基于HBase的细粒度访问控制方法研究.PDFVIP

37 3 Vol. 37 No. 3 第 卷第 期 计算机应用研究 录用定稿 Application Research of Computers Accepted Paper 基于HBase 的细粒度访问控制方法研究* 黄良强，朱 焱，陶 霄 (西南交通大学 信息科学与技术学院, 成都 611756) 摘 要：为增强 HBase 的安全访问控制能力，提出一种针对 HBase 的细粒度访问控制方法。该方法通过修改优化 HBase 源码，扩展访问控制权限、重写访问控制器达到细粒度访问控制的目的。归纳出应用于HBase 的RBAC 模型， 内建数据库角色以解决权限扩展后细粒度权限管理难度增大的问题。通过设计实验测试用例，验证了提出的细粒度 访问控制方法能更全面地保护HBase 数据，解决了原有方法带来的权限过粗的问题，降低了数据可能被恶意地执行 修改、删除等操作所带来的巨大安全风险。 关键词：HBase 数据库；访问控制；细粒度权限；数据库角色 中图分类号：TP309.2 doi: 10.19734/j.issn.1001-3695.2018.08.0648 Research on fine-grained access control method based on HBase Huang Liangqiang, Zhu Yan, Tao Xiao (School of Information Science Technology, Southwest Jiaotong University, Chengdu 611756, China) Abstract: In order to enhance the access control ability of HBase, this paper proposed a fine-grained access control method for HBase. This method achieves the purpose of fine-grained access control by modifying and optimizing the HBase source code, extending the access control permissions, and rewriting the AccessController. Moreover, this paper generalizes the RBAC model that applied in HBase, and use built-in database roles to solve the problem that fine-grained permissions management becomes more difficult after extending permissions . By designing experimental test cases, it is verified that the proposed fine-grained access control method can protect HBase data more comprehensively. This paper solves the problem that excessive permissions caused by the original method, and reduces the huge security risk caused by data