{"id":5676,"date":"2015-09-24T07:00:47","date_gmt":"2015-09-24T15:00:47","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5676"},"modified":"2015-08-15T15:25:02","modified_gmt":"2015-08-15T23:25:02","slug":"big-data-and-security-misconfigured-data-repos-expose-sensitive-data","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/big-data-and-security-misconfigured-data-repos-expose-sensitive-data\/","title":{"rendered":"Big Data and Security: Misconfigured Data Repos Leave Terabytes of Data Unsecured"},"content":{"rendered":"<p>Everyone is scrambling to jump aboard the Big Data bandwagon. \u00a0Big Data, data analytics, No-SQL databases are just a few of the technology\u00a0tools\u00a0that are\u00a0popping up for\u00a0managing, massaging, and measuring just about any kind of data you might have.\u00a0 The problem is that as people jump in to try out these new technologies, security is often not\u00a0high on their list of priorities, and that leads to\u00a0problem.<\/p>\n<p>The biggest problem is that tools aren&#8217;t being configured to be secure. \u00a0It&#8217;s not that the software doesn&#8217;t provide security capabilities. \u00a0More often than not the problem is that people are simply ignoring security; people aren&#8217;t using the levers and switches\u00a0already available for\u00a0tightening\u00a0security. \u00a0It&#8217;s more that security\u00a0is just being ignored.<\/p>\n<p><a href=\"http:\/\/blog.binaryedge.io\/2015\/08\/10\/data-technologies-and-security-part-1\/\" target=\"_blank\">BinaryEdge <\/a>did an experiment where they starting searching the internet for instances of the following four technologies that were not securely configured:<\/p>\n<ul>\n<li><a href=\"http:\/\/redis.io\" target=\"_blank\">Redis<\/a><\/li>\n<li><a href=\"https:\/\/www.mongodb.org\" target=\"_blank\">MongoDB<\/a><\/li>\n<li><a href=\"http:\/\/memcached.org\" target=\"_blank\">Memcache<\/a><\/li>\n<li><a href=\"https:\/\/www.elastic.co\/products\/elasticsearch\" target=\"_blank\">ElasticSearch<\/a><\/li>\n<\/ul>\n<p>Their study\u00a0found 46,000 MongoDB servers holding more than 600 terabytes of information that had no protection. \u00a0Another\u00a035,000 instances of\u00a0the Redis key-value cache and store technology holding upwards of 13 terabytes of data had\u00a0no authentication. \u00a0And 9000 instances of ElasticSearch exposed 531 terabytes of data.<\/p>\n<p><a href=\"https:\/\/angel.co\/jason-du-preez\" target=\"_blank\">Jason du Preez<\/a>, chief executive of Privita, told <a href=\"http:\/\/www.scmagazineuk.com\/one-petabyte-of-sensitive-data-exposed-online-in-big-data-security-gaff\/article\/432774\/\" target=\"_blank\">SC Magazine UK<\/a>, that &#8220;with easy, cheap access to significant computing power, its really not that hard to find valuable or sensitive information in what might have historically seemed like enormous amounts of data&#8230; \u00a0With these new, open-source software tools, powered by unprecedented access to cloud computing, it is clear that we need new approaches to protecting sensitive data sets. \u00a0There&#8217;s no excuse for poor perimeter security and best practice should be followed here \u2013 but organizations should also be taking a privacy-by-default approach to data management. This is best designed in to architectures from the outset.\u201d<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fbig-data-and-security-misconfigured-data-repos-expose-sensitive-data%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Everyone is scrambling to jump aboard the Big Data bandwagon. \u00a0Big Data, data analytics, No-SQL databases are just a few of the technology\u00a0tools\u00a0that are\u00a0popping up for\u00a0managing, massaging, and measuring just about any kind of data you might have.\u00a0 The problem<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/big-data-and-security-misconfigured-data-repos-expose-sensitive-data\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,31],"tags":[],"class_list":["post-5676","post","type-post","status-publish","format-standard","hentry","category-big-data","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5676"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5676\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}