Glovia's G2 ERP Solution to Support SQL Server 2012

James Gorham, an executive with Glovia, spoke of the upcoming G2 launch in the official press release: “In keeping with our mission to deliver cost-effective industry leading solutions, we are extremely excited by this release of G2 -- fully supporting the SQL Server 2012 capabilities.  We continue to offer our existing and future customers an ever increasing value to their business while at the same time significant savings and return-on-investments with their use of the G2 solution.” 

Anil Sharma, Glovia’s VP of product development, added: “Glovia G2 is built around native Microsoft technologies such as Silverlight and .NET. Power View (formerly code named Crescent), the new data visualization tool in SQL Server 2012, is closely integrated with SharePoint 2010 and Silverlight, enabling natural integration with glovia G2. These development efforts have deepened our Microsoft collaboration, as Glovia is a participant in Microsoft's SQL Server 2012 Technology Adoption Program (TAP).”

Glovia G2 was created as a web-based ERP solution for manufacturers that stressed productivity for end users, as well as enhanced data visualization of items such as sales, inventory, and production.  Glovia employed Microsoft’s .NET and Silverlight platforms to develop G2.  The addition of SQL Server 2012 support in the near future displays the company’s dedication toward leveraging the power of Microsoft products to answer its customers’ ever-increasing needs.  SQL Server 2012’s visualization, presentation, and interactive data exploration are just some of the innovative features that Glovia G2 hopes to take advantage of once the product is finally released.  SQL Server 2012 is expected to become available during the first half of this year.

Betsy Pridemore, Microsoft’s director of marketing for SQL Server, commented on the news by saying: “Glovia G2's ERP system, which builds on the new capabilities of SQL Server 2012 and Power View data visualization, demonstrates how customers can gain business efficiency in new and powerful.  We're pleased to see how Glovia is serving our mutual customers in the manufacturing industry.”

As for customer reaction, Orin Owen, IT director for G&T Conveyor, the United States’ largest privately held turnkey baggage handling systems manufacturer, expressed high hopes for the upcoming Glovia release.  “We are extremely pleased to see Glovia release their ERP solution on SQL Server 2012. This matches our strategic plans for IT and also our mission to deliver 'State-of-the-Art' technologies and applications for our user community,” said Owen.

For more on this topic, visit http://www.marketwatch.com/story/glovia-international-inc-announces-support-for-sql-server-2012-2012-01-03

Over a Million URLs Experience SQL Injection Attack

SQL injection attacks seem to be a common theme as of late, and they have popped up once again with a campaign that has supposedly infected over one million URLs. 

According to the SANS Internet Storm Center, approximately 1,070,000 URLs were detected to be infected with the lilupophilupop.com malware.  Mark Hofman, the center’s handler, noted that only 80 such infections were detected in December.  “At the moment it looks like it is partially automated and partially manual. The manual component and the number of sites infected suggests a reasonable size work force or a long preparation period,” Hofman wrote in a blog post.

The NL domain from the Netherlands suffered the most SQL injection hits with 123,000 pages affected.  SANS also reported .com and .org domains as part of the affected pages worldwide.  While the one million-plus mark of infected pages is alarming, some feel that those numbers are not completely accurate.  Mary Landesmann, a security researcher with Cisco’s ScanSafe, a web security provider, said that the numbers could be inflated by counting pages that simply discuss the attacks.  “As a result, there is always a huge 'increase' after an initial public report is made. In other words, counting the number of results from a search engine isn’t a good or viable means of measuring the breadth of a compromise,” she said.

Since its initial appearance in November of last year, Cisco has detected lilupophilupop infections on approximately 650 unique domains.  Landesmann claimed that 43 percent of the infections occurred between November 30 and December 2, and that many of the domains likely received visitors via clever social engineering techniques, spam, or SEO poisoning.

The SQL injection flaws found in many Web servers make them attractive targets for attacks that manipulate existing SQL queries.  Once successful, hackers can gain control over the web application or the SQL server’s underlying operating system.  Although the widespread presence of the lilupophilupop attacks is worrisome, Landesmann claims that the problem is not as bad as it used to be.  “Major hosting providers, large companies, and commercial sites have taken great strides to mitigate their susceptibility and, as a result, the days of a million plus pages/sites impacted by SQLi are probably well behind us,” she added.

For more on this topic, visit http://www.darkreading.com/database-security/167901020/security/attacks-breaches/232301285/latest-sql-injection-campaign-infects-1-million-web-pages.html?itc=edit_stub