Sicherheit im Data Mining: Grundschutzmaßnahmen-Katalog nach Vorbild des IT-Grundschutzhandbuches des BSI

Data Mining gains increased importance for companies: By its application patterns and rules can be discovered in stored data, which can represent valuable knowledge for an enterprise. Frequently sensitive data is in the centre of interest, and the results of data mining are by all means the basis for management decisions – therefore the security aspect should be considered as well. So far research has concentrated only on a part of security – namely confidence, but to obtain complete security a comprehensive approach is necessary that includes not only hard- and software but also organization and employees. This paper starts with the threats that are relevant when applying data mining and describes their causes. Based on these threats a catalogue containing measures is developed which is structured according to the “IT Baseline Protection Manual” published by the German “Bundesamt für Sicherheit in der Informationstechnik”. This catalogue can be used for an internal application of data mining as well as for a cooperation with external organizations or service companies to obtain an appropriate basis level of security with little investment.