using KVM ModuleVhost Base Data communicationA Small Detour on What is an EventfdAlternative Virtualization MechanismsSummary of Alternate Virtualization ApproachesCHAPTER 3: NAMESPACESNamespace TypesAdd a Device to a NamespaceCHAPTER 4: CGROUPSCreate a Sample CgroupCgroup TypesCHAPTER 5: LAYERED FILE SYSTEMSUnion File SystemCHAPTER 6: CREATING A CONTAINER YOURSELF UTS NamespaceGoLang InstallationContainer with NamespaceAdding More NamespacesGetting Shell With-In ContainerProviding Root File SystemMount Proc File SystemEnabling Networking for the ContainerEnabling Cgroups for Container
Oracle Database Transactions and Locking Revealed
Access much-needed information for building scalable, high-concurrency applications and deploying them against the Oracle Database. This new edition is updated to be current with Oracle Database 19. It includes a new chapter with troubleshooting recipes to help you quickly diagnose and resolve locking problems that are urgent and block production.Good transaction design is an important facet of highly-concurrent applications that are run by hundreds, even thousands, of users who are executing transactions at the same time. Transaction design, in turn, relies on a good understanding of how the database engine manages the locking of resources to prevent access conflicts and data loss that might otherwise result from concurrent access to data in the database. This book provides a solid and accurate explanation of how locking and concurrency are dealt with by Oracle Database. You will learn how the Oracle Database architecture accommodates user transactions, and how you can write code to mesh with the way in which Oracle Database is designed to operate.ORACLE DATABASE TRANSACTIONS AND LOCKING REVEALED covers in detail the various lock types, and also different locking schemes such as pessimistic and optimistic locking. Then you will learn about transaction isolation and multi-version concurrency, and how the various lock types support Oracle Database’s transactional features. You will learn tips for transaction design, as well as some bad practices and habits to avoid. Coverage is also given to redo and undo, and their role in concurrency. The book is loaded with insightful code examples that drive home each concept. This is an important book that anyone developing highly-concurrent applications will want to have handy on their shelf.WHAT YOU WILL LEARN* Avoid application lockups due to conflicts over accessing the same resource* Understand how Oracle prevents one application from overwriting another’s modifications* Create transaction designs that mesh with how Oracle Database is designed* Build high-throughput applications supporting thousands of concurrent users* Design applications to take full advantage of Oracle’s powerful database engine* Gain a fundamental knowledge of Oracle’s transaction and locking architecture* Develop techniques to quickly diagnose and resolve common locking issuesWHO THIS BOOK IS FOROracle developers and database administrators faced with troubleshooting and solving deadlocks, locking contention, and similar problems that are encountered in high-concurrency environments; and application developers wanting to design their applications to excel at multi-user concurrency by taking full advantage of Oracle Database’s multi-versioning and concurrency supportDARL KUHN is a senior-level database administrator with decades of experience. He handles all facets of database administration from design and development to production support. He enjoys documenting and sharing knowledge and has authored several books on Oracle technology.THOMAS KYTE is a former vice president of the Core Technologies Group at Oracle Corporation. He is the same Tom who created the "Ask Tom" website and the Oracle Magazine column of the same name. He has a long history of answering questions about the Oracle database and tools that developers and database administrators struggle with every day.1. Getting Started2. Locking and Blocking3. Locks, Latches, and Mutexes4. Concurrency and Multiversioning5. Transactions6. Redo and Undo7. Investigating Redo8. Investigating Undo9. Troubleshooting
Alice and Bob Learn Application Security
LEARN APPLICATION SECURITY FROM THE VERY START, WITH THIS COMPREHENSIVE AND APPROACHABLE GUIDE!Alice and Bob Learn Application Security is an accessible and thorough resource for anyone seeking to incorporate, from the beginning of the System Development Life Cycle, best security practices in software development. This book covers all the basic subjects such as threat modeling and security testing, but also dives deep into more complex and advanced topics for securing modern software systems and architectures. Throughout, the book offers analogies, stories of the characters Alice and Bob, real-life examples, technical explanations and diagrams to ensure maximum clarity of the many abstract and complicated subjects.Topics include:* Secure requirements, design, coding, and deployment* Security Testing (all forms)* Common Pitfalls* Application Security Programs* Securing Modern Applications* Software Developer Security HygieneAlice and Bob Learn Application Security is perfect for aspiring application security engineers and practicing software developers, as well as software project managers, penetration testers, and chief information security officers who seek to build or improve their application security programs.Alice and Bob Learn Application Security illustrates all the included concepts with easy-to-understand examples and concrete practical applications, furthering the reader's ability to grasp and retain the foundational and advanced topics contained within.TANYA JANCA, also known as SheHacksPurple, is the founder of We Hack Purple, an online learning academy dedicated to teaching everyone how to create secure software. With over twenty years of IT and coding experience, she has won numerous awards and worked as a developer, pentester, and AppSec Engineer. She was named Hacker of the Year by the Cybersecurity Woman of the Year 2019 Awards and is the Founder of WoSEC International, #CyberMentoringMonday, and OWASP DevSlop.Foreword xxiIntroduction xxiiiPART I WHAT YOU MUST KNOW TO WRITE CODE SAFE ENOUGH TO PUT ON THE INTERNET 1CHAPTER 1 SECURITY FUNDAMENTALS 3The Security Mandate: CIA 3Confidentiality 4Integrity 5Availability 5Assume Breach 7Insider Threats 8Defense in Depth 9Least Privilege 11Supply Chain Security 11Security by Obscurity 13Attack Surface Reduction 14Hard Coding 15Never Trust, Always Verify 15Usable Security 17Factors of Authentication 18Exercises 20CHAPTER 2 SECURITY REQUIREMENTS 21Requirements 22Encryption 23Never Trust System Input 24Encoding and Escaping 28Third-Party Components 29Security Headers: Seatbelts for Web Apps 31Security Headers in Action 32X-XSS-Protection 32Content-Security-Policy (CSP) 32X-Frame-Options 35X-Content-Type-Options 36Referrer-Policy 36Strict-Transport-Security (HSTS) 37Feature-Policy 38X-Permitted-Cross-Domain-Policies 39Expect-CT 39Public Key Pinning Extension for HTTP (HPKP) 41Securing Your Cookies 42The Secure Flag 42The HttpOnly Flag 42Persistence 43Domain 43Path 44Same-Site 44Cookie Prefixes 45Data Privacy 45Data Classification 45Passwords, Storage, and Other Important Decisions 46HTTPS Everywhere 52TLS Settings 53Comments 54Backup and Rollback 54Framework Security Features 54Technical Debt = Security Debt 55File Uploads 56Errors and Logging 57Input Validation and Sanitization 58Authorization and Authentication 59Parameterized Queries 59URL Parameters 60Least Privilege 60Requirements Checklist 61Exercises 63CHAPTER 3 SECURE DESIGN 65Design Flaw vs. Security Bug 66Discovering a Flaw Late 67Pushing Left 68Secure Design Concepts 68Protecting Sensitive Data 68Never Trust, Always Verify/Zero Trust/Assume Breach 70Backup and Rollback 71Server-Side Security Validation 73Framework Security Features 74Security Function Isolation 74Application Partitioning 75Secret Management 76Re-authentication for Transactions (Avoiding CSRF) 76Segregation of Production Data 77Protection of Source Code 77Threat Modeling 78Exercises 82CHAPTER 4 SECURE CODE 83Selecting Your Framework and Programming Language 83Example #1 85Example #2 85Example #3 86Programming Languages and Frameworks: The Rule 87Untrusted Data 87HTTP Verbs 89Identity 90Session Management 91Bounds Checking 93Authentication (AuthN) 94Authorization (AuthZ) 96Error Handling, Logging, and Monitoring 99Rules for Errors 100Logging 100Monitoring 101Exercises 103CHAPTER 5 COMMON PITFALLS 105OWASP 105Defenses and Vulnerabilities Not Previously Covered 109Cross-Site Request Forgery 110Server-Side Request Forgery 112Deserialization 114Race Conditions 115Closing Comments 117Exercises 117PART II WHAT YOU SHOULD DO TO CREATE VERY GOOD CODE 119CHAPTER 6 TESTING AND DEPLOYMENT 121Testing Your Code 121Code Review 122Static Application Security Testing (SAST) 123Software Composition Analysis (SCA) 125Unit Tests 126Infrastructure as Code (IaC) and Security as Code (SaC) 128Testing Your Application 129Manual Testing 130Browsers 131Developer Tools 131Web Proxies 132Fuzzing 133Dynamic Application Security Testing (DAST) 133VA/Security Assessment/PenTest 135Testing Your Infrastructure 141Testing Your Database 141Testing Your APIs and Web Services 142Testing Your Integrations 143Testing Your Network 144Deployment 145Editing Code Live on a Server 146Publishing from an IDE 146“Homemade” Deployment Systems 147Run Books 148Contiguous Integration/Continuous Delivery/Continuous Deployment 148Exercises 149CHAPTER 7 AN APPSEC PROGRAM 151Application Security Program Goals 152Creating and Maintaining an Application Inventory 153Capability to Find Vulnerabilities in Written, Running, and Third-Party Code 153Knowledge and Resources to Fix the Vulnerabilities 154Education and Reference Materials 155Providing Developers with Security Tools 155Having One or More Security Activities During Each Phase of Your SDLC 156Implementing Useful and Effective Tooling 157An Incident Response Team That Knows When to Call You 157Continuously Improve Your Program Based on Metrics, Experimentation, and Feedback 159Metrics 159Experimentation 161Feedback from Any and All Stakeholders 161A Special Note on DevOps and Agile 162Application Security Activities 162Application Security Tools 164Your Application Security Program 165Exercises 166CHAPTER 8 SECURING MODERN APPLICATIONS AND SYSTEMS 167APIs and Microservices 168Online Storage 171Containers and Orchestration 172Serverless 174Infrastructure as Code (IaC) 175Security as Code (SaC) 177Platform as a Service (PaaS) 178Infrastructure as a Service (IaaS) 179Continuous Integration/Delivery/Deployment 180Dev(Sec)Ops 180DevSecOps 182The Cloud 183Cloud Computing 183Cloud Native 184Cloud Native Security 185Cloud Workflows 185Modern Tooling 186IAST Interactive Application Security Testing 186Runtime Application Security Protection 187File Integrity Monitoring 187Application Control Tools (Approved Software Lists) 187Security Tools Created for DevOps Pipelines 188Application Inventory Tools 188Least Privilege and Other Policy Automation 189Modern Tactics 189Summary 191Exercises 191PART III HELPFUL INFORMATION ON HOW TO CONTINUE TO CREATE VERY GOOD CODE 193CHAPTER 9 GOOD HABITS 195Password Management 196Remove Password Complexity Rules 196Use a Password Manager 197Passphrases 198Don’t Reuse Passwords 198Do Not Implement Password Rotation 199Multi-Factor Authentication 199Incident Response 200Fire Drills 201Continuous Scanning 202Technical Debt 202Inventory 203Other Good Habits 204Policies 204Downloads and Devices 204Lock Your Machine 204Privacy 205Summary 206Exercises 206CHAPTER 10 CONTINUOUS LEARNING 207What to Learn 208Offensive = Defensive 208Don’t Forget Soft Skills 208Leadership != Management 209Learning Options 209Accountability 212Create Your Plan 213Take Action 214Exercises 214Learning Plan 216CHAPTER 11 CLOSING THOUGHTS 217Lingering Questions 218When Have You Done Enough? 218How Do You Get Management on Board? 220How Do You Get Developers on Board? 221Where Do You Start? 222Where Do You Get Help? 223Conclusion 223APPENDIX A RESOURCES 225Introduction 225Chapter 1: Security Fundamentals 225Chapter 2: Security Requirements 226Chapter 3: Secure Design 227Chapter 4: Secure Code 228Chapter 5: Common Pitfalls 228Chapter 6: Testing and Deployment 229Chapter 7: An AppSec Program 229Chapter 8: Securing Modern Applications and Systems 230Chapter 9: Good Habits 231Chapter 10: Continuous Learning 231APPENDIX B ANSWER KEY 233Chapter 1: Security Fundamentals 233Chapter 2: Security Requirements 235Chapter 3: Secure Design 236Chapter 4: Secure Code 238Chapter 5: Common Pitfalls 241Chapter 6: Testing and Deployment 242Chapter 7: An AppSec Program 244Chapter 8: Securing Modern Applications and Systems 245Chapter 9: Good Habits 247Chapter 10: Continuous Learning 248Index 249
Advanced Analytics in Power BI with R and Python
This easy-to-follow guide provides R and Python recipes to help you learn and apply the top languages in the field of data analytics to your work in Microsoft Power BI. Data analytics expert and author Ryan Wade shows you how to use R and Python to perform tasks that are extremely hard, if not impossible, to do using native Power BI tools. For example, you will learn to score Power BI data using custom data science models and powerful models from Microsoft Cognitive Services.The R and Python languages are powerful complements to Power BI. They enable advanced data transformation techniques that are difficult to perform in Power BI in its default configuration but become easier by leveraging the capabilities of R and Python. If you are a business analyst, data analyst, or a data scientist who wants to push Power BI and transform it from being just a business intelligence tool into an advanced data analytics tool, then this is the book to help you do that.WHAT YOU WILL LEARN* Create advanced data visualizations via R using the ggplot2 package* Ingest data using R and Python to overcome some limitations of Power Query* Apply machine learning models to your data using R and Python without the need of Power BI premium capacity* Incorporate advanced AI in Power BI without the need of Power BI premium capacity via Microsoft Cognitive Services, IBM Watson Natural Language Understanding, and pre-trained models in SQL Server Machine Learning Services * Perform advanced string manipulations not otherwise possible in Power BI using R and PythonWHO THIS BOOK IS FORPower users, data analysts, and data scientists who want to go beyond Power BI’s built-in functionality to create advanced visualizations, transform data in ways not otherwise supported, and automate data ingestion from sources such as SQL Server and Excel in a more concise wayRYAN WADE is a data analytic professional with over 20 years of experience. His education and work experience enable him to have a holistic view of analytics from a technical and business viewpoint. He has an MCSE with an emphasis on BI reporting and Microsoft R. He has an advanced understanding of R, Python, DAX, T-SQL, M, and VBA. He knows how to leverage those programming languages for on-premise and cloud-based data analytics solutions using the Microsoft Data Platform.Ryan is a data analytics enthusiast and has spoken at R meetups, Python meetups, SQLSaturdays, TDWI Conference, and PASS Summit about various data analytics topics. He is the developer of a comprehensive online course for ExcelTv showing how to implement R in Power BI for advanced data analytics and data visualization.PART I. CREATING CUSTOM DATA VISUALIZATIONS USING R1. The Grammar of Graphics2. Creating R custom visuals in Power BI using ggplot2PART II. INGESTING DATA INTO THE POWER BI DATA MODEL USING R AND PYTHON3. Reading CSV Files4. Reading Excel Files5. Reading SQL Server Data6. Reading Data into the Power BI Data Model via an APIPART III. TRANSFORMING DATA USING R AND PYTHON7. Advanced String Manipulation and Pattern Matching8. Calculated Columns using R and PythonPART IV. MACHINE LEARNING & AI IN POWER BI USING R AND PYTHON9. Applying Machine Learning and AI to your Power BI Data Models10. Productionizing Data Science Models and Data Wrangling Scripts.
