Analyzing The Security Features Of Apache Cassandra Database

1. Ghazalak Eslami
Alireza Azhdari
Analyzing The Security Features Of
Apache Cassandra Database
First semester 1399-1400
Class Presentation Of Tarbiat Modares University Database security
computing Course
Presenters:
Dr. Sadegh Dorri Nogoorani
Professor:

2. TABLE OF
CONTENTS
1
2
4
6
Trancactions
Architecture
Introduction
Backup
3Data Replication
5 Security Features

3. Introduction
1

4. 4
Cassandra
● Distributed
● High performance
● Extremely scalable
● Fault tolerant (i.e. no single point of
failure)
● Post-relational database

5. 5
History

6. Architecture
2

7. 7
Architecture
● Cassandra was designed with the
understanding that system/hardware
failures can and do occur
● Peer to Peer, Distributed system
● All nodes are the same
● Data partitioned among all nodes in the
cluster
● Custom data replication to ensure fault
tolerance
● Read/Write anywhere design

8. 8
Architecture
● Gossip protocol
● Commit log
● Mem-table
● SStable

9. 9
Architecture

10. 10
CQL language
Select *
FROM USERS
WHERE STATE = “TX” ;

11. Data Replication
3

12. 12
Data Replication
● Replication Strategy
● Replication Factor
Two Main Factors:

13. 13
Replication Strategy
Simple StrategyNetwork Topology Strategy

14. Transactions
4

15. 15
Transactions

16. Security Features
5

17. Main Security Components
17
● TLS/SSL encryption for client and inter-node
communication
● Authentication
● Authorization

18. Authentication
18
Roles assigned to individuals and functions
● Superuser
● Non-superuser
● Login
● system-auth.roles
● System-auth.role-members
● System-auth.role-permissions

19. Authorization
19
● keyspace
● table
● function
● roles
Object permissions:

20. SSL Encryption
20
● Node-to-node encryption
● Client-to-node encryption

21. Transparent data encryption
21

22. Backup
6

23. Snapshots
23

24. References
7

25. 25
● https://docs.datastax.com/en/cassandra-oss/3.0/cassandraClient-
● https://cassandra.apache.org/doc/latest/operating/security.html?h
ighlight=security
● https://www.guru99.com/cassandra-architecture.html
● https://www.instaclustr.com/apache-cassandra-security
Other presentations at:
https://aparat.com/sdorri/playlists

26. 26
● Analyzing authentication
● Analyzing authorization
● How to take snapshots and recover data
● TLS configuration
Topics covered in practical part