analysis- huawei big data security practice（分析-华为大数据安全实践）.docVIP

Analysis: Huawei big data security practice FusionInsight is based on open source community software Hadoop to enhance the functionality of enterprise-class large data storage, query and analysis of a unified platform to help enterprises quickly build massive data information processing system. FusionInsight is a fully open large data analysis platform, and for the financial, operators and other data-intensive industries operating maintenance, application development and other needs to create a highly reliable, high security, easy to use the operation and maintenance systems and full data modeling middleware The Huawei FusionInsight large data analysis platform framework shown in Figure B-4. The large data analysis platform brings together a lot of data, facing more security threats and challenges, including data abuse and user privacy issues. Huawei FuisonInsight large data analysis platform to provide operational security system, from network security, host security, user security and data security to provide a full range of security protection (Figure B-5): cyber security The FusionInsight cluster supports network security through network-wide isolation. Host security Through the FusionInsight cluster nodes within the operating system security and other means to ensure the normal operation of the node, including the latest patch updates, operating system kernel security consolidation, operating system permissions control, port management, deployment of anti-virus software. User security Through the provision of identity authentication, authority control, audit control and other security measures to prevent users fake, unauthorized, malicious operations and other security threats: Authentication. FusionInsight uses LDAP as the account management system, and through Kerberos on the account information for security authentication; unified Manager system users and component users of the management and certification, to provide single