If analyzed properly, data can offer all sorts of insights into an organization’s workings. But handling that data also raises issues related to security and compliance. Hence IBM’s new data-security software releases, which include tools for locking down Hadoop environments.
“Today, data resides everywhere—mobile devices, in the cloud, on social media platforms,” Brendan Hannigan, General Manager of IBM Security Systems, wrote in an Oct. 18 statement. “This is creating massive amounts of data, forcing organizations to move beyond a traditional siloed perimeter to a multi-perimeter approach in which security intelligence is applied closer to the target.”
Given the increasing popularity of Apache Hadoop, an open-source data framework used by companies wrestling with massive data sets, it’s perhaps inevitable that IBM would upgrade a security tool to serve that market. That tool, IBM InfoSphere Guardium v9.0, now features real-time security monitoring and automated compliance monitoring for Hadoop-based systems such as Cloudera. That compliance monitoring can generate reports on a schedule and send them to relevant people within an organization for escalation, if necessary. It also includes federated controls across multiple data sources, giving users a way to impose controls across an enterprise and better head off data leaks.
Other new IBM tools include InfoSphere Optim Data Masking, which “de-identifies or obfuscates sensitive data,” creating customized masking routines of specific data types. IBM claims it’s the only masking service available for Hadoop-based systems.
There’s also IBM Tivoli Key Lifecycle Manager v2.0.1, a platform for key storage, service, and lifecycle management; it supports both IBM self-encrypting storage devices as well as non-IBM offerings. That’s useful for companies with heterogeneous environments serviced by multiple vendors. IBM sees the software as an additional layer of data protection for self-encrypting storage devices, above what it already offers with Guardium and Optim.
Other IT vendors offer their own solutions for locking down Big Data, of course. Earlier this month, McAfee launched software for securing the data center, including new rounds of antivirus and virtualization protection. And other services do everything from lock down company keys to encrypting massive amounts of data. For any business truly interested in making sure their security’s the best it can be, of course, there’s always the option of something like a “red team” to thoroughly test the defenses.