METHOD AND SYSTEM FOR ENTITLEMENT SETTING, MAPPING, AND MONITORING IN BIG DATA STORES

摘要

A method and system for securing sensitive data content in big data stores is provided. In an example method, entities within the big data store that contain sensitive data are identified. Then, users who have entitlement to access these sensitive entities are identified, along with their level of entitlement. Access controls are then set, based on which users can operate on the sensitive entities. Access or attempts to access these entities is monitored on an ongoing basis. An example system maps entitlement to entities within the big data store that contain sensitive content, to monitor access to these entities and to set access controls for users accessing the big data store.

主权项

1. A method, comprising:
identifying sensitive data in a large distributed file system (DFS) by applying an automatic search scaled through parallel processing to the DFS; identifying one or more users having a level of entitlement to access the sensitive data; mapping each user and each corresponding level of entitlement to the sensitive data; and creating an entitlement report updated in real time of the sensitive data showing each user in relation to each level of entitlement to access a part of the sensitive data.