TrustedSSD:New Foundation for Big Data Security
Hong-Liang TIAN,Yong ZHANG,Xin-Hui XU,Chao LI,Chun-Xiao XING
DOI: https://doi.org/10.11897/SP.J.1016.2016.00154
2016-01-01
Chinese Journal of Computers
Abstract:Big data,known for its characteristics of high volume,high value and centralized storage, is an attractive target for attackers.Thus,big data security is an important issue.However,the two most common data security measures used in big data platforms (e.g.Hadoop)are not satisfactory:(1 )Access control mechanisms are prone to bugs and vulnerabilities;(2)Data encryption is provably secure but incurs considerable overheads during data processing.In this paper,we present TrustedSSD,a secure Solid State Drive (SSD)that efficiently guarantees the security of data-at-rest by enforcing a fine-grained access control.We first analysis the security of TrustedSSD,and then describe the design and implementation of the system,highlighting the challenges involved. We built a prototype of TrustedSSD on a commercially successful SSD controller.Experimental results on both synthetic and real-world workloads show that TrustedSSD incurs less than 3%overhead.Therefore,we believe TrustedSSD is a promising approach to big data security.