Dynamic cube three elements: big data to bring security products upgrade

The hottest science and technology terms for 2013 are none other than "big data," and related books have long dominated the list of bestsellers, giving unprecedented attention to big data. The new ideas brought by big data are gradually penetrating into every industry and changing the way we all think as creators of data. Before the advent of big data, it was a period of rapid technological development such as the Internet, cloud computing and Internet of Things. With the popularization and extensive construction of information terminals such as smart terminals and digital cities, anyone can generate data anytime, anywhere , The global data volume explodes and the big data era has arrived. The emergence of big data posed a tremendous challenge for information security and brought new opportunities for development. On the one hand, as a new information gold mine, big data can easily become the target of hacker attacks. Various data threats are also emerging. On the other hand, cybersecurity devices generate huge amounts of safety data in the daily operation process. Relevance mining of these safety data can help us to create an automatic, active and coordinated cybersecurity defense strategy, which is also in line with information security Blue Shield shares in technology companies in 2013 proposed a new generation of network security products, "moving cube" three elements.

Big data features

Big data is generally considered to be a large amount of data, data in various forms of unstructured data. With the industry's application and practice of big data, big data not only refers to the size of the data itself, but also includes such elements as data collection, data storage, data analysis and data value derivation. The main features are the following:

1, Volume mass scale

In the era of big data, all kinds of Internet of Things terminals, mobile devices, smart terminals and social networks generate data every hour and every time, and the quantity level has risen exponentially.

2, Variety a variety of data structures

As the size of big data grows, the type of data is becoming more diversified. The traditional data to structured data-based. However, with the rapid development and popularization of technologies such as Internet of Things and multimedia, the unstructured data generated by video, audio, pictures, mail, HTML, RFID, GPS and sensors grow rapidly every year. According to statistics, unstructured data will account for more than 80% of the total data.

3, Velocity rapid generation and circulation

Based on the Hadoop big data framework of cloud computing, a cluster of high-speed computing and storage, to achieve a distributed operating system, in the form of streaming to provide high transmission rate to access data to adapt to the big data applications. Moreover, data mining, semantic engine, visual analysis and other technology development, from the massive data depth analysis, extract information, control of data-added "accelerator."

4, Value huge data value

Value is the ultimate goal of big data. Big data itself is a "gold mine" that can yield unexpected, valuable information from the convergence of big data. Especially in the highly competitive business area, data is becoming a new type of assets in the enterprise, pursuing the maximum value of data. At the same time, the value of big data also has the characteristics of low density. It requires mining and analyzing large amounts of data to obtain truly useful information and form user value. To monitor the video, for example, continuous playback of the screen, the value of the information generated data may be only a second or two.

Big data security challenge

"Prism Gate" incident, the big data in the most heated discussions, really hit a big slap in the face of big data. Public opinion has given many denunciations to the existence of "Prism" project. However, many people overlook a key issue. It is with the existence of "big data" that the "Prism" project can be implemented. Big data technologies bring more security issues while bringing opportunities. From the perspective of enterprise storage strategy and environment, or from the perspective of data and storage operations, the "management risk" brought by big data is not only more and more prominent, but if it can not be properly resolved, it will surely result in "big data is big Risk "of the terrible consequences. From an information security perspective, the issues surrounding big data are mainly in the following areas:

Data online

Networked society based on cloud computing provides an open environment for big data. Resources distributed in different regions can be quickly integrated and dynamically configured to achieve the co-construction and sharing of data sets. Moreover, the ease of access to the network and the formation of data flows provide the foundation for rapid and flexible push of resources and personalized service. Because of the exposure of the platform, it is easier to attract hacker attacks because of big data with huge amounts of data and potential value. In other words, in an open, networked society, big data has a large amount of data and is interlinked. In recent years, a chain reaction such as theft of user account information on the Internet can be seen. Big data can attract hackers more easily. Attack, the theft of the amount of data is huge.

Data unstructured

Big data blowout, thanks to the explosive growth of unstructured data, a large number of different types of data structure so that the traditional structured data storage means by surprise. Now rely on the application of new technologies such as NOSQL to provide solutions for big data processing, new technologies often have a wide range of loopholes, need to be further improved in the process of updating the version. In addition, since new technologies often can not directly follow the existing security model, some mature management systems need to be adjusted according to new technologies. The security risks introduced in this process also need data planners to solve them.

Big Data Armed with Information Security

Big data also provides new opportunities for the development of information security. Big data is providing new possibilities for cybersecurity analysis, and the analysis of massive amounts of data helps information security service providers better capture network anomalies and identify points of risk in their data. Network attacks will always be clues, these traces are hidden in the form of data in big data, the use of big data technology to integrate computing and processing resources will help to more targeted response to information security threats to help find the attack source.

Due to the complexity of the network and the diversification of the means of attack, it is difficult for a single security device to accurately determine the impact of intrusion and intrusion. Blue Shield Security Integrated Management Platform SOC can be more effective through the entire network of associated security events to give more accurate judgments and effective analysis of attacks to improve the correct reporting rate of safety equipment to reduce the security administrator's analysis. The system simulates the attack model to abstract and describe the attack behavior, establishes a variety of attack association scenarios, and can accurately identify the true intrusion behaviors from a large number of security events so as to refine the alarm information and improve the available information of the alarm information Reduce the useless information in the alarm information, and reduce the false alarm and false alarm of the safety device.

Big data, the advent of cloud computing, has also brought changes to the delivery model for information security. Traditional hardware delivery methods are increasingly unable to meet the intensive monitoring needs of large organizations, which in turn have to pay high purchasing costs for excess hardware capabilities. The advantage of the cloud computing model is that private clouds can be deployed to organizations that have a need for mass surveillance, and smaller organizations do not have to buy less powerful hardware, simply by purchasing services on demand.

Blue Shield website security cloud platform through the cloud service model for the site to provide one-stop security services, the site in the "zero maintenance" of the case, such as XSS, SQL injection, zero-day attacks, DDoS attacks and other site security problem. Website in the face of various traps, increasing risk of network information flow, you do not have to use the traditional way to purchase complex and expensive traditional safety equipment, without the user in your business system to deploy any hardware and software, you can get directly from the cloud Reliable sound security capabilities, the security has become an online service resources, to provide users with more convenient and more advanced site protection, greatly reducing the cost of user security, at the same time, can enhance the site visit speed and reduce Failure rate, and to provide users with intelligent website data analysis, to help users optimize the operation plan, improve website conversion rate.