Transformation Data Centric Security such as Usually feature of O.S. ↔ Data identity/policy-based encryption Infrastructure Policy management for access control E.g.: Windows group policy for event log Computing on the encrypted data: Vendor, platform-specific searching/filtering/deduplicate/fully homomorphic encryption Audits Complex – audits possible throughout Data Securing Data Storage and Transaction logs Vendor, platform-specific Infrastructure Key Management CSO, SIEM product keys Security Best Practices for non-relational TBD data stores Security against DoS attacks N/A Data Provenance E.g., how know an intrusion record was actually associated w/ specific workstation General Analytics for security intelligence Feature Event detection Feature Forensics Feature Consumer Digital Media Usage General Description of the Industry / Use Case: Content owners license data for usage by consumers through presentation portals, e.g., Netflix, iTunes, etc. Usage is Big Data, including demographics at user level, patterns of use such as play sequence, recommendations, content navigation. Mapping to the Security Reference Architecture: RA Component Security & Privacy Topic Use Case Mapping Sources → End-Point Input Validation Varies, vendor-dependent. Spoofing Transformation is possible. E.g., Protections afforded by securing Microsoft Rights Management Services [10]. S/MIME Real Time Security Monitoring Content creation security Data Discovery and Classification Discovery / classification possible across media, populations, channels Secure Data Aggregation Vendor-supplied aggregation
Transformation ↔ Data Infrastructure Data Centric Security such as identity/policy-based encryption Usually feature of O.S. Policy management for access control E.g.: Windows group policy for event log Computing on the encrypted data: searching/filtering/deduplicate/fully homomorphic encryption Vendor, platform-specific Audits Complex – audits possible throughout Data Infrastructure Securing Data Storage and Transaction logs Vendor, platform-specific Key Management CSO, SIEM product keys Security Best Practices for non-relational data stores TBD Security against DoS attacks N/A Data Provenance E.g., how know an intrusion record was actually associated w/ specific workstation General Analytics for security intelligence Feature Event detection Feature Forensics Feature Consumer Digital Media Usage General Description of the Industry / Use Case: Content owners license data for usage by consumers through presentation portals, e.g., Netflix, iTunes, etc. Usage is Big Data, including demographics at user level, patterns of use such as play sequence, recommendations, content navigation. Mapping to the Security Reference Architecture: RA Component Security & Privacy Topic Use Case Mapping Sources → Transformation End-Point Input Validation Varies, vendor-dependent. Spoofing is possible. E.g., Protections afforded by securing Microsoft Rights Management Services [10]. S/MIME Real Time Security Monitoring Content creation security Data Discovery and Classification Discovery / classification possible across media, populations, channels Secure Data Aggregation Vendor-supplied aggregation