Technisches Konstruieren mit OpenSCAD
Das Design dreidimensionaler Modelle mit Werkzeugen wie Blender oder 3D Studio Max ist eine Aufgabe, die ingenieurwissenschaftlich begabte Personen nur allzu gern delegieren.OpenSCAD wählt einen erfrischend anderen Zugang. Anstatt ein Objekt als Punktwolke zu betrachten, schreibt der Modellerzeuger in einer an Javascript erinnernden Sprache ein Programm. Dieses beschreibt die zu erzeugende Geometrie als eine Serie von Arbeitsschritten. Dreidimensionale Modelle entstehen so in einem Workflow, der an die Entwicklung klassischer ingenieurwissenschaftliche Güter erinnert. Wegen der Nähe zur manuellen Fertigung mit Werkzeug ist das ein Prozess, der Ingenieuren gut in die Hände spielt.Aber Achtung: trotz der Einfachheit der Syntax ist OpenSCAD kein primitives Modellierungsprogramm. Umfangreiche Scriptingmöglichkeiten sorgen dafür, dass sich die Modelle dynamisch an geänderte Situationen anpassen.Dieses Lehrbuch demonstriert die Möglichkeiten von OpenSCAD anhand praktischer Beispiele. Freuen Sie sich auf Ersatzknöpfe für ein LeCroy-Oszilloskop, Garderobenstangenhalter, einen Halter für Seifenspender und diverse andere Beispiele aus dem realen Leben.Der mit mehr als 15 Dienstjahren Erfahrung ausgestattete Autor entwickelte dieses für Linux und Windows gleichermaßen geeignete Buch explizit für informatikaffine Personen. Wenn Sie mit irgendeiner Programmiersprache Erfahrung haben, ist dieses Buch ihr Weg zum schnellen und unbürokratischen Erzeugen dreidimensionaler Modelle.Tam Hanna programmiert und entwickelt seit mehr als 15 Jahren Microcontroller und Prozessrechnersysteme für verschiedene Anwendungsfälle. Neben seiner Consultingtätigkeit hält er Vorträge auf Kongressen, verfasst Fachartikel für diverse Magazine und agiert als Tutor. Sein viel beachteter Instagram-Kanal liefert Hintergrundinformationen zu Messtechnik und Elektronik.
Linux Security Fundamentals
Linux Security Fundamentals provides basic foundational concepts of securing a Linux environment. The focus is the digital self-defense of an individual user. This includes a general understanding of major threats against individual computing systems, networks, services and identity as well as approaches to prevent and mitigate them.This book is useful for anyone considering a career as a Linux administrator or for those administrators who need to learn more about Linux security issues. Topics include:* Security Concepts* Encryption* Node, Device and Storage Security* Network and Service Security* Identity and PrivacyReaders will also have access to Sybex's superior online interactive learning environment and test bank, including chapter tests, a practice exam, electronic flashcards, a glossary of key terms.DAVID CLINTON is a Linux server admin and Amazon Web Services solutions architect who has worked with IT infrastructure in both academic and enterprise environments. He has created video courses teaching AWS and Linux administration, server virtualization, and IT security for Pluralsight. He has also written or cowritten a dozen technology books, including AWS Certified Solutions Architect Study Guide: Associate (SAA-C01) Exam, Second Edition, and AWS Certified Cloud Practitioner Study Guide: Foundational (CLF-C01) Exam.Introduction xiiiCHAPTER 1 USING DIGITAL RESOURCES RESPONSIBLY 1Protecting Personal Rights 2Protecting Digital Privacy 4What is Personal Data? 4Where Might My Personal Data Be Hanging Out? 4What Are My Responsibilities as a Site Administrator? 6Can Escaped Genies Be Forced Back into Their Bottles? 6What Can I Do as a User? 7Establishing Authenticity 7Think About the Source 8Be Aware of Common Threat Categories 8Summary 9Back to the Basics 10Review Questions 11CHAPTER 2 WHAT ARE VULNERABILITIES AND THREATS? 15The Basics: What Are We Trying to Accomplish Here? 16What Are Vulnerabilities and Threats? 17What Can Be Exploited? 17Who’s Doing the Exploiting? 18Why Do They Attack? 19Common Vulnerabilities 20Software Vulnerabilities 20Hardware Vulnerabilities 21Bioware Vulnerabilities 21Digital Espionage 21USB Devices 21Backdoors 22Wireless Entry Points 22Stolen Credentials 23Data Breaches 23Identity Theft (Besides Breaches) 24Malware 24Network-Based Attacks 25Man-in-the-Middle Attacks 25Denial-of-Service and Distributed Denial-of-Service Attacks 26Network Routing Attacks 26Summary 26Back to the Basics 27Review Questions 28CHAPTER 3 CONTROLLING ACCESS TO YOUR ASSETS 33Controlling Physical Access 34Understanding Your Devices 34Protecting Your Devices 36Managing Authentication Through Effective Password Use 38Managing Authorization Through Permissions 44Controlling Network Access 45Firewalls 45Virus and Malware Protection 48Educating Your Users 49Controlling Software Sources 50PC Software Repositories 51Mobile Package Management 51Summary 52Back to the Basics 52Review Questions 54CHAPTER 4 CONTROLLING NETWORK CONNECTIONS 59Understanding Network Architecture 60The Transmission Control Protocol 60The Internet Protocol 61Understanding the Domain Name System 64Auditing Networks 65Network Auditing Tools 66Automating Audits 70Securing Networks 71Patch Your Software 71Physically Secure Your Infrastructure 73Secure Your Network Behavior 73Other Stuff 74Summary 74Back to the Basics 75Review Questions 76CHAPTER 5 ENCRYPTING YOUR DATA AT REST 81What is Encryption? 82Encryption Usage Patterns 85What Should You Encrypt? 85Understanding Hashing vs. Encryption 86What Are Blockchains? 86Encryption Technologies 87Summary 89Back to the Basics 89Review Questions 90CHAPTER 6 ENCRYPTING YOUR MOVING DATA 93Website Encryption 94Why You Should Use Encryption 95How Website Encryption Works 96Generating Certificates 98Email Encryption 99GNU Privacy Guard 100Does Gmail Encrypt Your Emails? 100Working with VPN Connections and Software Repositories 100Securing Your Actions Using VPNs 101Securing Transfers from Software Repositories 104Summary 105Back to the Basics 105Review Questions 106CHAPTER 7 RISK ASSESSMENT 109Conducting Open Source Intelligence Gathering 111Accessing Public Vulnerability Databases 112Vulnerability Data Frameworks 112Vulnerability Data Formats 113Vulnerability Data Metrics 114Vulnerability Data Management Tools 114Conducting Vulnerability Scans 115Conducting Penetration Tests 117Attack Vectors 118Tooling Frameworks 118Follow-Up 119Summary 119Back to the Basics 120Review Questions 121CHAPTER 8 CONFIGURING SYSTEM BACKUPS AND MONITORING 125Why You Need to Get Backups Right the First Time 127Appreciating the Risks 128Spreading Your Backups Across Multiple Sites 129Testing Your Backups 130Meeting Regulatory Compliance 131Backup Types 132Incremental Backups 132Differential Backups 133Backup Life Cycles 133Multitier Backups 133Multisite Storage Solutions 134Disaster Recovery Planning 134Configuring Monitoring and Alerts 135Working with System Logs 135Intrusion Detection 136Summary 137Back to the Basics 138Review Questions 139CHAPTER 9 RESOURCE ISOLATION DESIGN PATTERNS 143Configuring Network Firewalling 145Balancing Public and Private Networks 145Building Isolated Development Environments 147Working with Sandbox Environments 148Use Cases for Sandboxes 148Sandbox Designs 149Controlling Local System Access 150Configuring Mandatory Access Controls 150Setting Usage Quotas 151Summary 152Back to the Basics 152Review Questions 153APPENDIX ANSWERS TO REVIEW QUESTIONS 155Chapter 1: Using Digital Resources Responsibly 156Chapter 2: What are Vulnerabilities and Threats? 157Chapter 3: Controlling Access to Your Assets 158Chapter 4: Controlling Network Connections 160Chapter 5: Encrypting Your Data at Rest 161Chapter 6: Encrypting Your Moving Data 162Chapter 7: Risk Assessment 163Chapter 8: Configuring System Backups and Monitoring 165Chapter 9: Resource Isolation Design Patterns 166Index 167
Podcasting For Dummies
ADD YOUR VOICE TO THE PODCASTING REVOLUTION!The world is tuning into podcasts in larger and larger numbers. When you’re ready to add your own voice to the mix, this book will help you find your niche. Featuring top tech information, production insight, and promotional tips, this best-selling podcasting reference shares the latest on podcasting trends and new audience demographics.Written by a pair of podcasting pioneers, Podcasting For Dummies will help you refine your podcast idea, identify your audience, and get the scoop on how to record, edit, and share your work. You’ll also learn how to apply the methods top podcasters monetize and market their work.* Record your voice and conduct high-quality interviews for your new or existing podcast * Edit, upload, and share podcast episodes online—and find people who will listen * Learn how to make money as a podcaster or live streamer * Discover interesting and original podcasts to inspire your own work Podcasting for Dummies is your friendly tutor in the art of audio content creation. So start talking!TEE MORRIS is an award-winning podcaster and the author of Twitch For Dummies and Discord For Dummies.CHUCK TOMASI is a Developer Advocate who has created thousands of hours of content for work and fun. Foreword xvINTRODUCTION 1About This Book 1How to Use This Book 2Conventions Used in This Book 3Bold Assumptions 4How This Book is Organized 5Part 1: Podcasting on a Worldwide Frequency 5Part 2: The Hills Are Alive with the Sound of Podcasting 5Part 3: So You’ve Got This Great Recording of Your Voice: Now What? 5Part 4: Start Spreadin’ the News about Your Podcast 6Part 5: Pod-sibilities to Consider for Your Show 6Part 6: The Part of Tens 6Icons Used in This Book 7Beyond the Book 7Where to Go from Here 8PART 1: PODCASTING ON A WORLDWIDE FREQUENCY 9CHAPTER 1: GETTING THE SCOOP ON PODCASTING 11Deciding Whether Podcasting is for You 12You want to deliver media on a regular basis 13You want to reach beyond the boundaries of broadcast media 14You have something to say 14You want to hear from your listeners 15Creating a Podcast 15Looking for the bare necessities 16Recording your first podcast 17Compressing your audio files 18Uploading your audio to the web 18Grabbing listeners 20There’s an App for That 21The old-timer: Apple Podcasts 22Podcasting on the go: Stitcher 23Welcome the game-changer: Overcast 25Podcasting with the G-man: Google Play Music 27A new 800-pound gorilla: Spotify 28Other Podcast Resources 30CHAPTER 2: GETTING THE GADGETS TO PRODUCE A PODCAST 31Finding the Right Mic 32A Beginner’s Guide to Mics 33Investing in a high-end mic 35Podcasts Well with Others: The Mixing Board 40The anatomy of a mixing board 41Hooking up a mixer to your computer 43Accessorize! Accessorize! Accessorize! 45CHAPTER 3: BUILDING YOUR PODCAST’S DIGITAL WORKSTATION 51Budget-Friendly (a.k.a Free) Software 52Audacity: The risk-free option for all 52Cakewalk by Bandlab for Windows: A complementary Step in Running with the Pros 53GarageBand: Moby in your Mac! 54The Sky’s the Limit: Big-Budget Software 57Adobe Audition 57Apple Logic Pro X 58Gluing It Together with RSS 59Keep it simple and get a blog! 61Doing it by hand 63Podcast Management 101 64Size does matter 64Bandwidth demystified 65CHAPTER 4: GO, GO, POWER PODCASTERS! 