Hi, my name is Leon Rowe, Covency Trader and Trading Coach at trading180.com and welcome to this week's supply and demand for us in Gold, Fundamental and Technical Analysis, and getting into the week ahead, 13th of February. So it's Trading Economics website, tradingeconomics.com, so if you want to click on there, go to that website, you'll be able to read really the in-depth analysis as to what is being expected in the market and what is potentially coming up, but I'll just read the summary which is the US economic calendar will be dominated by the inflation rate, producer prices, retail sales and several speeches by the Fed officials. Also consumer prices index, retail sales and labor data will be released in the UK. Elsewhere investors will follow Q4 GDP growth for Japan and fresh inflation rates for Switzerland and interest rate decisions in the Philippines and Indonesia. So some some some decent data coming out, I guess potential market moving, but again especially for really the the US as well as the UK and Japan, those are probably the main data points. I think there is something to do with the euro, talks about elsewhere in Europe, second estimates are like to confirm the euro area economy recorded a marginal 0.1% GDP growth in Q4. So second estimates really aren't the most important GDP growth figures, it's really the first or preliminary ones that you really want to watch out for. And so let's get into the technicals and some more fundamentals looking at the dollar index. So the dollar index technically the dollar is at really a kind of like a bit of a turning point fundamentally and it's really because at the moment you have investors bracing for risk inflation dooms bonds to bear market, right? So let me read that again, investors brace for risk inflation dooms bond bonds to bear market and surprise hot CPI print may extend route triggered by jobs data and rates, traders place option bets that targets 6% Fed policy peak. So what does that all mean? In terms of inflation and the dollar, if inflation goes higher then the Fed will be probably forced to be able to actually hike rates for a bit longer which means that will have to be priced in which will mean that dollar will, you know, is likely to go higher or appreciate in value because hiking rates typically appreciates the currency and the Fed are looking to fight inflation and so with that, you know, bonds are connected to inflation, they're very insensitive to inflation. In fact, really if you're trading currencies, you should actually also be looking at, you know, treasury bonds or guilts in the UK as well and so because they are really linked, it's really called intermarket analysis and has to study between different asset classes and how they're, you know, linked and so investors are bracing for key inflation data next week that could worsen the bond market route but we're not necessarily focusing on the bond market too much because we know the what the expectation and what that actually means and so it talks about the reversal would come on the heels of a blowout January jobs report data that sent bonds tumbling since afterwards federal reserve officials conveyed that the inflation battle is not over and it may take longer for the central bank to achieve price stability, it would also dash hopes that inflation would remain in a downward trend and view, sorry, a view that sparked a rally in treasuries last month so ultimately exactly what I said in terms of, you know, the Federal Reserve having to fight inflation by hiking rates a bit more and a bit longer, right, which would and should send prices going higher spot at all depends on whether CPI comes out higher than expected because if it doesn't, if it just remains as is or actually comes out a bit lower, then that means that the Fed won't won't have to hike rates as much or, you know, they end their hiking cycle and you probably see the dollar start to, you know, come to the to the downside. Now, the expectation is actually for inflation to, you know, still continue on its way down, but there is obviously a surprise that could happen. We've had plenty of surprises, right, especially the jobs market, but let's see what happens here at the moment. Dollar index, again, my bias though is still really to the short side dollar unless we really do have some a big surprise on CPI and if we do have a big surprise on CPI, then in the short term, I probably will start to look for dollar buys, at least in the short term, but in but for now, and if it comes out as expected and, you know, rates CPI comes out lower than my bias is still more to the downside. So a bit of a tricky situation. It's again, data dependent. And so again, if you want to be short at the moment, probably say from a confluence perspective, this is decent because we're at a supply zone, so it could start to drift to the downside. If you're looking at buys and buying on the dollar, then you would look for prices to come down to that demands on the 102s, 101 area, and then look for any kind of buys on the, you know, dollar crosses like the dollar yen, dollar Swiss onto the dollar yen. Again, you know, the previous analysis talking about the dollar really applies to pretty much all pairs because the market has to price in the new interest rates if inflation does come out higher, which means that if the dollar starts to go higher, right, after CPI, then you're looking at any pullbacks really being buying opportunities and but if not any pullbacks to buy the yen and actually shorting opportunities. And again, my bias currently until the data really comes out, at least over the medium to long term is to go long on the Japanese yen. I do think the yen, dollar yen is going to go lower over the next three to six months. It might pull back obviously in the short term, but if it does, I think those are definitely decent shorting opportunities on the dollar yen, dollar Swiss, similar thing in terms of dollar analysis. Again, thinking to be to be a buyer with a dollar, you're really looking for a pullback into that 95 50s, sorry, 91 50s or 91 round number before looking at getting long. If you're looking to get short and think that the Swiss franc is a bargain anywhere around here, me personally, I think I'd rather look for a fresher area of supply and looking where the moving fair value is way above that moving monthly moving fair value. And so yeah, I think probably around the 94 50s, 94s, I think would be a decent area to look for any kind of short trades that I'd be looking for, even better would be the 96 95 areas, but I'm not really trading this pair. But if you are really those are the areas that you're looking for dollar CAD and the dollar CAD, the Canadian dollar had some decent news on employment or unemployment, I think it was always employment actually was employment that came out actually way better than expected. But the Canadian dollar, the Bank of Canada were not looking to high crates anytime soon. So as positive as the news was, I still expect the Canadian dollar to weaken or be one of the central banks that I would trade against. And so the Canadian dollar, not necessarily against the US dollar, but if I think, you know, I'm looking to trade the, for example, the Aussie CAD, and I think it's going to go higher, but the dollar CAD, a bit of a tricky one, I think for me, if I'm looking to buy, it would have to be somewhere around absolute lows, these one point two, three, two, six area, if I'm looking to buy the Canadian dollar, then it would have to be somewhere around the one, three, fives before looking at getting short, but not really a pair. Again, I'm not interested in unless I think the dollar, if the dollar starts to, you know, is a CPI does come out, you know, higher than expected than I think. In fact, if I'm going to buy the dollar, it will be against the Canadian dollar for sure. And this could be actually a really decent buy opportunity if prices drift down here before going higher. New Zealand dollar really come down, kind of come down to this, this demand zone around here, kind of broke it, it's kind of held a little bit hasn't really kind of gone through it, but I'm going to kind of just get rid of that anyway, looking a bit messy. I would say if you're looking to kind of buy the New Zealand dollar against the US dollar, pull back into that 62 area, I think we'll just below matter of fact, I think 60, 61 50s, I think is an even better area to look for any kind of buy trades. If you're looking for any kind of sell trades, at least up to the 60, the highs of this supply zone here, which is the 65 76 area for a buy trade. I mean, we do have actually, I can actually move this down. And that is a supply zone as well. So the underside of that level, I think is okay. But I think the better area would be really at the absolute highs. But again, not really a pair I'm interested in, in buying or selling. But a pound dollar is something that is quite interesting. And the pound fundamentally, there was some positive news talking about Britain avoids a recession by the narrowest margin during the strikes. And we had a, you know, strikes kind of started in the kind of end of November into December. And the expectation was for the UK to enter into a recession. I think the number came out basically at zero. So it avoided the UK avoided technical recession, talking about the figures leave the UK, the only G7 nation to yet recover from COVID. So we are still behind a lot of other economies. Jeremy Hunt's figures were better than some feel. And although they were, we are pretty much at the bottom of the table when it comes to our GDP growth. So it says the UK avoid the recession last year by the narrowest of margins after the UK, sorry, after the cost of living crisis and industrial action hit the economy during December, gross domestic products was unchanged in the fourth quarter following a revised 0.2% decline in the previous three months, the Office of National Statistics said on Friday. And output in December alone felt 0.5%. So that was, you know, quite a big drop in the figures meant that Britain dodged the back to back quarterly contractions, the definition of a technical recession, the economy nonetheless was 0.8% smaller than its size at the end of 2019, making the UK the only group of seven country that has yet to fully recover output loss during the pandemic. So, you know, the UK economy is very, very fragile. And for me, I think overall it continues to be a sell, although there is scope for some, some appreciation for the pound in the UK wage and inflation data set to fuel further Bank of England rate hikes. So Bank of England central bank weighs pause in quickest rate hikes in 30 years and signs of wage spiral keep upward pressure on rates. So the UK wage and inflation data this week are likely to support arguments from the Bank of England policymakers who are raising rates, adding the quickest surge in borrowing costs in three decades. And so economists expect two separate reports will show that consumer prices are still rising at a double digit pace and companies are boosting pay at the quickest pace on records excluding the year that was distorted by pandemic lockdowns. And so, you know, really, what does that mean? It just means that in order to bring inflation down, the Bank of England still have to continue hiking rates.  