Apache Cassandra

  1. Cassandra Security
    1. Authentication
      1. Authentication Overview
        1. Authentication vs Authorization
          1. Security Architecture
          2. Internal Authentication
            1. PasswordAuthenticator
              1. User Management
                1. Creating Users
                  1. Modifying Users
                    1. Deleting Users
                    2. Password Policies
                      1. Password Complexity
                        1. Password Expiration
                        2. Default User Management
                        3. LDAP Integration
                          1. LDAP Configuration
                            1. User Mapping
                              1. Group Mapping
                                1. Authentication Flow
                                2. Custom Authentication
                                  1. Custom Authenticator Implementation
                                    1. Integration Patterns
                                  2. Authorization
                                    1. Authorization Overview
                                      1. Permission Model
                                        1. Resource Hierarchy
                                        2. Internal Authorization
                                          1. CassandraAuthorizer
                                            1. Permission Management
                                              1. Resource Protection
                                              2. Role-Based Access Control
                                                1. Role Concepts
                                                  1. Role Creation
                                                    1. CREATE ROLE
                                                      1. Role Properties
                                                      2. Role Assignment
                                                        1. GRANT ROLE
                                                          1. Role Inheritance
                                                          2. Role Management
                                                            1. ALTER ROLE
                                                              1. DROP ROLE
                                                                1. LIST ROLES
                                                              2. Permission Management
                                                                1. GRANT Permissions
                                                                  1. Object Permissions
                                                                    1. System Permissions
                                                                    2. REVOKE Permissions
                                                                      1. Permission Removal
                                                                        1. Permission Inheritance
                                                                        2. Permission Types
                                                                          1. SELECT
                                                                            1. INSERT
                                                                              1. UPDATE
                                                                                1. DELETE
                                                                                  1. TRUNCATE
                                                                                    1. CREATE
                                                                                      1. ALTER
                                                                                        1. DROP
                                                                                          1. AUTHORIZE
                                                                                            1. DESCRIBE
                                                                                              1. EXECUTE
                                                                                            2. Custom Authorization
                                                                                              1. Custom Authorizer Implementation
                                                                                                1. Fine-Grained Access Control
                                                                                              2. Encryption
                                                                                                1. Encryption Overview
                                                                                                  1. Encryption Types
                                                                                                    1. Key Management
                                                                                                    2. Client-to-Node Encryption
                                                                                                      1. SSL/TLS Configuration
                                                                                                        1. Certificate Management
                                                                                                          1. Certificate Generation
                                                                                                            1. Certificate Installation
                                                                                                              1. Certificate Rotation
                                                                                                              2. Client Configuration
                                                                                                                1. Troubleshooting SSL Issues
                                                                                                                2. Node-to-Node Encryption
                                                                                                                  1. Internode SSL Configuration
                                                                                                                    1. Certificate Requirements
                                                                                                                      1. Performance Impact
                                                                                                                        1. Configuration Steps
                                                                                                                        2. Encryption at Rest
                                                                                                                          1. File System Encryption
                                                                                                                            1. Disk Encryption
                                                                                                                              1. Key Management Systems
                                                                                                                                1. Transparent Data Encryption
                                                                                                                              2. Security Best Practices
                                                                                                                                1. Network Security
                                                                                                                                  1. Firewall Configuration
                                                                                                                                    1. Network Segmentation
                                                                                                                                      1. VPN Usage
                                                                                                                                      2. Access Control
                                                                                                                                        1. Principle of Least Privilege
                                                                                                                                          1. Regular Access Reviews
                                                                                                                                            1. Service Account Management
                                                                                                                                            2. Monitoring and Auditing
                                                                                                                                              1. Security Event Logging
                                                                                                                                                1. Access Monitoring
                                                                                                                                                  1. Anomaly Detection
                                                                                                                                                  2. Security Hardening
                                                                                                                                                    1. Default Configuration Changes
                                                                                                                                                      1. Unnecessary Service Removal
                                                                                                                                                        1. Security Updates

                                                                                                                                                    Previous

                                                                                                                                                    9. Performance Tuning and Monitoring

                                                                                                                                                    Go to top

                                                                                                                                                    Next

                                                                                                                                                    11. Integrating Cassandra with Other Technologies