the access/visualization aspects of the Application Web Services Gateway Provider. Digital Rights Management Monitoring, Alerting Application Provider Application Provider interfaces between the Data Application Layer Identity Provider and Data Consumer. It takes part in all the Web Services Gateway secure interface protocols with these blocks as well as Data Transformation maintains secure interaction with the Framework Digital Rights Management Provider. Monitoring, Alerting Framework Provider Framework Provider is responsible for the security of Virtualization Layer Identity data/computations for a significant portion of the life Identity Provider cycle of the data. This includes security of data at rest Encryption and Key Management through encryption and access control; security of Isolation/Containerization computations via isolation/virtualization; and security of Storage Security communication with the Application Provider. Network Boundary Control Monitoring, Alerting NBDRA Subsection Scope: This section will contain a brief summary of the information in Appendix A (Full mapping of use cases to NBDRA). Possibly discuss what the mapping is, overall take away, and maybe run through the example use case. NBDRA Figure 6 provides an overview of several security and privacy topics with respect to some key NBDRA components and interfaces. The figure represents a beginning characterization of the interwoven nature of the Security and Privacy Fabric with the NBDRA components. It is not anticipated that Figure 6 will be further developed for Version 2 of this document. However, the relationships between the Security and Privacy Fabric and the NBDRA and the Security and Privacy Taxonomy and the NBDRA will be investigated for Version 2 of this document. Figure 6: Notional Security and Privacy Fabric Overlay to the NBDRA The groups and interfaces depicted in Figure 6 are described below. INTERFACE BETWEEN DATA PROVIDERS BIG DATA APPLICATION PROVIDER → Data coming in from data providers may have to be validated for integrity and authenticity. Incoming traffic may be maliciously used for launching DoS attacks or for exploiting software vulnerabilities on
Web Services Gateway Digital Rights Management Monitoring, Alerting the access/visualization aspects of the Application Provider. Application Provider Application Layer Identity Web Services Gateway Data Transformation Digital Rights Management Monitoring, Alerting Application Provider interfaces between the Data Provider and Data Consumer. It takes part in all the secure interface protocols with these blocks as well as maintains secure interaction with the Framework Provider. Framework Provider Virtualization Layer Identity Identity Provider Encryption and Key Management Isolation/Containerization Storage Security Network Boundary Control Monitoring, Alerting Framework Provider is responsible for the security of data/computations for a significant portion of the life cycle of the data. This includes security of data at rest through encryption and access control; security of computations via isolation/virtualization; and security of communication with the Application Provider. NBDRA Subsection Scope: This section will contain a brief summary of the information in Appendix A (Full mapping of use cases to NBDRA). Possibly discuss what the mapping is, overall take away, and maybe run through the example use case. NBDRA Figure 6 provides an overview of several security and privacy topics with respect to some key NBDRA components and interfaces. The figure represents a beginning characterization of the interwoven nature of the Security and Privacy Fabric with the NBDRA components. It is not anticipated that Figure 6 will be further developed for Version 2 of this document. However, the relationships between the Security and Privacy Fabric and the NBDRA and the Security and Privacy Taxonomy and the NBDRA will be investigated for Version 2 of this document. Figure 6: Notional Security and Privacy Fabric Overlay to the NBDRA The groups and interfaces depicted in Figure 6 are described below. INTERFACE BETWEEN DATA PROVIDERS → BIG DATA APPLICATION PROVIDER Data coming in from data providers may have to be validated for integrity and authenticity. Incoming traffic may be maliciously used for launching DoS attacks or for exploiting software vulnerabilities on