And so, when hiking rates, the those rates are yet to be felt in the economy by businesses, you know, borrowers and lenders. And so, if you keep hiking, what tends to happen is is that it can have a negative effect on the economy in the future. And so, whatever you do now, they have to have one eye on the next six months to a year, because otherwise, if you hike rates to too much, then, as I said, it has a, it can have a really contracting effect on GDP. So as much as, you know, certain banks want to hike rates, they might not be able to as much as, you know, they want to simply because of the effects of interest rate hikes in the future. And so, let's see if that remains continues to remain positive or appreciate the pound or whether, you know, the market thinks that in fact, by hiking rates, the UK will go into a deeper recession, which is basically what I think. And so that's the reason why my bias really is to the short side. So with that being said, I wouldn't be surprised if prices come back up to, you know, this area here. But I do expect prices over again, the next maybe month or two, to still, you know, want to drift at least down to the 119s, if there's a pullback. And again, it just really depends on what happens with the US dollar as well, right? But for now, we are in, you know, an auction between this high and this low. And so if you do want to do business, best places to do businesses right now at the moment are going to be at the lows or at the highs of auctions or what, you know, traders would term as ranges. And so anything in between that, for me, I'm not really interested in doing any kind of business there. But I'm definitely watching this pair. It's on the watch list. But I've got more of a bias towards buying the dollar than I do the British pound, at least in a short time. Moving on to the dollar, Euro dollar and the Euro dollar, interesting one. So again, we've had some decent news for the dollar recently, which is the reason why the demand zone didn't really play out as expected. And we're coming down actually into 106s 105s, which is somewhere where I'm interested in actually buying. And so again, I do think that there is scope for prices to come down to this area, especially and maybe even down to the 103s, especially if CPI comes in higher for the US, for the US dollar, but ultimately, a lot of the banks are pretty much still long on the Euro currently against the dollar with 110s, the highs, as well as, you know, 115s actually being quoted over the next, you know, three to six months. And so with that being said, my bias is still to the long term, which basically means that I'm looking for just buy opportunities, one direction I'm not looking for, you know, to buy and sell in both directions, just looking for pullbacks into what would be considered a bargain for the Euro. And this is a bargain back in in January because it weren't made new highs. And so is this going to be a bargain again? Nobody knows. But that's really the area that I'm going to be looking for any kind of buy trades, especially if the US CPI comes out as expected. Now, again, the European Central Bank, ECB is not says half point rate hike may be needed in May, which is still quite some ground to cover. Dutch official says and comments add to calls for sustained tough action on inflation. So all central banks really are going through high inflation. And but the European Central Bank are one of the most aggressive banks at the moment when it comes to hiking rates again, it has to be supported by GDP gross domestic product. But as long as they, you know, they're seen as not entering into a recession sooner, then I think they can afford to be looked to be aggressive in their hiking. And so when you have two banks, central banks that are still hiking, the chances are you don't get a trending market, right? You would get more of an auction, more of an arranging market, fair value auction is what it's really should be known as. And so where is price likely to auction from? I think it could auction from around the 106s, 105s. And so that's really where I'm looking to buy. If you're looking to short the dollar, short the euro dollar, then you're really looking for a pullback up into, especially those 109s, 110s, I think it's going to be a really nice area to look for technically a short before, you know, looking to get short there. So you've got the Aussie US dollar, Aussie US dollar. Again, I think this is a decent buy right now. I do think that again, this week is going to be driven by obviously US CPI data.  But ultimately, the Australian dollar for me is a buy simply because of, you know, China, right, more risk on, you know, around China and zero COVID policy. They're also looking to the RBA, looking to continue to high crates as inflation is high for them as well. And so there are some buying opportunities in and around this, these demand zones here. So at the moment, you do have demand zones, but you also have some support resistance aiding that as well. That area has been touched several times, so I don't necessarily expect it to hold. And if it does come lower, then I think that's going to be a better bargain to look to buy the Australian dollar against the US dollar. But if you want to go short, then you're looking for a pullback up into 70, 50, 71 areas before looking at getting short. The Aussie yen, Aussie yen is again, a bit of a tricky one at the moment. I think both currencies are appreciating for various different reasons. And so I do think that you will see, you know, price remain really in an auction between probably this high and this low. And so if you are looking to get short on the Australian dollar, then I think a pullback into the 93s and just above that would be really the decent price. So anywhere around there, looking to go long on the Australian dollar against the yen, I think the 89s. But again, not really a pair that I'm interested in. I might actually remove that from the weekly list. I might add something else instead of the Aussie yen, because I don't think for now I'm going to be trading that pair for a while. So I might just remove that. And then we've got gold. So gold obviously correlated with the US dollar, the dollar's strengthened, which means that gold has gone down. If CPI comes out higher, you would think that gold being a hedge against inflation, you would expect gold to go higher, right? But doesn't seem to be working that like that. There's a bit of a disconnect between just straight inflation and gold at the moment. It just seems to be literally gold totally driven by the value of the dollar. And so if the dollar starts to continue to appreciate, you can expect gold to devalue, right? But ultimately, these are again buying opportunities if you're looking to buy gold. So if you missed out on gold on this run up, then don't start moaning when prices come down here and start thinking to yourself, well, I'm not going to start buying gold. What's changed is the question I'd ask you. If nothing fundamentally has changed and you think that gold is going to go higher and the dollar is still going to get weaker over the year, which a lot of banks are predicting and forecasting, I shouldn't say predicting, but they're forecasting the dollar to continue to devalue over the next towards the end of the year. Then all these pullbacks should be potential buying opportunities. If you are trading gold, or whether you're just buying the physical or even looking at ETFs, look at a pullback really as a nice buying opportunity. I think the 50% area as far as from this load to this high is really nice. So fair value is going to be around a 1788. So that's fair values. Your price does come all the way down to this area, 1800, 1780s. Then I think that's decent for a potential buy too. Also, you've got the added confluence of some support and resistance in that area as well. So that's quite nice within that supply. Sorry, within that demand zone. If you are looking at getting short, then you're looking at a pullback into the 1928 and then a sell trade there. That's believing that the dollar is going to continue to strengthen and gold to get weaker. Anyways, guys, that's it for this week. If you do have any questions, please put them in the comment section. I'll try and get back to any really good questions. If I don't get back to your questions, probably wasn't a great question. If I don't know it, then I don't know it. But yeah, just let me know if you have any questions on fundamentals and I can point you to the right videos or any analysis in this video. Anyways, guys, have a great trading week and I'll speak to you until the next video. Hi, my name is Leon Roeb, currency trader and trading coach at Trading180.com. And in this video, I wanted to answer the question regarding can you swing trade forex successively without fundamental or risk sentiment analysis? And the answer that typically follows that from technical analysis traders is that all you've got to do is follow the trend, right? So higher highs, higher lows in combination with trend indicators, right? So it's just a case of PPC, something like this occur, higher, higher, higher, low like that. And you've seen this happen. All you've got to do is get in on a pullback, right? And then that's really what you're looking to do. And as long as whatever said indicator is, whether it's a moving average, whether it's some sort of Elliot wave, ABCD wave or 12345, then that's pretty much all you need to do. But I would then ask the question, well, how do you know if the trend is likely to continue? Because, you know, trends don't continue for continue forever, right? You might see the trend. What's happened is with especially with swing trading, you know, on something like a daily timeframe chart and looking out, traders will see the trend after it's made maybe about, you know, maybe 500, 600, 800 pit move. And then all of a sudden, they want to start jumping in on the pullback, right? And prices might pull back. But, you know, how are you going to, you know, know whether that's likely to continue? Yeah, likely to continue because ultimately that's what you're gambling on. And also, how do you know whether price is pulling back or if it's actually the beginning of a reversal, right? Because you have situations where you can have, you know, pullbacks, complex pullbacks, if you want to call it complex pullback, but pullback that might look something like this, and it might bounce off of there. And then maybe, you know, come down to maybe something like this, maybe a demand zone down there. And then all of a sudden, we made lower highs, lower lows, traders might think, oh, well, that's, you know, this is, is this a reverse or it's just a deep pullback, right? And then you might see, you know, prices start to make new highs or even prices might come down even deeper, right? To something like a 61.8% fib, right? How do you know whether price is that's just a deep pullback or in fact that is a reversal? Yeah. And so it's very, very difficult to just tell from price and you wouldn't be watching this video if you didn't have those same questions, right? And so, you know, for your information, price does not move simply for the sake of moving, right? Buyers and sellers within the forex market or any market, right? Any asset class, buyers and sellers don't buy and sell assets in large quantities for no, absolutely no reason, you know, to have a market that just people are speculating on without no sort of concept of value is, you know, is crazy to me. It doesn't exist, right? You have to have, when you have a market that has to be value associated with that market. And fundamental analysis of any asset class is really understanding the current and future potential value of an asset. And so what you don't want to do is confuse price with value, yeah? So assets have varying degrees of cheap or are varying degrees of cheap, expensive or fair value, yeah? So, you know, otherwise, if price was always indicative of its value, then we would never have an asset that is undervalued or overvalued. And it would never have anything that is cheap or expensive because the price is what it is. And, you know, you would just say, well, that's the value, but that doesn't make any sense. So, you know, if you bought a Ferrari, someone sold you a Ferrari for a pound, would you say, well, that's the value of the Ferrari? No, you know, intrinsically, that the Ferrari has an actual value because fundamental value because of the engineering that's gone into it, the materials that's been used on it, etc. So, everything has a value. And so price, yeah, is not always its value, right? So, don't confuse price with value. And in the forex world, value is determined by interest rates, yeah? So central bank monetary policy, inflation and GDP, as well as risk sentiment. And this is according to the financial institutions who are doing business in forex, right? It's