Securing Apache Spark Big Data Operations: Threats, Best Practices, and Pragmatic Steps

Explore the world of Apache Spark security in this 43-minute webinar from Canonical Ubuntu. Gain insights into the open-source toolkit for parallel, distributed data engineering and machine learning applications. Learn about security best practices, high-level architectures, and practical steps to secure Spark applications. Discover the basics of Apache Spark, understand potential security threats, and explore techniques used by bad actors. Identify and prioritize security requirements, and implement pragmatic measures to secure Spark based on Kubernetes and object storage. Delve into topics such as threat modeling, risk evaluation, and the STRIDE framework. Understand the importance of business continuity planning, automation, and compliance in maintaining a secure Spark environment. Gain valuable knowledge on perimeter access, cloud providers, and managed solutions to enhance your big data operations' security.

Introduction
Agenda
What is Spark
Security threats to Spark
What does Spark do
Motivations for cyber attacks
Financial vs Espionage
State Sponsored Threats
Insider Attacks
Preventative Control
Threat Modeling
Stride Framework
CNCF
Finding processes that work for the business
Risk Evaluation Framework
Spark Security Features
Data Value
Cloud Providers
Perimeter Access
What should teams do
Business continuity plan
Automation
Cyberkill chain
Managed solutions
Compliance
Closing