big data security (chinanetcloud - guiyang往 conference).pptxVIP

;We have lots of data我们有很多数据;We get data from everything数据无处不在;From Every Part of Life 融入生活的每一部分;How to protect it ?如何保护数据;How to protect it ? Like Gold !如何像保护黄金那样去保护它;Protecting Gold – Safes保护黄金－保险箱;Protecting Gold – Vaults保护黄金－地下保险库;Protecting Gold – Banks保护黄金－银行;Protecting Gold – Forts保护黄金－地堡;Those risks were physical这些风险都是物理的;Today’s Risks are Digital当今的风险是电子化的;Gold Thieves Arrive by Car with Guns偷黄金的人是持枪驾车;Data Thieves Arrive by Cable偷数据的人是接数据线;From Anywhere从任何地方;By Anyone任何人;Data Risks ?数据风险是什么？;Data Risks ?数据风险是什么？;Risk Types – Stolen Data风险类型－偷数据;Risk Types – Tampered Data风险类型－篡改数据;Risk Types – Privacy风险类型－隐私侵犯;Risk Areas – Collecting Data风险类型－收集数据;Risk Areas – Processing Data风险类型－处理数据;Risk Areas – Storing Data风险类型－存储数据;Risk Paths – Outsiders (Hackers)风险路径－外部（黑客）;Risk Paths – Insiders (Employees)风险路径－内部（员工）;Risk Paths – Sys Admin (Privileged Users)风险路径－系统管理(特权用户）;What to do ?怎么办;Securing Data – Difficult Frustrating安全加固数据 – 又难又麻烦;How to Secure it ?如何来办;How to Balance Security vs. Usability ?如何平衡数据安全和可用性;Every part should be good要做好每一方面;Every part should be good要做好每一方面;4 Security Zones4大安全区域;4 Security Zones4大安全区域;Gathering Ingesting Data收集和摄取数据;Data migration/ETL junctions数据迁移／ETL结合;4 Security Zones4大安全区域;Processing Data 处理数据;Processing Data – Two parts处理数据－2个方面;Securing Hadoop 安全加固Hadoop;Weg Code – OWASP Resources代码 – OWASP 项目资源;Code – OWASP Top 10代码－10大应用程序风险;Processing Code – App Scanning处理代码－APP扫描;4 Security Zones4大安全区域;Storing Data – Key Protection Point存储数据－重???的保护点;Storing Data – Two Levels存储数据－2个层面;4 Security Zones4大安全区域;Infrastructure – Cloud Servers底层设施－云和物理服务器;Cloud Servers – Love Respect Them云和物理服务器－需要被关注;Infrastructure – Many Parts Layers基础设施－许多层级;Firewall WAF (Web App Firewall)WAF – 网页应用防火墙;Under Your Application – Server OS应用之下－服务器操作系统;Under Your Application – Cloud应用之下－云;Audit is also Important审计也很重要;Tools – Infosphere Guardium工具;Summary总结;Thank you!谢谢;Thanks from ChinaNetCl