Hadoop Safari - Hunting for Vulnerabilities

Explore the vulnerabilities in Hadoop clusters and Big Data frameworks in this 51-minute conference talk from HITB Security Conference. Dive into the security issues surrounding Hadoop infrastructure, learning about attack vectors and practical methods to access data lakes. Understand the Hadoop (in)security model, core security mechanisms, and discover tools and techniques for penetrating cluster defenses. Gain insights into patch management challenges and long-standing vulnerabilities in the Hadoop ecosystem. Follow along as security experts Thomas Debize and Mahdi Braik demonstrate real-world examples of exploiting Hadoop weaknesses to access sensitive data and obtain remote system access on cluster members.

Introduction
Agenda
Definition
Open Source
Distributions
Big Data Environment
Authentication
Kerberos
Authorization Auditing
Encryption
Map Attack Surface
Topologies
Services
What do you want
Demo
Kerberos Security
G Mode
HDFS Groups
Search Party Modules
User System Cookies
Key Tabs
Conclusion