Des données à l’information :
Confiance et Usage
SESSION 3A: Les effets disruptifs sur les technologies, les normes et les affaires
Dr Jean-Christophe Pazzaglia
Directeur SAP Recherche Sophia-Antipolis
6 Juillet 2011                                                                       SAP RESEARCH
Des données à l’information




                                                                               Utilisation
                                                                               • Information
                                                                               • Education
                                                                               • Transparence
                                                      Agrégateurs              • Aide a la décision
                                                      • Moteurs de recherche
                                                      • Chercheurs
                                                      • Agences de Presse
                                                      • Groupes d’influence



                                      Données
                                      • Cadastre
                                      • Transport
                                      • Population
                                      • Energie
                                      • Statistique
                                      • Budget
                                      • Economie
                                      • Education
                                      • Crime
                                      • Santé


© 2011 SAP AG. All rights reserved.                                                                   2
Est-ce que les données sont actualisées ?
             Est-ce que l’accès et l’usage aux données peuvent permettre un
             gain économique ?
             Peut-on préjuger de l’honnêteté des acteurs en présence ?




© 2011 SAP AG. All rights reserved.                                           3
Quels types de risque ?




                                                                                                      Utilisation
                                                                                                      •Est-ce que l’information est
                                                                                                       actualisée / cohérente ?
                                                                                                      •D’où vient l’information et
                                                                     Agrégateurs                       quelle information brute a été
                                                                                                       utilisée ?
                                                                     •Est-ce que je m’appuie sur      •Est-ce que la présentation est
                                                                      des données fiables ?            objective ?
                                                                     •Ai-je le droit d’agréger des    •Est-ce que l’information a été
                                                                      données provenant de             manipulée ?
                                                                      différents pays ?
                                                                     •Ai-je le droit de stocker des
                                                                      données agrégées ?
                                      Données
                                      •Est-ce que j’ai le droit de
                                       donner accès à mes
                                       données ?
                                      •Quel risque suis-je en
                                       train de faire courir à mon
                                       institution ?
                                      •A-t-on les ressources
                                       nécessaires ? (humaine
                                       et matérielle)



© 2011 SAP AG. All rights reserved.                                                                                                     4
Quels mécanismes de sécurité ?



                                                    • Inférence multi-sources

                                      Sécurité du   • Réidentification d’informations
                                                     personnelles
                                                    • Provenance de l’information
                                       ‘nuage’      • Réputation des acteurs
                                                    • Evaluation des risques            SAP RESEARCH

                                                    • Contrôle d’accès
                                       Sécurité     • Intégrité
                                                    • Traçabilité
                                      ‘standard’    • Disponibilité




                                      Open Data



© 2011 SAP AG. All rights reserved.                                                              5
Les Produits SAP dans la chaîne Open Data




                                                                                          Interactive
                                                                                          Visual Analytics
                                                                                          Utilisation
                                                                                          • Solutions mobiles
                                 In-Memory appliance                                      innovantes
                                                                                          • Nouvelle solution BI à
                                                              Agrégateurs                 la demande
                                                               • HANA: rapidité d’accès   environnement
                                                               aux données                d’exploration intuitif
                                                              • ByDesign Mashup (liant
                                                              données ‘open’ et
                                                              internes)

                                      Données
                                      •ERP comme source de
                                       données
                                      •Support de standard
                                       (WS-*)
       ERP                            •Pénétration dans les
                                       secteurs clefs (e.g.
                                       énergie)




© 2011 SAP AG. All rights reserved.                                                                                  6
Contact
Dr Jean-Christophe Pazzaglia
Security & Trust Engineering Manager
Director SAP Research Sophia-Antipolis

SAP Labs France
805, Avenue du Docteur Maurice Donat
BP 1216 - 06254 Mougins Cedex, France
T +33 492 28 62 00
F +33 492 28 62 01
Apropos de SAP Research
SAP Recherche en bref




                                SAP Recherche est l’unité globale de recherche technologique
                                de SAP, avec un réseau de 19 établissements dans tout le
                                monde et un portefeuille de sept domaines de compétence



