Application of security reference architecture to Big Data ecosystems in an industrial scenario. (31st March 2020)

• Record Type: Journal Article
• Authors: Moreno, Julio; Gómez, Javier; Serrano, Manuel A.; B. Fernandez, Eduardo; Fernández‐Medina, Eduardo
• Is Part Of: Software, practice & experience. Volume 50:Number 8(2020)
• Page Start: 1520
• Page End: 1538
• Publication Date: 2020-03-31
• Subjects: Big Data -- case study -- security patterns -- security reference architecture; Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.2829
• Languages: English
• ISSNs: 0038-0644

Abstract

Summary: Big Data environments are typically very complex ecosystems; this means that implementing them is complicated. One possible technique with which to address this complexity is the use of abstraction. Reference architecture (RA) can be useful for an improved understanding of the main components of Big Data. Herein, we propose a security RA that includes the management of security concerns and provides the main elements of a Big Data ecosystem. Application of this architecture to real‐world scenarios facilitates its refinement and improves its usefulness. In this article, we present a case study of a real‐world Big Data ecosystem implemented in a banking environment. This ecosystem was developed by everis, an NTT company with which we collaborated for this study. To conduct this validation case study, a map was established between the elements of the Big Data ecosystem implemented and our proposal. Consequently, a series of valuable lessons that can improve both our architecture and the security of the Big Data environment were obtained. These include recommendations for a set of best practices such as the use of security patterns.