Presented By O’Reilly and Cloudera
Make Data Work
March 5–6, 2018: Training
March 6–8, 2018: Tutorials & Conference
San Jose, CA

Getting ready for GDPR: Securing and governing hybrid, cloud, and on-premises big data deployments

Mark Donsky (Okera), Andre Araujo (Cloudera), Syed Rafice (Cloudera), Mubashir Kazia (Cloudera)
9:00am–12:30pm Tuesday, March 6, 2018
Data engineering and architecture, Law, ethics, and governance
 Location: LL20 C
Average rating: **...
(2.00, 1 rating)
Download slides (ZIP)

Who is this presentation for?

  • Those working in infosec, security admins, data stewards, and data curators

Prerequisite knowledge

  • A general understanding of Hadoop concepts, security principles, and cloud concepts (S3, EMR, transient clusters, etc.)

Materials or downloads needed in advance

  • A laptop

What you'll learn

  • Learn how to secure a Hadoop cluster
  • Understand best practices for security and governing cloud, on-premises, and hybrid deployments
  • Explore important aspects of GDPR

Description

Many Hadoop clusters lack even the most basic security and governance controls. This is due to several factors: some security features did not exist as recently as two years ago, and the complexity of Hadoop security has proved daunting to administrators. Nonetheless, with the emergency of regulation such as GDPR, organizations can no longer afford to overlook the criticality of security and governance.

Mark Donsky, Andre Araujo, Syed Rafice, and Mubashir Kazia walk you through securing a Hadoop cluster, with special attention to GDPR. You’ll start with a cluster with no security and then add security features related to authentication, authorization, encryption of data at rest, encryption of data in transit, and complete data governance.

For each security feature, you’ll cover the following topics:

  • What the security feature is, what protection it provides, and best practices and recommendations
  • How to enable the feature in a phased manner with the fewest growing pains and least risk
  • Why it’s important (demonstrated by live attacks against a cluster without the target security feature) and how it relates to GDPR
  • How the implementation is performed, where the moving parts are, and potential pitfalls
Photo of Mark Donsky

Mark Donsky

Okera

Mark Donsky is a director of product management at Okera, a software provider that provides discovery, access control, and governance at scale for today’s modern heterogenous data environments, where he leads product management. Previously, Mark led data management and governance solutions at Cloudera, and he’s held product management roles at companies such as Wily Technology, where he managed the flagship application performance management solution, and Silver Spring Networks, where he managed big data analytics solutions that reduced greenhouse gas emissions by millions of dollars annually. He holds a BS with honors in computer science from the Western University, Ontario, Canada.

Photo of Andre Araujo

Andre Araujo

Cloudera

André Araujo is a principal solutions architect at Cloudera. An experienced consultant with a deep understanding of the Hadoop stack and its components and a methodical and keen troubleshooter who loves making things run faster, André is skilled across the entire Hadoop ecosystem and specializes in building high-performance, secure, robust, and scalable architectures to fit customers’ needs.

Photo of Syed Rafice

Syed Rafice

Cloudera

Syed Rafice is a principal system engineer at Cloudera specializing in big data on Hadoop technologies and both platform and cybersecurity. He is responsible for designing, building, developing, and assuring a number of enterprise-level big data platforms using the Cloudera distribution. Syed has worked across multiple sectors including government, telecoms, media, utilities, financial services, and transport.

Photo of Mubashir Kazia

Mubashir Kazia

Cloudera

Mubashir Kazia is a principal solutions architect at Cloudera and an SME in Apache Hadoop security in Cloudera’s Professional Services practice, where he helps customers secure their Hadoop clusters and comply to internal security policies. He also helps new customers transition to Hadoop platform and implement their first few use cases and trains and mentors peers in Hadoop and Hadoop security. Mubashir has worked with customers from all verticals, including banking, manufacturing, healthcare, telecom, retail, and gaming. Previously, he worked on developing solutions for leading investment banking firms.