                                      Le réseau de SAP Recherche est constitué de 500 salariés
                                      (y compris les étudiants de doctorat) sur cinq continents




                                SAP Recherche a établi un réseau mondiale de collaboration
                                avec plus de 800 partenaires industriels et académiques



© 2011 SAP AG. All rights reserved.                                                               9
SAP RECHERCHE
Unité globale de recherche technologique de SAP
                                                                                          19 centres de recherche
                                                                                          7 domaines de recherche
                                                                    Darmstadt             500+ salariés (y compris les
                                                                        Dresden           doctorants)
                                                                         Karlsruhe
                                              Belfast                                     800+ partenaires (académie et
                                                                          Walldorf
                                                Dublin
                                                                                          industrie)
  Vancouver
                              Montréal             Paris
                                                                         Zurich
                                         Sophia Antipolis
                                                                           Sofia
     Palo Alto
                                                            St.Gallen
                                                                                   Ra‘anana

                                                                                                 Bangalore




                                                                                                                     Brisbane
                                                                           Pretoria
                                                                                                                     Sydney




© 2011 SAP AG. All rights reserved.                                                                                       10
SAP RESEARCH SOPHIA-ANTIPOLIS
Research Portfolio

    Security & Trust




                                                           PrimeLife
                 Tas3                  RescueIT
                                                                              Security Expert
                             ASSERT4SOA
               SPaCIoS




                                                                                  Group
                         Security Task
    Effects+




                         Force Wasp
          Risk Mitigation                         MASTER            Public             Nuclear      Visual




                                                                                                  Collaborative
                                                                   Services            Industry       Analytics
          for ByDesign
                                          CESSA




          AVANTSSAR                                                                                       Semantic
                                                                                                          Layer
               PoSecCo
                                                               Compliance              Support
                                                                                                          ARSA




                                                                                                  BI
  New
Application
 Domain
                          Internal
                         Expertise
                                                                       Business Intelligence
Research                 Application
Program                   Domain


 © 2011 SAP AG. All rights reserved.                                                                                 11
Requirements          Design   Development       Test   Customization    Support




Problem




Concept



                                                           Vulnerability
Prototype                                                   Discovery !




Expertise



                                          NW BPM         SAP NW SSO                           Solman
 Target


    © 2011 SAP AG. All rights reserved.                                                                  12
© 2011 SAP AG. All rights reserved


No part of this publication may be reproduced or transmitted in any form or for any purpose   Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal
without the express permission of SAP AG. The information contained herein may be             Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services
changed without prior notice.                                                                 mentioned herein as well as their respective logos are trademarks or registered trademarks
                                                                                              of Business Objects Software Ltd. Business Objects is an SAP company.
Some software products marketed by SAP AG and its distributors contain proprietary
software components of other software vendors.                                                Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase
                                                                                              products and services mentioned herein as well as their respective logos are trademarks or
Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft
                                                                                              registered trademarks of Sybase, Inc. Sybase is an SAP company.
Corporation.
IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x,         All other product and service names mentioned are the trademarks of their respective
System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer,        companies. Data contained in this document serves informational purposes only. National
z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server,           product specifications may vary.
PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER,                         The information in this document is proprietary to SAP. No part of this document may be
OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP,                     reproduced, copied, or transmitted in any form or for any purpose without the express prior
RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX,                    written permission of SAP AG.
Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered
                                                                                              This document is a preliminary version and not subject to your license agreement or any
trademarks of IBM Corporation.
                                                                                              other agreement with SAP. This document contains only intended strategies, developments,
Linux is the registered trademark of Linus Torvalds in the U.S. and other countries.          and functionalities of the SAP® product and is not intended to be binding upon SAP to any
                                                                                              particular course of business, product strategy, and/or development. Please note that this
Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or
                                                                                              document is subject to change and may be changed by SAP at any time without notice.
registered trademarks of Adobe Systems Incorporated in the United States and/or other
countries.                                                                                    SAP assumes no responsibility for errors or omissions in this document. SAP does not
Oracle is a registered trademark of Oracle Corporation.                                       warrant the accuracy or completeness of the information, text, graphics, links, or other items
                                                                                              contained within this material. This document is provided without a warranty of any kind,
UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.                   either express or implied, including but not limited to the implied warranties of
Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are          merchantability, fitness for a particular purpose, or non-infringement.
trademarks or registered trademarks of Citrix Systems, Inc.                                   SAP shall have no liability for damages of any kind including without limitation direct,
HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World               special, indirect, or consequential damages that may result from the use of these materials.
Wide Web Consortium, Massachusetts Institute of Technology.                                   This limitation shall not apply in cases of intent or gross negligence.

