Big Data Research Sponsorship

Size: px

Start display at page:

Download "Big Data Research Sponsorship"

Claire Tucker
8 years ago
Views:

1 Big Data Research Sponsorship

2 Overview The term Big Data refers to the massive amounts of digital information companies and governments collect about us and our surroundings. Providing security and privacy assurance for the sensitive information contained within big data stores is proving to be a fundamental problem for our times. The Big Data Working Group (BDWG) will be identifying scalable techniques for data centric security and privacy problems, and will produce regular and timely research deliverables for the industry. This document provides information about sponsorship opportunities for the development of what will prove to be the definitive best practices for Big Data. About the Cloud Security Alliance The Cloud Security Alliance is a not for profit, vendor neutral organization with a mission to promote the use of best practices for providing security assurance within Cloud Computing, and to provide education on the uses of Cloud Computing to help secure all other forms of computing. The Cloud Security Alliance is led by a broad coalition of industry practitioners, corporations, associations and other key stakeholders. CSA has grown tremendously since we publicly launched in April 2009, and we continue to set the pace as the industry leader in research and best practices for developing the trusted cloud ecosystem. 35,000 members worldwide, in over 60 chapters Not for profit organization registered as a 501(c)6 corporation with the US Internal Revenue Service Developed first comprehensive best practices for secure cloud computing, Security Guidance for Critical Areas of Focus for Cloud Computing (April 2009, updated December 2010 and October 2011) First and only user certification for cloud security, the CCSK (Certificate of Cloud Security Knowledge, September 2010) Tools for managing Governance, Risk and Compliance in the Cloud (GRC Stack) Registry of cloud provider security practices, the CSA STAR (Security, Trust & Assurance Registry, Q4 2011) Industry leading security practices, education and tools developed by 20 working groups Selection of CSA venue by US White House to announce the US Federal Cloud Strategy in 2011 Leadership in developing new security standards addressing cloud computing Trusted advisor to governments and Global 2000 firms around the world Copyright 2012 Cloud Security Alliance 1

The Big Data Working Group (BDWG) will be identifying scalable techniques for data centric security and privacy problems, and will produce regular and timely research deliverables for the industry.

3 The CSA Portfolio CSA quickly captured industry thought leadership by being the first mover in several areas due to our philosophy of agility, community and meritocracy. Cloud computing can be seen as a generation shift towards creating a global compute utility,, even if it will create several different global and local clouds. Cloud s dynamism and the criticall decisions being made by the public and private sector today with a long tail of impact have createdd a growing sense of urgency within CSA to continue our aggressive production of critical research, education and tools. Our research includes fundamental projects needed to define and implement trust within the future of information technology, which include cloud computing, mobile and big data. Copyright 2012 Cloud Security Alliance 2

Cloud s dynamism and the criticall decisions being made by the public and private sector today with a long tail of impact have createdd a growing sense of urgency within CSA to continue our

4 Big Data Initiative Every day, we create 2.5 quintillion bytes of data so muchh that 90% of the data in the world today has been created in the last two years alone. The urgency for collaborative research in big dataa topics is underlined by the recent U.S. federal government s $200 million funding initiative. Security and privacy issues are magnified by velocity, volume, and variety of big data, such as large which are tailored to securing small scale static (as opposed to streaming) data, are inadequate. For scale cloud infrastructures, diversity of data sources and formats, streaming nature of data acquisition and high volume inter cloud migration. Therefore, traditional security mechanisms, example, analytics for anomaly detection would generate too many outliers. Similarly, it is not clear how to retrofit provenance in existing cloud infrastructures. Streaming data demands ultra fast response times from security and privacy solutions. Copyright 2012 Cloud Security Alliance 3

Security and privacy issues are magnified by velocity, volume, and variety of big data, such as large which are tailored to securing small scale static (as opposed to streaming) data, are inadequate.

5 The Big Data Working Group (BDWG) will be identifying scalable techniques for data centric security and privacy problems. BDWG s investigation is expected to lead to crystallization of best practices for security and privacy in big data, help industry and government on adoption of best practices, establish liaisons with other organizations in order to coordinate the development of big data security and privacy standards, and accelerate the adoption of novel research aimed to address security and privacy issues. The scope of BDWG will include the following topics: Risk and threat models for big data Big data analytics for security intelligence (identifying malicious activity) and situational awareness (understanding the health of the system) o Big data security science o Data driven abuse detection o Large scale analytics o Streaming data analytics Review of technologies and frameworks that have been primarily developed for performance, scalability and availability. (e.g., Apache Hadoop, MPP databases, etc.,) Impact of social data revolution on security and privacy of big data implementations. Flexible policy management for accessing and controlling the data o For example, language framework for big data policies Securing data stores o Communication protocols o Attack surface reduction Data centric security to protect data no matter where it is stored or accessed in the cloud o For example, attribute based encryption, operation preserving encryption Big data privacy and governance o Data discovery and classification o Data masking technologies: anonymizing, rounding, truncation, hashing, obfuscation, differential privacy o Data monitoring o Compliance with regulations such as HIPAA, EU data protection regulations, APEC Cross Border Privacy Rules (CBPR) requirements, and country specific regulations o Government access to data and freedom of expression concerns o Potentially unintended/unwanted consequences or uses Key management, and ownership of data o Providing full control of the keys to the data owner Data integrity and poisoning concerns Computing on the encrypted data o De duplication of encrypted data o Searching and reporting on the encrypted data High availability Secure data aggregation Security of big data infrastructure Copyright 2012 Cloud Security Alliance 4

other organizations in order to coordinate the development of big data security and privacy standards, and accelerate the adoption of novel research aimed to address security and privacy issues.

6 Event detection Security of analytics results There are two schedule deliverables for BDWG so far: Q Key Big Data Problems. Problem statement and key security and privacy issues, using industry use cases to illustrate. Q Big Data best practices. This report will provide specific actionable information for big data security and privacy. The report will Summarize state of the art, Propose recommended best practices, Identify gaps that cannot be solved with current technologies, and Outline research proposals that can address current gaps= Big Data Research Sponsorship Benefits Sponsored Research Listing Sponsor will be permanently listed as a charter sponsor with logo and URL link at initiative website and related areas, such as printed collateral. Press activity Sponsor will be included in press release activity related to key project milestones, including the opportunity to provide supporting quotes for the project. Blogging, Twitter & Webcasts Sponsor will participate in communications related to the project, including CSA funded webcasts, project blogs and use of the CSA corporate Twitter account. Whitepaper Download Information Sponsor will receive monthly list of individuals opting in when downloading the individual Big Data whitepapers. Branded Deliverables Whitepapers, presentations and related project deliverables will include an acknowledgement of sponsor and will include sponsor logo. Sponsor will also be allowed to incorporate project deliverables into sponsor s own whitepapers and related collateral with appropriate acknowledgements to CSA. Events The Big Data Research Initiative will be highlighted in CSA events, providing exposure for sponsors of the initiative. Signing Up Please contact Jim Reavis at jreavis@cloudsecurityalliance.org for more information, pricing and terms for this Research Sponsorship. Copyright 2012 Cloud Security Alliance 5

This report will provide specific actionable information for big data security and privacy.

Cloud Data Governance Research Sponsorship

Cloud Data Governance Research Sponsorship Overview Cloud Computing marks the decrease in emphasis on 'systems' and the increase in emphasis on 'data'. With this trend, Cloud Computing stakeholders need