67Podcasting with Your Laptop 68Mackie Onyx Blackjack 68Shure MVi 69Podcasting with Your Mobile Devices 70A Shure Thing: The MV5 and MV51 71Two for the Røde: The VideoMic Me and smartLav+ 72Podcasting with Portable Recorders 74Zoom-Zoom-Zoom: The Handy Recorder line 74From Cloud to Computer: Portable Audio Workflow 78Getting audio from your portable recorder 78Getting audio from your portable device 80PART 2: THE HILLS ARE ALIVE WITH THE SOUND OF PODCASTING 83CHAPTER 5: BEFORE YOU HIT THE RECORD BUTTON 85Choosing a Unique Topic for Your Podcast 86Finding Your Voice 87What if I hear more than one voice? 89Deciding Whether You Need an Outline or Script 92Determining a Length for Your Show 94The hidden value of the short podcast 94A little length won’t kill you 95Finding that happy medium 96Mark Your Calendar: Posting Schedule 97Posting daily 97Posting weekly 98Posting biweekly (or fortnightly for our friends in the Commonwealth) 98Posting monthly 99I Hear Music (and It Sounds Like Police Sirens!) 100The powers that be 100I can name that tune I wrote it! 105I’ll take the First: Free speech versus slander 106CHAPTER 6: INTERVIEW-FU: TALK TO ME, GRASSHOPPER 107I’ll Have My People Call Your People: Interview Requests 108Preparing for Interviews 110Asking really great questions 110Avoiding really bad questions 113Feelin’ the synergy 114Recording Interviews 116Recording using Skype 116Recording using OBS 118Recording using hardware 121Prepping Your Green Room for Guests 122Welcoming in-studio guests 123Meeting guests on their own turf 123Ensuring Trouble-Free Recordings 125CHAPTER 7: SO WHAT ARE YOU WAITING FOR? RECORD, ALREADY! 127Did Your Sound Check Clear the Bank? 128Understanding dB levels 128Setting your levels 130Noises Off: Capturing Ambient Noise 133Identifying ambient noise 133Minimizing ambient noise 134Now Take Your Time and Hurry Up: Pacing and Clock Management 136Take the potato out of your mouth and enunciate 137And now let’s take a break for station identification 138Concerning Tangents and Their Val — Oh, Look, a Butterfly! 140“Say, that reminds me of something ” 140“But getting back to what I was saying earlier ” 141Time to Push the Big Red Button! 142Getting started with GarageBand 143Getting started with Audacity 144CHAPTER 8: CLEANUP, PODCAST AISLE 8! 147A Few Reasons to Consider Editing 148The Art of Editing 149Editing with GarageBand 150Editing with Audacity 152Making Your Musical Bed and Lying in It: Background Music 154Finding the right balance 155Applying bed music the right way 156Setting volume levels for bed music 157Making an Entrance: Intros 161Theme music 162Intro greeting 162Exit, Stage Left: Outros 163Leave the audience wanting more 164Catch phrase sign off 164Credits roll 165Coming soon to a media player near you 165PART 3: SO YOU’VE GOT THIS GREAT RECORDING OF YOUR VOICE: NOW WHAT? 167CHAPTER 9: SHRINK THAT PUPPY AND SLAP A LABEL ON IT 169A Kilobit of Me, and a Whole Lot of You: Understanding Kbps 170Care for a Sample, Sir? (Audio Sample Rates) 173ID3 Tags: The 411 of Podcasting 176Tell me about yourself: All about ID3 tags 176IDentity crisis: Making ID3 tags work for podcasting 177Creating and editing ID3 tags 179CHAPTER 10: MOVE IT ON UP (TO YOUR WEB SERVER) 183Show Art: Getting Graphic with Your Podcast 184Adopting an Effective File Naming Convention 186Understanding How FTP Works 188Making Your Connection with an FTP Application 189Step by step (or quack by quack) setup for Cyberduck 190Step by step setup for FileZilla 191A place on your web server for your stuff 192Uploading your files 193Uploading to a Podcast-Specific Host 195CHAPTER 11: PROVIDING SHOW NOTES 197Show Note Etiquette 197Planning the Post 199It’s all in the details 200A picture is worth a thousand words 201Posting Your Show Notes 203Posting in WordPress 203Posting on LibSyn 207Boosting Search Engine Rankings with Good Show Notes 209Loading up your titles 210Soliciting backlinks 211PART 4: START SPREADIN’ THE NEWS ABOUT YOUR PODCAST 213CHAPTER 12: SPEAKING DIRECTLY TO YOUR PEEPS 215Gathering Listener Feedback 216Fostering Comments on Your Blog 217Focusing on Online Forums 218Social Media 221Facebook 221Twitter 222Pinterest 222YouTube? For audio?! 223Instagram 224Discord: The Lava Lamp of Online Communications 226Using Voicemail 229Seeking Out the Comments of Others 231Trying a general search 232Searching within a site, blog, or social media platform 232When the Comments Are Less than Good 233CHAPTER 13: FISHING FOR LISTENERS 237Getting Your Podcast Ready for Promotion 237Polishing your presentation 238Checking your bandwidth 238Figuring out your USP 239Exploring Various Advertising Options 240Give me a boost, Facebook 241Insta-traffic with Instagram 244Writing press releases 247Promoting Your Podcast 250Optimizing your site for search engines 250Submitting promos to other podcasts 250Recording your promo 251Giving interviews 253Generating buzz 254PART 5: POD-SIBILITIES TO CONSIDER FOR YOUR SHOW 255CHAPTER 14: SHOW ME THE MONEY 257How Much Money Can You Make? 258Convincing Advertisers to Give You Money 261Developing a media kit 262Establishing a rate sheet 267Getting a Sponsor 267Asking Your Listeners for Money 270Gathering listener donations with PayPal 270Building patrons with Patreon 272Selling stuff 275CHAPTER 15: PODCASTING FOR PUBLICITY 277Podcasting and Politics 278Telling the World a Story, One Podcast at a Time 281Keeping Good Company: Community Podcasts 285Creating a podcast to encourage testimony 285Podcasting for fun (while promoting in the process) 286CHAPTER 16: PODCASTING FOR PASSION 291The Philosophical Question for All Podcasters: Why Do We Do It? 292Gaining perspective on passion 292Podcasting passion with a purpose 294Sharing your passion with friends 294A passionate love for the podcast 296Holding Interest: Keeping a Podcast’s Passion Alive 298Podcasting on puree: Mixing it up 299Starting a second (or third) podcast 300Moving forward with a plan 304When Podcasting, Be Like Bruce Lee 306CHAPTER 17: ONE GIANT LEAP FOR PODCASTING: STREAMING CONTENT 309In the Beginning: The Early Days of Video Podcasting and Live Broadcasts 310Light, cameras, and say what: The unexpected demands of video podcasting 310Going live (if you’re lucky): Early attempts at live podcasting 313Streaming Media: Podcasting Evolved 313Going Live for Realz This Time: Streaming Your Podcast 316The first step: Setting up a streaming account 316Setting the stage: Working with Streamlabs OBS 318And we’re live! Podcasting in the moment 322It’s a stream, it’s a podcast It’s a stream and a podcast! 323PART 6: THE PART OF TENS 327CHAPTER 18: TEN TYPES OF PODCASTS TO CHECK OUT 329Tech Podcasts 330Independent Media Podcasts 331Science Podcasts 333Self-Development Podcasts 335Comedy Podcasts 338Slice-of-Life Podcasts 339Gaming Podcasts 340Podcasts of the Pen 342Geek Podcasts 343Podcasts about Podcasting 345CHAPTER 19: TOP TEN REASONS TO PODCAST 347You Are Considered a Subject Matter Expert 348You Are Passionate about the Subject 349You’ve Got a Creative Itch to Scratch 350You Like Playing with Tech Toys 352Bring Your Friends Together 353All the Cool Kids Are Doing It 354I Can Do More 354Bring Out the Best in You 356Talk to Interesting People 357The Ultimate Thrill Ride 358CHAPTER 20: TEN ORIGINAL PODCASTERS 361Mignon Fogarty 362Adam Curry 363Mur Lafferty 363Steve Boyett 364Adam Christianson 365Dave Slusher 366Scott Sigler 367Michael Butler 368Dr Pamela Gay 369Brian Ibbott 370Authors’ Footnote 371Index 373
QuickBooks 2021 For Dummies
SAVE ON EXPENSIVE PROFESSIONALS WITH THIS TRUSTED BESTSELLER!Running your own business is pretty cool, but when it comes to the financial side—accounts and payroll, for instance—it's not so cool! That's why millions of small business owners around the world count on QuickBooks to quickly and easily manage accounting and financial tasks and save big time on hiring expensive professionals.In a friendly, easy-to-follow style, small business guru and bestselling author Stephen L. Nelson checks off all your financial line-item asks, including how to track your profits, plan a perfect budget, simplify tax returns, manage inventory, create invoices, track costs, generate reports, and pretty much any other accounts and financial-planning task that turns up on your desk!* Keep up with the latest QuickBooks changes* Use QuickBooks to track profits and finances* Balance your budget* Back up your data safelyThe fully updated new edition of QuickBooks For Dummies takes the sweat (and the expense) out of cooking the books—and gives you more time to savor the results of your labors!STEPHEN L. NELSON, MBA, CPA, MS in Taxation provides accounting, business advisory, tax planning, and tax preparation services to small businesses. His more than 100 books—including all editions of QuickBooks For Dummies, have sold over 5 million copies.INTRODUCTION 1About This Book 1Foolish Assumptions 2Icons Used in This Book 3Beyond the Book 3Where to Go from Here 3PART 1: QUICKLY INTO QUICKBOOKS 5CHAPTER 1: QUICKBOOKS: THE HEART OF YOUR BUSINESS 7Why QuickBooks? 7Why you need an accounting system 8What QuickBooks does 9Why not QuickBooks online? 10What Explains QuickBooks’ Popularity? 11What’s Next, Dude? 12How to Succeed with QuickBooks 13Budget wisely, Grasshopper 13Don’t focus on features 14Outsource payroll 15Get professional help 16Use both the profit and loss statement and the balance sheet 16CHAPTER 2: THE BIG SETUP 17Getting Ready for QuickBooks Setup 17The big decision 18The trial balance of the century 19The mother of all scavenger hunts 21Stepping through QuickBooks Setup 23Starting QuickBooks 23Using the Express Setup 25The Rest of the Story 32Should You Get Your Accountant’s Help? 33CHAPTER 3: POPULATING QUICKBOOKS LISTS 35The Magic and Mystery of Items 35Adding items you might include on invoices 37Creating other wacky items for invoices 45Editing items 49Adding Employees to Your Employee List 49Customers Are Your Business 51It’s Just a Job 55Adding Vendors to Your Vendor List 59The Other Lists 63The Fixed Asset Item list 63The Price Level list 64The Billing Rate Levels list 64The Sales Tax Code list 65The Class list 65The Other Names list 65The Sales Rep list 66Customer, Vendor, and Job Types lists 66The Terms list 67The Customer Message list 67The Payment Method list 67The Ship Via list 68The Vehicle list 68The Memorized Transaction list 68The Reminders list 68Organizing Lists 69Printing Lists 69Exporting List Items to Your Word Processor 70Dealing with the Chart of Accounts List 70Describing customer balances 70Describing vendor balances 71Camouflaging some accounting goofiness 71Supplying the missing numbers 77Checking your work one more time 80PART 2: DAILY ENTRY TASKS 81CHAPTER 4: CREATING INVOICES AND CREDIT MEMOS 83Making Sure That You’re Ready to Invoice Customers 84Preparing an Invoice 84Fixing Invoice Mistakes 91If the invoice is still displayed onscreen 91If the invoice isn’t displayed onscreen 91Deleting an invoice 92Preparing a Credit Memo 92Fixing Credit Memo Mistakes 96Printing Invoices and Credit Memos 96Loading the forms into the printer 97Setting up the invoice printer 97Printing invoices and credit memos as you create them 100Printing invoices in a batch 101Printing credit memos in a batch 103Sending Invoices and Credit Memos via Email 104Customizing Your Invoices and Credit Memos 105CHAPTER 5: REELING IN THE DOUGH 107Recording a Sales Receipt 108Printing a Sales Receipt 112Special Tips for Retailers 114Correcting Sales Receipt Mistakes 115Recording Customer Payments 116Correcting Mistakes in Customer Payments Entries 121Making Bank Deposits 121Improving Your Cash Inflow 124Tracking what your customers owe 124Assessing finance charges 125Dealing with deposits 129CHAPTER 6: PAYING THE BILLS 131Pay Now or Pay Later? 