This document discusses security and governance considerations for big data. It notes that while many businesses use big data, they may not have sufficient access controls or security practices in place. Big data breaches can be large, making security critical. It then outlines some risks like insufficiently hardened systems, uncontrolled access, and unfulfilled regulatory requirements. The document introduces GOSEC as a centralized security component that manages access control across big data services like HDFS and applications. GOSEC allows setting access policies for users and groups for resources like files and topics. It covers authentication, authorization, and auditing. The document stresses the need to integrate GOSEC with the organization's identity provider and security strategies to prevent leakage of internal and external data. It

1. Security &
Governance
in Big Data

2. Security

3. BIG DATA IS STILL A NEW
TECHNOLOGY FOR MOST
ORGANISATIONS,
AND ANY TECHNOLOGY THAT IS NOT
WELL UNDERSTOOD WILL
INTRODUCE NEW VULNERABILITIES

4. Many businesses already use Big Data to
store data. However they may not have
the access rights control required from a
security perspective.
Big Data breaches can be big, so data
security becomes even more critical

5. CRITICAL RISKS IN BIG DATA
PLATFORMS
∎ BIG data, BIGGER security leaks
∎ The attack surface of the nodes in a cluster may not be adequately hardened
∎ Access to data from multiple locations may not be sufficiently controlled
∎ Regulatory requirements with logs and audit trails may not be fulfilled,

6. BIGCHALLENGE∎Platform must have a comprehensive security solution
∎A secure integration into BBVA security is a need

7. GOSEC is a centralized security
component managing fine-grained
access control across Big Data
services: HDFS, Cassandra, Kafka
and Big Data web applications such
as Viewer.
WHAT IS IT?
GOSEC allows management policies
controlling access to files, topics,
tables, databases… These policies
can be set for individual users or
groups

8. GOSEC currently covers:
Authentication
Authorization
Audit

9. OVERVIEW
GOSEC
MANAGER

10. USERS & GROUPS MANAGEMENT
Users & groups are not directly managed in GOSEC.
They are always recovered from organization Identity
Provider (LDAP).

11. USERS & GROUPS MANAGEMENT
Roles & profiles are an easy way to set up security
policies for dynamic group memberships or user tasks.

12. USERS & GROUPS MANAGEMENT
ACLs can be created
to grant or revoke
access to different
resources.

13. USERS & GROUPS MANAGEMENT
Every operation is
audited by GOSEC.
Only security admins
have access to the audit
log.

14. SO, WHAT MUST WE DO NOW ?

15. BBVA INTEGRATION
Synchronized
IDP
Armadillo
and Global
Directory
Data Encoding
for Security
Strategy to
prevent
internal and
external data
leakage

16. Governance

17. “DATA IS GOING TO DEFINE THE COMPETITIVE ADVANTAGE
IN THE GLOBAL FINANCIAL ECOSYSTEM OF THE FUTURE”
“WE ARE BEGINNING TO BUILD DATA-DRIVEN BANK”
Francisco González, November 2015

18. WHY IS DATA GOVERNANCE
NECESSARY?
Large data
volumes and
various data
types
Democratize
the use of the
data with
new flexible
and agile
exploitation
Data
management
policies that
ensure quality
& traceability
Data Centric

19. GOVERNANCE MODEL TRANSVERSAL
AND CONVERGENT ACROSS ALL
GEOGRAPHIES OF GROUP
GLOBAL

20. WHAT WE EXPECT OF
DATA GOVERNANCE?
Data Dictionary
Functional and Technical Level
Lineage
Traceability of data throughout its life cycle
Quality
Data Quality and Process Quality
Standards and Best Practices
Standards for each platform technology
Visualization and Exploration
Graphical solution for governance data

21. THANKS!
Any questions?
@datiobd
info@datiobd.com
datio-big-data