Risk access control model for Hadoop

Jia-shuai LI; Chang-gen PENG; Yi-jie ZHU; Hai-feng MA

doi:10.11959/j.issn.2096-109x.2016.00015

您当前的位置：

首页 >

文章列表页 >

Risk access control model for Hadoop

Papers | 更新时间：2024-06-03

- Risk access control model for Hadoop
- Chinese Journal of Network and Information Security Vol. 2, Issue 1, Pages: 46-52(2016)
- 作者机构：
  
  1. 贵州大学计算机科学与技术学院，贵州贵阳 550025
  2. 贵州大学密码学与数据安全研究所，贵州贵阳 550025
  3. 贵州大学理学院，贵州贵阳 550025
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2016.00015
  CLC： TP309
- Online First：2016-01，
  
  Published：15 January 2016
- 稿件说明：
移动端阅览
Jia-shuai LI, Chang-gen PENG, Yi-jie ZHU, et al. Risk access control model for Hadoop[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 46-52.
DOI：

Jia-shuai LI, Chang-gen PENG, Yi-jie ZHU, et al. Risk access control model for Hadoop[J]. Chinese Journal of Network and Information Security, 2016, 2(1): 46-52. DOI： 10.11959/j.issn.2096-109x.2016.00015.

摘要

摘要：传统的访问控制机制难以约束授权用户的恶意行为，使得采用这种访问控制机制的Hadoop 平台面临着大数据隐私泄露的风险。提出了一种基于风险的访问控制模型，该模型通过对主体和客体标签的设定，根据用户的历史行为记录构造信息熵风险值计算函数，并进一步建立风险值波动的追踪链，通过风险值及其波动幅度动态调整用户的访问权限。将该模型应用于Hadoop的Kerberos认证协议的改进，结合访问令牌及风险监测实现大数据隐私保护风险访问控制机制。最后，针对医疗大数据进行应用仿真，实验表明该模型可以有效约束大数据应用平台中授权用户的访问行为。

Abstract

Traditional access control models are hard to restrain the malicious behavior of authorized users. Accord-ingly

Hadoop platform with this access control model is difficult to prevent the risk of privacy disclosure. A model of access control based on risk was proposed. A risk function of information entropy was designed from users’ his-torical behavior based on setting the tags of subject and object. Furthermore

the tracking chain of risk was built

which could adjust the users’ access authority dynamically according to the risk value and its volatility. Combining with access token and risk supervision

the risk access control mechanism for big data privacy protection was real-ized

which could be applied to enhance the security of Hadoop Kerberos protocol. Finally

the experiment result shows that the model can constrain the authorized users’ access behavior effectively.

关键词

Keywords

references

刘莎 , 谭良 . Hadoop 云平台中基于信任的访问控制模型 [J ] . 计算机科学 2014 , 41 ( 5 ): 155 - 163 .

LIU S , TAN L . A access control model based on trust in Hadoop cloud platform [J ] . Journal of Computer Science , 2014 , 41 ( 5 ): 155 - 163 .

CHENG P C , ROHATGI P , KESER C , et al . Fuzzy multi-level security: an experiment on quantified risk-adaptive access control [C ] // IEEE Symposium on Security and Privacy . c 2007 : 222 - 230 .

NI Q , BERTINO E , LOBO J . Risk-based access control systems built on fuzzy inferences [C ] // The 5th ACM Symposium on Infor-mation, Computer and Communications Security . c 2010 : 250 - 260 .

KIRKPATRICK M S , GHINITA G , BERTINO E . Privacy-preserving enforcement of spatially aware RBAC [C ] // IEEE Transactions on De-pendable and Secure Computing . c 2012 : 627 - 640 .

PASHALIDIS A , PRENEEL B . Evaluating tag-based preference obfuscation systems [C ] // IEEE Transactions on Knowledge and Data Engineering . c 2012 : 1613 - 1623 .

冯登国 , 张敏 , 李昊 . 大数据安全与隐私保护 [J ] . 计算机学报 , 2014 , 37 ( 1 ): 246 - 258 .

FENG D G , ZHANG M , LI H . Big date security and privacy pro-tection [J ] . Journal of Computers , 2014 , 37 ( 1 ): 246 - 258 .

WANG Q , JIN H . Quantified risk-adaptive access control for pa-tient privacy protection in health information systems [C ] // The 6th ACM Symposium on Information, Computer and Communications Security . c 2011 : 406 - 410 .

李凤华 , 苏铓 , 史国振 , 等 . 访问控制模型研究进展及发展趋势 [J ] . 电子学报 2012 , 40 ( 4 ): 805 - 813 .

LI F H , SU M , SHI G Z , et al . Research progress and developing trends of access control model [J ] . Journal of Electronics , 2012 , 40 ( 4 ): 805 - 813 .

刘逸敏 , 周浩峰 , 王智慧 , 等 . Purpose 融合: 基于风险 purpose的隐私查询访问控制 [J ] . 计算机学报 , 2010 ( 8 ): 1339 - 1348 .

LIU Y M , ZHOU H F , WANG Z H , et al . The purpose convergence:privacy query access control based on risk purpose [J ] . Journal of Computers , 2010 ( 8 ): 1339 - 1348 .

Views

2375

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research progress of access control based on blockchain

Survey of big-data-analysis-resistant privacy protection

Progress of research on privacy protection for data publication and data mining

Bidirectional privacy authorization for large models based on private set intersection

Research on searchable encryption scheme based on enhanced PIR

Related Author

Zhensheng GAO

Lifeng CAO

Xuehui DU

Wei TONG

AOYun-long M

Qing-jun CEHN

Bin-ru WANG

Bao-jia ZHANG

Related Institution

Department of Computer Science and Technology,Nanjing University

National Key Laboratory for Novel Software Technology,Nanjing University

China Electronics Standardization Institute

School of Computer Science and Engineering, Guilin University of Electronic Technology

School of Electronic Engineering and Automation, Guilin University of Electronic Technology

⁰