- Microsoft will float cloud OS this month
- Top 16 Chinese iPhoneys
- Pimp your ride: Cool car technology
- Laptop stolen from McCain campaign
- Cisco, Microsoft roll out server, networking appliance
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:Application Performance Solutions | App Performance | Networking Solution | SafeGuard Enterprise Solution Center | SOA | Value of WDS
LAS VEGAS -- Treat metadata skeptically, or it can lead to unexpected risks to corporations, warned the keynote speaker at the Black Hat conference.
Because metadata grabs pieces of larger bodies of information and categorizes them, the metadata representation can give an incomplete or false representation of what the larger body actually contains, said Ian Angell, professor of information systems at the London School of Economics.
"Databases and categorization introduces uncertainty," Angell said, "and that becomes risk, and that leads to future risk. If you place your faith in computer systems, it's asking for disaster."
Angell used an anecdote to provide a light illustration of what he means about incomplete data causing troubles: The head of a prep school sent out a letter about the school's annual fees, but he misspelled annual as “annual." The spell-checker substituted "anal" for "annual," which prompted one parent to reply that he was impressed by the new name for the fees because previously he'd only been asked to pay through the nose.
The lesson, Angell said, is that people are coming to accept blindly what they are told by computer systems that have crunched data without putting the data in context -- as only humans can. "All data is context sensitive," he said. "Facts are like sacks and won't stand up unless you put something into them."
Reliance on computer systems creates technology bureaucracies that can produce the same bad results as traditional paper-based bureaucracies, Angell said. He told the story of a British man jailed for three days because he violated a court order to have no contact with his recently divorced wife. It turned out the "contact" was an e-mail generated by a social-networking site he had joined that automatically sent notification of his membership to all the addresses in his e-mail address book, which included his wife's address.
E-mail at work is a source of potential trouble for workers because of a convergence of technology bureaucracy and the de-categorization caused by databases. E-mails can represent a step in how a decision was made, but not paint the entire picture, Angell said.
Angell advises his business students to make sure their e-mail communications about important work projects are explicit, he said. "Use e-mail as a defensive weapon," he said. "Make all agreements conditional. I advise an audit trail for e-mails that makes sure the buck doesn't stop with you. That's what others are doing."

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
Security Considerations When Deploying Remote Access SolutionsEffective network security is most successful when you use a layered approach, with multiple...

The Vista era of Windows is here. Yet most organizations will retain Windows XP alongside new Vista...
Turning information into a Competitive AdvantageCompanies today are realizing that competitive advantage is harder to sustain when based solely on...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Discover why Unified Threat Management Firewalls are ready for the enterprise today. High...
The Evolution of Network SecurityWe have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment