Rings of Security for Big Data in Cloud
summary
Claims concrete defenses: a managed Big Data cluster-as-a-service running a vetted Hadoop distribution with Ingress gateways fronting traffic, load balancers for DDoS mitigation, reverse proxies (nginx) and TLS per-service; authentication via Kerberos or cloud IAM with KDCs and keytabs; authorization with Ranger policies for table/row/column and Kafka topic controls; encryption with BYOK and cert rotation plus audited access logs. Presenter counts ~25 components in a simple pipeline and warns that automated patching and a continuous security pipeline are required for these measures to work.
AI-written summary · about
chapters (11)
- 0:00Big Data security intro
- 1:09Big Data pipeline attacks
- 7:59Cluster network topology
- 11:18Security rings for pipelines
- 12:24Network layer security
- 13:53SSL and reverse proxies
- 17:25Authentication methods
- 20:27Apache Ranger authorization
- 22:38Data encryption and credentials
- 25:11Continuous security pipeline
- 28:03Summary and Oracle BDS
related talks
50mBabar-ians at the Gate: Data Protection at Massive Scale
10mAdding Security to Hadoop
21mDefense-in-Depth Security for Mission-Critical Service
21mSecuring the Big Data Ecosystem
24mData Security for startups
35mCloud Native Security for the Rest of Us
31mBuilding Big Data Platforms: the Hidden Security Flaws You Need to Be Aware Of
01h 00mAutomating Security in Your Data Pipeline