131Recording Your Bills by Writing Checks 132The slow way to write checks 132The fast way to write checks 138Recording Your Bills the Accounts Payable Way 140Recording your bills 141Entering your bills the fast way 145Deleting a bill 146Remind me to pay that bill, will you? 147Paying Your Bills 149Tracking Vehicle Mileage 152Paying Sales Tax 153CHAPTER 7: INVENTORY MAGIC 155Setting Up Inventory Items 156When You Buy Stuff 157Recording items that you pay for up front 157Recording items that don’t come with a bill 157Paying for items when you get the bill 159Recording items and paying the bill all at once 161When You Sell Stuff 161How Purchase Orders Work 162Customizing a purchase order form 163Filling out a purchase order 163Checking up on purchase orders 166Receiving purchase order items 166Assembling a Product 167Identifying the components 167Building the assembly 168Time for a Reality Check 169Dealing with Multiple Inventory Locations 171Manually keep separate inventory-by-location counts 171Use different item numbers for different locations 172Upgrade to QuickBooks Enterprise Solutions 172The Lazy Person’s Approach to Inventory 173How periodic inventory systems work in QuickBooks 173The good and bad of a periodic inventory 174CHAPTER 8: KEEPING YOUR CHECKBOOK 175Writing Checks 175Writing checks from the Write Checks window 176Writing checks from the register 177Changing a check that you’ve written 179Packing more checks into the register 180Depositing Money in a Checking Account 181Recording simple deposits 181Depositing income from customers 182Transferring Money between Accounts 185Setting up a second bank account 185Recording deposits into the new account 185About the other half of the transfer 187Changing a transfer that you’ve already entered 187Working with Multiple Currencies 188To Delete or to Void? 188Handling NSF Checks from Customers 190The Big Register Phenomenon 190Moving through a big register 191Finding that darn transaction 191CHAPTER 9: PAYING WITH PLASTIC 193Tracking Business Credit Cards 193Setting up a credit card account 194Selecting a credit card account so that you can use it 195Entering Credit Card Transactions 196Recording a credit card charge 197Changing charges that you’ve already entered 199Reconciling Your Credit Card Statement and Paying the Bill 200So What about Debit and ATM Cards? 201So What about Customer Credit Cards? 201PART 3: STUFF YOU DO FROM TIME TO TIME 203CHAPTER 10: PRINTING CHECKS 205Getting the Printer Ready 205Printing a Check 208A few words about printing checks 209Printing a check as you write it 209Printing checks by the bushel 211What if I make a mistake? 214Oh where, oh where do unprinted checks go? 215Printing a Checking Register 215CHAPTER 11: PAYROLL 219Getting Ready to Do Payroll without Help from QuickBooks 219Doing Taxes the Right Way 220Getting an employer ID number 220Signing up for EFTPS 221Employees and employers do their part 221Getting Ready to Do Payroll with QuickBooks 221Paying Your Employees 223Paying Payroll Liabilities 226Paying tax liabilities if you use a full-meal-deal payroll service 226Paying tax liabilities if you don’t use a full-meal-deal payroll service 226Paying other nontax liabilities 227Preparing Quarterly Payroll Tax Returns 228Using the Basic Payroll service 228Using a full-meal-deal payroll service 228Using the QuickBooks Enhanced Payroll service 228Filing Annual Returns and Wage Statements 229The State Wants Some Money Too 230CHAPTER 12: BUILDING THE PERFECT BUDGET 231Is This a Game You Want to Play? 231All Joking Aside: Some Basic Budgeting Tips 232A Budgeting Secret You Won’t Learn in College 233Setting Up a Secret Plan 234Adjusting a Secret Plan 237Forecasting Profits and Losses 237Projecting Cash Flows 238Using the Business Planner Tools 238CHAPTER 13: ONLINE WITH QUICKBOOKS 239Doing the Electronic Banking Thing 239So what’s the commotion about? 239A handful of reasons to be cautious about banking online 240Making sense of online banking 243Signing up for the service 243Making an online payment 243Transferring money electronically 245Changing instructions 246Transmitting instructions 246Message in a bottle 247A Quick Review of the Other Online Opportunities 248PART 4: HOUSEKEEPING CHORES 249CHAPTER 14: THE BALANCING ACT 251Balancing a Bank Account 251Giving QuickBooks information from the bank statement 252Marking cleared checks and deposits 254Eleven Things to Do If Your Nononline Account Doesn’t Balance 258CHAPTER 15: REPORTING ON THE STATE OF AFFAIRS 263What Kinds of Reports Are There, Anyway? 263Creating and Printing a Report 266Visiting the report dog-and-pony show 268Editing and rearranging reports 269Reports Made to Order 272Processing Multiple Reports 275Your Other Reporting Options 275Last but Not Least: The QuickReport 276CHAPTER 16: JOB ESTIMATING, BILLING, AND TRACKING 279Turning On Job Costing 279Setting Up a Job 280Creating a Job Estimate 281Revising an Estimate 284Turning an Estimate into an Invoice 284Comparing Estimated Item Amounts with Actual Item Amounts 286Charging for Actual Time and Costs 287Tracking Job Costs 288CHAPTER 17: FILE MANAGEMENT TIPS 289Backing Up is (Not That) Hard to Do 289Backing up the quick-and-dirty way 291Getting back the QuickBooks data you backed up 296Using the Accountant’s Copy 298Working with Portable Files 299Using an Audit Trail 300Using a Closing Password 300CHAPTER 18: FIXED ASSETS AND VEHICLE LISTS 303What is Fixed-Assets Accounting? 303Fixed-Assets Accounting in QuickBooks 305Setting Up a Fixed Asset List 306Adding items to the Fixed Asset list 306Adding fixed-asset items on the fly 308Editing items in the Fixed Asset list 309Tracking Vehicle Mileage 310Identifying your vehicles 310Recording vehicle miles 312Using the vehicle reports 313Updating vehicle mileage rates 313PART 5: THE PART OF TENS 315CHAPTER 19: TIPS FOR HANDLING (ALMOST) TEN TRICKY SITUATIONS 317Tracking Depreciation 317Selling an Asset 318Selling a Depreciable Asset 319Owner’s Equity in a Sole Proprietorship 320Owner’s Equity in a Partnership 320Owner’s Equity in a Corporation 321Multiple-State Accounting 322Getting a Loan 323Repaying a Loan 323CHAPTER 20: (ALMOST) TEN SECRET BUSINESS FORMULAS 325The First “Most Expensive Money You Can Borrow” Formula 326The Second “Most Expensive Money You Can Borrow” Formula 328The “How Do I Break Even?” Formula 328The “You Can Grow Too Fast” Formula 331How net worth relates to growth 331How to calculate sustainable growth 332The First “What Happens If ?” Formula 333The Second “What Happens If ?” Formula 335The Economic Order Quantity (Isaac Newton) Formula 337The Rule of 72 338PART 6: APPENDIXES 341APPENDIX A: INSTALLING QUICKBOOKS IN TEN EASY STEPS 343APPENDIX B: IF NUMBERS ARE YOUR FRIENDS 347APPENDIX C: SHARING QUICKBOOKS FILES 365Index 375
Big Data
Manipulating and processing masses of digital data is never a purely technical activity. It requires an interpretative and exploratory outlook - already well known in the social sciences and the humanities - to convey intelligible results from data analysis algorithms and create new knowledge.Big Data is based on an inquiry of several years within Proxem, a software publisher specializing in big data processing. The book examines how data scientists explore, interpret and visualize our digital traces to make sense of them, and to produce new knowledge. Grounded in epistemology and science and technology studies, Big Data offers a reflection on data in general, and on how they help us to better understand reality and decide on our daily actions.ÉGLANTINE SCHMITT holds a PhD in Philosophy of Science from the University of Technology of Compiègne (Sorbonne Universités), France. After 7 years at Proxem, she has devoted her career to building bridges between humans and technology through product management and design, in a start-up environment.Introduction viiCHAPTER 1. FROM TRACE TO WEB DATA: AN ONTOLOGY OF THE DIGITAL FOOTPRINT 11.1. The epistemology of the cultural sciences 71.2. The footprint in evidential sciences 91.3. The log or activity history 141.4. The digital footprint as a web log 181.5. The intentionality of digital footprints 201.6. Data as theoretically-loaded footprints 24CHAPTER 2. TOWARD AN EPISTEMIC CONTINUITY ANCHORED IN THE CULTURAL SCIENCES 292.1. Digital technology in the cultural sciences 312.2. Field and corpus: two modes of access to reality 342.3. Virtual methods, a reconstruction of access to the field 382.4. The challenges of the technical revolution of the text 482.5. From the web as an object to the web as a corpus 592.6. Conclusion 69CHAPTER 3. THE STATUS OF COMPUTATION IN DATA SCIENCES 713.1. Making data computable 733.2. The field of computability 773.3. Computational thinking 813.4. Computation in the natural sciences 873.5. From exploratory analysis to data mining 983.6. The institutional and theoretical melting pot of data science 1073.7. The contribution of artificial intelligence 1153.8. Conclusion 122CHAPTER 4. A PRACTICAL BIG DATA USE CASE 1254.1. Presentation of the case study 1264.2. Customer experience and coding of feedback1314.3. From the representative approach to the “big data” project 1344.4. Data preparation 1374.5. Design of the coding plan 1404.6. The constitution of linguistic resources 1434.7. Constituting the coding plan 1484.8. Visibility of the language activity 1534.9. Storytelling and interpretation of the data 1554.10. Conclusion 161CHAPTER 5. FROM NARRATIVES TO SYSTEMS: HOW TO SHAPE AND SHARE DATA ANALYSIS 1655.1. Two epistemic configurations 1665.2. The genesis of systems 1725.3. Conclusion 183CHAPTER 6. THE ART OF DATA VISUALIZATION 1876.1. Graphic semiology 1876.2. Data cartography 1986.3. Representation as evidence 2036.4. The visual language of design in system configuration 2076.5. Materialization and interpretation of recommendations 214CHAPTER 7. KNOWLEDGE AND DECISION 2197.1. Big data, a pragmatic epistemology? 2207.2. Toward gradual validity of knowledge 2277.3. Deciding, knowing and measuring 233Conclusion 239References 243Index 257
Raku Recipes
