Sunday, 28 September 2008

Enquiry Methods and Social Networking Impact on Organizations

Enquiry Methods and Social Networking Impact on Organizations
  1. Enquiry Methods
(i) Analytic-Deductive Enquiry

In this method, the problem definition is accepted to be correct and is not questioned. (Study Campus 2007). Based on the problem definition, a theory is proposed as the solution to the defined problem in the initial stage. The problem is then broken down into various components, data is gathered which is then analyzed and a single conclusion drawn. This conclusion is compared to the initial theory at which point the initial theory is either accepted or rejected. A solution is then reached and implemented and if need be, the theory is modified based on the findings and the cycle repeated. These views are supported by Ikocaog ( 2006).


As a theory is proposed before the research is conducted, it provides the problem solver with a chance to exercise their ability to draw conclusions from a scenario using their personal judgment and experience providing a platform to practice and trust their perception which in some cases will prove useful especially if their proposed theory corresponds with the final conclusion. This will create trust from others and promote self confidence which will prove useful in circumstances where a decision has to be made quickly due to time constraints or other limitations.

As this method only arrives at one solution, it is less thorough in that certain problems may need more than one solution to be completely solved and the process may need to be repeated a few times to solve all problems present which is time consuming. On the same point, the method does not therefore provide the individuals involved with freedom to explore widely as they have to ensure that all their work results in a single solution that matches the initial theory as much as possible.

(ii)Inductive-Consensual Enquiry

In this approach, theories and hypotheses are fruits of the inquiry as opposed to Analytic-Deductive. The process begins with observations of the problem area during which data is collected. This data is then analyzed and patterns of the problem area drawn leading to a theory or conclusion resulting in a single solution. The problem definition is also unchallenged in this method.(Ikocaog 2006).

Study Campus (2007) discusses that this method is characterized by a comparison of the sets of observations, the use of historical reference to how similar problems were solved in the past at the use of a combination of opinions from different experts who are involved in observations.

This method is therefore at an advantage because the solution is not a one man effort but a collection of different expertise from the various individuals involved in the process.

The method however limits the process to a single solution which is in some cases unrealistic especially considering that there are various opinions taken into consideration and not all problems can be thoroughly solved by one solution. The use of historical data could also be inaccurate depending on the source of the data and whether all the facts of the past scenarios were recorded.

(iii)Dialectic Enquiry

The problem definition in this method is not just accepted unlike the two methods discussed above but challenged. The process starts from examining the problem definition and generating two debatable opinions of the problem which are contended side by side in order to reach a solution or a number of solutions making this method more exploratory and open-minded in comparison to the above two discussed. (Mittroff & Linstone 1993)

As there are only two debatable points, this method helps in narrowing down the focus to critical points and if the problem definitions are correct, the solutions generated will be on point as only time is not spent on pondering every possible problem definition which is the case with Unbounded Systems Thinking. (12 Manage 2008).
Dialectic Enquiry however can prove to be longwinded and end up being overkill for sometimes simple problems which can be solved using one of the simpler methods especially because every problem is assumed to be subjective.

OPPapers (2007) continues to say that there also is a possibility that objectives or decisions that need to be reached may be hindered or missed which would be key in solving the problem because of the extent to which assumptions are made which may result in the assumptions themselves being incorrect.

Social Networking Impact on Organizations

Online social networking is the connecting and sharing of information between either individuals or organizations with similar interests or intentions over the Internet as underpinned by Satterfield (2006) who states that the growth of social networks is due to personal interactions over a period of time either face to face, over the phone, online even by post making it a facility that markets itself.

According to a survey conducted on clients and employees of a white-label company called SelectMinds, Tsadik (2008) discusses that 70% of its employees find the social part of work very necessary in their productivity and job satisfaction and almost half said that being able to socialize online with their colleagues with common interests contributed to their choice to join or remain with an employer. This was more so with younger employees to whom staying connected with friends and family is prime as the work place can isolate individuals from their loved ones.87% said it was more bearable to work with people they get on with and social networking allows them to know their colleagues better. SelectMind’s clients reported an increase of 10.33% in productivity, 11.65% in new business and 5% in employee retention. These results are also more reflective of internal social networks which connect companies globally and employees share ideas that work all across the board.

