Research On Hadoop Security Mechanism

Hadoop is the most rapidly developed cloud computing platform in recent years.The cloud computing featuring distributed calculation and resource sharing has also caused some security problems.This thesis will address the safety problem existing in the Hadoop as follows:In the view of the security problem of identity authentication for Hadoop and the security problem when files transfer in the Hadoop system, this thesis proposes a hierarchical encryption security mechanism based on identity authentication. Formally analyse the system safty by SVO logic. The system use AES h ierarchical encryption to solve the performance consume caused by traditional encryption. The experiment indicate that this scheme ensures the performance of the system under the condition of security.At present Hadoop only implements the access control policy on NameNode and does not do any access control on the end of DataNode. In the view of this security risk, this thesis proposed DataNode access control sheme based on RBAC. This sheme constructs a set of RBAC strategy based on the XACML language. It makes the DataNode not only control and manage the valid users effectively, but also prevent illegal direct access operations by getting the ID of the data block illegally. This thesis describes the scheme in detail, and proves the feasibility and performance through experiment.