trademark

3.0
Secure Data Storage and
Transactions Logs
Security is needed in big data storage management because solutions, such as auto tiering,
do not record the storage place of data. The following practices should be implemented to
avoid security threats.
3.1 Implement exchange of signed message digests
3.1.1 Why?
To address potential disputes.
3.1.2 How?
• Use common message digests (SHA-2 or stronger) to provide digital identifier for each
digital file or document, which is then digitally signed by the sender for non-repudiation.
• Use the same message digest for identical documents.
• Use distinct message digests even if the document is partially altered.
3.2 Ensure periodic audit of chain hash or persistent
authenticated dictionary (PAD)
3.2.1 Why?
To solve user freshness and update serializability issues.
3.2.2 How?
Use techniques such as red-black tree and skip lists data structures to implement PAD
[AGT01].
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
17