Disposition, migration, retention policies PII microdata as “hazardous” (Kum et al. 2013) De-identification and Anonymization Re-identification risk management End Point Validation Digital Rights Management Visibility and Infrastructure Management Threat and Vulnerability Management DoS-resistant cryptographic protocols Monitoring, Alerting As pointed out in the CIICF, Big Data affords new opportunities for large scale security intelligence, complex event fusion, analytics and monitoring. Mitigation Breach mitigation planning for Big Data may be qualitatively or quantitatively different. Configuration Management Configuration management is one aspect of preserving system and data integrity Patch Management Upgrades Logging Big Data must produce and manage more logs, of greater diversity and velocity. E.g., profiling and Statistical sampling on an ongoing basis may be required. Malware Surveillance and Remediation This is a well-understood domain, but Big Data can cross traditional system ownership boundaries. Review of Identify, Protect, Detect, Respond and Recover framework (NIST Oct 2013) may uncover planning unique to Big Data. Network Boundary control NEW: Establishes a data-agnostic connection for a secure channel. Shared services network architecture Ed Note: Akhil to expound. Zones/ cloud network design (including connectivity) Resilience, Redundancy and Recovery Resilience The security apparatus for a Big Data system may be comparatively fragile in comparison to other systems. Recovery Recovery for Big Data security failures may require considerable advance provisioning beyond that required for small data. Response planning and communications with users and may be on a similarly big scale. Risk and Accountability Accountability
Disposition, migration, retention policies PII microdata as “hazardous” (Kum et al. 2013) De-identification and Anonymization Re-identification risk management End Point Validation Digital Rights Management Visibility and Infrastructure Management Threat and Vulnerability Management DoS-resistant cryptographic protocols Monitoring, Alerting As pointed out in the CIICF, Big Data affords new opportunities for large scale security intelligence, complex event fusion, analytics and monitoring. Mitigation Breach mitigation planning for Big Data may be qualitatively or quantitatively different. Configuration Management Configuration management is one aspect of preserving system and data integrity Patch Management Upgrades Logging Big Data must produce and manage more logs, of greater diversity and velocity. E.g., profiling and Statistical sampling on an ongoing basis may be required. Malware Surveillance and Remediation This is a well-understood domain, but Big Data can cross traditional system ownership boundaries. Review of Identify, Protect, Detect, Respond and Recover framework (NIST Oct 2013) may uncover planning unique to Big Data. Network Boundary control NEW: Establishes a data-agnostic connection for a secure channel. Shared services network architecture Ed Note: Akhil to expound. Zones/ cloud network design (including connectivity) Resilience, Redundancy and Recovery Resilience The security apparatus for a Big Data system may be comparatively fragile in comparison to other systems. Recovery Recovery for Big Data security failures may require considerable advance provisioning beyond that required for small data. Response planning and communications with users and may be on a similarly big scale. Risk and Accountability Accountability