個人化知識管理平台安全機制之研究

自從知識管理被提出以來，以個人為基石的學習型組織概念一直被企業在推廣知識管理時強調及運用。近年來由於資訊科技、工具發展及Web 2.0等技術的快速發展應用，個人化知識管理己漸成趨勢。惟知識工作者已不斷要求知識網站服務方能提供機制，確保其知識存取的可靠及安全。故對於開放網路環境是否能提供安全的知識交換與存取，乃成為知識工作者高度關切的問題；而個人化知識管理平台(Personal Knowledge Management，PKM)的安全機制，也就成為知識管理業者推動PKM運用模式的重要指標。因此，由Web 2.0所建構的個人知識管理網站，因為Web 2.0開放、互動及內容多元的特性，也就更須有效解決各項平台安全問題。本研究從「知識庫理論、網站管理方法、Web 2.0技術」等三個整合構面，以資訊安全的「機密性」、「完整性」與「可用性」等三項資訊安全評估要件為基礎，設計建立PKM平台所需的安全機制架構，並完整提出「個人化知識管理網站安全機制」的解決方案，不僅因提高攻擊者入侵成本而產生嚇阻效益，也能有效降低知識網站安全威脅的風險，達到提高個人化知識管理平台安全之目的。

關鍵字

資訊安全；個人知識管理； Web 2.0 ；知識庫

並列摘要

Ever since Knowledge Management (KM) was brought forward, many enterprises have been consistently emphatic of the personal-based concept of Learning Organization alongside their effort of promoting KM. The concept of putting Personalized Knowledge Management (PKM) into practice is also coming into maturity with the aid of informational technology, managerial know-how and Web 2.0 models that are growing rapidly. Nevertheless, there also exists such a growing demand from website users that website managers provide better security mechanism to protect the information access to these knowledge bases from hackings. This demand is undeniably legitimate. It not only reflects serious concern among knowledge-website users that are expecting reliable information security mechanisms in an open-end working e-environment, but also points out the need that the website managers should take information security as one of the signposts to succeed in managing PKM websites. Admittedly, this demand on information security is especially relevant for PKM websites with Web 2.0 service-oriented digital modes as a result of their characters of being open, interactive and of multi-dimensional contents. This paper therefore is to address the concern mentioned above with the purpose of bringing forth a set of security mechanism for PKM websites from an integrated perspective of knowledge-base theory, management principles of website, and the Web 2.0 technologies. Three evaluation criteria of information security, i.e., confidentiality, Integrity and availability of information are set as an assessing basis with the purpose of building a security mechanism for PKM websites as a solution to the above concern. The paper in the end concludes that the security mechanism suggested in this research will deter hackers by elevating their operating cost and effective reduce the potential risk placed upon the knowledge bases. It in turn will meet the security demand of PKM websites at work.

並列關鍵字

Information security ； Personal Knowledge Management ； Web 2.0 ； knowledge base

參考文獻

[9] 曾章瑞，數位化社會知識管理加值應用規劃研究，2006年1月

[18] 樊國楨、方仁威、林明華，防禦性的資訊安全系統機制初探，第四屆資訊管理學術暨警政資訊實務研討會論文集，2000年5月

[20] Brenton, C.，Mastering Network Security，XYBEX Network Press，1999，pp. 141-289

[25] Klander, L.，” Hacker proof : the ultimate guide to network security” ,McGraw-Hill, 1999

[27] Northcutt, S.，Network Intrusion Detection： An Analyst’s Handbook, New Riders, 1999 ，pp.209-249

國際替代計量

個人化知識管理平台安全機制之研究

未授權

主題瀏覽