MARISMA-BiDa pattern: Integrated risk analysis for big data. Issue 102 (March 2021)

• Record Type: Journal Article
• Authors: Rosado, David G.; Moreno, Julio; Sánchez, Luis E.; Santos-Olmo, Antonio; Serrano, Manuel A.; Fernández-Medina, Eduardo
• Is Part Of: Computers & security. Issue 102(2021)
• Publication Date: 2021-03
• Subjects: Big data -- Risk assessment -- Risk analysis -- Information security -- Security standards; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2020.102155
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Data is one of the most important assets for all types of companies, which have undoubtedly grown their quantity and the ways of exploiting them. Big Data appears in this context as a set of technologies that manage data to obtain information that supports decision-making. These systems were not conceived to be secure, resulting in significant risks that must be controlled. Security risks in Big Data must be analyzed and managed in an appropriate manner to protect the system and secure the information and the data being handled. This paper proposes a risk analysis approach for Big Data environments, which is based on a security analysis methodology called MARISMA (Methodology for the Analysis of Risks on Information System), supported by a technological environment in the cloud (eMARISMA tool) already used by numerous clients. Both MARISMA and eMARISMA are specifically designed to be easily adapted to particular contexts, such as Big Data. Our proposal, called MARISMA-BiDa, is based on the main related standards, such as ISO/IEC 27, 000 and 31, 000, or the NIST Big Data reference architecture or ENISA and CSA recommendations for Big Data.