Data Discovery and Classification Discovery / classification possible across media, populations, channels Secure Data Aggregation Vendor-supplied aggregation services – security practices opaque Transformation → Privacy-preserving Data Analytics Aggregate reporting to content Uses owners Compliance with Regulations PII disclosure issues abound Govt access to data and freedom of Various issues, e.g, playing terrorist expression concerns podcast, illegal playback Transformation Data Centric Security such as unknown ↔ Data identity/policy-based encryption Infrastructure Policy management for access control User, playback admin, library maintenance, auditor Computing on the encrypted data: Unknown searching/filtering/deduplicate/fully homomorphic encryption Audits Audit DRM usage for royalties Data Securing Data Storage and Transaction logs unknown Infrastructure Key Management unknown Security Best Practices for non-relational unknown data stores Security against DoS attacks N/A? Data Provenance Traceability to right entities to be preserved. (Add’l use case: Wikipedia privacy issues when distributing data to researchers) General Analytics for security intelligence Machine intelligence for unsanctioned use/access Event detection “Playback” granularity defined Forensics Subpoena of playback records in legal disputes Unmanned Military Vehicle Sensor Systems Unmanned vehicles (“drones”) and their onboard sensors (e.g., streamed video) can produce petabytes of data that must be stored in nonstandard formats. Refer to DISA large data object contract [11] for exabytes in DoD private cloud. Mapping to the Security Reference Architecture:
Data Discovery and Classification Discovery / classification possible across media, populations, channels Secure Data Aggregation Vendor-supplied aggregation services – security practices opaque Transformation → Uses Privacy-preserving Data Analytics Aggregate reporting to content owners Compliance with Regulations PII disclosure issues abound Govt access to data and freedom of expression concerns Various issues, e.g, playing terrorist podcast, illegal playback Transformation ↔ Data Infrastructure Data Centric Security such as identity/policy-based encryption unknown Policy management for access control User, playback admin, library maintenance, auditor Computing on the encrypted data: searching/filtering/deduplicate/fully homomorphic encryption Unknown Audits Audit DRM usage for royalties Data Infrastructure Securing Data Storage and Transaction logs unknown Key Management unknown Security Best Practices for non-relational data stores unknown Security against DoS attacks N/A? Data Provenance Traceability to right entities to be preserved. (Add’l use case: Wikipedia privacy issues when distributing data to researchers) General Analytics for security intelligence Machine intelligence for unsanctioned use/access Event detection “Playback” granularity defined Forensics Subpoena of playback records in legal disputes Unmanned Military Vehicle Sensor Systems Unmanned vehicles (“drones”) and their onboard sensors (e.g., streamed video) can produce petabytes of data that must be stored in nonstandard formats. Refer to DISA large data object contract [11] for exabytes in DoD private cloud. Mapping to the Security Reference Architecture: