Welcome!

Agile Computing Authors: Pat Romanski, Liz McMillan, Elizabeth White, Yeshim Deniz, Andy Thurai

Blog Feed Post

Big Data Cloud Security Challenges, per the White House

cloud security best practices Cloud Security Cloud Encryption big data  big data cloud securityBDN1 Big Data Cloud Security Challenges, per the White HouseMay 1 has long been known as May Day or International Worker’s Day. In 2014, it could just as well have been dubbed Big Data Security Day. It was on May 1 that the white house released an 85-page report on big data called Seizing Opportunities, Preserving Values, discussing big data applications such as transparency into government spending (waste), helping the US economic recovery, as well as improving education and healthcare: all topics near and dear to our hearts.

The report encouraged the current administration to take expedited action with regard to pending legislation and detailed big data’s failures in protecting privacy.

Some of the pressing privacy issues as they relate to the big data report:

 

1.       Ownership of personal data

Who owns personal information? Who is trusted with personal information?

Is there a way to make sure the personal information a company has been entrusted with remains under the sole ownership of said company?

 

2.       De-identifying data is an imperfect proposition.

The report mentions the “mosaic effect, whereby personally identifiable information can be derived or inferred from datasets that do not even include personal identifiers.”

So, how can big data applications gather personal information without others being able to re-identify the de-identified?

 

3.       Don’t forget small data

Though all the buzz is around big data, the report identifies small data as the culprit for the most common privacy risks, a la defrauding personal banking information, which may not require big data, but causes big damage.

Is there a way to limit (or, dare we say: prevent) breaches like the Target credit card disaster or the Heartbleed bug?

 

4.       ePHI must be protected

Though the healthcare industry has much to gain from big data, it also has many concerns. Protected Health Information must remain private. The report claims “the privacy frameworks that currently cover information now used in health may not be well suited to address these developments or facilitate the research that drives them.”

Is there a way to reap the benefits of big data and maintain HIPAA compliance and ePHI privacy?

 

5.       What about the NSA and other snoopers?

Actually, President Obama commissioned the report in response to outrage over the NSA snooping scandal, but the report itself didn’t explore much of the agency’s protocols. It also didn’t investigate Google, Facebook, Verizon, or other possible corporates with privacy challenges.

Is there a way to limit the snooping capabilities of the NSA and others?

A Cloud Security Solution for Big Data Applications

What would report writer White House counselor, John Podesta say to a solution that addresses all five of these concerns? With homomorphic split key encryption:

  1. The company that owns the data owns the encryption key. That way, no one else can access personal data. If you consent to your medical insurance company, for example, to have your medical records, only they have access to your medical records. This technology ensures it.
  2. A big data application can gather vast amounts of information, yet its owner can easily control the encryption (and decryption) of that information as only they have the Master encryption key.
  3. Malicious hackers and unwitting insider accomplices alike are stopped when the encryption key is, itself, under lock and key.
  4. HIPAA compliance can be maintained in the cloud for big data applications.
  5. No one: not the NSA, not Google, not even a cloud provider, can access data that is encrypted with homomorphic split key encryption without the legitimate owner providing their master key.

Big data has many challenges ahead, but privacy and cloud security are solvable with new technology. Small and big organizations alike can step up to deal with the challenges big data presents and to reap the opportunities it provides.

The post Big Data Cloud Security Challenges, per the White House appeared first on Porticor Cloud Security.

Read the original blog entry...

More Stories By Gilad Parann-Nissany

Gilad Parann-Nissany, Founder and CEO at Porticor is a pioneer of Cloud Computing. He has built SaaS Clouds for medium and small enterprises at SAP (CTO Small Business); contributing to several SAP products and reaching more than 8 million users. Recently he has created a consumer Cloud at G.ho.st - a cloud operating system that delighted hundreds of thousands of users while providing browser-based and mobile access to data, people and a variety of cloud-based applications. He is now CEO of Porticor, a leader in Virtual Privacy and Cloud Security.

IoT & Smart Cities Stories
A valuable conference experience generates new contacts, sales leads, potential strategic partners and potential investors; helps gather competitive intelligence and even provides inspiration for new products and services. Conference Guru works with conference organizers to pass great deals to great conferences, helping you discover new conferences and increase your return on investment.
Headquartered in Plainsboro, NJ, Synametrics Technologies has provided IT professionals and computer systems developers since 1997. Based on the success of their initial product offerings (WinSQL and DeltaCopy), the company continues to create and hone innovative products that help its customers get more from their computer applications, databases and infrastructure. To date, over one million users around the world have chosen Synametrics solutions to help power their accelerated business or per...
DXWorldEXPO LLC announced today that ICOHOLDER named "Media Sponsor" of Miami Blockchain Event by FinTechEXPO. ICOHOLDER gives detailed information and help the community to invest in the trusty projects. Miami Blockchain Event by FinTechEXPO has opened its Call for Papers. The two-day event will present 20 top Blockchain experts. All speaking inquiries which covers the following information can be submitted by email to [email protected] Miami Blockchain Event by FinTechEXPOalso offers sp...
SYS-CON Events announced today that IoT Global Network has been named “Media Sponsor” of SYS-CON's @ThingsExpo, which will take place on June 6–8, 2017, at the Javits Center in New York City, NY. The IoT Global Network is a platform where you can connect with industry experts and network across the IoT community to build the successful IoT business of the future.
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settlement products to hedge funds and investment banks. After, he co-founded a revenue cycle management company where he learned about Bitcoin and eventually Ethereal. Andrew's role at ConsenSys Enterprise is a mul...
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.
DXWorldEXPO | CloudEXPO are the world's most influential, independent events where Cloud Computing was coined and where technology buyers and vendors meet to experience and discuss the big picture of Digital Transformation and all of the strategies, tactics, and tools they need to realize their goals. Sponsors of DXWorldEXPO | CloudEXPO benefit from unmatched branding, profile building and lead generation opportunities.
Disruption, Innovation, Artificial Intelligence and Machine Learning, Leadership and Management hear these words all day every day... lofty goals but how do we make it real? Add to that, that simply put, people don't like change. But what if we could implement and utilize these enterprise tools in a fast and "Non-Disruptive" way, enabling us to glean insights about our business, identify and reduce exposure, risk and liability, and secure business continuity?