Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • It is often the case that a few persons with access to the job scheduling product manage job executions for a larger number of servers in the network. You have to trust their honesty.
  • At the same time an increasing number of attacks on data security is are performed inside the IT operations department.

...

  • A rewrite of the product code base as has been applied to the JS7 branch of JobScheduler. This allows the software to be redesigned in line with current standards and the state of the art.
  • Use of open source licensed code. This allows everybody anybody to analyze the code for security flaws and is performed automatically by an increasing number of tools that analyze vulnerabilities in source code. The JS7 source code repositories available at https://github.com/sos-berlin are automatically checked for vulnerabilities by Github.

...

  • Use of standard protocols such as HTTPS with adjustable configurable and proven security. The ciphers used to encrypt communication have to be adjusted from time to time as increasing computing power invalidates older ciphers such as RSA (1977), which can no longer be considered secure for the future. ECDSA is the standard cipher that is ready for use and prolongs secure encryption for a foreseeable time.

...

The fact that in a central scheduling system just a few people control what jobs are executed on practically any server in the IT network is a too high a risk for some organizations.

...

  • Using the JS7 for central operation of jobs. With support for more than half a million job definitions and thousands of parallel tasks there is sufficient capacity for central management of larger IT environments.
  • At the same time JS7 offers the option for a decentralized architecture by allowing any number of Controllers and Agents to work in parallel and be operated independently from a central JOC Cockpit. Rollout of JS7 components is fairly simple and can be streamlined, for example by use of Docker® and cloud server images. This allows job management responsibility to be shifted to departments and application management teams. JS7's modern and intuitive user interface and straightforward approach for job design and job dependencies mean that knowledge acquisition for daily operations and job management requires far less effort than that required for other products.

...