Mechanisms for ensuring the security of banking systems when using Apache Ignite
This article discusses in detail the requirements for using Apache Ignite in automated banking systems and defines the necessary cybersecurity mechanisms and their configuration parameters when using Apache Ignite in banking systems. Apache Ignite is an open source distributed database, caching and processing platform designed to store and compute large amounts of data. In many large banks, the software product has become the "basis of the IT landscape" for organizing data warehouses and processing large amounts of data online in parallel processes. With all the advantages, the main disadvantage of this product is the lack of initially configured information security parameters. This leads to the impossibility of effective monitoring of systems built on the basis of the product and ensuring security. As part of the work, the product was analyzed for compliance with the requirements of the legislation of the Russian Federation in the field of information security of banking automated systems and a list of vulnerabilities that arise when using the product in banking systems was determined. The article presents a list of necessary parameters for configuring the Apache Ignite cluster and the security plugin, and a list of requirements for configuring security on the infrastructure side, taking into account legal requirements.