Messages posted by: MrSleep

COMPANY INTRODUCTION:
- Established in 2004, VinaGame was the first company to launch an online game in Vietnam.
- Founded by passionate gamers, VinaGame built its own data centers and 24/7 customer services. Its self- developed distribution network is a big success, reaching most of Vietnam’s internet cafes.
- Delivering world- class operational excellence, VinaGame offers unequaled hosting, customer service and payment processing. Coupled with Vietnam- focused game operations expertise, marketing savvy and an extensive sales network, VinaGame is the ideal partner for your MMORPG.

POSITION SUMMARY:
- Assists in the designing, implementing and monitoring of the GTsecurity program with a focus on identifying server vulnerabilities of routine to moderate complexity and assisting in the facilitation the implementation of security solutions for the entire products information resource computing infrastructure.

POSITION KEY:
- Assists in developing, implementing, and maintaining an ongoing GTsecurity awareness and employee training program for the entire Security Program.

ACCOUNTABILITIES:
- Responsible for developing, implementing, and maintaining an ongoing GTsecurity awareness and employee training program for the entire products.
- Develops technical security standards to support policies including assisting in creating and coordinating monitoring standards and incident investigation procedures.
- Provides technical assistance in the selection, configuration, and maintenance of security software, utilities and hardware of routine to moderate complexity.
- Assists in the development of technical security standards to support policies including assisting in creating and coordinating monitoring standards and incident investigation procedures.
- Performs periodic operating system and application security assessments of routine to moderate complexity and reviews for evidence of vulnerability or compromise and assist in or facilitates the implementation of resolution. Tracks resolution of findings and prepare reports.
- Performs operating system and application security compliance auditing of routine to moderate complexity and assist in or facilitates the implementation of resolution. Tracks resolution of findings and prepares reports.
- Responds to and reports on GTsecurity incidents of routine to moderate complexity, providing initial assessment of impact severity and types of incidences being addressed. Coordinates resolution efforts with Senior Information Security Analyst for critical or serious incidents.
- Monitors computing resources for evidence of compromise and reports security incidents. Analyzes compromised computing resources of routine to moderate complexity to assist in improving security design, policy compliance, and to understand and document new threat profiles.
- Monitors and enforces compliance with security policies, standards and guidelines. Prepare reports for presentation to GTSecurity Team.
- Studies and keeps current on security issues and reports issues to the department personnel responsible for the resource.
- Performs other duties as assigned.

CERTIFICATIONS:
- Certification in information technology or information security (MCSE, CCNA, CNA, CEH, etc.).

SKILLS:
- Ability to configure and administer Windows XP, 2003 servers and desktops. Familiar with web/software technology, database concepts.
- In- depth knowledge of the OSI model, TCP/IP protocol stack, LAN administrator and routing protocol.
- In- depth experience with UNIX/Linux and Windows operating environments.
- Knowledge and have ability trouble- shoot/ working with these services : SMTP, POP3, IDS, IPS, Firewall.
- Knowledge of common vulnerability/attack and the way can eliminate/anti these issue.
- Knowledge of IP traffic flow, sniffing/capturing/monitoring live traffic streams, monitoring system status using third- party tools.
- Knowledge of encryption and authentication technologies in SSH, VPN, PGP, PKI.
- Knowledge of database's pros and cons and high availability system.
- Knowledge of ISO 17799 or ITIL.

MINIMUM EDUCATION:
- Bachelors degree, training in information technology or related experience in security of education.

MINIMUM EXPERIENCE:
- 1- 3 year minimum experience consisting of network/security related work experience, operating system administration.

PHYSICAL REQUIREMENTS:
- Three years experience in information technology support or auditing information technology in diverse, decentralized environments. Experience with the network and server hardware, software and security tools that security program has deployed in its information technology infrastructure is preferred.

SECURITY SENSITIVE:
- Exerts up to 30 Kg of force occasionally and/or up to 20 Kg frequently and/or up to 10 Kg constantly to move objects( as Server, Rack,…).
- This job class may contain positions that are security sensitive and thereby subject to the provisions of GT Security Policy.

GENERAL INFORMATION:
- Location: Ho Chi Minh, VN.
- Reports to: Security Manager.
- Work type: Full time.
- Salary: Negotiable.
- Application deadline: September 30th 2008.

CONTACTS:
- Address: 459B Nguyen Dinh Chieu, District 3, Ho Chi Minh City.
- Email: recruitment [@t] vinagame.com.vn or hiencv [@t] vinagame.com.vn

COMPANY INTRODUCTION:
- Established in 2004, VinaGame was the first company to launch an online game in Vietnam.
- Founded by passionate gamers, VinaGame built its own data centers and 24/7 customer services. Its self-developed distribution network is a big success, reaching most of Vietnam’s internet cafes.
- Delivering world-class operational excellence, VinaGame offers unequaled hosting, customer service and payment processing. Coupled with Vietnam-focused game operations expertise, marketing savvy and an extensive sales network, VinaGame is the ideal partner for your MMORPG.