not, you know, Leon Rosé and this, this is, these are the banks that determine the value of an exchange rate of a currency, one currency against another because currencies are trading in pairs. And so, you know, you look at examples like this from a bank, this is from MUFG, Japanese bank, this is the Eurozone rate market has moved to aggressively pair back expectations for further rate hike. This is the fundamental analysis. So, it talks about dovish policy, monetary policy updates from the Bank of Canada, Bank of England and the Fed, the Bank of Canada kicked off the dovish, dovish repricing by pausing their hiking cycle last week. Again, interest rates pausing their hiking cycle, yeah? So, you know, this is Citibank. So, you know, Citibank say on growth, so GDP, the UK lags with the slowest recovery to pre pandemic levels of real GDP future of UK's business model in a post Brexit world talking about the effects of Brexit on GDP. This is another bank that talks about, you know, this follows the Bank of England, Bank of England, SEMBA's meeting, et cetera, et cetera. And you can read, you know, them talking about why their targets, you know, within the next 12 months versus the Euro, the pound versus the Euro would be, you know, 0.88 cent in that price or that exchange rate, yeah? And it's not to do with, you know, well price, we're just speculating on price and what we see, what they see on the chart. Price does play a role, but the value is what drives price over the medium to long-term in the short-term. Price is really kind of driven by, or typically driven by liquidity and market makers, et cetera. And there is speculation, but the market is not for, you know, secondary, speculation is secondary. The market is really for big businesses like the banks to do business and exchange in currencies, right? And so fundamental analysis really is trading alongside the financial institutions. If you don't use fundamental analysis when you're swing trading, it's, you're basically just flipping a coin and it's pretty worse than flipping a coin, right? Because many traders, as you know, swing trading was all it was cracked up to be and easy as it was. Again, you wouldn't be watching this video. So there was definitely something missing in your trading, right? And it is fundamental analysis. And one of the ways, just one of the ways that you can use, I guess, the banks and what they release in their fundamental analysis in a bit of a shortcut is to use kind of bank forecasts as a guiding light, yeah? And so many banks use or publish their forecasts. They have monthly, quarterly, and these are always constantly updated every now and then, of course, because things change. But what you want to do is use bank forecasts as your guiding light.  So that way, you know that even if you don't necessarily fully understand the fundamentals, which I highly recommend you do, the banks are actually showing you or telling or forecasting what they think is going to happen with that exchange rate. Now, does it mean that, you know, they're going to be 100% right all the time? No, no one has a crystal ball. And these are forecasts. Forecasts are not predictions. There's a difference. Forecasting is not predicting. Predicting deals with absolutes, you know, I predict that tomorrow it's going to rain. And if it doesn't rain, then I'm wrong. Forecasting is what is likely to happen, the probability of something happening, right? We're just forecasting. The weather is a forecast, right? We forecast the weather because the weather can be, you know, is ever changing. And, and that's why they call it a forecast. Anyways, so what you want to do is find as many as you can bank forecasts. Don't, you know, go with the, with the, the majority, don't go with just one or two. Go with maybe if you find 10 or 15, and then maybe, you know, maybe 10 of those 15 are saying that they forecast the euro dollar to go higher, for example, then you go with the majority. This isn't, you know, this is, this is opposite to, for example, retail trading, where if most of retail are saying that they are short on the euro dollar, then you might want to go long. The banks typically, you know, create the market. And so, and they're doing business. And so, the majority of the banks are typically not wrong, right? They're not wrong. They can be, of course, but they're typically not wrong.  And so what you want to do is zoom out on a daily, you know, potentially weekly chart and then look where current price is relative to the forecasts. Yeah. And so this is an example of the euro British pound, where you have the forecast. In fact, what I'll do is I'll just go back to the euro pound. And we saw a, for example, a forecast on the euro pound right here for the first quarter. We had an exchange rate forecast of 0.89. In the second quarter, we still have, you know, 0.89. And then it looks like it's going maybe, you know, about 100 pips higher, right? So we have at least two quarters where we should be at the 0.89s at some point. So then, on a price chart, what you want to do is look at where you are relative to the forecast at the time, right? So if you're at 0.89, yeah, at the time of taking the trade, which is right here, yeah, then you know that you probably don't want to, you know, take that trade anywhere around there. But let's say, for example, you're around the 0.87s, then you know that you've got at least a few hundred pips to 250 pips, you know, to the upside, yeah, if prices come down, right? Because ultimately, this is seen as the potential for a bargain if this is seen as the forecast of where prices may be, yeah? So you want to look at where you are, yeah, in relation to the current forecast as well as the upcoming forecasts, yeah? And so that is really kind of a bit of a shortcut way to understand, you know, whether you're going to be on the right side of the market or not, yeah? But again, not, you know, you must say again, but please note that not all bank forecasts, you know, are going to be up-to-date or relevant. And so it's still important that you understand current fundamental and risk sentiment analysis because data changes and risk events do occur, right? So there are surprises in the market with data, there are risk events, you know, who could have predicted Covid, who could have predicted the Ukraine war? There are things that come out who could have predicted the Chinese balloon, right? And whether that has an effect on prices in the US dollar at the moment doesn't look like it is. But you have to have your finger on the pulse, don't just blindly follow forecasts. Of course, it's a nice guide, it's an aid, it's some confluence, but if you don't understand the reasons why, then, you know, you might get caught out because if something changes in the market and you're going on maybe the forecast from, you know, from last week, then you're probably going to get caught out because you're not aware of the changes. The data needs to still support that narrative.  And then swing trading doesn't mean that you, you know, you can't go down into the lower timeframes and look for an entry, whether it's the one hour, whether it's the four hour, if you have custom time frame charge, you can go to six, to the eight, to the 10, et cetera, and look for your entries. Or if you just want to trade, you know, at the end of the day, because you have a busy day with family, work, et cetera, then that's fine too.  But ultimately, if you've got good two, 300 pips to the upside, and maybe you're only risking 50, 60, 70 pips, then, you know, that's still good risk reward.  And so you know, swing trading forex successfully with fundamental resentment analysis, you know, the reason why you use fundamental analysis is to recognize when, you know, exchange rates really are cheap, yeah, and to get in, you can get in at the beginning of a potential trend and also obviously looking at where the banks are forecasting, where price is, and your directional bias, which is, you know, first and foremost, what you really want to understand or what your directional bias should be. And also as well, fundamentals gives you understanding, you know, deep fundamentals, not just forecasts, but understanding the deep fundamentals gives you the confidence to hold trades for longer, and you're less likely to take profits early, right, what's the point in taking profits, if you know that the fundamentals are in your favor and is likely to move, you know, maybe 1000 pips in your direction at some point, right, you know, you don't want to look at your account and say, well, I'm up by two to one, and then I want to just want to take, you know, profit, that doesn't make any sense. When, you know, what you want to do is ride the wave and ride the coattails of the banks. And it's very hard to do that without understanding the fundamentals, if you're just trading price and hoping and praying, again, you're pretty much in the wilderness, price is not going to tell you where, where, you know, forecast where price is going, indicators might be right, but they're only right simply because the banks, you know, the banks are saying that, you know, prices will go in that direction and as a result, the indicators are looking at price, and if the price is going higher, excellent, the indicator looks like it's working, but ultimately, those people who are technical traders don't understand, in fact, it wasn't the indicator that was right. It was the fact that they were, you know, inadvertently or unknowingly on the side with the, with the banks, right? Because the banks create the market and they are the ones that are going to move price in, you know, the direction, whether it's going to trend or whether it's going to range or what is known as a fair value auction. And so also recognize, you know, it's important to recognize when using fundamentals and fundamentals can help you recognize when price is likely to be a reversal or or just a pullback, right? So again, data changes. And so you might get in on a trend, not knowing that fundamentally, in fact, there's been a total 180 in monetary policy, and now it's become a, you know, the market is moving against you. So for example, you could be on a, you know, see a really nice trend, and then you could be thinking to yourself, I'm going to get in on this, this, this area here, this is a nicer demand zone, but not knowing that in fact, at this point in time, yeah, maybe the European Central Bank, the ECB have surprised the market, yeah, and said, oh, well, you know, we're, we're going to start cutting rates instead of hiking rates, right? And then you're thinking to yourself, well, the trend is still up, the trend is still up, right? And I'm going to buy here when you should really understand that there's no technical level in the world that's going to work against fundamentals, none, absolutely. You might get a small little bounce, but ultimately, this is now turning into, you can have confidence if you understand the fundamentals, this is going to turn into a total reversal rather than just looking at pullbacks. And this is how traders get caught at levels, you know, day in, day out, week in, week out, because they don't understand the, the fundamental side of things and the risk sentiment side of things as well. And so also as well, the number of trades you take does not equate to the amount of profit you'll make swing trading should never be looked at as a bad thing just because you take maybe, you know, four or five trades a month doesn't mean you're going to make any less money than someone who takes for 40 or 50 trades a month, right? It doesn't really matter because somebody can take, you know, 100 trades that month and break even or even lose, you could take, you know, one or two trades that month and have and both of those trades could be winning trades. So the number of trades you take does not equate to the amount of profit you'll make. So don't think that swing trading is any less profitable than something like day trading. And if you want fundamental analysis mentoring and a lot more, visit trading180.com, hope this helps and love to hear your feedback on it.


