Book Image

Securing Hadoop

By : Sudheesh Narayan
Book Image

Securing Hadoop

By: Sudheesh Narayan

Overview of this book

Security of Big Data is one of the biggest concerns for enterprises today. How do we protect the sensitive information in a Hadoop ecosystem? How can we integrate Hadoop security with existing enterprise security systems? What are the challenges in securing Hadoop and its ecosystem? These are the questions which need to be answered in order to ensure effective management of Big Data. Hadoop, along with Kerberos, provides security features which enable Big Data management and which keep data secure. This book is a practitioner's guide for securing a Hadoop-based Big Data platform. This book provides you with a step-by-step approach to implementing end-to-end security along with a solid foundation of knowledge of the Hadoop and Kerberos security models. This practical, hands-on guide looks at the security challenges involved in securing sensitive data in a Hadoop-based Big Data platform and also covers the Security Reference Architecture for securing Big Data. It will take you through the internals of the Hadoop and Kerberos security models and will provide detailed implementation steps for securing Hadoop. You will also learn how the internals of the Hadoop security model are implemented, how to integrate Enterprise Security Systems with Hadoop security, and how you can manage and control user access to a Hadoop ecosystem seamlessly. You will also get acquainted with implementing audit logging and security incident monitoring within a Big Data platform.
Table of Contents (15 chapters)
Securing Hadoop
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Hadoop distribution with enhanced security support


Intel Distribution of Apache Hadoop software provides some enhanced security features in a Hadoop distribution. Some of the key features for Intel's distribution are:

  • It provides an integrated data encryption feature for sensitive data. The encryption is based on OpenSSL 1.0.1.C, which is optimized for Intel AES-NI.

  • Apart from encryption, Intel's distribution supports out of the box compression and encryption capabilities.

  • Sensitive data is never exposed either in motion or at rest. Thus, it is used to ingest encrypted data into the Hadoop ecosystem and process the encrypted data. Encryption keys are integrated using the Java keystore functionality.

  • Intel's Manager for Apache Hadoop Software provides deployment, management, monitoring, alerting, and security features.

  • It provides a feature for managing user access to data and services using Kerberos by creating access control lists (ACLs) and limiting user access to data sets and services.

  • Deployment and setup of the secure Hadoop cluster is automated and integrated with key management systems.

    Note

    More details on Intel's Hadoop Distribution are available at https://hadoop.intel.com.