Big Data Application Mode and Security Risk Analysis

doi:10.3969/j.issn.1006-2475.2014.08.013

Abstract

Abstract:

Traditional equipments and tools can not meet the requirements of big data application in scalability

and analysis. People currently always use Hadoop to store and analyze big data in cloud computing environment. The

risks of big data application on cloud come from cloud service providers and remote users who access data with

unauthorized right. The paper presented the threats under different deployment of cloud, and analysed the risk at

different stages of operation in Hadoop. The paper gave a thread model for big data application and finally gave

the corresponding security policy.

Key words: big data, cloud computing, security, Hadoop

CLC Number:

TP393.08

YAN Zhi1, ZHAN Jing1,2,3. Big Data Application Mode and Security Risk Analysis[J]. Computer and Modernization, doi: 10.3969/j.issn.1006-2475.2014.08.013.

References ［17］

［1］	覃雄派,王会举,杜小勇,等. 大数据分析——RDBMS与MapReduce的竞争与共生［J］. 软件学报, 2012,23(1):32-45.
［2］	Mell P, Grance T. The NIST Definition of Cloud Computing［R］. National Institute of Standards and
	Technology, 2011.
［3］	Shaftab Ahmed, Azween Abdullah. E-Healthcare and data management services in a cloud［C］// Proc. of High
	Capacity Optical Networks and Enabling Technologies(HONET). 2011:248-252.
［4］	Dean J, Ghemawat S. MapReduce: Simplified data processing on large clusters［C］// Proc. of the OSDI.
20	04:137-150.
［5］	周品. Hadoop云计算实战［M］. 北京: 清华大学出版社, 2012.
［6］	Chuck Lam. Hadoop in Action［M］. 韩冀中译. 北京: 人民邮电出版社, 2011.
［7］	Tom White. Hadoop: The Definitive Guide［M］. 2nd ed O’Reilly Media, Inc., 2010.
［8］	邹德清,金海,羌卫中,等. 云计算安全挑战与实践［J］. 中国计算机学会通讯, 2011,7(12):55-62.
［9］	〖JP4〗Jason Shih.Hadoop Security Overview-From Security Infrastructure Deployment to High-level Services［
	EB/OL］. http://hbtc2012.hadooper.cn/subject/keynotep8shihongliang.pdf, 2012-11-30.
［10］	马媛. 基于Hadoop的云计算平台安全机制研究［J］. 信息安全与保密通信, 2012(6):89-92.
［11］	The Apache Software Foundation. Service Level Authorization［EB/OL］.
	http://hadoop.apache.org/docs/r1.1.2/service_level_auth.pdf, 2013-08-04.
［12］	Indrajit Roy, Srinath T V Setty, Ann Kilzer, et al. Airavat: Security and privacy for MapReduce ［C］//
	Proceedings of the 7th USENIX Symposium on Networked Systems Design and Implementation. San Jose, CA, USA: NSDI,
20	10:297-312.
［13］	周天阳,朱俊虎,王清贤. 基于VMM的Rootkit及其监测技术研究［J］. 计算机科学, 2011,12(38):77-80.
［14］	李虹,李昊. 可信云安全的关键技术与实现［M］. 北京:人民邮电出版社, 2010.
［15］	梁元. 基于云计算环境下的可信平台设计［D］. 成都：电子科技大学, 2013.
［16］	程戈. 基于虚拟机架构的可信计算环境构建机制研究［D］. 武汉：华中科技大学, 2010.
［17］	Wright C, Cowan C, Morris J, et al. Linux security module framework［C］// Proc. of the 11th Ottawa Linux
	Symposium. 2002：8032.

[1]	WANG Hong-jie, XU Sheng-chao, YANG Bo, MAO Ming-yang, JIANG Jin-ling. Automatic Arrangement Method of Cloud Network Security Service Chain Based on SRv6 Technology [J]. Computer and Modernization, 2024, 0(01): 1-5.
[2]	CAI Si-mu, WANG Li-bin. A Universally-composable Secure Non-interactive Commitment Scheme [J]. Computer and Modernization, 2024, 0(01): 6-12.
[3]	HAN Kun, WANG Zheng, DUAN Jun-yong, YANG Hua-lin. Overview of Data Processing Techniques for MIoT Based on Fog Computing [J]. Computer and Modernization, 2024, 0(01): 13-20.
[4]	HE Yu-peng, TAO Yong, WANG Bing-heng, ZHAO Ying-nan. Research Status and Prospect of Edge Computing in Smart Distribution Network [J]. Computer and Modernization, 2023, 0(08): 87-92.
[5]	YANG Bo, XU Sheng-chao. Security Protection Method of Cloud Network Special Line Scenarios Based on SRv6#br# Service Chain [J]. Computer and Modernization, 2023, 0(08): 107-111.
[6]	LEI Yi-han, CAO Li-feng, HAN Meng-da, HAN Xue. Security Handover Architecture and Method for Software Defined Space-ground#br# Integration Network [J]. Computer and Modernization, 2023, 0(08): 119-126.
[7]	ZHA Kai-jin, WANG Zhi-bo, HE Yue-shun, XU Hong-zhen. Survey on Blockchain Security Protection [J]. Computer and Modernization, 2023, 0(06): 110-117.
[8]	MO Yan, TANG Rong-chuan, JU Hao, SUN Shao-fei, WANG An. Commercial Cryptographic Upgrade for Industrial Internet Platform [J]. Computer and Modernization, 2023, 0(06): 118-126.
[9]	ZHANG Jun, SU Wen-hao. Optimization Method of Hadoop File Archiving Based on LZO [J]. Computer and Modernization, 2023, 0(06): 1-6.
[10]	YANG Jun, WANG Jin-lin, NI Hong, SHENG Yi-qiang, . Dynamic Transfer Method Based on Sensitivity in Industrial Control Network Anomaly Detection [J]. Computer and Modernization, 2023, 0(05): 46-51.
[11]	ZHOU Ming-sheng, ZHANG Wen. A Smart Park Management Platform for Multi-source Data [J]. Computer and Modernization, 2023, 0(05): 68-74.
[12]	MAO Ming-yang, XU Sheng-chao. A New Active Defense Model for Complex Network Security [J]. Computer and Modernization, 2023, 0(04): 118-122.
[13]	PAN Yu-qing, ZHANG Su-ning, FENG Ren-jun, JING Dong-sheng. Intrusion Detection Method Based on Particle Swarm Optimization Combined with LightGBM [J]. Computer and Modernization, 2023, 0(04): 123-126.
[14]	WANG Xuan, WANG Zhi-wei, . OpenID Protocol Based on SM9 Blind Signature [J]. Computer and Modernization, 2022, 0(12): 111-117.
[15]	MAO Ming-yang, XU Sheng-chao. Communication Terminal Attack Behavior Identification Algorithm Based on Trusted Cloud Computing#br# [J]. Computer and Modernization, 2022, 0(11): 37-42.