information technology - ReadWriteWeb http://www.readwriteweb.com/feeds/tag/information technology en Copyright 2009 Richard MacManus readwriteweb@gmail.com Mon, 23 Nov 2009 21:12:49 -0800 http://www.sixapart.com/movabletype/?v=4.23-en http://blogs.law.harvard.edu/tech/rss SEAmail: Applying Semantic Technology to Email A prototype email system being developed at Stanford University is designed to bring the power of semantic technology to our inbox. Called SEAmail, short for "semantic email addressing," the system will help its users route email to the correct person or persons without needing to know their names or email addresses and without the need for preexisting distribution groups.

]]>Sponsor

]]> How SEAmail Works

According to MIT's Technology Review, the program allows users to select email recipients by creating a search query as opposed to typing in names, addresses, or the name of a mailing list. For example, a user could use SEAmail to send a message to a group - created on the fly - like "all professors who graduated from Harvard University since 1960."

Being able to pinpoint your recipients in this way would not only be helpful, it could also stem the overflow of email that creates information overload by making sure that only the exact recipients who need to get the message are contacted.

A Semantic Email Chooser

In SEAmail, a email addressing interface (as shown here) could be used to build a list on the fly, without necessarily needing to know a single name. Instead, all an email user would need to do is fill in the parts of the form using the drop-down boxes to guide their selections along the way. The system would then take care of the rest.

semantic_email_chooser.jpg

Pulling from Databases

Obviously, in order for a semantically-based email system to work, there needs to be a rich database on the back-end that contains relevant information about the people sending email to each other and their interests. In the Stanford tests, this data is being retrieved from already existing databases which are then integrated into the system.

While such a thing may work well at a university like Stanford, it may be less useful to real-world businesses where there aren't numerous existing databases to draw upon, only Active Directory or some other resource management system.

Drawbacks and Concerns

1) Does this solve real problems?

There's also the small question as to whether SEAmail is solving a problem that really needs to be solved. Take for instance one of the touted benefits of the system: name resolution. The article provided an example where people wanting to send a message to "Michael Genesereth" could simply type his name as a recipient, and his most recent email address would automatically be selected. Sounds excellent, right? Except for one minor problem - that technology has existed in most email systems, and certainly within Microsoft Exchange, for years on end.

To continue the comparison with Microsoft Exchange, the advancements SEAmail makes have more to do with putting the power of creating these queries into the hands of users, who often don't get involved with the business of creating distribution lists, leaving it up to I.T. to do it for them. Exchange's built in ability to create query-based distribution lists already make it dead simple for admins to create lists based on almost any requirement you can dream up: city, state, organization, company, department, title, floor, supervisor, etc. In order for SEAmail to be revolutionary, it would need to do more than make it easy to create relevant lists - it would need to so while using much more detailed data about the intended recipients than any system allows for today.

2) Or Does it Create More Problems (like spam)?

Although in theory, the system's ability to pinpoint users could cut back on unintended email, there's also the possibility that the system could lead to more email. Oren Etzioni, director of the Turing Center at the University of Washington, has some concerns about the potential for misuse of the system. "This technology has clear benefits, but it's also ripe for misuse," he says. "The technical issues are solvable. The tricky things are the social issues. How do we create a workable system, given the vagaries of human nature?" Etzioni worries that a system that makes it too easy would lead to some people receiving overwhelming amounts of mail and no good way to limit it.

3) What about Social Networking?

Technology analyst Craig Roth thinks that the most glaring issue here is that the system doesn't take into account how social networks are being used by those who need to contact, market to, or inform others. He notes that consumers today can use LinkedIn, Facebook, MySpace, and Xing while enterprise customers have IBM Lotus Connections, MySites in Microsoft SharePoint, and the social search capabilities that were in BEA Pathways were merged into Oracle's secure enterprise search.  

Arriving Later this Year

Of course, it's hard to get a real feel for the potential of a system like this until it's actually put into practice. As it turns out, that will happen very soon. SEAmail will be launched at Stanford later this year, initially in the computer science department. It will later be rolled out to the rest of the university over time.

