trademark

6.0 Scalable and Composable Privacy-Preserving Analytics (cont.)
the plaintext. Users should utilize techniques such as unpadded RSA for implementing
partially homomorphic cryptosystems.
6.3 Maintain software infrastructure
6.3.1 Why?
To avoid exploitation of improperly maintained software, a major vulnerability.
6.3.2 How?
Maintain software infrastructure patched with up-to-date security solutions.
6.4 Use separation of duty principle
6.4.1 Why?
To provide robust internal control as well as information security. The separation of duty
principle—coupled with the enforcement of the principle of least privilege—provides
both attributes.
6.4.2 How?
Implement security controls which enforce strict separation of duties so that each
operator has access to a specific set of minimal data and is only able to perform a
specified set of actions on that data. Institute auditing of user actions on the system. To
enforce reliable separation, access to shared resources should be carefully monitored
or controlled to detect and/or block covert channels.
6.5 Be aware of re-identification techniques
6.5.1 Why?
To protect the privacy interests of consumers. Re-identification is the process
by which anonymized personal data is matched with its true owner. Personal
identifiers—such as names and social security numbers—are often removed
from databases containing sensitive information. However, re-identification
compromises consumer privacy.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
33