CORC  > 北京大学  > 软件与微电子学院
SECapacity: A Secure Capacity Scheduler in YARN
Dong, Chuntao ; Shen, Qingni ; Cheng, Lijing ; Yang, Yahui ; Wu, Zhonghai
2016
关键词Big data platform Hadoop User-classification based scheduling SECapacity scheduler
英文摘要In this paper, aiming to the requirement that isolation of user's job and data security, we deeply analyze the mainstream computing framework Hadoop YARN, and start with the core module of YARN - resource scheduler. Using the existing label-based scheduling policy, we design and implement a SECapacity scheduler. Our main work including: First, according to the principle of least privilege, we propose a user-classification based scheduling policy, which divided users to several levels based on their attributes, then restrict which nodes could be used by this user according to the user level. Second, we design and implement a SECapacity scheduler to implement user-classification based scheduling. Third, we verify and analyze the effectiveness and efficiency of SECapacity scheduler, the results shows that SECapacity scheduler can ensure 100% isolation of users at different levels, and the performance overhead is about 6.95%.; CPCI-S(ISTP); chuntaodong@pku.edu.cn; qingnishen@ss.pku.edu.cn; morleycheng@pku.edu.cn; yhyang@ss.pku.edu.cn; wuzh@ss.pku.edu.cn; 184-194; 9977
语种英语
出处18th International Conference on Information and Communications Security (ICICS)
DOI标识10.1007/978-3-319-50011-9_15
内容类型其他
源URL[http://ir.pku.edu.cn/handle/20.500.11897/460007]  
专题软件与微电子学院
推荐引用方式
GB/T 7714
Dong, Chuntao,Shen, Qingni,Cheng, Lijing,et al. SECapacity: A Secure Capacity Scheduler in YARN. 2016-01-01.
个性服务
查看访问统计
相关权益政策
暂无数据
收藏/分享
所有评论 (0)
暂无评论
 

除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。


©版权所有 ©2017 CSpace - Powered by CSpace