It's probably a little bit too early in the morning. Hopefully, this presentation will be helpful to you guys to give an idea where we are with the NoSQL database security. Again, this is mainly focused towards application developers. Like we were talking just earlier, the database security is not there where we want it to be for the NoSQL databases. But that should not stop us being application developers or architects or even DBAs to do whatever we can outside a database layer to control the, to put in the security rules in place. So we're going to talk about that, what we can do and where the most of the NoSQL database are today in the security space. Again, forgot to say my name. So my name is Srinni Penjikala. And the scope of this talk is mainly for application developers. Like I mentioned, we look at what's there right now and what's coming up. And if we, this is a 45 minute talks, so not much time for, I usually, I talk about these topics for hour and a half or at least an hour. So we have some time to do demos. I try to do a lot of demos in my class because that's the best way to learn the concepts. But we may have time for one or two. And some of the database we look at them or those, but again, that doesn't mean that these are the only databases that are out there or these are the only ones that, like I'm recommending or something, these are the ones I tried and all these are open source, you can download and try it out. So that's always the best thing to do when you're looking for new databases. So how many of you are like developers or architects versus? Okay, two, three, okay. And other than you, any like DVAs or DevOps, project managers? Okay, yes, right, right. Platform, okay. Yeah, I think I should use that word new as more of a kind of loosely used term because I mean, if you know databases, you know database, right? Right, right, exactly. You can notice equal database in most of the sense, it's like it's not much different from any database. Usually you have to do your data modeling, database design, security, put all that in place. It is defined those first requirements and then find a solution that fits those requirements, right? Don't let the solution drive your requirements, right? We're going to look at basically talk about, we're not going to look at this security vulnerabilities today. That's like SQL injections, cross-site scripting. That's a completely different talk. I'm going to focus more on the application security side, authentication, authorization, encryption, kind of thing. Format is kind of more, because it's a small group, so we can make it more interactive. So about the presentation and demos, about 40 minutes and maybe five minutes for Q&A. But if you have any questions during the talk, just raise your hand or share your experience on any of these topics. About myself, I work as a software architect for a, does it look okay? So I work as a software architect for a payment processing company in Austin, Texas.  I wrote a book last year called Spring Review in Action, and I'm working on NoSQL database patterns right now, which is coming, which is going really slowly. I'm also a lead editor at infoq.com, so I write a lot of articles, write about the conference like these. But again, my background has been all financial services, so security is a necessary evil for us. We have to do it, right? And also I had my own experience with agile versus architecture and agile under architecture. Are they complementary or contradictory? All those interesting stuff. So let's go ahead and get started. So these are the different topics. Again, time permitting, we may have to rush through some of the slides. I have 50 slides, usually they say, have one slide for about two minutes. So we may have only time for 25 slides, so I have to rush through some of the use case slides. But I did put the use case slides because I wanted to kind of show you guys which database is good for what kind of use cases. So let's go get started. Again, this is at a high level, this is the NoSQL database landscape. I did put, oh, I actually put it twice. So I did put relation database on the list because I would like to, at least from my view, we want to see all these new databases as an addition to the options we have rather than replacement to relational. They all bring their own patterns, document type or graph. None of them are saying, okay, document type is going to replace the relational type database or graph. They all just bring additional options for the specialized data types. So now we have five, six, 10 more options than only one option we had, which was relational before, right? And the big data is also related, technologies are happening. It's not really about storing the data. It's about the processing the data, but we should still look at that as part of the overall change that's happening. And same thing with the in-memory data grids. These are more data stored in the memory rather than the disk to make it faster access and other requirements. So it's not really a NoSQL database, but it definitely fits into the overall NoSQL database technologies. These are some NoSQL database examples. I'm sure you've already heard enough of this during the last couple of days. MongoDB, Neo4j, React and Redis are key value databases. Cassandra is a columnar database. Hazelcast is an in-memory data grid. Elasticsearch is more of a search framework like Lucene or Solar, if you guys are used to that. It helps to search the unstructured data in the databases. We have a lot of text content, website content or anything else. You can use this tool to search based on the keywords. And Oracle NoSQL database, it started as a key value database, but now I heard yesterday they are starting to support graph and document as well. Don't. Yes. How is it different from the Oracle Timestand? Oracle Timestand, I think it's more close to Oracle coherence, Terracotta coherence. We have what else, memcached kind of top things off. Timestand is more of a database. This is more of an in-memory data grid. They may be close, but it falls into more coherence categories. So let's look at security, right? We always want to look at a security by architectural layer. So this is what it's like. It's what's kind of interesting. Whenever we hear about NoSQL databases, there is this cap theorem. Consistency, availability, and partition tolerance. And a lot of this NoSQL database only offer two of those aspects. Like Cassandra is a AP database. Its focus is on availability and partition tolerance, not so much on the consistency. So when it comes to security, we have to also look at this new theorem or new acronym called the CIA. I mean, it was new to us probably, not new to the security folks. So the CIA stands for confidentiality, integrity, and availability. So cap is good for performance and scalability, but CIA is also needed for the security side of any database, including NoSQL databases. So confidentiality is basically are the right users, authorized users, getting access to the right data, or unauthorized users are trying to get to the access. The integrity is basically about the data itself. Is it being tampered when we transfer the data from one system to another system? Is it being modified by unauthorized users? And availability is basically availability of the systems. Bless you. Availability of the systems where unauthorized users are not bringing down the systems. So with NoSQL being related to other technologies like cloud, mobile, and social, and all the other technologies. So there's a lot of data, it's always in motion. A lot of data is being moved from one system to another system. So definitely confidentiality, integrity, and availability are very important, even more important in NoSQL databases. Because in relational database you store in one database, you may extract it and send it to other system once in a while, but it's not as constant as it is in NoSQL. It's always, data is always moving from one place to another place. Also sometimes we take data from no relational database, put it into MongoDB for analytics. So the data is moving a lot and we want to make sure that it's being done in a secure way. So some of the security concerns, some of these are probably already familiar to you. So when it comes to data security, we have to consider three different scenarios. So data at rest, which is when data is stored in the database and it kind of states static there. So that is the data at rest. So we want to make sure that data is secured when it is in the database. So no one is unauthorized users are not able to access the database. So this is where the encryption comes into picture. And data in motion is basically when you take a data extract from a database and then send it to a different system, whether internal or external. We do that a lot in the financial services industry, banks and credit card processing companies. We have a lot of data files coming in. We have a lot of data files going out, especially ACH, which is how the money transfers the entities. There's a lot of batch files. We still use a lot of batch file processing, not real time in most of the companies. So a lot of these data is like going back and forth. So you want to make sure that it is encrypted and actually in security industry, they also have what they call tagging. So each data type needs to be tagged. Is it confidential or high, medium, low kind of security levels? So just like when you send a package, if there's a dangerous material, you put a tag on that, biohazard, whatever. So just like that, there are these tags that we need to use for data sets. And data in use is basically when you are using the data in the application.  So the user is actually viewing the data and modifying the data, so that's the data in use. And this is where you have to decrypt the data so the authorize user can view the real data. And when they make any changes and when you store it, again, you have to encrypt that in the database. So those are the three scenarios. When you're working in the security industry, these are very familiar terms we use. And authentication is basically, are you who you say you are, right? When a user logs in, there are multiple levels of authentication, either user-ready password combination or user-ready password and some third parameter, it's called multi-factor authentication. So that's authentication, just a login. And access control is basically, are you allowed, you are authenticated in the system you were logged in, but are you allowed to perform this operation or are you allowed to view this data? You may be allowed to view some other data but on this specific data, right? So that is the users and roles and permissions model. And then finally, the data encryption is, we talked about that already, how do you encrypt data so it's not viewed by unauthorized users in the system or outside the system. For that, the key management is very important. There are some companies that offer key management services or you can create your own keys, you know so. Yeah, that's a good question. So some products have what they call vault, VAULT, I don't know how you pronounce. So you can actually purchase those products. So it's basically a wallet type of secure vault type of thing, you know so. You get a key out, you use it and it expires and then when you need one you get one more, you know so. So there are some products. Mostly commercial products, I don't know if there are any open source products. The way we do it in my company, we have done this long time ago because we started several years ago before any of this took off. So we have our own key management system which is not pretty but it works. There is some lot of manual work to be done because we communicate with MasterCard and Visa. So every transaction has to have a key. So we both need to know the key. So the way it works right now is not automated but it works, you know so it's secured but it can be more automated so. And that's the one key note yesterday Adrian was talking about HSMs, right? HSMs, okay. And I have a couple of names I can, I don't want to mention the commercial product names since in the talk but I can talk to you after the session we can mention a couple of names. And the auditing is also very important, you know we are doing all this authentication, access control and encryption. But who is doing it? Who is accessing what data at what time? You know in case the system gets into a situation where there is a fraud activity, the auditing will always help after the event happens. So you want auditing available out of any product you select. You don't want to write auditing capabilities on these products because that will be a full time job and you won't have time to do the real job you are supposed to do. So I wanted to kind of talk to you guys about this. You know NoSQL database security holistic view, right? You know we keep, you know this conference is mainly about NoSQL databases probably a little bit about big data. But NoSQL database is only part of the overall data management lifecycle. So I wanted to kind of show you guys this and discuss this one right here. So NoSQL DBs security are definitely important. But let's look at other similar activities that happen in the data management lifecycle. So NoSQL DBs are used mainly for storage but we are not going to just store the data and leave it there forever, right? We're going to process that for whatever queries or search or data mining purposes. And we also want to have faster access, you know so that's where the in-memory data grids come into picture, right? If it's in the disk, you know it's always going to be slower to access. And we have the hosting options now. You know previously we used to have only probably five years ago we used to have only buy versus build. You know when we have a new product idea do we build it or do we buy it from outside? But now we have a third option buy versus build versus host on the cloud. Definitely the hosting is also part of the security considerations. Then we have interaction between the data or users of data. This is where the social comes into picture whether it's Facebook or the graph relationships. So definitely the data is being used by users to interact with each other. So that's another concern we need to keep in mind. And finally the end user devices in all this data is being used by users on their devices, right? Whether it's a laptop which is probably become extinct pretty soon. Smartphones and tablets are main end users. So all those concerns are very important. Just the storage is one thing. You can make it as secured as you want on this box. But how about the other ones? When the data is being used, it's being processed, it's being hosted, you know so. So that's where all the other hexagons. I just put the concerns here first. We always want to start with the concerns and requirements and then look at the technologies. So this slide actually shows those corresponding technologies. So we have NoSQL DB, a database on the top and then big data, in-memory data grids, cloud, social computing and mobile at the end so. So when you think about security or NoSQL security, think about all these other areas as well. Because you can have as secure database as you want but if whoever is using that is not, it's not secure, that's going to be a concern, right? So any other comments on this slide? So, have anything like a social or mobile security, I guess, look in there, yeah, go ahead. Yeah, that's definitely a good concern even without NoSQL databases. Also, with the cloud, you have a lot of different scenarios. You may be running your application in the cloud and by the database is in your data center. That's more secured type of approach. But maybe you have database and application running on the cloud. So they're all different scenarios, right? So definitely, I think cloud security is a big topic. I haven't, I don't have a lot of experience on that because right now at my company, everything is in-house. We have our own data centers, which I am not a big fan of. We definitely want to go to the cloud in order to be cost effective. But yeah, we can probably talk about that after the session. So how do you do it? Okay, I also want to talk about this, the term polyglot persistence. We're going to hear about this a lot. Again, going back to his question, we have relational databases. They're not going anywhere and we have new database now. So if we were having challenges with one database, type in the past, now multiply that by 10 times, 20 times, right? So not only from how do we access the data, but also how do we secure the data, right? So that's where the cross-store persistence or polyglot persistence techniques are going to help us a little bit. Now they're also going to add more downside as well, but on the good side, you will have one database, the one data access layer.  However, you are using right now to persist. Let's say you are using JPA technology, Java persistence API, to persist into a relational database. You can use a very similar approach to persist your objects, whether they are graph of objects, or document type object, or key value object, or column or whatever the data type, right? Or something new in the future. You can persist them into the respect you know, SQL databases using very similar API. So you don't have to learn document API or MongoDB API or Neo4j API, because they're all very different. They have their own API right now. Either you can learn 10 different API, which definitely are going to change really fast. So keeping up, up to speed with the... Keeping them up to date is always going to be difficult. So how do we do that, right? So polyglot persistence is definitely going to help us. Basically the idea is we want to store different types of data in different SQL databases. We want to have a common data access layer. And again, security is going to be more critical, because now we have multiple databases. How do you manage the security on all those databases? So one option is manage the security in the service or domain layer. So where you have your application logic running. So that's where you can say, if a user comes to the service layer and say I need access to this data set, and the user is not authorized, you can block the user right there, right? Instead of sending the query all the way to database, which may be too late sometimes in protecting the data. So domain service layer or application layer is one choice. But again, with security you always want to secure in all layers as much as possible. So when I say secure, put the security in application layer, I don't mean ignore the security in other layers. So you need security in all layers as applicable. I think my view on that is basically you always want to have a data services model. So even databases, whether they are no SQL or flat file or relational or something else, they're never accessed directly by your clients. You want to have a service layer in between service model, like data services, right? Yeah, so in the model I'm talking about, there will be a data services layer in between. So company A, company B, company Z, they always have to call this service. They cannot access the database directly. Well, I mean that's a security incident, right? But ideally API contact wise, your partners, trading partners should be talking to a service. And that's where you actually manage the security and then only when that passes or checks out, you let them go to the database. Oh, you still need security on the data store layer, right? So you can always say, okay, my database is running on this IP address. My service is running on this IP address. So only allow access to this IP address from this IP address. If someone tries to go by pass, they won't, they will be denied, right? So there are different options, you know? So I mean, a lot of those things are very similar to how relational database works. I mean, that hasn't changed much. Again, the hackers are out there, you know, so probably getting in a really bad, really big every day and that is the same discipline applies for that, okay? Just wanted to show you this diagram. Again, this is kind of illustrate the same concept. So we have an application on top with all these different types of data, graph data, document data, key value. And we need to save that into all these multiple different databases. So how do we go about that? Without having to learn a lot of different languages and techniques. And then this goes back to your question on different layers. So you want to have, as an organization, you want to have security at these different levels. You want to protect the data record, but you also want to protect the application via protocol level, like HTTP or HTTPS. And you also want to secure the server. You want to secure the network and you want to secure the location, physical security, right? So a lot of times you may have the best computer technology, computer security in place. But if someone can just walk into a building and take your backup tape, and then they're able to decrypt that, so you just lost your, you know, you just had a security incident. So all those things are very important, so. How many of you guys, like, have to deal with security compliance requirements? FISMA, PCI, HIPAA, exactly. I definitely, you kind of know what those different security levels mean. And this is, again, I just want to show you guys this diagram. This is the relationship model, relationship database world, I guess. Now where we had these simple layers to manage, everything was, you know, pretty cool. And then once we got into NoSQL database world, one database became multiple databases and one or two APIs became, you know, several different APIs. But we still want to have this data access layer that we can use to manage all this complexity. And the frameworks like Spring Data is one framework I talked about a couple of days ago. Spring Data framework is exactly does that. It basically has support for all the NoSQL databases, almost all of them. So you can say, this is my Java object. I want to pass this into MongoDB. You can do that using just Java API, same consistent API. You don't have to use different APIs for that. And let's look at the, again, these slides are basically security-wise architectural layer. So one layer you want to control security is domain layer. So when you have a customer object and when you instantiate that, someone is calling the customer object. You want to make sure that the client is authorized to call that object in that context. So Spring Security is one framework that does this pretty good. Also, you can use any other framework that has access control list support. So we are controlling the domain level