Explore Raku problems and solutions using the latest version of the Raku programming language. In Raku Recipes, the emphasis is on applying Raku code to various important tasks and applications including data science, analytics, microservices, and desktop/console applications. There are also fun one-liner script recipes and instructions on how to create mini-languages of your very own.All in all, over 70 recipes cover a broad range of the tasks and problems encountered by a modern Raku developer. You’ll be able to solve problems starting from basics such as input/output and math, to more complex domains such as microservices web sockets, web hooks, and mini-bots.WHAT YOU WILL LEARN* Put Raku to use in a real world environment* Work with Raku modules, including design classes, roles, and more* Query a GeoIP database and extract information from the web* Carry out text processing such as creating a dictionary with fast searches over it and scraping markdown documents* Work with MongoDB, WikiData, and other data sources* Build data science and analytics applications using Raku* Integrate with Python, C, and other languages and libraries* Create mini-languages and shell scripting languages WHO THIS BOOK IS FORWhile some prior experience in Raku may be useful, it is not required. Prior programming experience using other scripting languages, such as Perl, is recommended, however.J.J. Merelo is a professor at the university of Granada, where he has been teaching since 1988. He has been using Perl since 1994, and Perl 6/Raku intensively since December 2016. He trains, teaches, and consults on Perl and Raku projects.* How do I start to put (Perl 6|Raku|Camelia) to use in a real world environment.* Get your tools ready.Put concepts from other languages to use in Perl 6. * Get involved in the community.* Install some external and useful modules.* Detect OS environment and change program behavior according to it.* Input and outputRead files handled as arguments * Read and process files asynchronously* Connect input and output of external utilities and files.* Read and process binary files.* Watch a file for changes* Data science and data analytics* How do I extract unique email addresses/user names from several files.* How do I create a weighted random number generator.How do I work with a spreadsheet, filtering by row or column, or sorting, or converting row into columns or the other way round. * How do I apply a series of transformations to a group of elements and then extract a single quantity from them.* How do I create a random data generator* How do I process big, structured files.* MathHow can you generate mathematical sequences and extract random elements from it. * Program a divide-and-conquer algorithm.* Work with matrices.* Compute Mandelbrot’s and Julia’s set* Look for pairs of integers with a certain property, such as friendly numbers or contiguous primes, to use infinite precision integers.Configuration and execution of programs.* Configure a program using JSON/YAML/.ini files.* Configure a command line command with flags and arguments.* Use shell environment variables in my program.* Advanced/distributed configuration with etcdCreate a Docker container for an application to distribute it easily* Automation of system tasks.* Check log for certain events.* Check logs interactively on the console.* Check git commits for patterns, metadata, or store them.Clean up your Docker image store. * Process the last persons logged to our system* Perl 6 modules* Design classes, roles and modules in Perl 6.* Document your module.* Test your module.* Release it as an open source module for every one.* Use multiple dispatch to speed up applications.Dealing with errors* Design an exception hierarchy.* Deliver meaningful error messages to the user.* Catch and deal with errors in your program.* Debug your application in CommaIDE.* Make grammars fail graciously with pretty errors.* Web and microservices on the client side* Query a GeoIP databaseDownload and extract information from a web site. * Use a web API to get information from a site.* Check IP and addresses by querying Internet services.* Text processing* Scrape markdown documents.* Generate a set of static web pages* Create a dictionary and do fast searches over it* Compute differences in plain textsMicroservices* Create a microservice.* Work with web sockets, connecting to a client.* Respond to web hooks.* Create a mini-bot for Telegram or Slack.* Test your microservice.* Work with data sources.* Work with relational databases.Interface with Redis. * Use an ORM for hight-level data description and access.* Work with MongoDB.* Extract information from WikiData* Create a desktop/console applicationUse full-console UI. * Create an application that uses system windows.* Package your application for release.* Make it work with other desktop applications by using service buses.* Use a common desktop application framework.Interface with libraries and code in other languages* Embed Python programs.* Embed Perl programs.* Run external programs and capture output.* Wrap external libraries in C with NativeCall.* Work with image processing libraries.* Speed up processing* Use data parallelism with hyper/race.Work with asynchronous input/output * Work with concurrency using channels and threads.* Create powerful concurrent programs* Monitor concurrency using CommaIDE.* Create mini-languages* Use mini-languages that show off their possibilities* Create and process a mini-language for recipes.* Process recipes and generate reports.Resume common language patterns. * Convert grammar into a full recipe-processing application that generates HTML or other external format.* Fun one-liners* How do I write a guessing name in a single line of code.* How do I compute the nth element in a sequence with a single line.How do I perform system administration task repeatedly using a single line of code.
Patientenorientierte Digitalisierung im Krankenhaus
Dieses Buch dient Ihnen als Leitfaden für die Digitalisierung im Krankenhaus Gesundheitsbetriebe wie Spitäler stehen in einem Spannungsfeld zwischen steigenden Qualitätsansprüchen und Kosteneffizienz. Deshalb geben Ihnen die Autoren dieses Buchs einen aktuellen Überblick zu den Herausforderungen und den Möglichkeiten der Digitalisierung im Umfeld von Krankenhäusern. Anhand eines fiktiven Beispieles verdeutlichen Ihnen die Verfasser sowohl die Möglichkeiten als auch die Schwierigkeiten dieses Prozesses. Ziel dieses Werks ist es, die Grundlagen der Digitalisierung einer Klinik verständlich für alle Beteiligten darzustellen. Dazu führen die Autoren ein Modell ein, das den Patienten ins Zentrum rückt und das IT-Architekturmanagement mit dem Weg des Patienten durch die Behandlung verknüpft. Zudem erfahren Sie in diesem Buch, wie eine optimale IT-Struktur als Entscheidungs- und Erklärungsgrundlage in einem Krankenhaus dienen kann, um so den Kulturwandel herbeizuführen, der mit einer umfassenden Digitalisierung einhergeht. So schaffen Sie die optimale Basis für zukünftige Prozesse Zu Beginn dieses Buchs erläutern die Autoren, was Digitalisierung überhaupt ist und welche Rolle sie in Krankenhäusern spielt. Markus Mangiapane und Matthias Bender klären Sie über die Fähigkeiten und Voraussetzungen auf, die Sie im Zuge einer erfolgreichen digitalen Transformation benötigen. Die anschließenden Kapitel stellen schwerpunktmäßig folgende Aspekte in den Mittelpunkt: Die vier Pfeiler der digitalen TransformationRechtliche RahmenbedingungenProzessmanagement und -sicherheitEMR Adoption Model (EMRAM)Praktische Umsetzung des Enterprise Architektur Management (EAM)Informationssicherheit und -archivierung Zusätzliche Beispiele aus dem Alltag der Krankenhausinformation schlagen Brücken von der Theorie zur praktischen Anwendung und verdeutlichen die Schwierigkeiten bei der realen Umsetzung der Digitalisierung im Krankenhaus. Mit diesem Werk als Leitfaden sind Sie in der Lage, eine gemeinsame Wissensbasis für die erfolgreiche digitale Transformation von Geschäftsprozessen zu bilden. Das Buch „Patientenorientierte Digitalisierung im Krankenhaus“ ist daher eine Leseempfehlung für: Direktoren und Entscheidungsträger aus den Bereichen CIO, IT oder dem KrankenhausmanagementMedizininformatiker, Ärzte und medizinisches PersonalStudierende der Informatik, Medizininformatik und angrenzender Fächer Einleitung.- Was ist eigentlich Digitalisierung?.- Die vier Pfeiler der digitalen Transformation.- Rechtliche Rahmenbedingungen.- EMR Adoption Model (EMRAM).- Kunden und Patienten.- Grundmodell EAM.- Schichten-Modell.- Implementierung einer Digitalisierungsstrategie mittels EAM.- Fazit.- Literatur.
Welche KI?
Künstliche Intelligenz hat das Potenzial, viele Bereiche unseres Lebens grundlegend zu verändern. Dies betrifft unter anderem Veränderungen der Arbeitswelt, autonome Fahrzeuge oder sogar Waffen, das Gesundheitssystem, demokratische Gesellschaftsstrukturen und die gesamte Lebenswelt. Daraus erwachsen große Chancen für die Gesellschaft, aber auch große Gefahren.In der Analyse solcher Szenarien zeigt sich, dass die Auswirkungen von KI in einer ethischen Detailbetrachtung nicht ausreichend erfasst werden können. Vielmehr müssen sie aus einem umfassenden gesellschaftlichen und menschlichen Zusammenhang beurteilt werden. In diesem Buch wird daher eine Perspektive auf KI gezeigt, die ethische Detailfragen zu den Anwendungen von KI aus der größeren Perspektive philosophischer Reflexion betrachtet.Diese umfasst philosophische Überlegungen zur Auswirkung der Technik und die Betrachtung von Szenarien der Technikentwicklung. Weiterhin werden Veränderungen des Menschenbildes analysiert, die mit der Entwicklung von KI verbunden sind. Damit hängt die Frage zusammen, ob KI Bewusstsein entwickeln kann und ob einer fortgeschrittenen KI ein Rechtsstatus einer elektronischen Persönlichkeit zugeordnet werden soll.Die betrachteten Entwicklungsszenarien umfassen die Veränderung der Arbeitswelt zwischen einer Hoffnung auf eine Entlastung von monotonen und gefährlichen Tätigkeiten einerseits und der Gefahr von Massenarbeitslosigkeit andererseits. Weiterhin werden neben den bekannten Problemen des autonomen Fahrens die Auswirkungen auf Szenarien der Mobilität betrachtet. In Bezug auf den Einsatz von autonomen Waffen und auf die Steuerung der Kriegsführung durch KI wird das Szenario eines neuen Wettrüstens und einer Entgrenzung der Kriegsführung vorgestellt, das eine Ächtung dieser Techniken nahelegt.Für das Gesundheitssystem und die Altenpflege wird das Szenarium einer weiteren Entmenschlichung dieser Bereiche mit einem Konzept kontrastiert, das dem menschlichen Faktor gerade durch die Entlastung von technischen Aufgaben einen neuen Stellenwert gibt. Entsprechende Szenarien werden für die Auswirkungen von KI auf die Demokratie und die Durchdringung der Lebenswelt vorgestellt. Prof. Dr. Stefan Bauberger hat Philosophie, Theologie und Physik studiert. Er hat ein Diplom in Theologie, eine Promotion in theoretischer Physik und eine Habilitation in Philosophie erworben. Er ist an der Hochschule für Philosophie in München als Professor für Naturphilosophie und Wissenschaftstheorie tätig. Seit einigen Jahren liegt sein Schwerpunkt auf der Technikphilosophie, mit besonderer Ausrichtung auf die Künstliche Intelligenz.