]]>Discuss]]>
http://www.readwriteweb.com/archives/seamail_a_semantic_email_system.php http://www.readwriteweb.com/archives/seamail_a_semantic_email_system.php Products Thu, 29 Jan 2009 06:00:00 -0800 Sarah Perez
Your Web 2.0 App is a Security Threat In the world of enterprise I.T., everything is a security risk: your insecure password, an unexpected email attachment, a careless web surfer clicking through to a malicious URL, or the unapproved software you installed on your computer. Today's I.T. has plenty of tools to handle most of these threats, ranging from firewalls and spam filters to malware fighting software and application control mechanisms. Now, they will soon have something more: a new Application Control Engine that specifically goes after and shuts down Web 2.0 apps and social network widgets.

]]>Sponsor

]]> Introducing ACE: A Tool to Shut Down Web 2.0

A company called FaceTime Communications, based in Belmont, California, recently introduced their new inspection and classification technology called "ACE," which simply stands for Application Control Engine. This patented security technology is capable of scanning a network and identifying more than 1400 Web 2.0 applications and more than 50,000 social networks widgets distributed by sites like Facebook, MySpace, and Orkut.

Scanning for rogue applications on the network is nothing new for I.T., but what's interesting about FaceTime's ACE technology is its focus on scanning for the technologies that often fly under I.T.'s radar: web apps.

The Danger of Web 2.0 Behind the Firewall

As we've mentioned before, I.T.'s failure to adapt to the changing needs of their user base, now younger and more digitally savvy than ever before, has led to a lot of self-provisioning of the easy-to-use applications found on the web. These tools can include anything from Facebook groups to standalone apps like the SharePoint-lite team pages found on Google Sites.

Of course, when users become their own I.T. department, they're unknowingly introducing inherent risks into the previously hardened network infrastructure. Just because a web app is easy to operate, that doesn't make it safe and secure for enterprise use. As users upload and share sensitive files through these unapproved backchannels or have business-related conversations through web-based IM chatrooms, they might not only be putting their company's data at risk, they could also be breaking various compliance laws as well. 

The Difficulty of Monitoring Web Apps in the Enterprise

For I.T., the challenge is keeping up with the barrage of new web apps out there and shutting down those that present a threat. In an independent study commissioned by FaceTime Communications, 62% of I.T. respondents said that there were eight or more Internet applications installed on their enterprise networks - a 300% increase over the first study conducted in 2005. More importantly, the respondents noted that about one-third of their users downloaded the applications they wanted to use - regardless of company policy. Those apps were a mix between apps for business and those used for personal reasons.

I.T. has traditionally struggled to shut down many of today's web applications because they are not all strictly browser-based. Knowing that their adoption rate is dependent on behind-the-back installs on company desktops, many of the apps make sure they can't be blocked by a URL signature. The apps may also masquerade themselves as HTTP, FTP, SMTP and Telnet traffic while exhibiting evasive techniques that help them penetrate the company firewall and escape detection by the current crop of Unified Threat Management systems.

With FaceTime's ACE, though, more than 1,400 of these web applications can be identified and even more social networking widgets can be isolated, too. Those apps can be discovered and shut down regardless of the port, protocol, or evasive technique they use. In addition, the ACE software developers kit (SDK) allows third party solution providers the ability to extend their offerings in order to help their customers manage instant messaging, peer-to-peer file sharing, social networking, Web 2.0, voice-over-IP, anonymizers, IPTV, multimedia, games, virtual worlds, and unified communications. 

What This Means for Enterprise 2.0

If FaceTime's ACE or other similar technologies become a mainstay in the enterprise I.T. toolkit, the explosion of Web 2.0 for business use, a trend typically called Enterprise 2.0, may be dealt quite a blow. The only Enterprise 2.0 apps that will succeed given that scenario will be the ones that worked with the I.T. admins from the very beginning to assure them of their safety. The apps reliant on a slew of the company's rule-breaking users for adoption, however, will be out of luck. Perhaps being sneaky may not have been a great business model after all.

]]>Discuss]]>
http://www.readwriteweb.com/archives/your_web_20_app_is_a_security.php http://www.readwriteweb.com/archives/your_web_20_app_is_a_security.php Enterprise Tue, 09 Dec 2008 06:07:25 -0800 Sarah Perez