trademark

1.0 Secure Computations in Distributed Programming Frameworks (cont.)
1.6 Prevent information leakage through output
1.6.1 Why?
To ensure security and privacy. Data leakage may occur in many ways, which needs to be prevented
(i.e. improper use of encryption). Debugging messages, uncontrolled output streams, logging
functions and detailed error pages help attackers learn about the system and formulate attack plans.
1.6.2 How?
• Use function sensitivity to prevent information leakage.
• Shadow execution (i.e. communication towards external networks to obtain software
version updates) is another aspect that needs to be taken into consideration.
• Additionally, all data should be filtered on the network level (in-transit), in line with data
loss prevention policies.
• Sufficient de-identification of data also contributes to mitigation of the impact.
1.7 Maintain worker nodes
1.7.1 Why?
To ensure proper functionality of worker nodes.
1.7.2 How?
Frequently check for malfunctioning worker nodes and repair them. Ensure they are configured correctly.
1.8 Detect fake nodes
1.8.1 Why?
To avoid attacks in cloud and virtual environments.
1.8.2 How?
Build a framework to detect fake nodes introduced by creating snapshots of legitimate nodes.
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
11