Einstieg in Java mit Eclipse
EINSTIEG IN JAVA MIT ECLIPSE //- Einrichtung der Entwicklungsumgebung (Java, Eclipse)- Grundlagen der objektorientierten Programmierung- Einführung in Eclipse- Beschreibung der Java-Sprachelemente (Variablen, Anweisungen, einfache Datentypen, Klassen und Objekte, Aufzählungen, Arrays, Methoden, Operatoren, Verzweigungen, Schleifen, Pakete und Module)- Überblick über die Plattform Java (Bytecode, Laufzeitumgebung mit Garbage Collector, Interpreter und JIT-Compiler, Klassenbibliotheken)- Beispiele und ein Bonuskapitel unter plus.hanser-fachbuch.deBernhard Steppan hat mit diesem Buch einen ausführlichen Einstieg in Java mit Eclipse geschrieben. Das Buch ist vor allem für Leser ohne Programmierkenntnisse geeignet.Der erste Teil des Buches vermittelt das Java- und Eclipse-Basiswissen und führt in die objektorientierteProgrammierung ein.Im zweiten Teil dreht sich alles um die Feinheiten der Sprache Java. Hier entstehen die ersten kleinen Java-Anwendungen. Jedes Kapitel bietet eine Mischung aus Wissensteil und praktischen Übungen und endet mit Aufgaben, die Sie selbstständig durchführen können.Die Technologie Java bildet den Schwerpunkt des dritten Teils. Zudem werden Ihnen Klassenbibliotheken und Algorithmen vorgestellt.Ein größeres Java-Projekt steht im Mittelpunkt des vierten Teils. Anhand einer Anwendung mit grafischer Oberfläche werden Sie hier alle Elemente der vorigen Teile kennenlernen.Im fünften Teil nden Sie die Lösungen zu den Aufgaben im zweiten und dritten Teil des Buches.Ein Buch für alle, die die Java-Programmierung mithilfe der Eclipse-Entwicklungsumgebung erlernenund beherrschen wollen.AUS DEM INHALT //- Programmiergrundlagen- Objektorientierte Programmierung- Entwicklungsumgebung- Programmaufbau- Variablen- Anweisungen- Einfache Datentypen- Klassen und Objekte- Aufzählungen- Arrays- Methoden- Operatoren- Verzweigungen- Schleifen- Pakete und Module Bernhard Steppan ist ein Java-Entwickler der ersten Stunde und hat mehrere C++- und Java-Bücher geschrieben sowie zahlreiche Artikel verfasst. Er arbeitet als IT-Chefarchitekt bei DB Systel, dem Systemhaus der Deutschen Bahn.
Einstieg in Deep Reinforcement Learning
- Grundlegende Konzepte und Terminologie- Praktischer Einsatz mit PyTorch- Projekte umsetzenDieses Buch zeigt Ihnen, wie Sie Agenten programmieren, die basierend auf direktem Feedback aus ihrer Umgebung selbstständig lernen und sich dabei verbessern. Sie werden Netzwerke mit dem beliebten PyTorch-Deep-Learning-Framework aufbauen, um bestärkende Lernalgorithmen zu erforschen. Diese reichen von Deep-Q-Networks über Methoden zur Gradientenmethode bis hin zu evolutionären Algorithmen.Im weiteren Verlauf des Buches wenden Sie Ihre Kenntnisse in praktischen Projekten wie der Steuerung simulierter Roboter, der Automatisierung von Börsengeschäften oder dem Aufbau eines Spiel-Bots an.Aus dem Inhalt:- Strukturierungsprobleme als Markov-Entscheidungsprozesse- Beliebte Algorithmen wie Deep Q-Networks, Policy Gradient-Methode und Evolutionäre Algorithmen und die Intuitionen, die sie antreiben- Anwendung von Verstärkungslernalgorithmen auf reale Probleme Alexander Zai ist Machine Learning Engineer bei Amazon AI und arbeitet an MXNet, das eine Reihe von AWS-Maschinenlernprodukten unterstützt. Er ist auch Mitbegründer von Codesmith, einem Bootcamp für Softwareentwicklung mit Niederlassungen in Los Angeles und New York.Brandon Brown ist Medizinstudent und Data Scientist an der UCLA. Er hat in den letzten drei Jahren ausführlich über maschinelles Lernen auf outlace.com gebloggt.
Controlling mit Excel
• Professionelle Excel-Tools zur Planung und Steuerung• Lösungen für das strategische und operative Controlling• Werkzeuge für Planung, Analyse und Reporting• Praxisnahe Beispiele mit den BI-Tools Power Query, Power Pivot und Power BI• Tipps zu den aktuellsten Excel-Funktionen und -werkzeugen wie dynamische ArraysMit diesem Buch werden Excel-Anwender im Controlling und im Personal- und Projektmanagement zu Excel-Experten. Es enthält zahlreiche Beispiele, professionell und praxisgerecht aufbereitet und verständlich erklärt. Dazu die besten Techniken, die wichtigsten Kalkulationsfunktionen und viele Tipps und Tricks für optimiertes Arbeiten. Zur Automatisierung von Routineaufgaben stehen VBA-Makros zur Auswahl. An Einsteiger richtet sich das VBA-Tutorial.Controller finden Excel-Lösungen von A wie Abschreibung bis Z wie Zinsberechnung, für Personalcontroller gibt es Headcount- und Terminverwaltung, und Projektmanager lernen, wie sie Projektportfolios und Ressourcenpläne verwalten.• Für Microsoft 365• Alle Beispiellösungen und fertige Tabellenmodelle stehen zum Download bereit Ignatz Schels ist Informatiker und erfahrener Excel-Experte. Er leitet seit mehr als 25 Jahren Seminare und Workshops für Controlling, Personal- und Projektmanagement und erstellt Praxislösungen mit VBA in Excel und Access. Er ist zertifizierter Projektfachmann und Autor von mehr als 50 Fachbüchern – viele davon sind Bestseller.Uwe M. Seidel ist Professor für Betriebswirtschaft an der OTH Regensburg und Berater für Unternehmen und öffentliche Institutionen in den Bereichen Rechnungswesen, Controlling und Projektmanagement. Außerdem ist er freiberuflicher Trainer der Controller Akademie AG und leitet den AK Süd I des internationalen Controllervereins (ICV).
Visualizing Health and Healthcare Data
THE ONLY DATA VISUALIZATION BOOK WRITTEN BY AND FOR HEALTH AND HEALTHCARE PROFESSIONALS.In health and healthcare, data and information are coming at organizations faster than they can consume and interpret it. Health providers, payers, public health departments, researchers, and health information technology groups know the ability to analyze and communicate this vast array of data in a clear and compelling manner is paramount to success. However, they simply cannot find experienced people with the necessary qualifications. The quickest (and often the only) route to meeting this challenge is to hire smart people and train them.Visualizing Health and Healthcare Data: Creating Clear and Compelling Visualizations to "See how You're Doing" is a one-of-a-kind book for health and healthcare professionals to learn the best practices of data visualization specific to their field. It provides a high-level summary of health and healthcare data, an overview of relevant visual intelligence research, strategies and techniques to gather requirements, and how to build strong teams with the expertise required to create dashboards and reports that people love to use. Clear and detailed explanations of data visualization best practices will help you understand the how and the why.* Learn how to build beautiful and useful data products that deliver powerful insights for the end user* Follow along with examples of data visualization best practices, including table and graph design for health and healthcare data* Learn the difference between dashboards, reports, multidimensional exploratory displays and infographics (and why it matters)* Avoid common mistakes in data visualization by learning why they do not work and better ways to display the dataWritten by a top leader in the field of health and healthcare data visualization, this book is an excellent resource for top management in healthcare, as well as entry-level to experienced data analysts in any health-related organization.KATHY ROWELL is a nationally recognized health, healthcare, and data visualization expert, lecturer, and author specializing in helping leading organizations analyze, design, and present visual displays of data to inform their decisions and stimulate effective action. She is the co-author of the Best Boring Book Ever (BBBE) of Healthcare Classification Systems and Databases, and BBBE of Tableau for Healthcare Professionals, which are used by numerous colleges and universities and professional organizations to teach and train students and professionals.Kathy is the Co-founder and Principal of HealthDataViz (HDV) where she has led innovative and ground-breaking projects and data visualization training initiatives for leading organizations such as Memorial Sloan Kettering Cancer Center, the Centers for Medicare and Medicaid Services, and the Children’s Hospital Association. A graduate of the University of NH and Dartmouth Medical School, Kathy lives in Maine and loves being on the water and cruising the coast with her family on their boat "Visualize."With seven years wholly immersed in healthcare data visualization, following ten years as a licensed marriage and family therapist, Lindsay brings a wealth of direct care experience and an unbridled passion and nationally recognized expertise for visualizing health and healthcare data. A Tableau Zen Master and member of the HealthDataViz (HDV) team, LINDSAY is an enthusiastic creator of effective, intuitive, and beautiful dashboards that people love to use and make the story and opportunities buried in the data clear. Her passion for health and healthcare data knows no bounds evidenced by her establishment of #ProjectHealthViz, a community of passionate data visualizers that create displays of health and healthcare data each month to tell our health stories.Lindsay has a B.A. from Bucknell University and an M.A. from the University of Connecticut. She currently lives in Pennsylvania with her husband and two boys.CAMBRIA BROWN has over ten years of experience analyzing and visualizing health and healthcare data, and is a Tableau Desktop Certified Professional. With a background in public health, survey design, advanced biostatistics, and quality improvement, Cambria understands the full data use cycle and is passionate about helping organizations use data to improve health.As a member of the HealthDataViz team, she has developed beautiful, user-friendly, and high impact dashboards for a variety of clients including the New York City Dept. of Health and Mental Hygiene, the Colorado Dept. of Public Health and Environment, and the Urban Indian Health Institute. Cambria holds a Master of Public Health in Epidemiology and Biostatistics from Oregon Health & Science University. She lives in Colorado where, when not data vizzing, she enjoys going on adventures with her husband and two children.Preface xiiiSECTION I ESTABLISHING A FRAMEWORK AND PROCESS 1CHAPTER 1 HEALTH AND HEALTHCARE DATA VISUALIZATIONS OF HISTORICAL IMPORTANCE 3CHAPTER 2 STOP HUNTING UNICORNS AND START BUILDING TEAMS AND KNOW THE DATA 9Search for Characteristics and Core Competencies 10Get to Know the Data 11Classifications, Intent, Purpose, and Lineage 12Two Types of Data 14Qualitative/Categorical Data 14Quantitative/Numerical Data 14Scales/Levels of Measure 15Nominal 15Ordinal 16Interval 17Ratio 18Summary 19CHAPTER 3 REQUIREMENTS-GATHERING AND DESIGN METHODS 21Design Thinking Foundational Concepts 22Design Methods 23Contextual Inquiry 23Mental Models 24Personas 26Persona Creation Guide 27Graphic Organizers 29Guided Analytics Framework 29Summary Overview Dashboard 30Supporting Focused Reports 30Details 31Multidimensional Exploratory Displays (MEDs™) 31Sketching 32Prototyping 33Testing 34Summary 36SECTION II PERCEIVING THE BEST PRACTICES OF DATA VISUALIZATION 37CHAPTER 4 THE RESEARCH 39Research Informs Data Visualization Best Practices 39Preattentive Attributes 41Preattentive Attributes at Work 43Gestalt Principles 46Color Theory 48The Power of White Space 53Where People Look 54Summary 54CHAPTER 5 TABLE DESIGN CHECKLIST 55Fundamentals of Table Design 55Organization/Categorization 55Non-Data Ink 56Fonts 56Number Alignment and Formatting 56Labels 58Summary 58CHAPTER 6 POWERFUL VISUALIZATIONS IN FOUR SHAPES 59Bars, Lines, Points, and Boxes 59Shape One: Bars 61Bar Basics 61Using Bars To: See How You’re Doing 63Distributions 63Histograms 63Population Pyramid (Paired Bars) 65Ranking 67Change over Time 68Comparing Multiple Data Points 70Proportions | Part-to-Whole 71Challenging the 100% Myth 73Deviation (Difference, Variation) 73Ranges and Comparative Values 74Displaying the Vital Few: Pareto Charts 77Bars Are Not Boring 78Shape Two: Lines 79Line Basics 79Using Lines To: