Accession Number:

ADA604704

Title:

Towards a Cross-Domain MapReduce Framework

Descriptive Note:

Conference paper

Corporate Author:

NAVAL POSTGRADUATE SCHOOL MONTEREY CA DEPT OF COMPUTER SCIENCE

Personal Author(s):

• Nguyen, Thuy D.
• Gondree, Mark A.
• Khosalim, Jean
• Irvine, Cynthia E.

Report Date:

2013-11-01

Pagination or Media Count:

7.0

Abstract:

The Apachetrademark Hadoopregistered name framework provides parallel processing and distributed data storage capabilities that data analytics applications can utilize to process massive sets of raw data. These Big Data applications typically run as a set of MapReduce jobs to take advantage of Hadoops ease of service deployment and large-scale parallelism. Yet, Hadoop has not been adapted for multilevel secure MLS environments where data of different security classifications co-exist. To solve this problem, we have used the Security Enhanced Linux SELinux Linux kernel extension in a prototype cross-domain Hadoop on which multiple instances of Hadoop applications run at different sensitivity levels. Their accesses to Hadoop resources are constrained by the underlying MLS policy enforcement mechanism. A benefit of our prototype is its extension of the Hadoop Distributed File System to provide a cross-domain readdown capability for Hadoop applications without requiring complex Hadoop server components to be trustworthy.

Descriptors:

• *CLOUD COMPUTING
• *INFORMATION ASSURANCE
• DATA MANAGEMENT
• DATA TRANSMISSION SECURITY

Subject Categories:

• Information Science
• Computer Programming and Software
• Computer Systems
• Computer Systems Management and Standards

Distribution Statement:

APPROVED FOR PUBLIC RELEASE