网络安全稽核工作(Network Security Auditing Work)

安全稽核工作

1.定期对公司系统软件进行渗透测试模拟攻击,及时发现系统安全漏洞,反馈给相关部门
2.利用自主开发的epa软件时行网络监控,对网络违规行为及时制止(如:私自安装与工作无关聊天软件等)
3.对外发邮件进行稽核,特别是外发apk是否含有公司机密文件
4.物理环境稽核,如:私自搭建wifi,各种网络设备规范连接等
5.权限与安全意识稽核,如:账号权限与使用,违规操作等
6.撰写公司各种安全条例规范及安全策略

网络维护,日常管理,调查安全事件,支持及参与公司系统开发,维护及应用;对系统/程序进行测试,以确保整体系统的高品质运作;支持系统的实施及支援;统整有关系统文档

Installation of an Open Source Prometeo-ERP System

Introduction

Although Prometeo-ERP System was a phase-out project for any further development, its follow-up project was Django-ERP. However, Django-ERP is still under development, Its function is not ready, and most features are not ready for public use at this moment. Then, I step back to continue to test Prometeo-ERP System. Prometeo-ERP has already provide many useful features, its public release free version had the following features:

  • Authentication & row-level permission system
  • Notification system
  • Custom widgets & dashboards
  • Taxonomy system
  • File browsing
  • Event calendar
  • User tasks & timesheets
  • CRM (Customer Relationship Management)
  • Products management
  • Stock management
  • Human resources management
  • Sales management
  • Project management
  • Knowledge management
  • DMS (Document Management System)

I installed the Prometeo-ERP system to my Raspberry Pi machine, i.e. free OS, free program tools, free application tools, … Great. It is still worth to study it, and I will show the installation installation in the following

Installation Steps:

1. Checkout sources from the GIT repository:

https://code.google.com/archive/p/prometeo-erp/

2. Follow the instructions in the README file as reference.

2.1 PREREQUISITES

Make sure you have the following prerequisites installed:

* python >= 2.6 (or 2.7 the public one)

$ pip install python==2.7

* pytz >= 2011h (required)
$ pip install pytz==2011h

* python-markdown >= 2.0 (required)
$ pip install markdown

* xhtml2pdf >= 0.0.3 (required)
$ pip install xhtml2pdf==0.0.3

* icalendar >= 2.2 (required)
$ pip install icalendar==2.2

* django >= 1.3.1 (required)
$ pip install django==1.3.1

* south >= 0.7.3 (optional)
$ pip install south

2.2 INSTALLATION
1. Rename the download folder to “prometeo” (It is necessary).

2. cp settings/base.py.tmpl settings/base.py, and edit several statement as below:

$ vi settings/base.py
….

ADMINS = (
# (‘Goldman’, ‘goldman.au168@gmail.com’),
)

MANAGERS = ADMINS

DATABASES = {
default’: {
‘ENGINE’: ‘django.db.backends.sqlite3’, # Add ‘postgresql_psycopg2’, ‘postgresql’, ‘mysql’, ‘sqlite3’ or ‘oracle’.
‘NAME’: ‘erp.db’, # Or path to database file if using sqlite3.
‘USER’: ”, # Not used with sqlite3.
‘PASSWORD’: ”, # Not used with sqlite3.
‘HOST’: ”, # Set to empty string for localhost. Not used with sqlite3.
‘PORT’: ”, # Set to empty string for default. Not used with sqlite3.
}

}

LANGUAGE_CODE = ‘en-us’

# List of installed applications.
INSTALLED_APPS = (
‘django.contrib.auth’,
‘django.contrib.contenttypes’,
‘django.contrib.sessions’,
‘django.contrib.sites’,
‘django.contrib.messages’,
‘django.contrib.admin’,
‘django.contrib.admindocs’,
‘django.contrib.comments’,
‘django.contrib.markup’,
‘django.contrib.redirects’,
‘django.contrib.staticfiles’,

#’south’,

‘prometeo.core’,
‘prometeo.core.filebrowser’,
‘prometeo.core.widgets’,
‘prometeo.core.menus’,
‘prometeo.core.taxonomy’,
‘prometeo.core.auth’,
‘prometeo.core.registration’,
‘prometeo.core.notifications’,
‘prometeo.core.calendar’,

‘prometeo.todo’,
‘prometeo.addressing’,
‘prometeo.partners’,
‘prometeo.documents’,
‘prometeo.products’,
‘prometeo.stock’,
‘prometeo.hr’,
‘prometeo.sales’,
‘prometeo.projects’,
‘prometeo.knowledge’,
)

3. It’s time to create the DB schema

$ python manage.py syncdb

4. Start the server:

$ python manage.py runserver

5. Test the application via link http://localhost:8000 as screen dump below:

prometeo-system

 

Setup Raspberry pi Car camera with Android phone WiFi

Introduction

Raspberry Pi can be widely used for Car computer with many features, such as plays DVDs, GPS, displays TV, Bluetooth (phone calls + music), MP3/MPEG4 player, CD/radio, car camera, reversing camera (comes on automatically when I put the car in reverse gear), etc. This week, I test raspberry pi to connect to android phone’s wireless hotpot, and setup camera and display feature as below. It is interesting.

