System and method for data mining and security policy management

An administration system, comprising:

• a processor;
• a memory;
• and
• logic, at least a portion of which is implemented in hardware, the logic configured to:
• receive a plurality of parameters based, at least in part, on metadata information obtained from data mining one or more databases, at least one database containing tags associated with objects, wherein the data mining is to apply one or more filters to the tags of the at least one database to obtain at least a portion of the metadata information;
• create a rule associated with at least some of the parameters;
• and
• incorporate the rule into a security policy to be used by a capture system, wherein the security policy is to control network communications captured by the capture system.

A method, comprising:

• receiving a plurality of parameters based, at least in part, on metadata information obtained from data mining one or more databases, at least one database containing tags associated with objects, wherein the data mining is to apply one or more filters to the tags of the at least one database to obtain at least a portion of the metadata information;
• creating a rule associated with at least some of the parameters;
• and
• incorporating the rule into a security policy to be used by a capture system, wherein the security policy controls network communications captured by the capture system.