This year at RSAC we will no doubt see the return of Big Data to the show floor. This comes along with all the muscle confusion that it generates—not unlike Crossfit. Before you hoist me to the scaffolding or pummel me with your running shoes, let's think about this. Other than the acolytes of this exercise regimen, who truly understands it? Say "Big Data" out loud. Does that hold any meaning for you, other than a shiny marketing buzzword and marketing imagery? It does? Excellent. If you say it three times out loud a project manager will appear, but sadly you will still need to fight for your budget.
Last year we leveraged the tired (nay, exhausted) analogy of sex in high school. Everyone talks about it but…yeah. You get the idea. Every large company out there today has a treasure trove of data available, but they have yet to truly gain any aerobic benefit from it. Certainly they are leveraging this information but who is approaching it in a coherent fashion? Surprisingly, quite a few folks. Projects such as the Centers for Disease Control's data visualizations, Twitter's Topography of Tweets, SETI's search for aliens, and even Yelp's hipster tracking map. They all leverage Big Data in new and interesting ways. Hmm, SETI and Yelp should probably compare notes on their data sets.
These are projects happening, often despite the best intentions of organizational IT security departments. Big Data is here, and security teams need to get their collective heads around the situation rather than hanging about doing kipping pull-ups. As security practitioners we need to find sane ways to tackle their security aspects projects to help guard against inadvertent data leakage as they thrust forward with their walking lunges.
Your internal security teams need to be aware of the issues with big data projects while striking a balance supporting business units. That will truly lead to muscle confusion for some. If you're looking for the Big Data security purveyors, they will most likely be the ones on the show floor quietly licking wounds from their workout while pounding back energy drinks.
—Dave Lewis, Contributing Analyst, Securosis
Check out other posts in the series: Introduction
Theme posts: Change; Internet of Things; Professionalism; Compliance; Big Data; Bonk; DevOps
Coverage Area Deep Dives: Overview; Endpoint Security; Network Security; IAM; Cloud Security; Data Security; Security Management;
Download your copy of RSAC-G