Java is a registered trademark of Sun Microsystems, Inc.                                      The statutory liability for personal injury and defective products is not affected. SAP has no
                                                                                              control over the information that you may access through the use of hot links contained in
JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for        these materials and does not endorse your use of third-party Web pages nor provide any
technology invented and implemented by Netscape.                                              warranty whatsoever relating to third-party Web pages.
SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer,
StreamWork, and other SAP products and services mentioned herein as well as their
respective logos are trademarks or registered trademarks of SAP AG in Germany and other
countries.




 © 2011 SAP AG. All rights reserved.                                                                                                                                                     13

OpenDataGarage-Session3A-JeanChristophePazzaglia-SAP

  • 1.
    Des données àl’information : Confiance et Usage SESSION 3A: Les effets disruptifs sur les technologies, les normes et les affaires Dr Jean-Christophe Pazzaglia Directeur SAP Recherche Sophia-Antipolis 6 Juillet 2011 SAP RESEARCH
  • 2.
    Des données àl’information Utilisation • Information • Education • Transparence Agrégateurs • Aide a la décision • Moteurs de recherche • Chercheurs • Agences de Presse • Groupes d’influence Données • Cadastre • Transport • Population • Energie • Statistique • Budget • Economie • Education • Crime • Santé © 2011 SAP AG. All rights reserved. 2
  • 3.
    Est-ce que lesdonnées sont actualisées ? Est-ce que l’accès et l’usage aux données peuvent permettre un gain économique ? Peut-on préjuger de l’honnêteté des acteurs en présence ? © 2011 SAP AG. All rights reserved. 3
  • 4.
    Quels types derisque ? Utilisation •Est-ce que l’information est actualisée / cohérente ? •D’où vient l’information et Agrégateurs quelle information brute a été utilisée ? •Est-ce que je m’appuie sur •Est-ce que la présentation est des données fiables ? objective ? •Ai-je le droit d’agréger des •Est-ce que l’information a été données provenant de manipulée ? différents pays ? •Ai-je le droit de stocker des données agrégées ? Données •Est-ce que j’ai le droit de donner accès à mes données ? •Quel risque suis-je en train de faire courir à mon institution ? •A-t-on les ressources nécessaires ? (humaine et matérielle) © 2011 SAP AG. All rights reserved. 4
  • 5.
    Quels mécanismes desécurité ? • Inférence multi-sources Sécurité du • Réidentification d’informations personnelles • Provenance de l’information ‘nuage’ • Réputation des acteurs • Evaluation des risques SAP RESEARCH • Contrôle d’accès Sécurité • Intégrité • Traçabilité ‘standard’ • Disponibilité Open Data © 2011 SAP AG. All rights reserved. 5
  • 6.
    Les Produits SAPdans la chaîne Open Data Interactive Visual Analytics Utilisation • Solutions mobiles In-Memory appliance innovantes • Nouvelle solution BI à Agrégateurs la demande • HANA: rapidité d’accès environnement aux données d’exploration intuitif • ByDesign Mashup (liant données ‘open’ et internes) Données •ERP comme source de données •Support de standard (WS-*) ERP •Pénétration dans les secteurs clefs (e.g. énergie) © 2011 SAP AG. All rights reserved. 6
  • 7.
    Contact Dr Jean-Christophe Pazzaglia Security& Trust Engineering Manager Director SAP Research Sophia-Antipolis SAP Labs France 805, Avenue du Docteur Maurice Donat BP 1216 - 06254 Mougins Cedex, France T +33 492 28 62 00 F +33 492 28 62 01
  • 8.
  • 9.
    SAP Recherche enbref SAP Recherche est l’unité globale de recherche technologique de SAP, avec un réseau de 19 établissements dans tout le monde et un portefeuille de sept domaines de compétence Le réseau de SAP Recherche est constitué de 500 salariés (y compris les étudiants de doctorat) sur cinq continents SAP Recherche a établi un réseau mondiale de collaboration avec plus de 800 partenaires industriels et académiques © 2011 SAP AG. All rights reserved. 9
  • 10.
    SAP RECHERCHE Unité globalede recherche technologique de SAP 19 centres de recherche 7 domaines de recherche Darmstadt 500+ salariés (y compris les Dresden doctorants) Karlsruhe Belfast 800+ partenaires (académie et Walldorf Dublin industrie) Vancouver Montréal Paris Zurich Sophia Antipolis Sofia Palo Alto St.Gallen Ra‘anana Bangalore Brisbane Pretoria Sydney © 2011 SAP AG. All rights reserved. 10