Connect Raspberry Pi to an Android phone’s camera

Step 1. Install Pi Camera Application in Android Phone, which you can find many from Google Play Store as below screen:

ipcam-app

Step 2. Turn on the Android Phone’s Camera Application and active its web server feature, then it will display an ip address for your external browse connection.

Step 3. Turn on the Android Phone’s wireless sharing hotpot feature, then the ip address will be refresh to its own phone address for your external connection as below:

Step 4. Connect the Raspberry Pi to Android Phone Open the browser in your Raspberry Pi, and type in the ip address, then it will display the camera as below:

ipcam-display

Screen Dump of Another Scene of Camera and Display as below two pictures:

cam-phone-display

cam-pi-diaplay

 

Display Raspberry Pi Camera to Android phone

Step 1. Install Raspberry Pi Camera and vlc software as describe in my previous post “Installation of Raspberry Pi Camera

Step 2. Start the video streaming function with command:

$ raspivid -w 640 -h 480 -o – -t 9999999 |cvlc -vvv stream:///dev/stdin –sout ‘#standard{access=http,mux=ts,dst=:8554}’ :demux=h264

Step 3. We can connect via browser with link http://ip-address:8554/.

Bonus:

We can also use VNC to connect Raspberry Pi from Android Phone, provided that you start the VNC server function (as described in my previous post “Installation Raspberry Pi” Step 6, and then install VNC app from Google Play Store, and start VNC connection in Andriod Phone as below:

VNC-1                   VNC-2

 

 

 

淺談工業 4.0

工業 1.0、2.0、3.0 時代

互聯網發展至今可分為四個時代(參考此文),工業發展也可分為四個匙時代,四次工業革命。第一次工業革命是利用水力及蒸汽的力量作為動力源,第二次工業革命则使用电力为非常出名的大量生产提供動力與支持,第三次工業革命則是使用电子设备及資訊技術(IT)來校除人為影響以增進工業制造的自動化。

industiral-4.0a

工業 4.0 時代

時至今日,到了工业4.0時代,工業4.0(Industry 4.0、Industrie 4.0)或稱第四次工業革命(Fourth industrial revolution)、生產力4.0,是一個德国政府提出的高科技計劃,由德國聯邦教育及研究部和聯邦經濟及科技部联合资助,投资预计达 2 亿欧元,用來提昇製造業的電腦化、數位化和智能化。目標與以前不同,不是創造新的工業技術,而是將所有工業相關的技術、銷售與產品體驗統合起來,是建立具有適應性、資源效率和人因工程学的智慧工廠(Smart Factory),並在商業流程及價值流程中整合客戶以及商業伙伴。其技術基礎是智慧整合感控系統(Cyber-Physical System, CPS)及物联网(Internet of Things, IoT)。這樣的架構雖然還在摸索,但如果得以陸續成真並應用,最終將能建構出一個有感知意識的新型智能工業世界,能透過分析各種大數據, 直接生成滿足客戶的相關解決方案產品(需求客製化),更可利用電腦預測部分固有狀況,例如天氣預測、公共交通、市場調查數據等等,及時精準生產或調度現有 資源、減少多餘成本與浪費等等(供應端優化),需要注意的是工業只是這個智慧世界的一個部件,需要以“工業如何適應智慧網絡下的未來生活”去理解才不會搞 混工業的種種概念。

《中國製造2025》計畫

在德國推出工業4.0之後,美國、日本和中國都在積極追趕。「中國經濟發展已進入新常態,製造業必須要從價值鏈低端向中高端升級…我們要研究,到底該以什麼戰略應對新一輪發展,如何實現製造業由『大』變『強』。」中國工業與信息化部部長苗圩對人民日報說。為中國製造業力拼轉型,因此中國國務院最近還頒布《中國製造2025》計畫,引起全世界的注意。這個計劃準備全面推動製造強國戰略,目標成為和歐美並駕齊驅的先進製造強國。這個計畫以機械設備、工業自動化/智慧化和機器人為重心。

中國已經成為世界工廠、製造業「大國」,但是大部分還是以代工為主,技術水準低、產品品質差、利潤低,處在全球產業鏈的底端。生產方式落後、資源消耗大、污染排放多。中國企業生氣蓬勃、成長快,但缺少持之以恆投入創新能力的提升,國際競爭力不足。希望這個到計劃能為中國工業帶來新景象吧。

industiral-4.0b