Hadoop平台的安全加固方案  

Safety Reinforcement Scheme for Hadoop Platform

作　　者：丁祥武[1] 张东辉 DING Xiangwu;ZHANG Donghui(School of Computer Science and Technology,Donghua University,Shanghai 201620,Chin)

机构地区：[1]东华大学计算机科学与技术学院,上海201620

出　　处：《计算机工程》2018年第12期94-101,共8页Computer Engineering

基　　金：上海市信息化发展专项资金项目(XX-XXFZ-05-16-0139);上海市科技行动计划项目(15511106900)

摘　　要：针对Hadoop平台安全漏洞问题,通过分析Hadoop平台的安全现状,提出尚存的安全隐患,并对此安全隐患设计实现相关的加固方案。通过集成Hadoop认证系统与高可用的企业身份管理系统,实现由企业安全系统统一管理用户及权限信息,从而有效提高认证效率。同时启用字段级访问控制策略,提升用户对数据管理的灵活性。建立基于集群资源的健康评价体系,对集群的健康状态进行把控,为整个Hadoop集群的安全运行提供保障。实验结果验证了该方案的可行性与有效性。Aiming at the security vulnerability problem of Hadoop platform,this paper analyzes the present security situation of Hadoop platform,puts forward the remaining security hidden trouble,and designs and implements the relevant reinforcement scheme.By integrating the Hadoop authentication system with the highly available enterprise identity management system,the user and authority information of the enterprise security system is unified and the authentication efficiency is improved effectively.At the same time,the field-level access control strategy is enabled to enhance the flexibility of data management.The health evaluation system based on cluster resources is established to control the health status of the cluster,which can guarantee the safe operation of the whole Hadoop cluster.Experimental results show that this scheme is feasible and effective.

关 键 词：HADOOP平台 企业安全系统 高可用性 字段级访问控制 健康评价体系 

分 类 号：TP332[自动化与计算机技术—计算机系统结构]