首页> 外文会议>IEEE 10th International Conference on Ubiquitous Intelligence and Computing; IEEE 10th International Conference on Autonomic and Trusted Computing >Towards a Trusted Hadoop Storage Platform: Design Considerations of an AES Based Encryption Scheme with TPM Rooted Key Protections
【24h】

Towards a Trusted Hadoop Storage Platform: Design Considerations of an AES Based Encryption Scheme with TPM Rooted Key Protections

机译:迈向受信任的Hadoop存储平台:具有TPM根密钥保护的基于AES的加密方案的设计考虑因素

获取原文
获取原文并翻译 | 示例

摘要

This paper will examine the concept of combining trusted computing technologies with the Apache Hadoop Distributed File System (HDFS) in an effort to address concerns of data confidentiality and integrity. We discuss a motivation and address a set of common security concerns within HDFS through infrastructure and software involving data-at-rest encryption and integrity validation. To accomplish these goals, we make use of technology from the Trusted Computing Group (TCG), such as the pervasively available Trusted Platform Module (TPM). In addition, we discuss our design considerations in building an encryption framework for Hadoop in a trustworthy manner, and results of our experiments creating an encryption scheme for Hadoop utilizing hardware key protections and AES-NI for encryption acceleration. As part of this design we examine the recently implemented crypto framework for Hadoop and independently test the performance claims of AES-NI to mitigate performance overhead.
机译:本文将研究将可信计算技术与Apache Hadoop分布式文件系统(HDFS)相结合的概念,以解决对数据机密性和完整性的担忧。我们讨论了动机,并通过涉及静态数据加密和完整性验证的基础架构和软件解决了HDFS中的一系列常见安全问题。为了实现这些目标,我们利用了可信计算小组(TCG)的技术,例如普遍使用的可信平台模块(TPM)。另外,我们讨论了以可信赖的方式为Hadoop构建加密框架时的设计注意事项,以及我们的实验结果,这些实验为使用硬件密钥保护和AES-NI进行Hadoop加密加速的Hadoop创建了加密方案。作为此设计的一部分,我们检查了最近为Hadoop实施的加密框架,并独立测试AES-NI的性能要求以减轻性能开销。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号