SecureDL: Securing Code Execution and Access Control for Distributed Data Analytics Platforms

by   Fahad Shaon, et al.

Distributed data analytics platforms such as Apache Spark enable cost-effective processing and storage. These platforms allow users to distribute data to multiple nodes and enable arbitrary code execution over this distributed data. However, such capabilities create new security and privacy challenges. First, the user-submitted code may potentially contain malicious code to circumvent existing security checks. In addition, providing fine-grained access control for different types of data (e.g., text, images, etc.) may not be feasible for different data storage options. To address these challenges, we provide a fine-grained access control framework tailored for distributed data analytics platforms, which is protected against evasion attacks with two distinct layers of defense. Access control is implemented with runtime injection of access control logic on a submitted data analysis job. The proactive security layer utilizes state-of-the-art program analysis to detect potentially malicious user code. The reactive security layer consists of binary integrity checking, instrumentation-based runtime checks, and sandboxed execution. To the best of our knowledge, this is the first work that provides fine-grained attribute-based access control for distributed data analytics platforms using code rewriting and static program analysis. Furthermore, we evaluated the performance of our security system under different settings and show that the performance overhead due to added security is low.



There are no comments yet.


page 2

page 4

page 5

page 6

page 8

page 10

page 11

page 13


ATDD: Fine-Grained Assured Time-Sensitive Data Deletion Scheme in Cloud Storage

With the rapid development of general cloud services, more and more indi...

Modularis: Modular Data Analytics for Hardware, Software, and Platform Heterogeneity

Today's data analytics displays an overwhelming diversity along many dim...

A Data Analytics Framework for Aggregate Data Analysis

In many contexts, we have access to aggregate data, but individual level...

STEP : A Distributed Multi-threading Framework Towards Efficient Data Analytics

Various general-purpose distributed systems have been proposed to cope w...

Fine-Grained Lineage for Safer Notebook Interactions

Computational notebooks have emerged as the platform of choice for data ...

Multi-Execution Lattices Fast and Slow

Methods for automatically, soundly, and precisely guaranteeing the nonin...

Active-Code Replacement in the OODIDA Data Analytics Platform

OODIDA (On-board/Off-board Distributed Data Analytics) is a platform for...
This week in AI

Get the week's most popular data science and artificial intelligence research sent straight to your inbox every Saturday.