Solving the Really Big Tech Problems with IoT Data Security and Privacy

Transcription

1 Solving the Really Big Tech Problems with IoT Data Security and Privacy HPE Security Data Security March 16, 2017

2 IoT Everywhere - Promising New Value Manufacturing Energy / Utilities Banks / Financial Telecom Government Healthcare Insurance Transportation Retail 2

3 Threat Vectors in the IoT space Collector Control PMTS Config Logging/monitoring Back-end infrastructure 3

4 Data Privacy Regulations High Bar, Worldwide Impact What is The EU General Data Protection Regulation (GDPR)? GDPR replaces EU s previous Data Protection Directive Data Protection Directive created to regulate control of Personally Identifiable Information (PII) GDPR will harmonize data protection laws across 28 EU member states Clearer rules for data transfer across borders Better control over individual s data and its use Comes into force May 25,

5 GDPR and Encryption GDPR calls out encryption as an approach to mitigate risks associated with the processing of sensitive data. Encryption and pseudonymisation are appropriate safeguards for sensitive data with specific criteria listed HPE SecureData with Hyper FPE meets these criteria i.e., encryption does not break existing business process, data can be securely decrypted as needed, and if data is encrypted then breach notification is not required Designation of a Data Protection Officer (DPO) will be mandatory for companies with over 250 employees based in EU, or processing data of over 5000 people per year Responsible for ensuring GDPR compliance and conducting GDPR audits What it means Organizations must review their entire security posture to understand the processes and controls needed to protect the privacy of EU citizens 5

6 2016 Saw First IoT Breaches 6

7 Obstacles to IoT Initiatives DBTA 78% of buyer-side respondents indicate lack of data security will impact their IoT progress Forrester 67% of security decision-makers rated privacy violations as a high level of concern 7

8 Security concerns now rank No.1 barrier to IoT success Top initiatives are around creating smart connected products that allow data from customers to be received by the enterprise (72%) Top barrier to IoT success is Security (35%) IoT has its own P&L today or will by the end of 2018 (55%) Gartner Survey of 2,539 Respondents in Six Countries 8

9 Why do enterprises care about encryption? Encryption is an area poised for wider adoption: 2 nd highest ROI against cyber crime

10 Format-Preserving Encryption (FPE) Tax ID AES - FPE First Name: Gunther Last Name: Robertson SSN: DOB: First Name: Uywjlqo Last Name: Muwruwwbp SSN: DOB: AES - CBC 8juYE%Uks&dDFa2345^WFLERG Ija&3k24kQotugDF2390^32 0OWioNu2(*872weW Oiuqwriuweuwr%oIUOw1@ Supports data of any format: name, address, dates, numbers, etc. Preserves referential integrity Only applications that need the original value need change Used for production protection and data masking NIST-standard using FF1 AES Encryption 10

11 Data security coverage End-to-end Protection Introducing Data-centric security Threats to Data Traditional IT Infrastructure Security Data Ecosystem Security Gaps HPE SecureData Data-centric Security Credential Compromise Authentication Management Data and applications Security gap Traffic Interceptors SSL/TLS/firewalls Middleware Security gap SQL injection, Malware Database encryption Databases Security gap Malware, Insiders SSL/TLS/firewalls File systems Malware, Insiders Disk encryption Security gap Storage 11

12 Leading Telecoms Provider Big Data Primary Data Flow Hadoop Cluster Teradata EDW Sensitive structured sources Staging Area HPE SecureData File Processor Sqoop Flume Storm Hive UDFs UDFs Analytics & Data Science 60 Data Sources, 600 Billion records per day HPE SecureData Key Servers & WS API s Map Reduce Data Cleansing Data Virtualization layer Tableau 250 Nodes LDAP 22

13 Big Data Ingestion Hadoop tools, Sqoop, Flume, etc. ETL, Informatica Apache NiFi Hortonworks DataFlow (HDF) 13

14 Leading car manufacturer Big Data primary data flow Flume real time ingest Hadoop Edge Nodes Hadoop Cluster Data Warehouse ~2 Billion real time transactions/day Sensitive structured data HPE SecureData Hadoop Tools Sqoop UDFs Other real-time data feeds customer data from dealerships, manufacturers Sensitive structured sources Map Reduces Hive UDFs Landing zone Cognos Analytics & Data Science Integration Controls HPE SecureData Key Servers & WS API s Existing data sets and 3rd party data, e.g.. accident data IBM DataStage 14

15 Securing the Big Data Space Sensor Data THE EDGE Flume Edge IT + HPE SecureData Sensor Data Laptop log files Any data Source Public data Server log files Storm Kafka Data Center & Cloud IT SQL Sqoop Landing zone TDE Hive UDFs Spark Map Reduce Teradata EDW, Vertica Power user reidentifies data BI tools work on protected data Business processes use protected data 15

16 Thank you hpe.com/software/datasecurity 16