大数据安全测评框架和技术研究

Security Testing Frame and Technology of Big Data

大数据技术和应用近年来得到了迅速发展,在带来发展机遇的同时,也引入了新的信息安全挑战。因此,如何测试和评估这些大数据产品的安全性成为新的研究主题。基于对大数据技术特点和安全威胁的分析,梳理了大数据技术架构和组成,结合等级保护测评体系,提出了大数据安全测评框架。同时,针对大数据安全测评实施过程中的分布式平台安全、数据安全、隐私保护的安全测试关键技术进行研究,提出了测试思路和方法。

Big-data technology and applications develop rapidly in recent years, raises new information security challenges while bringing development opportunities. Therefore, how to test and evaluate the security of these big-data products becomes a new research topic. Based on the technical characteristics of big data and security-threat analysis, big data technoical architecture and composition is combed out, and in combination with grade protection evaluation system, the framework for big-data security evaluation is proposed. In addition, based on exploration of distributed platform security, data security and privacy protection and other key security testing technologies in the implementation of big data security evaluation, the test ideas and methods are proposed.