trademark

2.0 Security Best Practices for Non-Relational Data Stores (cont.)
2.3 Use transport layer security (TLS) to establish
connections and communication
2.3.1 Why?
To maintain confidentiality while in transit; to establish trusted connections between the
user and server; and to securely establish communication across participating cluster nodes.
2.3.2 How?
Implement TLS/SSL (secure sockets layer) encapsulated connections. Ideally, each node
is equipped with a unique public/private key pair and digital certificate so that client
authentication is enabled.
2.4 Provide support for pluggable
authentication modules
2.4.1 Why?
To certify users are able to program to pluggable authentication module (PAM) interface by
using PAM library API for authentication-related services.
2.4.2 How?
Implement support for PAM. Hardening with benchmarks established by the Center for Internet
Security and hardening at the operating system (OS) level (e.g., SELinux) can be considered.
2.5 Implement appropriate logging mechanisms
2.5.1 Why?
To expose possible attacks.
2.5.2 How?
• Implement logging mechanisms according to industry standards, such as the NIST Log
CLOUD SECURITY ALLIANCE Big Data Working Group Guidance
© Copyright 2016, Cloud Security Alliance. All rights reserved.
14