Agenda 4/21/ Big Data Level Set 2. Who are we? 3. What do we do? 4. What have we done so far? 5. What are we working on? 6.

Transcription

1 Wilco van Ginkel, Co-Chair BDWG Agenda 1. Big Data Level Set 2. Who are we? 3. What do we do? 4. What have we done so far? 5. What are we working on? 6. Q&A 1

2 Big Data Level Set 2

3 Word on the street Sliding window Dimensions don t always expand in the same directions. Examples: Twitter feeds (small data, but very high velocity) Hubble Telescope pictures (large pic, but low volume) Is Unstructured Data really unstructured? 3

4 What s next in BD? Fast data (e.g., IoT) Climb up the BD stack Visualization Applying BD techniques to Dark Data (e.g., Ayasdi) And much more BD Security Yeah, what about it? 4

5 Big Data Life Cycle Internal External Owned, subscribed, bought Format Governance Data silos Storage infrastructure Data Scientists Predictive Prescriptive Visualization Think different Not always why Plug information in business process Actionable Source: Verizon Big Data White Paper How to thrive on the frontiers of data Still need to balance Security Requirements (CIAA) Risk Profile Business Requirements 5

6 And also ensure data qualities Source: ISACA White Paper Big Data Impact & Benefits, March 2013 Can t we just use current security controls and standards? Well, Yes and No 6

7 Change of playing field New Paradigm/Technology The Big Data V s Data Explosion Cloud: cheap & easy access to compute & storage Data on the go Mobility all the way Data without borders Difference in international legislation So, there is work to do 7

8 Nice to meet you! Who are we? Started April 2012 Focus on Big Data Privacy & Security Different Initiatives/sub working groups Works together with other orgs, like NIST Leadership team: Chair - Sree Rajan, Fujitsu Co-Chair - Wilco van Ginkel, Verizon Co-chair - Neel Sundaresan, Ebay 8

9 Our Journey Develop best practices for security and privacy in big data Support industry and government on adoption of best practices Establish liaisons with other organizations in order to coordinate the development of big data security and privacy standards Accelerate the adoption of novel research aimed to address security and privacy issues Focus areas Security Analytics Cryptography and Privacy Technologies Infrastructure Security Privacy, Policy, Governance and Legal Issue Framework and Taxonomy 9

10 What have we done so far? The Top Ten November 2012 April

11 Cloud Security Alliance, Use Case(s) Modeling Analysis Implementation 11

12 Big Data Analytics Report September BD Analytics for Security Examples Botnet monitoring WINE Platform APT Detection 12

13 The Top Ten Crypto Challenges March Big Data Taxonomy Taxonomy = The science or practice of classification 13

14 Source: Big Data Taxonomy September

15 15

16 Other initiatives BDWG Other Initiatives We provided input for the upcoming NIST Big Data Standard. We provided comments to the White House Request for Comment on Big Data Privacy. Check out: Lots of media interviews. Particularly after we have published a deliverable 16

17 What is next? 17

18 10 Sections 1. Secure Computations in Distributed Programming Frameworks 2. Security Best Practices for Non-Relational Data Stores 3. Secure Data Storage and Transactions Logs 4. End-point Input Validation/Filtering 5. Real-Time Security/Compliance Monitoring 6. Scalable and Composable Privacy-Preserving analytics 7. Crypto-Enforced Access Control and Secure Communication 8. Granular Access Control 9. Granular Audits 10. Data Provenance Help needed 1. Secure Computations in Distributed Programming Frameworks 2. Security Best Practices for Non-Relational Data Stores 3. Secure Data Storage and Transactions Logs 4. End-point Input Validation/Filtering 5. Real-Time Security/Compliance Monitoring 6. Scalable and Composable Privacy-Preserving analytics 7. Crypto-Enforced Access Control and Secure Communication 8. Granular Access Control 9. Granular Audits 10. Data Provenance 18

19 How to get involved? CSA Big Data Working Group Site: CSA, Big Data LinkedIn: Basecamp Project Collaboration Site Request Form For any questions/remarks/feedback, please contact either: Who How Sreeranga (Sree) Rajan (Fujitsu) Wilco van Ginkel (Verizon) Neel Sundaresan (ebay) 19