Ben Spivey - Hadoop Security: Protecting Your Big Data Platform

by Ben Spivey and Joey Echeverria

Copyright 2015 Joseph Echeverria and Benjamin Spivey. All rights reserved.

Printed in the United States of America.

Published by OReilly Media, Inc. , 1005 Gravenstein Highway North, Sebastopol, CA 95472.

OReilly books may be purchased for educational, business, or sales promotional use. Online editions are also available for most titles (http://safaribooksonline.com). For more information, contact our corporate/institutional sales department: 800-998-9938 or corporate@oreilly.com .

• Editors: Ann Spencer and Marie Beaugureau
• Production Editor: Melanie Yarbrough
• Copyeditor: Gillian McGarvey
• Proofreader: Jasmine Kwityn
• Indexer: Wendy Catalano
• Interior Designer: David Futato
• Cover Designer: Ellie Volkhausen
• Illustrator: Rebecca Demarest

• July 2015: First Edition

See http://oreilly.com/catalog/errata.csp?isbn=9781491900987 for release details.

The OReilly logo is a registered trademark of OReilly Media, Inc. Hadoop Security, the cover image, and related trade dress are trademarks of OReilly Media, Inc.

While the publisher and the authors have used good faith efforts to ensure that the information and instructions contained in this work are accurate, the publisher and the authors disclaim all responsibility for errors or omissions, including without limitation responsibility for damages resulting from the use of or reliance on this work. Use of the information and instructions contained in this work is at your own risk. If any code samples or other technology this work contains or describes is subject to open source licenses or the intellectual property rights of others, it is your responsibility to ensure that your use thereof complies with such licenses and/or rights.

978-1-491-90098-7

[LSI]

It has not been very long since the phrase Hadoop security was an oxymoron. Early versions of the big data platform, built and used at web companies like Yahoo! and Facebook, didnt try very hard to protect the data they stored. They didnt really have tovery little sensitive data went into Hadoop. Status updates and news stories arent attractive targets for bad guys. You dont have to work that hard to lock them down.

As the platform has moved into more traditional enterprise use, though, it has begun to work with more traditional enterprise data. Financial transactions, personal bank account and tax information, medical records, and similar kinds of data are exactly what bad guys are after. Because Hadoop is now used in retail, banking, and healthcare applications, it has attracted the attention of thieves as well.

And if data is a juicy target, big data may be the biggest and juiciest of all. Hadoop collects more data from more places, and combines and analyzes it in more ways than any predecessor system, ever. It creates tremendous value in doing so.

Clearly, then, Hadoop security is a big deal.

This book, written by two of the people whove been instrumental in driving security into the platform, tells the story of Hadoops evolution from its early, wide open consumer Internet days to its current status as a trusted place for sensitive data. Ben and Joey review the history of Hadoop security, covering its advances and its evolution alongside new business problems. They cover topics like identity, encryption, key management and business practices, and discuss them in a real-world context.

Its an interesting story. Hadoop today has come a long way from the software that Facebook chose for image storage a decade ago. It offers much more power, many more ways to process and analyze data, much more scale, and much better performance. Therefore it has more pieces that need to be secured, separately and in combination.

The best thing about this book, though, is that it doesnt merely describe. It prescribes. It tells you, very clearly and with the detail that you expect from seasoned practitioners who have built Hadoop and used it, how to manage your big data securely. It gives you the very best advice available on how to analyze, process, and understand data using the state-of-the-art platformand how to do so safely.

Mike Olson,
Chief Strategy Officer and Cofounder, Cloudera, Inc.