This document provides a whirlwind tour of big data, security, and cloud computing. It begins by looking back at where technology has been, from mainframes to client-server models to virtualization. It then examines the present state of early decentralization and a focus on cost-cutting and flexibility. Looking ahead, it discusses the future of commodity-based computing and storage and the need to revise governance. The document emphasizes that security is not one-size-fits-all and should be tied to risk tolerance policies. It stresses the importance of standards, privacy, and continual adaptation to vulnerabilities. In the end, it summarizes that cloud, big data, and security require balancing tolerance to risk with strong governance and adaptability

1. 1
Big Data, Security, and the Cloud:
This isn’t Football, It’s Your Data
Pano M. Xinos

2. 2
Whirlwind Tour
Where have we been?
Where are we now?
Where are we going?

3. 3
WHERE HAVE WE BEEN?

4. 4
The Past
Mainframe
Client-server model
e-Commerce
Virtualisation
Outsourcing

5. 5
WHERE ARE WE NOW?

6. 6
The Present
Early days of massive decentralization
Focus on cost cutting
Focus on increasing agility/flexibility

7. 7
Big Data
Big
Data, Clou
d
Computing
Big Data,
Security

8. 8
WHERE ARE WE GOING?

9. 9
The Future
Commodity based compute
Commodity based storage
Imperative to revise governance

10. 10
To be clear…
“Big Data is not a hail-mary pass. It’s a
running play with the defensive team
running in slow motion.”
–Me

11. 11
THE CLOUD AND YOU(R BIG DATA)

12. 12
Cloud Computing In Review
Essential Characteristics
On-demand, Self-service
Broad network access
Resource pooling
Rapid elasticity
Measured service

13. 13
Cloud Computing—Part Deux
Deployment Models Service Models
Public Cloud Infrastructure
Private Cloud Platform
Community Cloud Software
Hybrid Cloud

14. 14
Big Data <3’s Cloud
Massive workloads,
meet
Cloud Computing
XOXOXOX

15. 15
SECURITY AND YOU(R BIG DATA)

16. 16
Security is not one-size-fits-all
http://teradatamagazine.com/v09n04/Features/One-size-does-not-fit-all/

17. 17
And…
It should be tightly coupled with your
tolerance to risk and risk management
policies including BC/DR

18. 18
Ownage!
http://www.citytv.com/toronto/citynews/sports/article/231050

19. 19
I’ve said this before…
“The biggest security vulnerability is people.
Always has been, always will be.”
-Me

20. 20
Standards
CSA STAR and BDWG
NIST reference architecture
ITU reference architecture

21. 21
Service Level Agreements
What is the value of your brand?
QMUL Cloud Legal Project
…leave a lot to be desired

22. 22
Privacy
“...Privacy by Design -privacy by default, end-to-
end security, and strong accountability- by
enabling enterprises to automatically encrypt
(decrypt) data locally and on-the-fly when using
third-party cloud [based] service
applications, with no loss of functionality.
Maintaining control over encryption and
decryption processes is an excellent approach to
safeguarding personal data, regardless of where
the data resides.”
–Ann Cavoukian, Ph.D. Information and Privacy
Commissioner of Ontario, Canada
http://www.perspecsys.com/

23. 23
How-to
Dress in layers
Obfuscate data
IDC, circa 2010
Address vulnerabilities
App security

24. 24
Example of Personal Security
“SolaS uses Lockheed Martin’s
intelligence-driven defense approach
to provide proactive and continuous
cloud security situational awareness,
and real-time compliance and
configuration management”
http://www.marketwatch.com/story/lockheed-martin-delivers-solastm-hybrid-cloud-solution-2012-09-27

25. 25
To Sum Up...
Cloud, Big Data, and Security
Tolerance to Risk
Governance
Adaptability

26. 26
THANK YOU!
QUESTIONS?
Pano M. Xinos
PanoXinos.TDWI@GMail.com
http://ca.LinkedIn.com/in/panoxinos
@pmxinos
http://TheCaseforCloud.blogspot.com