Big data, security, and the cloud
1 like440 views
This document provides a whirlwind tour of big data, security, and cloud computing. It begins by looking back at where technology has been, from mainframes to client-server models to virtualization. It then examines the present state of early decentralization and a focus on cost-cutting and flexibility. Looking ahead, it discusses the future of commodity-based computing and storage and the need to revise governance. The document emphasizes that security is not one-size-fits-all and should be tied to risk tolerance policies. It stresses the importance of standards, privacy, and continual adaptation to vulnerabilities. In the end, it summarizes that cloud, big data, and security require balancing tolerance to risk with strong governance and adaptability
![22
Privacy
“...Privacy by Design -privacy by default, end-to-
end security, and strong accountability- by
enabling enterprises to automatically encrypt
(decrypt) data locally and on-the-fly when using
third-party cloud [based] service
applications, with no loss of functionality.
Maintaining control over encryption and
decryption processes is an excellent approach to
safeguarding personal data, regardless of where
the data resides.”
–Ann Cavoukian, Ph.D. Information and Privacy
Commissioner of Ontario, Canada
http://www.perspecsys.com/](https://image.slidesharecdn.com/bigdatasecurityandthecloud-panoxinos-130323230835-phpapp02/85/Big-data-security-and-the-cloud-22-320.jpg)
Big data, security, and the cloud
- 1. 1 Big Data, Security, and the Cloud: This isn’t Football, It’s Your Data Pano M. Xinos
- 2. 2 Whirlwind Tour Where have we been? Where are we now? Where are we going?
- 3. 3 WHERE HAVE WE BEEN?
- 5. 5 WHERE ARE WE NOW?
- 6. 6 The Present Early days of massive decentralization Focus on cost cutting Focus on increasing agility/flexibility
- 7. 7 Big Data Big Data, Clou d Computing Big Data, Security
- 8. 8 WHERE ARE WE GOING?
- 9. 9 The Future Commodity based compute Commodity based storage Imperative to revise governance
- 10. 10 To be clear… “Big Data is not a hail-mary pass. It’s a running play with the defensive team running in slow motion.” –Me
- 11. 11 THE CLOUD AND YOU(R BIG DATA)
- 12. 12 Cloud Computing In Review Essential Characteristics On-demand, Self-service Broad network access Resource pooling Rapid elasticity Measured service
- 13. 13 Cloud Computing—Part Deux Deployment Models Service Models Public Cloud Infrastructure Private Cloud Platform Community Cloud Software Hybrid Cloud
- 14. 14 Big Data <3’s Cloud Massive workloads, meet Cloud Computing XOXOXOX
- 15. 15 SECURITY AND YOU(R BIG DATA)
- 16. 16 Security is not one-size-fits-all http://teradatamagazine.com/v09n04/Features/One-size-does-not-fit-all/
- 17. 17 And… It should be tightly coupled with your tolerance to risk and risk management policies including BC/DR
- 18. 18 Ownage! http://www.citytv.com/toronto/citynews/sports/article/231050
- 19. 19 I’ve said this before… “The biggest security vulnerability is people. Always has been, always will be.” -Me
- 20. 20 Standards CSA STAR and BDWG NIST reference architecture ITU reference architecture
- 21. 21 Service Level Agreements What is the value of your brand? QMUL Cloud Legal Project …leave a lot to be desired
- 22. 22 Privacy “...Privacy by Design -privacy by default, end-to- end security, and strong accountability- by enabling enterprises to automatically encrypt (decrypt) data locally and on-the-fly when using third-party cloud [based] service applications, with no loss of functionality. Maintaining control over encryption and decryption processes is an excellent approach to safeguarding personal data, regardless of where the data resides.” –Ann Cavoukian, Ph.D. Information and Privacy Commissioner of Ontario, Canada http://www.perspecsys.com/
- 23. 23 How-to Dress in layers Obfuscate data IDC, circa 2010 Address vulnerabilities App security
- 24. 24 Example of Personal Security “SolaS uses Lockheed Martin’s intelligence-driven defense approach to provide proactive and continuous cloud security situational awareness, and real-time compliance and configuration management” http://www.marketwatch.com/story/lockheed-martin-delivers-solastm-hybrid-cloud-solution-2012-09-27
- 25. 25 To Sum Up... Cloud, Big Data, and Security Tolerance to Risk Governance Adaptability
- 26. 26 THANK YOU! QUESTIONS? Pano M. Xinos PanoXinos.TDWI@GMail.com http://ca.LinkedIn.com/in/panoxinos @pmxinos http://TheCaseforCloud.blogspot.com