On a more corporate level, social networking would improve the exchange of information and sharing of ideas between similar businesses or those looking to find business partners like suppliers, distributors and other services as organizations can also create their own profiles to attract each other making research and marketing a lot simpler.

Carfi and Chastaine (2002) point out that since members have personal profiles which act as their identity and contain information like personal experience, education and other interests including the individual’s skills and resources, organizations will find these sites as the ideal location to find potential employees without paying advertising costs to newspapers which are not guaranteed to be seen by everyone. Recruitment is therefore made easier and cheaper. It is to be noted however that it is safer to request references before interviews as there is a possibility that the information provided is false.
Organizations can take advantage of these networks to communicate their business objectives and services to the various groups on the network thereby increasing awareness of their existence. Groups of people with certain interests can also be targeted aiding market research and ensuring that goods and services that the groups require are made available by studying their profiles. Chances are also that the individuals in these groups if satisfied by the service will spread the word to others who are not even on the network.

However, as an open forum where individuals will express their views on various issues including products and services provided by organizations, social networks can have a negative impact as any bad experiences will be aired out which would be bad for publicity and competition but the benefits still supersede the pitfalls.
Careful consideration and judgment are to be exercised when deciding whether or not an organization should allow its employees to access social networks for personal use even during their breaks as this reduces the level of face to face interaction between colleagues. This can affect how people work together and interact in work-related issues.

making this a risk the organizations will have to take into consideration. It is advisable for organizations to make sure that their target community is on the social network. Organizations should bear in mind the fact that social networks are still young as is the Internet and there is a great deal of people out there who do not even know how to use the Internet and even if they do, some people do not find the Internet safe. This should then prompt the organizations not to abandon the traditional way of conducting business because of these sites. This view is supported by Advertising on these networks though beneficial, does not guarantee that users will click on the adverts as this will also depend on individual interests and perception of online advertisingBonfield (2008).

In conclusion, the above analysis shows that social networks are beneficial to organizations despite the risks. If properly utilized, the benefits will stretch into the future giving organizations more options for conducting business.

References will be available on request

Eleanor Meki review by Jules Pagna Disso

Friday, 5 September 2008

Re-thinking Snort http rules

An invistigation Snort rules for HTTP lead to notice that Snort could be vunerable when attacker make use of HTTP tunneling. A good number of applications route their HTTP traffic through non HTTP_PORT i.e. application can use other port other than 80, 443 to send data.

looking at snort rules such as

alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS 80 (msg:"WEB-CGI dcforum.cgi access"; uricontent:"/dcforum.cgi"; nocase; flow:to_server; flags:a+; reference:bugtraq,2728; classtype:attempted-recon; sid:1000818; rev:5;)
it is clear that any url containing the word dcforum.cgi will generate an alert. However, using a p2p application for instance which uses port 5678 for HTTP traffic, the same traffic that would generate an alert on port 80.

Here is a record of P2P application and the ports number configured by default [http://www.securityfocus.com/infocus/1843]

Limewire 6346/6347 TCP/UDP
Morpheus 6346/6347 TCP/UDP
BearShare default 6346 TCP/UDP
Edonkey 4662/TCP
EMule 4662/TCP 4672/UDP
Bittorrent 6881-6889 TCP/UDP
WinMx 6699/TCP 6257/UDP

This actually suggest that relying on port 80 to identify HTTP traffic is not appropriate any more. Rather, it is time to search for HTTP request and response header [RFC21616].

When packets arrive at the network, a prior analysis of those packet should be made in other to identify which type of traffic is being received. Once the protocol is identified, then there is a good chance to give a more appropriate to the analysis to those packets.

As security is being tightened every day, hacker would be looking at more obvious ways to get into private data or execute malicious code. Giving that there are more and more P2P application becoming available for TV, Sport channel, Movies, and file sharing, it is important to focus on analysing P2P behaviour in terms of incoming traffic. Security expert should be aware that check ports number should be the least to do and should not represent any level of satisfaction as a security feature. default port could
Publish Post
be change by users if they are being targeted by security administrator. A deep analysis of packets is therefore inevitable.

Jules Pagna Disso