Security Issues Dealing With Metadata

Confidentiality is the protection of information from unauthorized access. This is the assurance that information provided has not been made known to unauthorized persons, processes or devices. The application of this security service suggests information labeling and need-to-know imperatives are core aspects of the system security policy. Information, in today’s world, has value and everyone has information they wish to keep secret. Information such as credit card details, trade secrets, personal information, government documents, and many more. It was stated (Securitas Operandi™, 2008) that, we are bound to keep many secrets – corporate, staff, and personal secrets. We must keep this confidential information under wraps and earn the trust of employers, colleagues, and regulators every day. Mechanisms to enforce this include cryptography, which is, encrypting and decrypting data, access controls such as

The expansion of the internet as a primary source for communication has increased concerns over data security and privacy. Specifically the technical and legal capabilities of government agencies to coerce private businesses to turn over the data. This data collection often occurs without appropriate warrants and requires data centers to retain data for longer periods than required for business needs and build in code to give government agencies a backdoor for access.

Time Newspaper has learnt that it's not surprising that Internet companies have electronic dossiers that contain personal information for individuals who subscribe to the websites. Generally, these companies have obtained the information from people based on individual's visit to the website, sent and received emails, tagged photos, and searches people carry out. However, the extent of personal information known by these Internet companies has remained largely unknown as well who they provide and/or sell this information to. However, Internet companies continue to gather lots of personal information from different people who focus on carrying out online activities on a daily basis. Currently, it's estimated that these firms gather personal information from nearly 500 million users but are hesitant to provide this information to the other firms or individuals. As their unwillingness to share has attracted significant congressional inquiry, things could finally change in California following the introduction of a bill that may force companies to disclose the kind of personal information they have gathered and how this information is being used.

As an entity that manages, uses and stores private and sensitive data such as personal identification, health records, billing transaction data and company confidential information, the current stage of the network security does not comply with federal and state regulations, such as privacy, safeguard of confidentiality, integrity and availability of the data.

2 Since the security is weak it can cause problems if the sensitive data is leaked out of the company in any way.

As technology grows and information has become a critical asset companies currently are devoted their resource and money to protect their data as important as their finance and human resource assets.

Over the past few years the internet has become a tempting place for criminals to acquire identifying information, such as passwords and banking data. In criminal’s haste to explore the exciting features of the internet, many people respond to “spam” unsolicited emails that promise them benefits, but request identifying information, without recognizing that in many situations, the requester has no intention of keeping their promise. In some situations, criminals reportedly have exploited computer technology to acquire large amounts of personal information. With enough identifying data about an individual, a criminal can take over that individual’s identity to conduct a wide range of crimes: for example, false applications for loans, credit cards, fraudulent withdrawals from bank accounts, acquiring other goods, or privileges which the criminal might deny if they were to use their real name. If the criminal takes steps to ensure that bills for the falsely acquired credit cards, or bank statements showing the unauthorized withdrawals are sent to another address other than the victims, the victim may not become aware of what’s happening until the criminal has already inflicted substantial damage on the victim’s assets, credit and reputation (Identity Theft).

The information on people’s name, addresses, and even Social Security numbers can be easily stolen from workplaces. Identity theft can be more threatening since it can happen in person instead of remaining anonymous through online hacking. Commission has compiled an accurate statistics which presents over five-hundred thousand cases, with the average victim being robbed seventeen thousand dollars (Bielski). The cases involving “data snatching” gives an insight on what is to be expected when criminals steal or duplicate someone’s information to use it for potential advantages. Federal agencies like the IRS, the Centres for Medicare & Medicaid Services, are usually the areas where big data are eventually used for money (“SIRF’s up). States continue to lag behind as the situation get worse, this type of crime is

Young briefly explains that all business industries have to use computer networks to communicate with others to promote and sell their products. However, it may be difficult if problems arise. It will steal information, assets and may release anything that ruins their company’s reputation. For most corporations, security is top priority.

We are living in the world where we are required to yield our personal data information to authority or companies such as names, date of birth, social security number or even credit numbers (Magalhaes, 2012). We may be aware that the personal data can expose to unauthorized people if our data is not secure properly, either via wire or wireless network. Lost or stolen data has been seen while data is transferred between different users using both networks. Can we trust companies to keep our data safe from being lost or misuse? Yes, we can. With new cyber-crime laws are enforced, it is in the company's best interest to keep their customers' data more secure (Magalhaes, 2012). This article will summarize the major security risks and threats to

On an average of 2% a year, personal records are exposed from over 700 public breaches over all areas of the departmentalized sectors. Global cost per every lost or stolen record are on the average of over $100 containing secret and touchy information. There were 35% more security incidents detected within the last

Privacy is a major problem these days. Cheaper memory has led to immense amount of data continuously being accumulated in various databases across the world, from universities, companies to patient records, content and link graphs of social net-works, mobility traces in cellular networks, book and movie ratings, etc.—and there are many socially valuable uses to which it can potentially be put. But, as Netflix and others have discovered, even when data collectors try to protect the privacy of their customers by releasing anonymized or aggregated data, this data often reveals much more than intended, especially when it is combined with other data sources. This calls for the need to immediately

Malicious insiders have many ways to remove data from any organizational system. With the positive sides of internet; we also have to face the negative impacts of it. The malicious insiders can transfer the data through the use of emails or storage services. As a result, the organizations have to face challenges and take correct measures to protect their confidentiality. Microsoft’s Google Docs and SkyDrive need to be protected too as they allow to upload files without considering whether encrypted or not(Silowash, Lewellen, Burns, & Costa, 2011).

The convenience and wide communication channels available through cyberspace has attracted not only consumers and businesses but also the government to offer services and products worldwide. Cyberspace development and evolution has been one of many great successes experienced by our world and protecting the infrastructure has become ever so difficult due to technological advances and complexity (Canada, 2014). The progression towards complete invulnerability and shielded virtual world provides for great challenges. Although, each year there are an increased amount of spammers identified, subsequent years conveys in attackers becoming increasingly sophisticated and capable which brings about added difficulty in remaining sustainable and proactive (Canada, 2014). These aforementioned situations are why the government and society are pursing active roles to assist in securing the cyber infrastructure and evident that we are not completely safe in cyberspace. Virtual users demand protection online from spammers and other threats but also significant amount of privacy simultaneously. In today’s digital era privacy is considered to be diminishing due to the amount of resources and capabilities available to authoritative agencies and virtual criminals. Individual’s profiles, accounts and transactions are easier to identify than ever before due to the infinite transactions and activities performed daily.

The concept of data security is not new to anyone. It refers to those technologies which have been discovered so as to keep the important data safe and out of reach from anyone undesirable. This has been done so as to keep the data safe from any intruders who could get into the computer system through hacking. As a result of advancements in the field of information technology, most data is kept on devices or in the clouds. With the help of such techniques, any unauthorized person could be kept out of a personal computer so that no one has access to any important data. Apart from stealing important data, there is also a chance that most data could be forged and changed so as to affect the authenticity of available information (Berman, 2016). This could not only affect organizations, but also individuals since the stolen or modified data could be important for them. Accordingly, the name data or information security came into existence. This branch of computer sciences started with the emergence of needing to keep data safe. The concept has been shoot and miss in areas of success in keeping data away from prying eyes. However, there have been some cases as to where security did not work. In this paper, I will examine the reasons Apple should stick to their guns and not aid the Federal Bureau of Investigations.