Abstract
Apache Hadoop and the Hadoop Distributed File System (HDFS) have become important tools for organizations dealing with “Big Data” storage and analytics. Hadoop has the potential to offer powerful and cost effective solutions to Big Data analytics; however, sensitive data stored within an HDFS infrastructure has equal potential to be an attractive target for exfiltration, corruption, unauthorized access, and modification. As a follow-up to the authors’ previous work in the area of improving security of HDFS via the use of Trusted Computing technology, this paper will describe the threat against Hadoop in a sensitive environment, describe how and why an Advanced Persistent Threat (APT) could target Hadoop, and how standards-based trusted computing could be an effective approach to a layered threat mitigation.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Trusted Computing Group. TCG Specification Architecture Overview V. 1.4. Trusted Computing Group (August 2, 2007), http://www.trustedcomputinggroup.org/files/resource_files/AC652DE1-1D09-3519-ADA026A0C05CFAC2/TCG_1_4_Architecture_Overview.pdf (cited: June 15, 2012)
Cloudera. Cloudera CDH4 Security Guide, https://ccp.cloudera.com/download/attachments/21438266/CDH4_Security_Guide_4.1.pdf?version=3&modificationDate=1349900837000 (cited: November 23, 2012)
O’Malley, O.: Motivations for Hadoop Security (August 2011), http://hortonworks.com/blog/motivations-for-apache-hadoop-security/ (cited: December 04, 2012)
Mandiant corporporation. Mandiant M-Trends (2010), http://www.princeton.edu/~yctwo/files/readings/M-Trends.pdf (cited: November 1, 2012)
Becherer, A.: Hadoop Security Design: Just add Kerberos? Really? iSEC Partners, Inc., s.l. (2010)
Cohen, J.C., Subatra, A.: Incorporating hardware trust mechanisms in Apache Hadoop. IEEE, s.l. (2012), 978-1-4673-4942-0
Linx IMA Wiki. Sourceforge IMA Project (May 18, 2012), http://sourceforge.net/apps/mediawiki/linux-ima/index.php?title=Main_Page (cited: June 15, 2012)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Cohen, J., Acharya, S. (2013). Towards a More Secure Apache Hadoop HDFS Infrastructure. In: Lopez, J., Huang, X., Sandhu, R. (eds) Network and System Security. NSS 2013. Lecture Notes in Computer Science, vol 7873. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-38631-2_64
Download citation
DOI: https://doi.org/10.1007/978-3-642-38631-2_64
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-38630-5
Online ISBN: 978-3-642-38631-2
eBook Packages: Computer ScienceComputer Science (R0)