Sep 23–26, 2019
Please log in

Getting ready for CCPA: Securing data lakes for heavy privacy regulation

Mark Donsky (Okera), Lars George (Okera), Michael Ernest (Dataiku), Ifigeneia Derekli (Cloudera)
9:00am12:30pm Tuesday, September 24, 2019
Location: 1E 15/16
Secondary topics:  Privacy and Security
Average rating: ****.
(4.33, 9 ratings)

Who is this presentation for?

  • Security, admins, DevOps professionals, and data stewards




Many data lakes lack even the most basic security and governance controls. The complexity of multicompute, petabyte-scale security has proved daunting. Nonetheless, with the emergence of regulation such as the California Consume Privacy Act (CCPA) and GDPR, organizations can no longer afford to overlook security and governance.

Mark Donsky, Lars George, Michael Ernest, and Ifigeneia Derekli walk you through securing a Hadoop cluster. You’ll start with a cluster with no security and add security features related to authentication, authorization, encryption of data at rest, encryption of data in transit, and complete data governance. For each security feature, you’ll cover the following topics: What the security feature is, what protection it provides, and best practices and recommendations; how to enable the feature in a phased manner with the fewest growing pains and least risk; why it’s important (demonstrated by live attacks against a cluster without the target security feature) and how it relates to GDPR; and an overview of how the implementation is performed, where the moving parts are, and potential pitfalls.

Prerequisite knowledge

  • A general understanding of data lake concepts and basic security principles, plus cloud concepts, such as S3, EMR, transient clusters, etc.

Materials or downloads needed in advance


What you'll learn

  • Gain a complete understanding of best practices for security and governing cloud, on-premises, and hybrid deployments, including wire encryption, data-at-rest encryption, governance best practices, unified, secure, and data catalogs for self-service discovery
  • Understand important aspects of GDPR and CCPA
Photo of Mark Donsky

Mark Donsky


Mark Donsky leads product management at Okera, a software provider that provides discovery, access control, and governance at scale for today’s modern heterogeneous data environments. Previously, Mark led data management and governance solutions at Cloudera. Mark has held product management roles at companies such as Wily Technology, where he managed the flagship application performance management solution, and Silver Spring Networks, where he managed big data analytics solutions that reduced greenhouse gas emissions by millions of dollars annually. He holds a BS with honors in computer science from the University of Western Ontario.

Photo of Lars George

Lars George


Lars George is the principal solutions architect at Okera. Lars has been involved with Hadoop and HBase since 2007 and became a full HBase committer in 2009. Previously, Lars was the EMEA chief architect at Cloudera, acting as a liaison between the Cloudera professional services team and customers as well as partners in and around Europe, building the next data-driven solutions, and a cofounding partner of OpenCore, a Hadoop and emerging data technologies advisory firm. He has spoken at many Hadoop User Group meetings as well as at conferences such as ApacheCon, FOSDEM, QCon, and Hadoop World and Hadoop Summit. He also started the Munich OpenHUG meetings. He’s the author HBase: The Definitive Guide from O’Reilly.

Photo of Michael Ernest

Michael Ernest


Michael Ernest is a partner solution architect at Dataiku, supporting technical integration with cloud platforms. He previously led field-enablement programming at Cloudera, where he developed training for new and tenured hires in Hadoop operations, application architecture, and full stack security. He’s published four books on Java programming and Sun Solaris administration. Ernest lives in Berkeley, California.

Photo of Ifigeneia Derekli

Ifigeneia Derekli


Ifi Derekli is a senior solutions engineer at Cloudera, focusing on helping large enterprises solve big data problems using Hadoop technologies. Her subject-matter expertise is around security and governance, a crucial component of every successful production big data use case. Previously, Ifi was a presales technical consultant at Hewlett Packard Enterprise, where she provided technical expertise for Vertica and IDOL (currently part of Micro Focus). She holds a BS in electrical engineering and computer science from Yale University.

  • Cloudera
  • O'Reilly
  • Google Cloud
  • IBM
  • Cisco
  • Dataiku
  • Intel
  • Io-Tahoe
  • MemSQL
  • Microsoft Azure
  • Oracle Cloud Infrastructure
  • SAS
  • Arcadia Data
  • BMC Software
  • Hazelcast
  • SAP
  • Amazon Web Services
  • Anaconda
  • Esri
  •, Inc.
  • Kyligence
  • Pitney Bowes
  • Talend
  • Google Cloud
  • Confluent
  • DataStax
  • Dremio
  • Immuta
  • Impetus Technologies Inc.
  • Keyence
  • Kyvos Insights
  • StreamSets
  • Striim
  • Syncsort
  • SK holdings C&C

    Contact us

    For conference registration information and customer service

    For more information on community discounts and trade opportunities with O’Reilly conferences

    For information on exhibiting or sponsoring a conference

    For media/analyst press inquires