  • 11.
    SAP RESEARCH SOPHIA-ANTIPOLIS ResearchPortfolio Security & Trust PrimeLife Tas3 RescueIT Security Expert ASSERT4SOA SPaCIoS Group Security Task Effects+ Force Wasp Risk Mitigation MASTER Public Nuclear Visual Collaborative Services Industry Analytics for ByDesign CESSA AVANTSSAR Semantic Layer PoSecCo Compliance Support ARSA BI New Application Domain Internal Expertise Business Intelligence Research Application Program Domain © 2011 SAP AG. All rights reserved. 11
  • 12.
    Requirements Design Development Test Customization Support Problem Concept Vulnerability Prototype Discovery ! Expertise NW BPM SAP NW SSO Solman Target © 2011 SAP AG. All rights reserved. 12
  • 13.
    © 2011 SAPAG. All rights reserved No part of this publication may be reproduced or transmitted in any form or for any purpose Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal without the express permission of SAP AG. The information contained herein may be Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services changed without prior notice. mentioned herein as well as their respective logos are trademarks or registered trademarks of Business Objects Software Ltd. Business Objects is an SAP company. Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors. Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase products and services mentioned herein as well as their respective logos are trademarks or Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft registered trademarks of Sybase, Inc. Sybase is an SAP company. Corporation. IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, All other product and service names mentioned are the trademarks of their respective System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, companies. Data contained in this document serves informational purposes only. National z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, product specifications may vary. PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, The information in this document is proprietary to SAP. No part of this document may be OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, reproduced, copied, or transmitted in any form or for any purpose without the express prior RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, written permission of SAP AG. Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered This document is a preliminary version and not subject to your license agreement or any trademarks of IBM Corporation. other agreement with SAP. This document contains only intended strategies, developments, Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. and functionalities of the SAP® product and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development. Please note that this Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or document is subject to change and may be changed by SAP at any time without notice. registered trademarks of Adobe Systems Incorporated in the United States and/or other countries. SAP assumes no responsibility for errors or omissions in this document. SAP does not Oracle is a registered trademark of Oracle Corporation. warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. either express or implied, including but not limited to the implied warranties of Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are merchantability, fitness for a particular purpose, or non-infringement. trademarks or registered trademarks of Citrix Systems, Inc. SAP shall have no liability for damages of any kind including without limitation direct, HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World special, indirect, or consequential damages that may result from the use of these materials. Wide Web Consortium, Massachusetts Institute of Technology. This limitation shall not apply in cases of intent or gross negligence. Java is a registered trademark of Sun Microsystems, Inc. The statutory liability for personal injury and defective products is not affected. SAP has no control over the information that you may access through the use of hot links contained in JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for these materials and does not endorse your use of third-party Web pages nor provide any technology invented and implemented by Netscape. warranty whatsoever relating to third-party Web pages. SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and other countries. © 2011 SAP AG. All rights reserved. 13