See How You’re Doing 83As a Reference | Comparison 83Change over Time 84Change over Time | Sparklines 86Change over Time | Deviation Graphs 87Distributions 88Distributions | The Empirical Rule and Control Charts 88Statistical Process Control Charts (SPCs) and Geometric (G) Charts 90Relationships | Correlations 91Shape Three: Points 92Point Basics 92Using Points To: See How You’re Doing 94Distributions 94Revealing Details 95Change over Time 96Correlation 96Hierarchy Quadrant 97Location Details 98Shape Four: Boxes 98Box Basics 99Using Boxes To: See How You’re Doing 99Distribution 99Multiple Values 100Change over Time and Utilization Rates 101Hierarchical Data 101Other Shapes 102Summary 103CHAPTER 7 MAPS 105Using Maps to Gain Insights 105Geographic Maps 105Choropleth Maps 106Hex-Tile Maps 109Symbol/Dot-Density Maps 110Proportional Symbol Maps 112When Not to Use a Map 113Summary 114CHAPTER 8 GRAPHS AND CHARTS TO NEVER USE OR USE WITH CAUTION 115When “Cool Displays” Are Anything But 115Pie and Donut Charts 117Why People Use Them 117Characteristics 118Challenges 118Best Practice Alternative 119Multiples of Several-Part Stacked Bar Charts (MSPSBCs) 121Why People Use Them 121Characteristics 121Challenges 121Best Practice Alternative 124Bubble Charts 124Why People Use Them 124Characteristics 125Challenges 125Best Practice Alternative 126Treemaps 128Why People Use Them 128Characteristics 129Challenges 129Best Practice Alternative 130Marimekko (Mekko or Mosaic) Charts 132Why People Use Them 132Characteristics 132Challenges 134Best Practice Alternative 134Radial Bar and Petal Charts 134Why People Use Them 134Characteristics 135Challenges 135Best Practice Alternative 136Radar Charts 138Why People Use Them 138Characteristics 138Challenges 138Best Practice Alternative 139Sankey Diagrams 141Why People Use Them 141Characteristics 141Challenges 142Best Practice Alternative 144One More Thing: 3-D 145Summary 146CHAPTER 9 MAKING ACCESSIBLE VISUALIZATIONS 149Accessible Design is Good Design 149Accessibility in Data Visualization 150Ways to Make Accessible Data Visualizations 151Summary 158SECTION III CREATING COMPELLING DATA DISPLAYS 159CHAPTER 10 DASHBOARDS, REPORTS, AND MULTIDIMENSIONAL EXPLORATORY DISPLAYS (MEDS™) 161Definitions Matter 161Dashboards 162Dashboards Defined 162Purpose/Objective 162Data/Information 163Design 164Example Dashboards 165Dashboard Summary 169Reports 170Reports Defined 170Purpose/Objective 170Design 170Example Reports 171Report Summary 176Multidimensional Exploratory Displays (MEDs™) 176MEDs™ Defined 177Purpose/Objective 177Design 177Example MED™ 177MEDs™ Summary 184Summary 184CHAPTER 11 INFOGRAPHICS 185"No Tobacco Day" Infographic 186Measles and Vaccinations Infographic 188Infographic vs. Infoposter 191Summary 194SECTION IV CLOSING THOUGHTS AND RECOMMENDED READING AND RESOURCES 195Closing Thoughts 197Fluency and Mastery 197Bitten by the Viz Bug | Recommended Reading and Resources 199Recommended Reading 199Resources 201Accessibility Resources 202Author Bios 203References 207Index 211
Einstieg in SwiftUI
• Der umfangreiche Einstieg in SwiftUI• Detaillierte Beschreibungen zum Einsatz von Views, Controls und Status• Aktuell zu Xcode 12• Mit Update inside: Erhalten Sie aktuelle Infos zu kommenden SwiftUI-Updates und weiteren SwiftUI-Funktionen.Lernen Sie Apples neues SwiftUI-Framework kennen und erfahren Sie, wie Sie plattformübergreifende Nutzeroberflächen für Mac, iPhone, iPad, Apple Watch und Apple TV erstellen. Das Framework vereinfacht den Prozess der UI-Erstellung deutlich, damit Sie sich als Entwickler primär auf die Kernfunktionen Ihrer Apps konzentrieren können.SwiftUI funktioniert gänzlich anders als die bisherigen Mechanismen zur Gestaltung von Views für Apple-Plattformen. Es ist zudem tief in die Entwicklungsumgebung Xcode integriert.Für Entwickler ergeben sich so eine Vielzahl an Neuerungen, die es langfristig in der UI-Erstellung zu beachten gilt und die in diesem Buch ausführlich und detailliert beschrieben werden. Dazu gehören die grundlegende Funktionsweise von SwiftUI, das Vorgehen beim Erstellen von Views, der Austausch von Daten und Best Practices beim Einsatz des Frameworks. Auch die Integration von SwiftUI in bereits bestehende Projekte ist ein Thema.Aus dem Inhalt:• Funktionsweise von SwiftUI• Views und Controls• View-Hierarchien mit Stacks, Listen und Grids• Navigationsstrukturen• Status mittels State, Binding, ObservedObject und mehr• Integration in bestehende Projekte mittels Representable und Hosting• Effizienter Einsatz der Preview Thomas Sillmann ist leidenschaftlicher Autor, Apple-Entwickler und Trainer. Mit seiner Begeisterung für das Schreiben hat er bereits mehrere erfolgreiche Fachbücher veröffentlicht. Thomas lebt und arbeitet in Aschaffenburg.
Advanced ASP.NET Core 3 Security
Incorporate security best practices into ASP.NET Core. This book covers security-related features available within the framework, explains where these feature may fall short, and delves into security topics rarely covered elsewhere. Get ready to dive deep into ASP.NET Core 3.1 source code, clarifying how particular features work and addressing how to fix problems.For straightforward use cases, the ASP.NET Core framework does a good job in preventing certain types of attacks from happening. But for some types of attacks, or situations that are not straightforward, there is very little guidance available on how to safely implement solutions. And worse, there is a lot of bad advice online on how to implement functionality, be it encrypting unsafely hard-coded parameters that need to be generated at runtime, or articles which advocate for certain solutions that are vulnerable to obvious injection attacks. Even more concerning is the functions in ASP.NET Core that are not as secure as they should be by default.ADVANCED ASP.NET CORE 3 SECURITY is designed to train developers to avoid these problems. Unlike the vast majority of security books that are targeted to network administrators, system administrators, or managers, this book is targeted specifically to ASP.NET developers. Author Scott Norberg begins by teaching developers how ASP.NET Core works behind the scenes by going directly into the framework's source code. Then he talks about how various attacks are performed using the very tools that penetration testers would use to hack into an application. He shows developers how to prevent these attacks. Finally, he covers the concepts developers need to know to do some testing on their own, without the help of a security professional.WHAT YOU WILL LEARN* Discern which attacks are easy to prevent, and which are more challenging, in the framework* Dig into ASP.NET Core 3.1 source code to understand how the security services work* Establish a baseline for understanding how to design more secure software* Properly apply cryptography in software development* Take a deep dive into web security concepts* Validate input in a way that allows legitimate traffic but blocks malicious traffic * Understand parameterized queries and why they are so important to ASP.NET Core* Fix issues in a well-implemented solution * Know how the new logging system in ASP.NET Core falls short of security needs* Incorporate security into your software development processWHO THIS BOOK IS FORSoftware developers who have experience creating websites in ASP.NET and want to know how to make their websites secure from hackers and security professionals who work with a development team that uses ASP.NET Core. A basic understanding of web technologies such as HTML, JavaScript, and CSS is assumed, as is knowledge of how to create a website, and how to read and write C#. You do not need knowledge of security concepts, even those that are often covered in ASP.NET Core documentation.SCOTT NORBERG is a web security specialist with almost 15 years of experience in various technology and programming roles, focusing on developing and securing websites built with ASP.NET. As a security consultant, he specializes on blue team (defensive) techniques such as Dynamic Application Security Testing (DAST), code reviews, and manual penetration testing. He also has an interest in building plug-and-play software libraries that developers can use to secure their sites with little-to-no extra effort. As a developer, Scott has primarily built websites with C# and various versions of ASP.NET, and he has also built several tools and components using F#, VB.NET, Python, R, Java, and Pascal.Scott holds several certifications, including Microsoft Certified Technology Specialist (MCTS), certifications for ASP.NET and SQL Server, and a Certified Information Systems Security Professional (CISSP) certification. He also has an MBA from Indiana University.Scott is currently working as a contractor and consultant through his business, Norberg Consulting Group, LLC. You can see his latest ideas and projects at scottnorberg.com.CHAPTER 1 – INTRODUCING ASP.NET CORECHAPTER 2 – GENERAL SECURITY CONCEPTSCHAPTER 3 – CRYPTOGRAPHYCHAPTER 4 – WEB SECURITY CONCEPTSCHAPTER 5 – UNDERSTANDING COMMON ATTACKSCHAPTER 6 – PROCESSING USER INPUTCHAPTER 7 – AUTHENTICATION AND AUTHORIZATIONCHAPTER 8 – DATA ACCESS AND STORAGECHAPTER 9 - LOGGING AND ERROR HANDLINGCHAPTER 10 – SETUP AND CONFIGURATIONCHAPTER 11 – SECURE APPLICATION LIFECYCLE MANAGEMENT
C++ mit Visual Studio 2019 und Windows Forms-Anwendungen
C++ hat sich in den letzten Jahren rasant entwickelt: C++11, C++14, C++17 und C++20 haben viele Verbesserungen und neue Möglichkeiten gebracht. Vieles, was vor 10 Jahren noch gut und empfehlenswert war, kann heute besser und sicherer gemacht werden.Dieses Buch stellt C++ mit Visual Studio 2019 auf dem Stand von Mai 2020 umfassend dar. Das ist nicht nur der Umfang von C++17, sondern auch schon ein Teil von C++20.Es entstand aus zahlreichen Vorlesungen und Firmenseminaren. Dementsprechend richtet es sich einerseits an STUDIERENDE, die C++ lernen wollen. Der Aufbau, die vielen Beispiele und Übungsaufgaben sind erprobt und bewährt. Es eignet sich zum Selbststudium und als Lehrbuch für Vorlesungen an Fachhochschulen und Universitäten.Dieses Buch zeigt aber ebenso PROFESSIONELLEN SOFTWARE-ENTWICKLERN mit einer jahrelangen C++-Praxis den aktuellen Stand der Technik. Viele der Spracherweiterungen machen elementare Programmiertechniken einfacher und sicherer. Dazu kommen neue Konzepte, die bessere und effizientere Lösungen als noch vor einigen Jahren ermöglichen. Das kann unnötigem Aufwand und Fehlern führen, die sich leicht vermeiden lassen. Viele dieser neuen Möglichkeiten haben sich in der industriellen Praxis noch nicht etabliert.Dieses Buch erscheint in zwei weitgehend identischen Ausgaben:– IN DER VORLIEGENDEN AUSGABE werden Programme geschrieben, in denen alle Ein- und Ausgaben über eine Windows-Benutzeroberfläche erfolgen.– IN DER ANDEREN AUSGABE „C++ mit Visual Studio 2019“ werden Programme ohne eine graphische Benutzeroberfläche geschrieben. Alle Ein- und Ausgaben erfolgen mit cin und cout über die Konsole.Nach seinem Mathematikstudium an der Universität Tübingen war RICHARD KAISER einige Jahre in der Lehrerausbildung tätig, Trainer in der Industrie, Software-Entwickler (vor allem für technische Anwendungen) und Leiter der Software-Abteilung. Seit 1991 ist er Professor an der Dualen Hochschule Baden-Württemberg (Lörrach), wo er vor allem Vorlesungen über Programmiersprachen (C/C++/C#) und Mathematik hält. In den letzten Jahren hat er viele Seminare über C++ und C# für Firmen durchgeführt.Die Entwicklungsumgebung.- Steuerelemente für die Benutzeroberfläche.- Elementare Datentypen und Anweisungen in C und C++.- Sie Stringklassen string und wstring.- Arrays und Container.- Einfache selbstdefinierte Datentypen.- Zeiger, Strings und dynamisch erzeugte Variablen.- Überladene Funktionen und Operatoren.- Objektorientierte Programmierung.- Namensbereiche.- Exception-Handling.- Containerklassen der C++-Standardbibliothek.- Dateibearbeitung mit den Stream-Klassen.- Funktionsobjekte und Lambda-Ausdrücke.- Templates und STL.- C++11 Smart Pointer: shared_ptr, unique_ptr und weak_ptr.- Literatur.- Index.
