IMPLEMENTATION AND MANAGEMENT OF INFORMATION SECURITY FOR DISTRIBUTED DATA STORAGE SYSTEMS

摘要

This disclosure relates generally to information security, and more particularly to implementation and management of information security of a Big Data environment of an organization. In one embodiment, security related inputs are received from a user and are converted into security requirement. Thereafter, a security policy template is identified from plurality of pre-defined security policy templates based on security reference architecture and the security requirement. The security policy template represents a plurality of security controls. Thereafter, one or more security controls are selected from the security controls based on the security requirement. Further, one or more existing security controls implemented in Big Data environment are identified. Thereafter, the selected security controls are compared with the existing security controls for determining a security control that is not implemented in the Big Data environment. Subsequently, the security control is implemented in the Big Data environment to provide security to the Big Data of the organization.

主权项

1. An information security system for securing Big Data of an organization, the information security system comprising:
a processor; an interaction module coupled to the processor to:
obtain one or more security related inputs from a user for a Big Data environment deployed in the organization;convert the one or more security related inputs into at least one security requirement for the Big Data environment; a security policy designer coupled to the processor to:
identify a security policy template from amongst a plurality of pre-defined security policy templates based on a security reference architecture and the at least one security requirement, wherein the security policy template represents a plurality of security controls, and wherein the security reference architecture is indicative of the plurality of security controls categorized in a plurality of security layers and security control selection rules;select one or more security controls from amongst the plurality of security controls based on the at least one security requirement; a determination module coupled to the processor to:
identify one or more existing security controls implemented in the Big Data environment based on at least one environment parameter;compare the selected one or more security controls with the one or more existing security controls implemented in the Big Data environment to determine a security control from amongst the selected one or more security controls that is not implemented in the Big Data environment; andimplement the security control in the Big Data environment to provide security to the Big Data of the organization.