Boeing backs metadata for information security
- 16 April, 2013 14:39
Metadata – 'data about data' such as the non-image-related information stored when people snap a photo on a digital camera – should be used to label corporate information according to one US security specialist.
Speaking at The Open Group conference in Sydney, Boeing information security chief strategist Stephen Whitlock told delegates that if more digital data was labelled it would be easier to secure. “What we are talking about is a shift from discretionary access control system to mandatory access control. If you apply metadata to the data and have a set of policies, the system decides the access,” he said.
For example, if an aircraft designer was logged into a CAD system and working on a certain project, by default the system would be able to assign certain rights to that data.
Whitlock showed delegates the type of metadata stored by his camera. This included the owner’s name, the firmware used by the camera, and if the camera had been repaired.
“I like this example because when you press the shutter the camera did all this,” he said. “Most of the applications I use are much smarter than my camera.”
“The industry that has tonnes of money at stake in various verticals ought to care about corporate data as much as a picture someone snaps with an iPhone,” Whitlock said.
He added that data theft was “much easier” than physical crime because it was faster and left little to no trace.
“There is a lot less risk when you are stealing data, especially if you’re doing it over the Internet from one country to another,” he said.
Whitlock said he would like to industries invest in data labelling including rules and protocols.
“Data is now worth more than hardware and we have seen a big global rise in data theft. There needs to be more emphasis on data.”
Follow Hamish Barwick on Twitter: @HamishBarwick
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
Why IT projects really fail
Queensland government to provide 200 services online by 2015
Call Centers Suffer From Big Data Overload
CIO 100: Carsales wins top gong for innovation
How to secure passwords and other critical numbers
Mobility Apps: What every developer should know
Learn how others have delivered industry-leading, multi-platform management and security solutions. In this whitepaper, we look how app developers can develop, deploy and manage apps that enterprises can rely on today and into the future. Click to download!
How to Compare Application Delivery Controllers
Application delivery controllers (ADCs) are one of the most critical elements of cloud infrastructures and enterprise data centre architectures. ADCs strongly impact performance, scale and security of the entire application environment, so it is extremely important for IT leaders to choose the right one. In this whitepaper, we look at 9 competing ways to compare ADCs and what products step up.
APAC Digital Performance
With some of the highest levels of social media penetration, mobile device ownership, and Internet connectivity in the world, Asian markets are ripe for more innovative and adept interactive engagement. In this study, we look at how marketers in the region express high hopes for digital, but hare held back with limited budgets and a region-wide lack of talent and training. Click for more