Wednesday, March 4, 2009

Post Basketball Game Songs

Centros de trazabilidad a la información - Herramienta de aseguramiento de la información

Given the recent events in our beloved country about leaks and invasion of privacy by state agencies, publications and value judgments by different sources of information and level of infoxication that we are taking some of the media. Worth
offer tools that will eventually lead us to to track the flow of information on the basis of the theory of knowledge management.


centers traceability of information companies are useful tools to identify patterns of behavior of employees in terms of information flow and generate necessary warnings in case of leakage of the same. This information center can be used by media to map the sources of information (electronic or digitized) to varying degrees of separation. (As shown in the picture that I attached)

The monitoring information center focuses on relationships among knowledge nodes, volume of transactions related to the information submitted, type of information, node type (if node is internal node or external to the organization) and direction of information flow in different times.

Now that ley12730501 computer security is in force in Colombia and some other countries in the region there similar legislation un centro de monitoreo de éste estilo puede llegar a ser útil como herramienta para la comprobación de hurto de información o manipulación de la misma ( Information Forensics )

Para medios de comunicación, el concepto de un centro de trazabilidad a la información permite visualizar gráficamente y a diferentes grados de relación, la forma desde donde se genera la información y la calidad de la misma, ello con el fin de poder garantizar la confiabilidad y evitar la materialización de rumores. (Perception is reality?)

A nivel corporativo, dichos centros permitirán identificar puntos de fuga de información sensible por fuera del control corporate. In addition to also have the feasibility of using this style tool to identify patterns in customer behavior and to make up the electronic publishing tools we use.

The purpose of this center is to answer management questions about why because X is connected to Y, that reporting relationship between the people involved in projects, or relationships with customers, to know if there are exchange critical information and how often this happens, who and where they are generated rumors, among other interesting features.

The big question of this tool type, corresponds to the point where the company invades the privacy of the individual. (Something that can be controlled with the degrees of separation of the nodes and the type of spyware used)

Now, since this concept in the WEB environment nothing would be discovered by an institution of this type. On the premise that you have the ability to "listen" to the network from different points (always a possibility to do so, since it is feasible to enter all sides). Examples

simple monitoring could now be done with a center of this type:
  1. The network voice traffic is filtered VoIP to classify information the people speak (Our friends from the state security agencies are experts in these activities)
  2. The corporate intranet - we classify information related to corporate and personal email. Publications
  3. on the WEB - Know who, where and when you publish information related to a particular topic affecting corporate governance. Archives
  4. and storage - that saves the user information, such as the use and sharing. Downloads
  5. , handling, etc.
Finally, in general we know that the user does with information, with whom we share and draw conclusions. (Go beyond the functions of a Security Operations Center -SOC)

Have in mind that in the information society, someone always has the ability to observe.

To close and in that vein, I share with you some research work which we carry about 4 years working with Mr. Juan David Cruz, PHd soon aspiring (Title I would love to find Once I finish my MBA and related subjects), and secondly to invite you to accompany the presentation to be held in San Diego (CA) on 13 March this year with the INSNA ( http://www.insna.org/ ), whose poster will be published soon, I hope you will enjoy it.

Likewise if you ever want more information of this type of tools ( SpyCrawler ) do not hesitate to contact us. It is possible that they may show something that catches their attention enough and will be useful in their business.

0 comments:

Post a Comment