Getting ready for CCPA: Securing data lakes for heavy privacy regulation

Mark Donsky (Okera), Lars George (Okera), Michael Ernest (Dataiku), Ifigeneia Derekli (Cloudera)

9:00am–12:30pm Tuesday, September 24, 2019

Location: 1E 15/16

Security and Privacy

Secondary topics: Privacy and Security

Average rating:

(4.33, 9 ratings)

Who is this presentation for?

Security, admins, DevOps professionals, and data stewards

Level

Intermediate

Description

Many data lakes lack even the most basic security and governance controls. The complexity of multicompute, petabyte-scale security has proved daunting. Nonetheless, with the emergence of regulation such as the California Consume Privacy Act (CCPA) and GDPR, organizations can no longer afford to overlook security and governance.

Mark Donsky, Lars George, Michael Ernest, and Ifigeneia Derekli walk you through securing a Hadoop cluster. You’ll start with a cluster with no security and add security features related to authentication, authorization, encryption of data at rest, encryption of data in transit, and complete data governance. For each security feature, you’ll cover the following topics: What the security feature is, what protection it provides, and best practices and recommendations; how to enable the feature in a phased manner with the fewest growing pains and least risk; why it’s important (demonstrated by live attacks against a cluster without the target security feature) and how it relates to GDPR; and an overview of how the implementation is performed, where the moving parts are, and potential pitfalls.

Prerequisite knowledge

A general understanding of data lake concepts and basic security principles, plus cloud concepts, such as S3, EMR, transient clusters, etc.

Materials or downloads needed in advance

n/a

What you'll learn

Gain a complete understanding of best practices for security and governing cloud, on-premises, and hybrid deployments, including wire encryption, data-at-rest encryption, governance best practices, unified, secure, and data catalogs for self-service discovery
Understand important aspects of GDPR and CCPA

Mark Donsky

Okera

Mark Donsky leads product management at Okera, a software provider that provides discovery, access control, and governance at scale for today’s modern heterogeneous data environments. Previously, Mark led data management and governance solutions at Cloudera. Mark has held product management roles at companies such as Wily Technology, where he managed the flagship application performance management solution, and Silver Spring Networks, where he managed big data analytics solutions that reduced greenhouse gas emissions by millions of dollars annually. He holds a BS with honors in computer science from the University of Western Ontario.

Lars George

Okera

Lars George is the principal solutions architect at Okera. Lars has been involved with Hadoop and HBase since 2007 and became a full HBase committer in 2009. Previously, Lars was the EMEA chief architect at Cloudera, acting as a liaison between the Cloudera professional services team and customers as well as partners in and around Europe, building the next data-driven solutions, and a cofounding partner of OpenCore, a Hadoop and emerging data technologies advisory firm. He has spoken at many Hadoop User Group meetings as well as at conferences such as ApacheCon, FOSDEM, QCon, and Hadoop World and Hadoop Summit. He also started the Munich OpenHUG meetings. He’s the author HBase: The Definitive Guide from O’Reilly.

Website

Michael Ernest

Dataiku

Michael Ernest is a partner solution architect at Dataiku, supporting technical integration with cloud platforms. He previously led field-enablement programming at Cloudera, where he developed training for new and tenured hires in Hadoop operations, application architecture, and full stack security. He’s published four books on Java programming and Sun Solaris administration. Ernest lives in Berkeley, California.

Ifigeneia Derekli

Cloudera

Ifi Derekli is a senior solutions engineer at Cloudera, focusing on helping large enterprises solve big data problems using Hadoop technologies. Her subject-matter expertise is around security and governance, a crucial component of every successful production big data use case. Previously, Ifi was a presales technical consultant at Hewlett Packard Enterprise, where she provided technical expertise for Vertica and IDOL (currently part of Micro Focus). She holds a BS in electrical engineering and computer science from Yale University.