Elasticsearch - Securing a search engine while maintaining usability
Veranstaltungsortmgm technology partners GmbH
Frankfurter Ring 105a
80807 München, Deutschland
Elasticsearch - being an integral part of the Elastic Stack - is known for its full-text search and analytics ability.
Elasticsearch is running on tens of thousands of nodes world-wide, so despite all the functionality squeezed into new releases, we also have to think about security, all the time. This talk will cover different aspects of Elasticsearch, explain some features and (sometimes unpopular) decisions and the reasoning behind. This talk will cover:
* Usage of the Java Security Manager including integration with plugins
* Production vs. Development mode
* System Call Filtering
* X-Pack security features
The goal of this talk is not (only) to show off Elasticsearch features. You start thinking about these non-functional requirements in your own applications as well!