Foundation Dynamic Web Pages with Python
Discover the concepts of creating dynamic web pages (HTML) with Python. This book reviews several methods available to serve up dynamic HTML including CGI, SSI, Django, and Flask.You will start by covering HTML pages and CSS in general and then move on to creating pages via CGI. It is easy to use and can serve as a foundation for the more advanced services available for launching dynamic web pages. Next you'll explore the SSI (Server Side Interface) method. This is a slightly more advanced interface included in mots web servers that adds functionality to modify static HTML pages to add such things as the current date or time, include additional HTML, and other features to a static web page before it is delivered to the user.The book also covers some of the key the Django module features, which must be added to the web server. These features include creating dynamic web pages and calling a database to provide additional information to the web page. Lastly you will explore the Flask module. While it has limited functionality on its own, it provides a very flexible environment to create a self designed system for delivery of dynamic web pages.By the time you finish this book, you will be able to choose the appropriate methodology for delivering dynamic information using fast HTML creation services.WHAT YOU'LL LEARN* Use HTML pages and CSS together to control the style of your web site.* Install and configure SSI, Django, and Flask for Apache.* Create dynamic web pages using CGI and creating a library of partial HTML pages to use in this task.* Build dynamic web pages using SSI and auxiliary Python programs to enhance the SSI functionality.* Develop dynamic web pages using Django.WHO THIS BOOK IS FORSoftware Developers with basic Python programming skills interested in learning Web DevelopmentW. David Ashley is a technical writer for SkillSoft where he specializes in open source, particularly Linux. As a member of the Linux Fedora documentation team he recently led the Libvert project documentation, and wrote the Python programs included with it. He has developed in 20 different programming languages during his 30 years as a software developer and IT consultant, including more than 18 years at IBM and 12 years with American Airlines. Chapter 1: Introduction to Web ServersChapter Goal: An introduction to web servers – specifically the Apache web server.No. of Pages: 5Sub-Topics:Glossary of termsIntroduction to the Apache web serverIntroduction to other web serversConfiguring your web serverOrganizing your web serverChapter 2: HTML Pages and CSSChapter Goal: Describes the main principles of web pages and style sheetsNo. of Pages: 20Sub-Topics:HTML tagsOrganizing HTML sectionsLinking HTML pages to a style sheetCreating a library of partial HTML pagesEnsuring coordination between the HTML page, the CSS stylesheet, and you libraryChapter 3: Using CGI and PythonChapter Goal: Using Python to create an HTML pageNo. of Pages: 25Sub-Topics:Configure CGI for use by PythonCreate a dummy page just for creating the layout of the page major elementsHTML sectionsUsing Python to create a dynamic HTML pageWhere to split a web page into multiple partsTechniques for managing the web page for use by PythonThe good and the bad of using CGIChapter 4: Using SSI and PythonChapter Goal: Configure Apache for use by SSI and PythonNo. of Pages: 45Sub-Topics:Configure SSI for use by PythonCreate a dummy page just for creating the layout of the page major elementsHTML sectionsUsing SSI and Python to create a dynamic HTML pageWhere to split a web page into multiple partsTechniques for managing the web page for use by SSI and PythonThe good and the bad of using SSIChapter 5: Using Django and PythonChapter Goal: Using Django and Python to create an HTML pageNo. of Pages: 40Sub-Topics:Configure Apache for use by Django and PythonCreate a dummy page just for creating the layout of the page major elementsHTML sectionsUsing Django and Python to create a dynamic HTML pageWhere to split a web page into multiple partsTechniques for managing the web page for use by Django and PythonThe good and the bad of using DjangoChapter 6: Using Flask and JinjaChapter Goal: Using Flask and Python to create an HTML pageNo. of Pages: 40Sub-Topics:Configure Apache for use by Flask and PythonCreate a dummy page just for creating the layout of the page major elementsHTML sectionsUsing Flask and Python to create a dynamic HTML pageWhere to split a web page into multiple partsTechniques for managing the web page for use by Flask and PythonThe good and the bad of using FlaskChapter 7: Comparing CGI, SSI, Django, and Flask Chapter Goal: Choosing the correct dynamic page creation systemNo. of Pages: 50Sub-Topics:List the advantages of each systemList the disadvantages of each systemChapter 8: Usage Options - CGI, SSI, Django, and FlaskChapter Goal: Choosing the correct dynamic page creation systemNo. of Pages: 50Sub-Topics:Discuss options for using multiple systemsSome things to remember
Cybersecurity in Humanities and Social Sciences
The humanities and social sciences are interested in the cybersecurity object since its emergence in the security debates, at the beginning of the 2000s. This scientific production is thus still relatively young, but diversified, mobilizing at the same time political science, international relations, sociology , law, information science, security studies, surveillance studies, strategic studies, polemology. There is, however, no actual cybersecurity studies. After two decades of scientific production on this subject, we thought it essential to take stock of the research methods that could be mobilized, imagined and invented by the researchers. The research methodology on the subject "cybersecurity" has, paradoxically, been the subject of relatively few publications to date. This dimension is essential. It is the initial phase by which any researcher, seasoned or young doctoral student, must pass, to define his subject of study, delimit the contours, ask the research questions, and choose the methods of treatment. It is this methodological dimension that our book proposes to treat. The questions the authors were asked to answer were: how can cybersecurity be defined? What disciplines in the humanities and social sciences are studying, and how, cybersecurity? What is the place of pluralism or interdisciplinarity? How are the research topics chosen, the questions defined? How, concretely, to study cybersecurity: tools, methods, theories, organization of research, research fields, data ...? How are discipline-specific theories useful for understanding and studying cybersecurity? Has cybersecurity had an impact on scientific theories? Hartmut Aden, Prof. University of Berlin Hugo Loiseau, Prof. University of Sherbrooke Daniel Ventre, CNRS, researcher at CESDIPIntroduction ixDaniel VENTRE, Hugo LOISEAU and Hartmut ADENCHAPTER 1 THE “SCIENCE” OF CYBERSECURITY IN THE HUMAN AND SOCIAL SCIENCES: ISSUES AND REFLECTIONS 1Hugo LOISEAU1.1 Introduction 11.2 A method? 41.3 Data? 111.4 One or more definition(s)? 161.5 Conclusion 201.6 References 21CHAPTER 2 DEFINITIONS, TYPOLOGIES, TAXONOMIES AND ONTOLOGIES OF CYBERSECURITY 25Daniel VENTRE2.1 Introduction 252.2 Definition 272.2.1 What is a definition? 272.2.2 Usefulness of definitions 292.2.3 Rules for constructing definitions 292.2.4 Definitions of cybersecurity 322.3 Typology 432.3.1 What is a typology? 442.3.2 Usefulness of typologies 442.3.3 Rules for the construction of typologies 452.3.4 Cybersecurity typologies 462.4 Taxonomy 482.4.1 What is a taxonomy? 482.4.2 Usefulness of taxonomy 492.4.3 Rules for the construction of taxonomies 492.4.4 Taxonomies of cybersecurity 502.5 Ontologies 512.5.1 What is ontology? 522.5.2 Usefulness of ontologies 532.5.3 Rules for construction of ontologies 532.5.4 Cybersecurity ontologies 542.6 Conclusion 562.7 References 57CHAPTER 3 CYBERSECURITY AND DATA PROTECTION – RESEARCH STRATEGIES AND LIMITATIONS IN A LEGAL AND PUBLIC POLICY PERSPECTIVE 67Hartmut ADEN3.1 Introduction 673.2 Studying the complex relationship between cybersecurity and data protection: endangering privacy by combating cybercrime? 683.2.1 Potential tensions between cybersecurity and data protection 693.2.2 Potential synergies between cybersecurity and data protection 723.3 Methodological approaches and challenges for the study of cybersecurity – legal and public policy perspectives 743.3.1 Legal interpretation and comparison as methodological approaches to the study of cybersecurity 743.3.2 Public policy approaches to the study of cybersecurity 773.3.3 Transdisciplinary synergies between legal and public policy perspectives 783.4 Conclusion and outlook 803.5 References 81CHAPTER 4 RESEARCHING STATE-SPONSORED CYBER-ESPIONAGE 85Joseph FITSANAKIS4.1 Defining cybersecurity and cyber-espionage 854.2 Taxonomies of cyber-threats 874.3 The structure of this chapter 884.4 The significance of state-sponsored cyber-espionage 904.5 Research themes in state-sponsored cyber-espionage 944.6 Theorizing state-sponsored cyber-espionage in the social sciences 984.7 Research methodologies into state-sponsored cyber-espionage 1044.8 Intellectual precision and objectivity in state-sponsored cyber-espionage research 1064.9 Detecting state actors in cyber-espionage research 1104.10 Identifying specific state actors in cyber-espionage research 1124.11 Conclusion: researching a transformational subject 1164.12 References 118CHAPTER 5 MOVING FROM UNCERTAINTY TO RISK: THE CASE OF CYBER RISK 123Michel DACOROGNA and Marie KRATZ5.1 Introduction 1235.2 The scientific approach to move from uncertainty to risk 1245.3 Learning about the data: the exploratory phase 1265.4 Data cleansing 1285.5 Statistical exploration on the various variables of the dataset 1305.6 Univariate modeling for the relevant variables 1345.7 Multivariate and dynamic modeling 1395.7.1 A fast-changing environment: time dependency 1405.7.2 Causal relations 1435.7.3 Models for prediction 1475.8 Conclusion 1495.9 Acknowledgments 1515.10 References 151CHAPTER 6 QUALITATIVE DOCUMENT ANALYSIS FOR CYBERSECURITY AND INFORMATION WARFARE RESEARCH 153Brett VAN NIEKERK and Trishana RAMLUCKAN6.1 Introduction 1536.1.1 Previous research 1546.2 Information warfare and cybersecurity 1546.3 Researching information warfare and cybersecurity 1566.4 Qualitative research methodologies for information warfare and cybersecurity 1576.4.1 Clustering of documents 1596.4.2 Clustering of words 1596.4.3 Word frequencies and word clouds 1596.4.4 Text search and word trees 1596.4.5 Example use cases of qualitative document analysis 1606.5 An analysis of national cybersecurity strategies 1616.5.1 Selection process for the documents 1616.5.2 Analysis 1626.5.3 Discussion 1676.6 An analysis of the alignment of South Africa’s Cybercrimes Bill to international legislation 1696.6.1 Background to the documents 1696.6.2 Analysis 1706.6.3 Discussion 1746.7 An analysis of the influence of classical military philosophy on seminal information warfare texts 1766.8 Reflections on qualitative document analysis for information warfare and cybersecurity research 1776.9 Conclusion 1796.10 References 180CHAPTER 7 ANTI-FEMINIST CYBER-VIOLENCE AS A RISK FACTOR: ANALYSIS OF CYBERSECURITY ISSUES FOR FEMINIST ACTIVISTS IN FRANCE 185Elena WALDISPUEHL7.1 Introduction 1857.2 Localization of an online field 1877.2.1 Online ethnographic work and empathy 1927.2.2 Cybersecurity issues of an online field 1937.3 Online–offline continuum 1947.4 Continuum between security and insecurity 1997.5 Conclusion 2047.6 References 205List of Authors 211Index 213