analysis- qihoo 360 large data security practice（分析-奇虎360大数据安全实践）.docVIP

Analysis: Qihoo 360 large data security practice In the face of increasingly serious security challenges, Qihoo 360 in the face of increasingly serious security challenges, constantly updated technical ideas, to achieve the latest response to the latest network security threats. In response to the ever-changing network security threat, Qihoo 360 through the deployment of tens of thousands of large data server, the current network security events in real-time monitoring and analysis, the use of large data technology to track and prevent network security threats. In order to protect the security, large data platform in accordance with the ‘three security’ principle of construction, that is, synchronous planning, synchronization organization and implementation, simultaneous operation put into production. Qihoo 360 large data platform security system framework shown in Figure B-7. The framework of the security platform for the large data platform includes ‘Security Division’, ‘Security Zone Division’, ‘Security Level Division’, ‘Security Monitoring Module’, ‘Security Defense Module’, ‘Business Security and Safety Operation and Maintenance Module’, ‘Safety Response center module ‘and so on. Safety division The division of safety responsibilities is the basis of the overall program, all technical means should be close to the safety responsibilities division, for its services. Combing the boundaries of the security responsibilities of the parties to the data platform, and the detailed responsibility for the security events throughout the event. Safe area division Large data platform environment is relatively complex, involving a variety of business, multi-class system, the existing network structure has been considered the classification problem, on this basis, the need to further refine the security domain division and different security domains, different security levels of access control design. Security level division According to the resu