To improve Hadoop compromise resilience, we design a
new SEHadoop model through two major principles: enhancing
isolation level among Hadoop components and giving
least access privilege for Hadoop processes. When compromise
starts in Hadoop, strong isolation level can help Hadoop limit
the extent of compromise