Big Data architecture in information security

This master thesis of the Data and Analytics for Business program deals with the design of a big data architecture for information security management. Development in technology present new challenges for security teams. Nowadays, enterprises collect and store huge amounts of data about the current state of their IT infrastructure. In order to identify potential information security threats in a timely manner and to predict further risks associated with the occurrence of these threats, it is necessary to have this data processed correctly and quickly. With the increasing volume and complexity of data, it is impossible to analyse the collected data using traditional security tools and systems. This thesis discusses how big data can be used in information security solutions. The aim of the thesis is to propose an architecture for a central monitoring system that integrates new technologies working with high volumes of data commonly referred to as big data into an existing information security architecture solution to address highly complex attacks and automate security response activities. This architecture recognizes unusual behaviour patterns and trends to anticipate security incidents. The architecture design was developed using the TOGAF enterprise architecture framework following the ADM architecture development methodology.