trademark

8.0 Granular Access Control (cont.)
7.8.2 How?
8.2.2 How?
The core of fine-grained access control is to maintain labels with data. When denormalizing
data, maintain provenance information for any provenance elements that are referenced in
the data access policy. For example, if the source of data affects who can see that data, then
maintain source information in tags along with fields that came from that source.
8.3 Track secrecy requirements
8.3.1 Why?
To implement a scalable access control system. Part of building a scalable granular
access control mechanism is to pre-join secrecy policy with data in the form of labels.
Secrecy requirements can change over time, and it is important to be able to adapt
granular access control mechanisms to keep up with changing policies.
8.3.2 How?
Use a labeling scheme that labels data with elements of policy that are unlikely to
change over time, while more mutable policy elements are checked at query time.
Keep track of the data-labeling policies that are applied at data ingest time to reduce
assumptions made in policy evaluation at query time.
8.4 Maintain access labels
8.4.1 Why?
To make policy decisions on data with complex provenance. Accurately maintaining
access labels includes an amount of provenance tracking.
8.4.2 How?
Label data as far upstream as possible. Keep track of labels that are referenced in data
access policy through all data transformations. Use access control mechanisms that
support Boolean logic and/or label sets to simplify label tracking through data aggregation.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
44