Nist special Publication 1500-4 draft: nist big Data Interoperability Framework: Volume 4, Security and Privacy
Download 495.67 Kb.
|
- Navigate this page:
- 13.9Major Use Case: Sec Consolidated Audit Trail
- 13.10Major Use Case: Iot Device Management
- 13.11Major Use Case: Omg Data Residency Initiative
- 13.13Major Use Case: “Heart Use Case: Alice Selectively Shares Health-Related Data With Physicians And Others” f
- 13.15Major Use Case—Statewide Education Data Portal
- TAXONOMY OF SECURITY AND PRIVACY TOPICS
13.7Industrial: Aviation13.7.1Sensor Data Storage And AnalyticsScenario Description: Most commercial airlines are equipped with hundreds of sensors to constantly capture engine and/or aircraft health information during a flight. For a single flight, the sensors may collect multiple gigabytes of data and transfer this data stream to Big Data analytics systems. Several companies manage these Big Data analytics systems, such as parts/engine manufacturers, airlines, and plane manufacturers, and data may be shared across these companies. The aggregated data is analyzed for maintenance scheduling, flight routines, etc. 34Companies also prefer to control how, when, and with whom the data is shared, even for analytics purposes. Many of these analytics systems are now being moved to infrastructure cloud providers. Current Security and Privacy Issues/Practices:
Researchers are currently investigating the following security enhancements:
13.8Transportation13.8.1Cargo ShippingThe following use case outlines how the shipping industry (e.g., FedEx, UPS, DHL) regularly uses Big Data. Big Data is used in the identification, transport, and handling of items in the supply chain. The identification of an item is important to the sender, the recipient, and all those in between with a need to know the location of the item while in transport and the time of arrival. Currently, the status of shipped items is not relayed through the entire information chain. This will be provided by sensor information, GPS coordinates, and a unique identification schema based on the new International Organization for Standardization (ISO) 29161 standards under development within the ISO technical committee ISO JTC1 SC31 WG2. (There are likely other standards evolving in parallel.) The data is updated in near real time when a truck arrives at a depot or when an item is delivered to a recipient. Intermediate conditions are not currently known, the location is not updated in real time, and items lost in a warehouse or while in shipment represent a potential problem for homeland security. The records are retained in an archive and can be accessed for system-determined number of days. 13.9Major Use Case: Sec Consolidated Audit TrailThe SEC Consolidated Audit Trail (CAT) project is forecast to consume 10 terabytes of data daily. The system’s security requirements, which stemmed from a past system failure with lack of traceability, are considerable. High Level CAT Security Requirementse 
Figure 1: High Level CAT Requirements 13.10Major Use Case: Iot Device ManagementThis family of use cases involves the onboarding, decommissioning, quarantining of numerous devices, such as for IoT and cyber-physical systems. Safety systems incorporating voluminous sensor streams represent this family of use cases. 13.10.1Smart Home IoTSmart homes allow for remote monitoring through Wi-Fi networks and present new Big Data sources and new attack surfaces for private residences, government facilities and the like. 13.11Major Use Case: Omg Data Residency Initiative(but what about analytics, deep learning, etc.; see analytics in the RA) 13.11.1Minor Use Case: TBD13.11.2Use Case: Emergency management data (XChangeCore interoperability standard).13.12Major Use Case: Health Care Consent FlowAudit aspects of consent are presented in documents developed by an HL7 community (Proud-Madruga, 2016). 13.13Major Use Case: “Heart Use Case: Alice Selectively Shares Health-Related Data With Physicians And Others”f13.14Major Use Case Blockchain for Fintech (Arnab)13.14.1Minor Use Case – In-Stream PIIGoogle Hangout shift from desktop to mobile. 13.15Major Use Case—Statewide Education Data PortalThe Kauffman Foundation EdWise web resource provides public access to higher education data for consumers, parents, support organizations and leaders. It is a data aggregator as well as an analytics portal (Kauffman_Foundation, 2016). The portal attempts to provide anonymized student and institutional performance data for educational decision support. 
Figure 2: EdWise Figure TAXONOMY OF SECURITY AND PRIVACY TOPICSSection Scope: This taxonomy is an abstraction of the use cases. The taxonomy items can be considered issues that are faced in BD S&P. Explain taxonomies. Discuss taxonomy with respect to selected use case (side bar?) A candidate set of topics from the Cloud Security Alliance Big Data Working Group (CSA BDWG) article, Top Ten Challenges in Big Data Security and Privacy Challenges, was used in developing these security and privacy taxonomies.36 Candidate topics and related material used in preparing this section are provided for reference in Appendix A. A taxonomy for Big Data security and privacy should encompass the aims of existing useful taxonomies. While many concepts surrounding security and privacy exist, the objective in the taxonomies contained herein is to highlight and refine new or emerging principles specific to Big Data. The following subsections present an overview of each security and privacy taxonomy, along with lists of topics encompassed by the taxonomy elements. These lists are the results of preliminary discussions of the Subgroup and may be developed further in Version 2. As noted earlier, Version 1 focuses predominantly on security and security-related privacy risks (i.e. risks that result from unauthorized access to personally identifiable information). Privacy risks that may result from the processing of information about individuals and how the taxonomy may account for such considerations will be explored in greater detail in future versions. Directory: uploadfiles uploadfiles -> Use Cases from nbd(nist big Data) Requirements wg uploadfiles -> Use Cases from nbd(nist big Data) Requirements wg 0 uploadfiles -> Nist big Data Public Working Group (nbd-pwg) nbd-pwd-2015/6a,DW. abbreviated rr (M0444) Source: nbd-pwg status: Draft Title: Big Data Use Case #6 Implementation, using nbdra author: Afzal Godil Download 495.67 Kb. Share with your friends:
|