Tuesday, April 21, 2009

Semantic Security: Is it a real consideration by Semantic Enterrprises

Semantic is a buzzword today. Every new starup that deals with some kind of information, would like to somehow associate their product to semantics. Be it the semantic annotation of the customer data, semantifying the web pages or semantic search. This enables them to sell it to the funding guys (Hey! Look we aren't building a 20th Century Product. Our product is 100% Semantic Enabled). Whether its looking into data mining, text mining, context matching, or link analysis. I would not be surprised if a company analyzing as simple as the datestamps associated with the data would call their product "Semantic Enabled". Well so far so good. We need this to reach our vision of Web 3.0 in another 10 years!! The real question is: How many of the semantic commercialization companies are researching into the security aspects of the data they deal with. Beyond a proof of concept stage no semantic technology is going to make it too far without blending them with the security methods. They may sell it to the VCs without the security annotations (no pun intended), but it would be hard for them to make it mainstream for usage by the customers and enterprises. After all if semantic technologies provide excitement about the embedded so called human intelligence into the information they also expose the security vulnerabilities. Guess What, now anybody having unauthorized access to customer data, also have access to its semantics. So earlier what may have looked like an XML node in your data, is really a customer SSN. Go figure what happens when you make it easier for the data thieves to easily and semantically understand your private data. It would be interesting to see a number on the Semantic Enterprises actually serious about security.

No comments:

Post a Comment