security here. And also, there's a service layer security you want to consider. So when you have a customer object and order object, and then there is a process order service calls those objects, you want to make sure that they're calling in the right context for the right parameters from a security standpoint. So that's the method level security. Again, in Java world, you can annotate that method. So giving like a roles allowed, only allow these roles to call this method. And I'll show you an example on that. And this is also a standard in Java world for this type of annotations. It's JSR250, Java specification request. So it's a standard basically. If you're in Java, this makes sense. If you're not a Java developer, then there might be other standards. So these are some of the annotations that you can use to secure the methods. Roles allowed, secured, pre-authorized. Pre-authorized means this has to happen before they can call this method. Let's quickly look at the demo. So I'm sure you guys are a bit bored with the slides. So for example, one way that I have done in my past life is how do we enforce these security rules? There are a lot of security rules. How do we enforce them with the developers? If someone writes a Java method without the security layer, let me see if I can... How do we create a framework that will notify them that that's not the right way to... So let's go ahead and create. Let's say I'm a Java developer. I'm working on this loan service. Again, this is a test class. There's not much logic here. But I'm going to create a new method. Process, loan, approval with conditions. So when you apply for a loan, either it's approved or it's denied or it's approved with conditions. Now I need this additional documentation only then I can, I will approve this. So let's say I'm working on that method. So now I create this new method and so far so good and I'm going to save this. So it should have flagged me. It should have flagged me with this role not allowed. Let's see why it's not doing that. Let's try this again real quick. Yeah, something is definitely, it's probably not working. Let me try to clean this.  So it was not compiling online. So now if it compiles, okay, okay. So you guys see that marker right there? So when I hover my mouse over there, it says all public business methods in a service class must have role annotation. So what we are doing was we are enforcing the developers to make sure that whenever they create a public method in a service class, we want it to be secured, right? So I am doing this with a custom framework that I wrote to enforce the security rules. So now the developer knows that they need to add an annotation, I mean, secure this method. Let's say this particular method needs to be, can only be called by a user who is logged in as, who is a underwriting manager? Because this is with conditions. So once I add that and save it, so if everything goes well, it should, the error flag should go away. This should go away. So let's wait for that. Yeah, just a lot of projects open here. That's why it's compiling all the projects, taking a little extra time. And I think, because the demos are taking a long time, so we're going to probably skip demos and just go to the slides next. Okay, there it is now. So the error is gone. So you can basically see how this works. So if I again take comment out, the error comes back. So this is one way to, I mean, again, this is not directly related to NoSQL database security, but this is the way you can build security into your applications. So let's jump to demos, I mean, skip demos because you don't have time. Again, we talked about service layer, a control layer is the same way. A lot of these NoSQL databases, they expose their database as a, through REST web service, REST-based interface. So REST is the common way to access databases. And the earlier, I mentioned about data services. We implemented a data service model based on the REST technology. So that's the best, the most common way to access and update the data. So we want to make sure that we secure those URLs. And you can do that by using security frameworks like OASP or Spring Security. I have a quick example here to show you guys how it's done. This is not a demo, I'm just going to show the file here. Okay, right here. So this is a Spring Security XML file. If you look at here, you can see the, I don't know if that is clear. So you can see the intercept URL.  And you say, what kind of HTTP method is it delete or post or update? I'm sorry, get or post. And you say, whoever is calling this URL has to have this role, like a role admin or role student in this example. So you can control like any URL you have to your database tables. You can control that using a framework like this. So if some user is logged in, but he's not an admin, when they try to call this URL from browser or from other framework or from other company, it will throw an error. Like I think it will throw 403. You can catch and display different message. So definitely it will say you are not allowed to perform this operation. And the data encryption, like I said, we need that for interest and in motion. We want to do the encryption in real time. You don't want to, bless you. You don't want to store the data and then encrypt it tomorrow. If you wait till tomorrow to encrypt, someone might get the data today and then use it in plain text. Again, one option to encrypt the data is in the application layer because you know that's when you create the data or modify the data. So that's the best place to encrypt as well. And some databases, especially in the relational databases, they offer encryption, built-in encryption in the database itself. But if you want to use any Java frameworks, these are some of the examples. All of them are open source. OASP, ESAPI, Shiro, or JASPT. And I have used all these three in my previous projects. So let's quickly jump into each of the database types. We have 10 minutes left for the session. So let's quickly go through this. So document database use cases, you must have already seen this several times. They're good for content management systems. Logging is another use case. From security-wise, I took MongoDB as an example. They do provide authentication. They recently added a Kerberos authentication. They also provide access control. They recently added a role-based privileges for the access control. These two actually came in version 2.4. And then they're actually working with a, oh, there you go, commercial product vendor. They're working with a company called Gazang to encrypt and secure sensitive database in Mongo. So they have a partnership with, at least I mean, I think it's good to see the NoSQL database vendors who have their hands full improving their product are at least working with the security vendors to get the security into, right? So if they can create security, if they can develop security features, they can work with other companies to integrate security. So that's a document database. So again, probably MongoDB is probably more matured in that sense. Again, not compared to, not where it should be, but then the Gazang product is called Z Encrypt. They have transparent data encryption. They also have good key management, process-based controls, so each access, data access request is verified based on the process, based on the user. And they support these NoSQL databases. So if you are looking at any of these and want to secure them, one option is to talk to these guys. And they also support the security for cloud platforms. So with the database, we heard about this in other talks as well. So NoSQL database support, most of them support the sharding, the partitioning. So when you have one database, physical database you are storing the data, you only have to protect that single instance. But when you partition, you basically end up having multiple instances of the database with different sets of data. Different parts of the same database, basically. So now you have multiple instances to secure. So sharding, whether it good or bad, that's a different discussion, but sharding definitely makes security a bit more complex because now you have multiple entry points into your data layer, database layer. Again, one option to manage this is in the application layer as well. And also you can use security logging and auditing is another aspect where you can use MongoDB to store secure logging into a separate table versus the regular logging. If you have a, and we have some companies have a requirement like this. All the security related, the logging has to go into a different file or different database. So only security team can view that. So you can use MongoDB as a, provides a, MongoDB is a good database for the logging and Spring Data provides a built-in appender to do that, lock-forge appender. And also with all the big data and no SQL databases in the security space, we're going to hear a lot about security analytics. How do we find fraud faster than we are able to do today? So all this data mining and it's going to be even more used in the security, BI, business intelligence, as well as security information and event management areas. So this is like how fast you can find if a fraud occurred or if a security event occurred. Okay, like I said, we probably skip the demos. Graph databases, they're good for social networking, data center management, fraud detection. I took Neo4j as an example for graph security. So again, they don't have data level security. They're probably not, even not there, computers, other MongoDB or Cassandra, because they say, you always want to protect Neo4j from security-wise by fronting a Apache web server or server container. They do have some security rules for more authorization, but it's not a black box when it comes to security. Keyvalid data stores, this is the Redis and React databases. They can be used as a cache. Messaging systems are mobile data storage. And in this area, I looked at two different databases. Accumulo is from Apache. It's based on the big data model. I think this is probably one of the new databases that has more security compared to other database products. So they provide what they call cell-level security. So the security is down to the record level, you know, so each, you know, so not even record is a cell level. So if I run a query and if someone else runs a query, and if we both have different privileges, the records I get horizontally and vertically. The columns and records I get, columns and rows I get are would be different from the columns and rows the other user gets. So there is a vertical and horizontal restriction on the queries, which is the best way to do it, right? And then the basically data, this is the same thing. Data of security, different security levels can be stored in the same row. So you don't have to create multiple different databases to address the security requirements. And the other database I looked at is called Redis. Again, this is one of those databases that expects us to run in a trusted environment. So you have to have that IP restriction. So the database server can only respond to the application server, no one else outside of that. So you want to create those IP level restrictions. And you can enable authentication from this conference configuration file. They don't have access control, they don't have encryption. But again, I think they're probably working towards those. Column databases, again, use cases are content management, analytics, logging. Cassandra, I think they have probably better security API compared to the other ones. They provide their own API for security, but they're also working with Gazang on providing encryption and key management as well. Big data, quickly let's look at the Hadoop security. They have good authentication and authorization model. FileMap permissions are there. You can also, because with Hadoop, you are running a lot of jobs. So you can create the job tokens to secure those as well. So only authorized users are running the jobs. And also there's the delegation tokens for subsequent authentication. So if you authenticate and then you come back again, so there are tokens to kind of more like remember me type of scenario. In-memory data grids, I looked at a HazelCast, has definitely decent security support. They have a native client security, which includes authentication, authorization, and also cluster member security. Because with the HazelCast, you are running multiple instances in the cluster. So security becomes also important. And the other in-memory data grid, I looked at is called the grid gain, which also has authentication and connectivity security. Emerging trends, again some of these are happening in the new SQL space now. There are these multi-model databases coming out that actually support more than one SQL database type. So for example, ORI and DB supports document type as well as graph data type. So if you use ORI and DB, you already have those two capabilities. But now with that comes the security as well. Like now how do I secure document type data? How do I secure graph data? So multi-model databases are going to help us in one way, but also if they don't support security out of the box, then it's going to be a challenge. Same thing with polyglot persistence stores, we will see more database in the future, database products that will start supporting pretty much, if not all, most of the data, no SQL data types. So we may have one database in the future that will support all no SQL data types. And also the other emerging trend I'm seeing is the big data analytics. How can we do that in real time? So usually big data analytics, like you store the data and then you do a lot of processing and then you get the results after the fact. But how can we do those queries and how can we do that processing while the data is being created and modified? So we're going to hear a lot about this in the future. It's probably happening, I guess, with all the recent stories about tracking our data, you know, whatever we do. And the security standards is something I would like to see more progress in this. There are no standard groups or anything right now in no SQL. They're just trying to catch up with other products in terms of features. So security is not getting as much, security standards are not getting as much attention as they should. And I see in the future, you're going to see Omni SQL type of concept where one database will support all the database types, all the data types. And also we also talked about this, all the other technologies you want to look at. So I just put this, like if you're using no SQL databases for any security use cases, because in a lot of the security use cases, I have worked on this in my previous projects, but I always had to work with a relational database and I ran into a lot of challenges because my data was unstructured. But relationship database doesn't work it, you know. So now I can, for the same use case, I can use these new database type, no SQL databases. Security logging and SIEM, I can use document database, managing the UI profiles, graph is the best way to go, LDAP and creating multiple different tables in Oracle are not probably the best solutions. And any session management, we always had to create our own custom solutions for this. Now we can use a key value database. And like I said earlier, analytics, big data is there to provide you faster analytics and faster fraud detection capabilities. Quickly, we're already running over, actually. So quickly, best practices, you always want to do the defense in depth. Make sure that you restrict the security at network level, specify the IP addresses so no one else can access them from outside. Think about securing the data itself, the tables or collections. And what to look for in a vendor, make sure that they support security, ask them as many questions as you should about security itself. Don't pick a database and then realize that it doesn't have any security that you need or you have to write from scratch. Also monitoring and auditing is also important. That's it. The last slide is like always, one size fits all, fits nothing. So analyze your requirements first and make sure that your requirements are helping you to get to the solution. Don't pick a solution and then let the solution or the vendor change your requirements. Think about the security throughout the data management life cycle because as soon as you start the data modeling, the data security should be thought about. So I always tell my team like a build security into the solution, not bolt it on later. You don't want to bolt it on later because it's not an afterthought you know it should be thought about. That's why what we do is like when we work on the new projects, we always document all the security requirements along with business requirements and they are part of the requirements set that need to be prioritized. Now when the business says why is this high priority? We explain to them why security is a high priority. And that's it, my contact information, sorry I took a few more minutes but if you have any questions, later send me an email. Other than that, do you have any questions right now? Any questions or comments? Security, where do you guys see? Yes, I'll give it to them. I made some few changes from the previous question but I'll give it to the organizers and so on. Cool. I'm enjoying the rest of the day and hopefully you'll be able to use some of this database when you go back to work. Thank you.


Guess what, folks? You wanna talk about an appetizer? I got one for you. Bang, bang, shrimp. Let's get it. Okay, folks, so look, let's go ahead and just go over this. And while I'm showing you this, how I got it broke down, I wanna let you guys know the full ingredient list will be down in the description box below. Now, I want you to pay attention. Look, I call this my milk mixture, right? That's together. That's why I got these three right here, right? Over here, I got my flour station. All of these getting mixed up, and this right here is gonna be my bang, bang sauce. Trust me, folks, if you separate it like this, it makes it super easy. I got my bowls, and then today's star, I got some jumbo shrimp already peeled and deveined. Now, here's where it get real simple, and this is what makes it really easy, right? Once you measure your ingredients out, look, this is my flour, right? So this is really like a dump and go. So we'll just get this going. Salt, my pepper, cornstarch along with my flour. Get yourself a whisk, and whisk it together. And now we're gonna go ahead and just make our milk mixture, right? So we just, again, you gotta remember, if you keep everything, you know, together, it makes it so much easier. You know what I mean? When you're making it, just get them all lined up, measured up, measured out. So really, if you guys know about it, add milk, a little lemon juice, it's like you made your own buttermilk, right? Okay, so the only ingredients you're gonna have left, and that's for your bang, bang sauce, right? So look, what we're trying to do is we wanna multitask. I'm bringing, I'm using a cast iron. You guys can use a pot, thatch oven, however you wanna do it. You can use a shallow pan. You just wanna get enough so you can, you know, when you go ahead and coat everything, that it'll fry, right? So I'm bringing this up to heat. And you know what I gotta say? Listen, I think this is one of the most underrated tools in the kitchen. That's having a meat thermometer. My grandma would probably like flip backwards if I was using this, because my grandma would never, ever use one. She just knew when everything was ready. I have this, because I wanna bring this up to a temperature. I'm gonna bring this up to about 345, 350. And that's how we gonna fry it real simple. Now over here, I got myself a baking sheet. I put one of these racks in here like this, because it's gonna go just like this, folks. Wet and then dry, and then we gonna stage. Wet, dry, stage. Now, one of the key things you wanna do is, you wanna take these, right? Let me go ahead and get a paper towel. And you wanna make sure these are padded dry. Okay, so I just temp this. This is up to temp. Now, we've already padded dry. Again, we got wet and dry, right? So I'm gonna go ahead and get my tongs. I'm gonna clean them, but I just wanna show you. I'm gonna use my hands. You know what? It's just better to do that. It'd be much faster too. So we just take them, you can see it's dry. We just go ahead and just put them in like this. Now, I just wanna make sure they completely cover it, right? You don't wanna use regular milk because it'd be too thin, right? That's the key, it's the buttermilk and the thickness, right? So now we'll just go ahead and just drop it in. Just like this. Okay, so look. By the time you finish all of them, right, they will have, you can see how it starts to look a little bit on the tacky side, right? That tells me that flour has adhered to it. And this one right here, I kind of like just redid it over, right? But remember, I said I'm gonna give it a little, a little shake, right? Then we add. Now, look, it doesn't take long. Probably like a minute and a half on each side. I've already started flipping them. You know what I mean? I've made one flip already. You guys can see that color. Look at that. They're gonna get even a little bit more brown even when you take them out, right? But this is a good temperature, 350. Actually, when I put it in, it was probably about 360. I put those in there and brought it down, right? Then if you adjust your fire, raise it up a little bit and then it'll come back to right where you need it to be. All right, so then when you take them out, take a look at this right here. Look at this color. That's what you're looking for. Remember, this is shrimp. It doesn't take long, folks. And it ain't nice and crispy. Now you wanna get yourself a bowl, right?  