analysis- baidu large data security practice（分析-百度大数据安全实践）.docVIP

Analysis: Baidu large data security practice Data is an important asset of Baidu. Baidu company built a company-wide data platform, including the company’s various business areas of data, building data closed-loop solutions to promote the company’s data unified management, data sharing, data discovery and data use. These data assets come together from multiple departments and businesses, and the security requirements are different. Baidu attaches great importance to the safety of large data applications in the process of security in the formation of a unified large data security framework, through the data throughout the life cycle of the implementation of security technology and management mechanisms for large data platform and user data security. Baidu large data platform security architecture Baidu large data platform with the basis of system security, security management, and data security classification mechanism as the core of the data security architecture, as shown in Figure B-3: System security and security management is the most basic security mechanism in Baidu’s large data platform. Data security architecture in the entire large data security architecture in a very important position. Data security architecture includes security audit, security control and security encryption in three parts, and the use of security classification mechanism, divided into basic and optional level. The security infrastructure includes both security auditing and security control, which is the security foundation for all business data on large data platforms, providing auditable and granular integrity throughout the lifecycle of data on large data platforms control function. Optional levels include data encryption and decryption functions, support a variety of strength encryption and decryption algorithm. Baidu large data platform to support the encrypted data storage, taking into account the platform every day the amount of data generated is extreme