权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Attribute-based Access Control Implementation Targeting Big Data Access Management Tools

针对大数据访问管理工具的基于属性的访问控制实施

基本信息

批准号：
479593-2015
负责人：
ZincirHeywood, Nur
金额：
$ 1.82万
依托单位：
Dalhousie University
依托单位国家：
加拿大
项目类别：
Engage Grants Program
财政年份：
2015
资助国家：
加拿大
起止时间：
2015-01-01 至 2016-12-31
项目状态：
已结题

来源：
https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=580165
关键词：
Attribute based Access Control Implementation

项目摘要

This is a proposal for joint work in the general area of Computer Security as it needs to scale to Big Data. One of the challenges in that area is access management - who has access to what information in a complex data system? The Snowden incident and others like it indicate the general need for scalable, user-friendly solutions that would enable data owners to set up access policies that would allow users to access the data they need, and only that data. This is challenging: on the one hand, services-oriented, virtualized and enterprise cloud architectures are creating unprecedented access control management complexity and risk. On the other hand, organizational and regulatory requirements are dictating increasingly fine-grained access control policies. The emergence of "NoSQL" databases and related "big data" technologies and implementations are further driving the need for dramatically improved access control. Within the NoSQL database market, Accumulo is differentiated on the basis of uniquely providing what it describes as "fine grained, cell based" access control. We will, in this project, research and implement a solution that will enable defining cell-level access rules using the de facto standard XACML language. The solution will position Devera Logic as a unique partner to Accumulo providing this functionality. The research will also advance the progress of the PhD student working on it

这是计算机安全一般领域联合工作的提案，因为它需要扩展到大数据。一该领域的挑战之一是访问管理——谁有权访问复杂数据中的哪些信息系统？斯诺登事件和其他类似事件表明普遍需要可扩展、用户友好的解决方案这将使数据所有者能够设置访问策略，允许用户访问他们需要的数据，以及只有那个数据。这是具有挑战性的：一方面，面向服务、虚拟化和企业云架构正在创造前所未有的访问控制管理复杂性和风险。另一方面，组织和监管要求要求越来越细粒度的访问控制策略。 “NoSQL”数据库的出现以及相关的“大数据”技术和实现进一步推动了对显着改进的访问控制的需求。在 NoSQL 数据库市场中，Accumulo 是其差异化的基础是独特地提供其所描述的“细粒度、基于单元”的访问控制。在这个项目中，我们将研究并实施一个能够定义单元级访问规则的解决方案使用事实上的标准 XACML 语言。该解决方案将使 Devera Logic 成为独特的合作伙伴 Accumulo 提供此功能。该研究还将推动博士生工作的进展在它上面