You wanna put the... What we're doing now is making a Bang Bang sauce. I should've just said that. All of the rest of the ingredients will go inside of here. You know what I mean? But it's really like a dump and go. So with that done, we just add them all in here, right? When I get through adding all of these, remember I said multi-task. I'm gonna go ahead and flip them shrimp over because it don't take long, folks. I'm trying to do this right now so you guys can see what it's like in real time, right? Garlic, press, squeeze. That was a small piece of garlic. But you don't need a whole lot. Fresh garlic goes a long way. You know what I mean? You don't wanna overpower your sauce. Now we just whisk it together. Look at the color. If you guys ever had Bang Bang sauce, you know about the color, right? All right, so I just tasted that. That right there is incredible, as always. You know what I mean? So now what I'm gonna do is I'm gonna take my Bang Bang, my shrimp, right? It ain't Bang Bang yet. And I'm gonna do this for you right now because if you notice it ain't a whole lot. Like I made a lot more, but I keep doing this. Cheers. Now we're just gonna go ahead and add a little sauce on it. You know what I mean? I'm gonna add a whole lot on here. I did it like this because I have some more. Now, you guys come around here and take a look at this. Instead of me tossing them, because look, this is a coating. The more and more I flip them, you know, like trying to toss them like this, they start making them chip. So I'm gonna take my hand, right? And I'm just gonna get in here and just toss them. Matter of fact, I'm gonna do it this way. I'm gonna take my spatula, look, and we just go ahead and coat them, you know, like this. Now it looked like I did put a lot in there. So what I'll do is, how we fix that, we just add some more. Okay, so, you know, I got a couple of these little setups, little dishes, right?  You know what I mean? You don't have to do it this way. You can always just leave the toothpicks out, let your guests do them however they're gonna do them. But something tells me the first time you make these, you might be making these for yourself. And then, you know what? We don't need nothing but a wet nap, right? Now, you see how we got them like that?  And then we just go ahead and just sprinkle them on there. Now, one thing I can tell you about these chives, when you cut them, there's a air mag that come off of them, you know what I mean? Say something magical right off the top. But you see that right there, folks? And you can tell it by the way I'm talking.  Not for real, y'all. There you go. Now look, be honest with yourself. I have to look at it that. Talk to me, folks. Look, you just wanna put several of these out. Give them to your friends, tell them to come by and pick them up. You know what I mean? You sit down and you watch the game, right? Now look, I kept one in here and I even hit it with the chives on it. Now I'm gonna go ahead and do this. Just the part I love to say to you guys, look, it just ain't fair, because I get to have it now. But it's fair, because the food recipe, the ingredient list is down in the description box below. But it feel like I'm over talking and rambling. Guess what? Cheers. Hey, so look, come on in here and take a look at that right there. Again, I just want you to look at that presentation. Look, it presents itself very, very well. And it is good. You know what I mean? Listen, I'm talking like that, because listen, I wanna knock one of them off. Now, check this out. I want you guys to make this, come back, talk to me down in the comment section below. I told you, I love to read them on the comments so we can figure it out. If you taste this and you think it's something else, we'll like level it up. Or better yet, here's one for you. What would you serve these with also? Now, with that being said, listen, if you're new to my channel, let me just take your time to say, thank you for watching this video. Don't forget to like, smash that subscribe button and tell everybody out here, listen, there's a channel out here that simplifying these recipes and taking the mystery out of cooking. You know what? I'm gonna walk off and take this one. I'm gonna leave this one for y'all to gawk at and I'm out. Peace.


Well, hi there, I'm Sandy Allnock artist and paper crafter here on YouTube and I'm gonna do a little bit of inspired Coloring and then show you my play journal All during the month of March I was busy doing my play journal and I know a lot of you joined in the winners are gonna be posted over on my blog If you want to see if you want one of the $300 to $500 prizes, I don't even know how much those boxes are worth But I gave away a lot of goodies because I recently did a giant purge Got rid of a lot of my teaching supplies that I had kept for years and realized they needed to go to good homes Who were going to give them some love? So today I decided I was going to do some coloring based on something that I did in my play journal I did this really fun background on one of the panels and I wanted to show you how to do that here on a card and The whole idea with this card was that it was going to be this beautiful rainbow background and I thought wait a minute I could make her rainbow too. So I made her face more yellow I started putting in some brown colors eventually because she got a little too yellow But I wanted her to feel very rainbow-ish like the rest of the card as well So that's why I've got that big yellow base under it prepared of course to go over it with a glaze of something duller If she stays too electric Decided to put some rainbow colors in her hair too and The cool thing about coloring like this is you don't have to worry a whole lot about shading I did some shading on her face so I could make it look like there was definitely some strong light coming from the upper right-hand side So you can see the highlights But without worrying too much about Realism which is one of the things that I think I discovered during the play journal month Which is how much fun it is to just color and not worry about the shading and not worry about the stress Of trying to make everything all perfect, but just having fun having fun with color Look at all these colors that I've put in her hair You can get even crazier and it's totally fine the secrets of pulling off something like this is not just to Let it be a little bit of color, but go overboard and On something overboard like this it was just so much fun to do that just the coloring of this background and Thinking about her and the music. She's listening to and how inspired she looks by the music Just encouraged me to go crazy with the colors So I picked all kinds of crazy bright colors strong colors played around with changing out some of the colors in order to Find some transitional colors between them So, you know that the pink was great and the the orangey yellow was great But I had to find ways to bridge them and that just meant that I was playing with different marker colors to try to see What would transition between them and at the end? I'll do some stuff to cover some of the areas where it didn't blend all out Well, but it's a great exercise in getting to know your markers better getting to practice What's gonna work what's gonna layer over top of something which colors glaze well over each other And which ones are going to create the kinds of effects that you're looking for? And here I've just got lots of different Background colors that I'm putting down here. I didn't put the colors on the screen and I know this is going really fast But the idea here is to encourage you to play These specific colors are in a jpeg on my blog So if you really want to know what they are you can probably figure that out But I want you to play with your markers. Just play with whatever you have Play with whatever the medium is that you have just because my play journal month and my play journal challenge are over Does not mean I want you to stop playing or that it's time to get on to serious things It's time now to take whatever you played with before and do something else with it So here I'm making a card with something I did in the play journal This is working very much better on Nina that it did on the drawing paper that my journal was made out of but that is perfectly fine It was a good learning to know that I'm going to get softer colors if I use drawing paper And I'm going to get stronger colors if I use my Nina That's a really good thing to know so sometime if I want to do this sort of background But I want it to be much softer. Heck, I'll just switch to drawing paper for that project so lots of different papers will have all different sorts of issues with them and good and bad things and Here what I'm doing is just adding bubbles with my My colorless blender really simple and then to transition some of the colors because there you can if you squint You can see harsher lines in between each of the color stripes but if I make some dots in that color that go off into the other direction make blue dots into the purple and then pink dots into the purple and then into the yellow and and Purple into the blue and just kind of carry them a little further Into the color that's next to them then it starts creating that visual transition Even if there's not a really good blend going on there And if you totally wreck that then just put some more colorless blender dots over it Any of these areas that didn't blend really well You can still add more to and just keep keep working on them Just make sure your dots are big enough that they don't feel like like little tiny measles If you have bigger dots and even a variety of shapes of these bubbles, it's going to look a little bit better So after I had all that color on it was like wow I could really go crazy on color under hair now and Started putting some stronger color in it had looked all bright and happy Before I had that background color in but then I started to see the need for more color to be on this one But the stamp set is all about worrying or not worrying and inhale confidence exhale worry is such a Beautiful thing to think about every time you breathe pull in confidence and get rid of anything you're worried about Next up is a flip through of my play journal and this one I did each day of the past month Which was really fun. It was a fun exercise. I used all different mediums. I used pastes I used stencils. I used stuff that doesn't exist anymore stuff that was in my drawers a Lot of different techniques and if I didn't have the right paper This was drawing paper that I was using for the actual book. I just glued a sheet in of something else I made tags out of stuff and tucked them in Just had a lot of fun making a journal like this and trying something new. That's really what I wanted to play with I wanted to play with those those picket fence brushes and see what they do and You know just drawing different things here. This one was done on the day that That the New Zealand shooting happened and I took the stamp from the the girl on the lucky panel and changed her into someone wearing a hijab and Did a tribute page so that other side is that the back cover. So this thing just keeps flipping With the way that it's constructed So I used the same technique as I did on the front Which is in another video that I will link you to and then some of the panels I needed more paper in here because I had more days in the month So I just created my own panels by sticking a tag inside and then attaching Two panels to the outside of it so I could make all different kinds of fun things And here's some more with some some pastes that I use some new home loose. I Did watercolor. I did watercolor pencil. I did a ton of stuff in here. It's a lot of fun And it encourages me to keep playing and keep trying new things as well And I hope it was good for you to have a month of just play time So continue that don't stop practicing. Don't stop playing and I will see you again in the next video Make sure you stop by my blog to see if you want and you can also go to the play journal page linked down below If you want to see any details on the journal pages. I'll see you next time