The big data platform will aggregate a large amount of data to support front-end business applications after data governance, but data aggregation will bring a large amount of sensitive data and data security risks:
1、The volume of data is large, and the distribution of data assets is difficult to grasp in real time;
2、Big data platform using a new type of data architecture, there are data warehouse, data lake, lake warehouse combination of different forms, the platform will be based on business scenarios, the use of a variety of database components, some of the new database components, it is difficult to comprehensively protect;
3、Big data platform access paths, especially the use of a large number of API interface calls, north-south traffic, east-west traffic, it is difficult to comprehensively protect;
4、Big data platform data flow path is complex, involving data collection, transmission, storage, processing, sharing and other different aspects of security protection.
Systematically build data security protection for big data platforms centering on data security:
1、 Data asset sorting and classification and grading, identifying data assets in the big data platform and classifying and grading them to lay the foundation for fine control of data security;
2、 Database auditing, database firewall, API security auditing, monitoring and auditing, blocking and intercepting illegal or high-risk operations on various components of the big data platform and various types of data source databases;
3、Data desensitization, data watermarking, application desensitization, around sensitive data in the process of data sharing and exchange, to provide a full range of protection;
4、Database status monitoring, database vulnerability scanning, timely detection of various security risks in the database, to ensure the reliable operation of the big data platform;
5、Data security comprehensive governance platform, establish data security operation platform, use big data, artificial intelligence, unified analysis and display of various security risks, improve data security operation efficiency.
1. Massive data access monitoring and auditing, high-risk data illegal theft and timely blocking and warning.
2. Data desensitization, protection and traceability of big data sharing and exchange.
3.Centralized control and audit of internal and external operation and maintenance personnel.
4. Prevention and control of illegal operation of legitimate users, abuse of privileged users' rights, and unauthorized users' ultra vires operation.
Sensitive data intelligent discovery, big data platform contains a large amount of sensitive data, may intelligent scanning, automatic identification of sensitive data in the platform.
Each ability unit supports various components of the big data platform, such as Hive, HBase, Redis, ES, MongoDB, etc., and the deployment is flexible, which can adapt to the data security needs of various scenarios of the big data platform.
Supports API, JDBC, REST Full API, Shell and many other interface audits, which can meet the risk monitoring and protection of application systems and tools accessing the big data platform.
Qianhai Building,Shenzhen,China
Tel：400-622-8990
Email：support@ankki.com
