October 29, 2015 By Kathryn Zeidenstein 2 min read

Big Data Systems Get Serious

The use of big data programs such as Hadoop and NoSQL systems is on the rise. Security teams working with the Hadoop teams in their organizations may see an attempt by the latter to convince them that Hadoop security can be handled by built-in mechanisms. These big data staffers may throw a lot of strange names at you and dazzle you with marketing collateral.

Don’t get me wrong: It’s a great thing that Hadoop is beefing up security. But it’s your job to look at the big picture for big data security and compliance. If the organization has standardized a data security and compliance platform, and if that platform supports Hadoop, then the infrastructure is in place to bring Hadoop under your security umbrella.

Register for the tech talk: Guarding against insider threats to Hadoop: What’s new in Guardium

Making the Most of Security Controls

Work with the Hadoop teams to understand how and when native controls fit the bill. Then identify those cases in which compensating controls are required. It may even be that the security solutions complement each other nicely, allowing the organization as a whole to optimize its data security and compliance infrastructure and processes.

These complementary capabilities may include:

  • Automated compliance workflow to help automate the solution and to obtain auditable sign-off of reports;
  • Policy-based infrastructure that can be used across the data landscape, not just within the Hadoop cluster;
  • Low-impact monitoring paired with rich reporting and investigative capabilities;
  • Separation of duties in which auditing data is separate from the Hadoop cluster and its privileged admins;
  • Use of dynamic data masking and blocking as a compensating control for certain cases; and
  • Analytics of user or group behavior to detect outliers that can help filter out the noise from the activity.

For More Technical Information

For the more technical among you, this recorded tech talk provides a deeper dive into the security implications for Hadoop. For the latest and greatest, see this developerWorks article, which includes an overview of the significant enhancements made for security and auditing in Hadoop environments.  This information can help you learn more about how the platform can extend to big data and beyond.

More from Data Protection

Communication platforms play a major role in data breach risks

4 min read - Every online activity or task brings at least some level of cybersecurity risk, but some have more risk than others. Kiteworks Sensitive Content Communications Report found that this is especially true when it comes to using communication tools.When it comes to cybersecurity, communicating means more than just talking to another person; it includes any activity where you are transferring data from one point online to another. Companies use a wide range of different types of tools to communicate, including email,…

SpyAgent malware targets crypto wallets by stealing screenshots

4 min read - A new Android malware strain known as SpyAgent is making the rounds — and stealing screenshots as it goes. Using optical character recognition (OCR) technology, the malware is after cryptocurrency recovery phrases often stored in screenshots on user devices.Here's how to dodge the bullet.Attackers shooting their (screen) shotAttacks start — as always — with phishing efforts. Users receive text messages prompting them to download seemingly legitimate apps. If they take the bait and install the app, the SpyAgent malware gets…

Exploring DORA: How to manage ICT incidents and minimize cyber threat risks

3 min read - As cybersecurity breaches continue to rise globally, institutions handling sensitive information are particularly vulnerable. In 2024, the average cost of a data breach in the financial sector reached $6.08 million, making it the second hardest hit after healthcare, according to IBM's 2024 Cost of a Data Breach report. This underscores the need for robust IT security regulations in critical sectors.More than just a defensive measure, compliance with security regulations helps organizations reduce risk, strengthen operational resilience and enhance customer trust.…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today