정보보호 : 하둡 분산 파일 시스템에서 그룹키 기반 Permission Management 시스템 설계 = Information Security : A Design of Permission Management System Based on Group Key in Hadoop Distributed File System

다국어 초록 (Multilingual Abstract)

Data have been increased enormously due to the development of IT technology such as recent smart equipments, social network services and streaming services. To meet these environments the technologies that can treat mass data have received attention, and the typical one is Hadoop. Hadoop is on the basis of open source, and it has been designed to be used at general purpose computers on the basis of Linux. To initial Hadoop nearly no security was introduced, but as the number of users increased data that need security increased and there appeared new version that introduced Kerberos and Token system in 2009. But in this method there was a problem that only one secret key can be used and access permission to blocks cannot be authenticated to each user, and there were weak points that replay attack and spoofing attack were possible. Hence, to supplement these weak points and to maintain efficiency a protocol on the basis of group key, in which users are authenticated in logical group and then this is reflected to token, is proposed in this paper. The result shows that it has solved the weak points and there is no big overhead in terms of efficiency.

참고문헌 (Reference)

1 박승제, "해쉬 체인을 이용한 하둡 보안의 향상" 한국정보기술학회 10 (10): 65-73, 2012

2 O. G. Min, "Trends in Technology of Cloud Computing" 24 (24): 1-13, 2009

3 D. Borthakur, "The Hadoop Distributed File System: Architecture and Design" The Apache Software Foundation

4 A. Melnikov, "Simple Authentication and Security Layer"

5 박소현, "Kerberos 기반 하둡 분산파일 시스템의 안전성 향상방안" 한국정보보호학회 23 (23): 803-813, 2013

6 Govind S, "Hadoop-Really a Preferred Approach over Relational Database Management Systems?"

7 A. Becherer, "Hadoop Security Design Just Add Kerberos? Really?" iSEC PARTNER 2010

8 O. O’Malley, "Hadoop Security Design"

9 Wei Dai, "Crypto++ 5.6.0 Benchmarks"