POSITION SUMMARY:
- Assists in the designing, implementing and monitoring of the GTsecurity program with a focus on identifying network vulnerabilities and then designing, planning and executing solutions of routine to moderate complexity and scope with regular supervision.
- Performs security audits, risk assessment and analysis. Makes recommendations for enhancing data systems security, researches attempted breaches of data security and rectifies security weaknesses. Formulates security policies and procedures for approval through the Information Security Officer for managing user accounts to various systems and applications. Works with the network team to administer and maintain firewalls, performs intrusion detection analysis, and monitors security advisory groups to ensure all necessary network security updates, patches and preventive measures are in place. Manages, screens and verifies updates being made to the virus and malware-prevention systems.

POSITION KEY:
- Assists in the development of technical security standards to support policies including assisting in creating and coordinating monitoring standards and incident investigation procedures.

ACCOUNTABILITIES:
- Provides technical assistance in the configuration, and maintenance of WAN/LAN network security devices such as firewalls, VPNs and Intrusion Detection Systems of routine to moderate complexity.
- Assists in developing, implementing and maintaining the GTsecurity awareness and training program.
- Performs periodic network security assessments of routine to moderate complexity and reviews for evidence of vulnerability or compromise and assists in the implementation of security solutions. Tracks resolution of findings and prepares reports.
- Performs network security testing, network penetration and network security compliance auditing of routine to moderate complexity and assists implementation of security solutions. Tracks resolution of findings and prepare reports.
- Responds to GTnetwork security incidents of routine to moderate complexity, providing initial assessment of impact severity and types of incidences being addressed. Maintains incident tracking system up-to-date.
- Perform other duties as assigned.

CERTIFICATIONS:
- Certification in network technology or information security (CNA, CCNA, CISA, CEH, etc.).

SKILLS:
- Ability to configure and administer Windows XP, 2003 servers and desktops. Familiar with web/software technology, database concepts.
- In-depth knowledge of the OSI model, TCP/IP protocol stack, LAN administrator and routing protocol.
- In-depth experience with UNIX/Linux and Windows operating environments.
- Experience with system scripting using Window Script Host, Bash script, Perl or VB, PHP.
- Experience and have ability trouble-shoot/ working with these services : SMTP, POP3, IDS, IPS, Firewall.
- Knowledge of common vulnerability/attack and the way can eliminate/anti these issue.
- Knowledge of IP traffic flow, sniffing/capturing/monitoring live traffic streams, monitoring system status using third-party tools.
- Knowledge of encryption and authentication technologies in SSH, VPN, PGP, PKI.

MINIMUM EDUCATION:
- Bachelor of Science degree in Engineering, Security or Computer Science, related field, or equivalent experience in networking/security of education.

MINIMUM EXPERIENCE:
- 1-3 year minimum experience consisting of network/security related work experience, operating system administration.

PHYSICAL REQUIREMENTS:
- Exerts up to 30 Kg of force occasionally and/or up to 20 Kg frequently and/or up to 10 Kg constantly to move objects( as Server, Rack,…).

SECURITY SENSITIVE:
- This job class may contain positions that are security sensitive and thereby subject to the provisions of GT Security Policy.

GENERAL INFORMATION:
- Location: Ho Chi Minh, VN.
- Reports to: Security Manager.
- Work type: Full time.
- Salary: Negotiable.
- Application deadline: September 30th 2008.

CONTACTS:
- Address: 459B Nguyen Dinh Chieu, District 3, Ho Chi Minh City.
- Email: recruitment [@t] vinagame.com.vn or hiencv [@t] vinagame.com.vn.

hackernohat wrote:

Mình có chút thắc mắc là kĩ thuật tạo cluster với Linux Virtual Server ko biết có giúp chạy ứng dụng với khả năng chịu tải và chịu lỗi cao hay ko hay chỉ là hệ thống Cluster với kĩ khả năng tính toán đa luồng MultiThread và chỉ dùng để chạy các Application đa luồng ?

Giải pháp cho vấn đề này là rocks clusters - www.rocksclusters.org chứ không phải LVS.

Rgds.

Bạn hoclinux nên đọc kỹ phần trả lời của Khoai thì sẽ tìm ra câu trả lời. Nếu "làm biếng" search thì bạn có thể theo link sau:

http://en.wikipedia.org/wiki/Pretty_Good_Privacy

Nói nôm na dễ hiểu thì như thề này nhé.

Bạn cũng biết là đa phần các phần mềm mã nguồn mở thì cộng đồng hay bất cứ cá nhân nào cũng đều có thể thêm/bớt và thay đổi mã nguồn vào bất cứ lúc nào. Việc kẻ xấu giả mạo mã nguồn từ nhà phát hành gốc (NPH) bằng cách thêm các đoạn mã xấu vào mã nguồn gốc rồi phát tán trên mạng như một gói chính thức của NPH sẽ gây ra những hiểm họa cho cộng đồng mã mở. Do đó việc NPH đưa ra chữ ký điện tử để người dùng xác nhận mã nguồn đó là mã nguồn gốc là một việc cực kỳ cần thiết và mang tính sống còn của cộng đồng mã mở (và cả mả đóng).

Theo tôi thì cứ dựa trên ngày public lỗi trên hệ thống bugtraq mà công nhận ai phát hiện ra lỗi trước. Các bạn nên xây dựng với tinh thần góp ý và ít đả kích lại một chút thì cộng đồng sẽ phát triển tốt hơn.

Vài ý kiến.