Big data and cloud security

Data in motion and at rest

• Data in motion — travelling across a network, e.g. sensor telemetry being published.
• Data at rest — stored on disk or in a database.

Both need protection, but for different reasons: motion needs encryption in transit, rest needs encryption and access control.

Data growth

Data grows in volume, velocity, and variety. IoT adds a constant stream of small readings, which stresses storage and processing unless data is filtered or aggregated.

Securing IoT cloud services

• Use strong, unique device credentials.
• Encrypt with TLS for all traffic.
• Apply least-privilege access rules.
• Rotate keys and revoke compromised devices.
• Restrict registration so unauthorised devices are rejected.

Check your understanding

• Classify a live sensor feed as data in motion or at rest.
• List three controls that secure an IoT cloud service.