SECapacity: A Secure Capacity Scheduler in YARN | |
Dong, Chuntao ; Shen, Qingni ; Cheng, Lijing ; Yang, Yahui ; Wu, Zhonghai | |
2016 | |
关键词 | Big data platform Hadoop User-classification based scheduling SECapacity scheduler |
英文摘要 | In this paper, aiming to the requirement that isolation of user's job and data security, we deeply analyze the mainstream computing framework Hadoop YARN, and start with the core module of YARN - resource scheduler. Using the existing label-based scheduling policy, we design and implement a SECapacity scheduler. Our main work including: First, according to the principle of least privilege, we propose a user-classification based scheduling policy, which divided users to several levels based on their attributes, then restrict which nodes could be used by this user according to the user level. Second, we design and implement a SECapacity scheduler to implement user-classification based scheduling. Third, we verify and analyze the effectiveness and efficiency of SECapacity scheduler, the results shows that SECapacity scheduler can ensure 100% isolation of users at different levels, and the performance overhead is about 6.95%.; CPCI-S(ISTP); chuntaodong@pku.edu.cn; qingnishen@ss.pku.edu.cn; morleycheng@pku.edu.cn; yhyang@ss.pku.edu.cn; wuzh@ss.pku.edu.cn; 184-194; 9977 |
语种 | 英语 |
出处 | 18th International Conference on Information and Communications Security (ICICS) |
DOI标识 | 10.1007/978-3-319-50011-9_15 |
内容类型 | 其他 |
源URL | [http://ir.pku.edu.cn/handle/20.500.11897/460007] |
专题 | 软件与微电子学院 |
推荐引用方式 GB/T 7714 | Dong, Chuntao,Shen, Qingni,Cheng, Lijing,et al. SECapacity: A Secure Capacity Scheduler in YARN. 2016-01-01. |
个性服务 |
查看访问统计 |
相关权益政策 |
暂无数据 |
收藏/分享 |
除非特别说明,本系统中所有内容都受版权保护,并保留所有权利。
修改评论