Eavesdropper: A Framework for Detecting the Location of the Processed Result in Hadoop.

Chuntao Dong,Qingni Shen,Wenting Li,Yahui Yang,Zhonghai Wu,Xiang Wan
DOI: https://doi.org/10.1007/978-3-319-29814-6_39
2015-01-01
Abstract:Hadoop has become increasingly popular as it rapidly processes big data in parallel, while security mechanisms have been introduced or studied for Hadoop. In addition, other security issues that should not be neglected still exist. Data leakage is one of the major security challenges. This paper studies the vulnerability of authorization mechanism of services in Hadoop and the threat of information leakage. Some authorization mechanism allow all users to access services by default, an adversary can utilize these services to collect information of other users. We design and implement Eavesdropper, a framework which utilizes k-means clustering to address the nodes that store the processed results. We conduct a comprehensive of experiments, which clearly demonstrate that our detection framework is capable of detecting the nodes that store the results.
What problem does this paper attempt to address?