Cloudera’s Sentry to Safeguard Enterprise Hadoop Clusters Cloudera has put efforts to make Hadoop more viable for the enterprise. The company has spent these last few months developing an open-source authorization module that it says gives organizations “unprecedented“ control over how users access data stored in Hadoop. The tool, appropriately named Sentry, was released last week as an Apache project. Cloudera touts it as the “industry’s first fine-grained authorization solution.” Sentry is designed to meet the Role Based Access Control (RBAC) and It enables admins to assign privileges based on functional roles, and restrict user access rights to specific subsets of data within their organizations’ Hadoop deployments. The solution also facilitates “multi-tenant administration,” which means that senior persons can deputize admins to manage security settings for each separate database. Cloudera’s solution can be viewed as another industry contribution alongside Accumulo, an ultra-secure key value store developed by the NSA researchers who went on to found Sqrrl. The framework’s cell-based architecture offers the same benefits as Sentry, but it has a distinct edge. While Cloudera offers fine-grained access controls at the Server, Database, Table and View levels for Hive and Impala, Sqrrl’s cell-level security allows for access control at the individual key or value pair level. Essentially, every single piece of data can have unique access controls, providing greater access to the data that needs to be shared while protecting sensitive data – even within the same Database or Table. As with Cloudera’s Sentry, such specificity in access control responds to data security needs in fields such as healthcare, finance, cybersecurity and government. In addition to cell-level security, Sqrrl offers file-system level encryption and auditing tools to provide a comprehensive security package with real-time analytical capabilities.
Posted on: Mon, 29 Jul 2013 06:53:56 +0000
Trending Topics
Recently Viewed Topics
© 2015