The Security of Big Data: An Enterprise Perspective

BIG DATA, CLOUD, SECURITY, AND ODCA USAGE MODELS

Ian LamontBMW AG

ODCA Big Data and Security Seminar | 2

BIG DATA (WIKIPEDIA)

Big Data is the term for a collection of data sets

so large that it becomes difficult to process

using hands-on database management tools

and processing applications. The challenges

include capture, curation, storage, search,

sharing, transfer, analysis, and visualisation.


CHALLENGES

• Privacy (particularly in Europe)- Security- Valid and fair usage- Right to be forgotten- Jurisdiction


BIG DATA (WIKIPEDIA)

Big Data is the term for a collection of data sets

so large that it becomes difficult to process

using hands-on database management tools

and processing applications. The challenges

include capture, curation, storage, search,

sharing, transfer, analysis, and visualisation.


BIG DATA SECURITY


PLATFORM SECURITY

• Provider Assurance Usage Model- Provides standard definitions of

Security for Cloud Services- Bronze, Silver, Gold, and Platinum.- Mirror internal security levels to

external requirements.


NETWORK AND FIREWALL ISOLATION

Network segregation and firewalls are required to protect all assets managed in the cloud. The level of involvement of the cloud provider in the management of firewall rule sets will vary depending on the level of service offered.

BronzeThe firewall rule sets are managed by the cloud provider with no direct involvement of the cloud subscriber.

SilverThe firewall rule sets are managed by the cloud provider with changes advised to the cloud subscriber before implementation. The cloud provider should offer network segmentation between logical tiers.

Gold

The firewall rule sets are managed by the cloud subscriber. The cloud provider retains access to the firewall at the administrator level in order to provide system maintenance. The cloud provider must offer network segmentation between logical tiers and should offer Layer-7 protection to prevent application-level attacks.

PlatinumThe cloud provider has no access to firewalls. All admin tasks including rule updates are managed by the cloud subscriber. The cloud provider must offer network segregation between logical tiers and Layer-7 protection to prevent application-level attacks.


VULNERABILITY MANAGEMENT

A vulnerability management process that ensures installation of system and software patches within the targets is identified below. The test process must ensure proper function of the patch and compatibility to the actual target systems with no negative impact on resource utilization (i.e., memory and CPU consumption).

BronzeVulnerabilities with a basic Common Vulnerability Scoring System (CVSS) score of greater than 9 (or those rated as High by Microsoft or other vendors) must be patched within 96 hours; all others within 1 month.

SilverVulnerabilities with a basic CVSS score of greater than 5 (or those rated as Medium or High by Microsoft or other vendors) must be patched within 96 hours; all others within 1 month.

GoldVulnerabilities with a basic CVSS score of greater than 2 (or those rated as Low, Medium, or High by Microsoft or other vendors) must be patched within 96 hours; all others within 1 month.

Platinum All vulnerabilities must be patched within 24 hours of their release by the vendor.


PLATFORM SECURITY


BIG DATA SECURITY


DATA SECURITY

• Encryption- Data at Rest- Data in Transit

• Data Masking- Anonymization and Pseudonymization

• Access Methods- User type profiling

• Backup, Restore, and Archiving


DATA LIFECYCLE


ACCESS POINTS


DATA FLOW 1


DATA FLOW 2


IDENTITY AND ACCESS MANAGEMENT

• Identity Provisioning• Governance and Auditing• Privileged User Access• Single Sign On


IDM BASIC MODEL


IDM CLOUD MODEL


IDM GOVERNANCE


OTHER ODCA COLLATERAL

• Security Monitoring• Interoperability• Guide to• SaaS Interoperability• Information as a Service• also Data Mgmt for Info_aaS• and much more ……


OTHER PROBLEMS / CHALLENGES !!!

• e-Discovery (UM coming soonish)• Data Ownership• plus anything else you can think of !


StandardizedResponse Checklists

Accelerate TTM

Shared Practices Drive Scale

Streamlined Requirements

Accelerate Adoption

Available to Members at: www.opendatacenteralliance.org

URL for Public content: www.opendatacenteralliance.org

MORE INFORMATION AND ASSETS

http://www.opendatacenteralliance.org/



Go forth (securely) and Big Data

QUESTIONS

Artist: Thierry Gregorius


Thank you KiitosMerci

Gracias

Danke

GrazieArigato Gozaimas

www.opendatacenteralliance.org


The Security of Big Data: An Enterprise Perspective

Technology

Transcript of The Security of Big Data: An Enterprise Perspective