分布式key-value系统错误污染检测  

Taint Tracking in Distributed Key-Value System

作　　者：郭晓林[1] 舒继武[2] 易乐天[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]清华大学信息科学与技术国家实验室,北京100084

出　　处：《计算机学报》2014年第7期1570-1579,共10页Chinese Journal of Computers

基　　金：国家自然科学基金(60925006);国家"八六三"高技术研究发展计划重大课题(2009AA01A403)资助~~

摘　　要：随着key-value存储系统的广泛使用,越来越多的研究开始关注分布式系统中的可信问题,其中一个重要的问题是,如何在系统被入侵或者管理员配置错误并运行一段时间后,检测出受污染的数据,从而可以在恢复错误数据的同时保留系统的合法更新.文中提出了一种基于key-value存储系统的错误污染检测方法,该方法允许在客户端不可信的前提下,检测客户端之间的污染扩散.文中设计了一种基于各服务器逻辑时钟的向量时钟,该时钟以用户关联操作为更新规则,记录了跨服务器的读写请求逻辑关系,用以进行错误污染跟踪;同时为了减少大规模系统中污染检测的开销,基于该向量时钟,文中进一步提出了一种在分布式系统中由操作序列构成有向无环图的污染分析方法.基于广泛使用的Voldmort key-value系统,文中实现了一个错误污染检测系统,Tracker Store.在集群测试环境下,文中对引入新的检测系统后产生的额外延迟开销进行了测试.With the widely adoption of key-value system, there have been many researches on reliability of distributed systems. One of the most important problems is the detection of taint data caused by legal user who has accessed untrustworthy data after intrusions by hackers or miscon- figurations by administrators, which enables preserving legitimate data while recovering taint data. This paper has proposed a mechanism for taint tracking based on key-value store, in the case where clients are not trustable. The vector clock based on logical clocks on servers is used to track relationships between cross-server accesses. Furthermore, in order to decrease the overhead incurred by the new system, this paper has explored a mechanism to construct DAG（Directed Acyclic Graph） s with operation sequences under distributed environment. A taint tracking system called Tracker Store is implemented upon the Voldemort key-value system, and overhead on read latency is evaluated on the new system.

关 键 词：污染检测 分布式key-value系统 向量时钟 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]