@inproceedings{0a80358ac62046c1b8a8e323e55db76c,
title = "Modeling and Verifying Identity Authentication Security of HDFS Using CSP",
abstract = "As one of the most popular software framework for distributed storage of big data, HDFS has lots of good features, such as high throughput and high fault-tolerance. However, with its rapid development, potential data security risks are exposed and founding the security mechanism for HDFS clusters has become an important issue. In this paper, we investigate the identity authentication problem on HDFS and select Kerberos protocol as corresponding security mechanism to deal with the problem. We use the process algebra CSP to model HDFS and HDFS with security mechanism, as well as their security properties. Moreover, we also use a model checking tool PAT to verify these properties. The verification results illustrate the existence of authentication problems on HDFS and Kerberos can effectively solve these problems. Consequently, a better understanding of HDFS and its security properties can be achieved and the establishment of security mechanism for HDFS can benefit from it. Besides, it is also a guide for the formalization of HDFS with security mechanism.",
keywords = "Authentication, CSP, HDFS, Kerberos, Modeling, Verification",
author = "Chao Xu and Huibiao Zhu and Wanling Xie",
note = "Publisher Copyright: {\textcopyright} 2017 IEEE.; 24th Asia-Pacific Software Engineering Conference, APSEC 2017 ; Conference date: 04-12-2017 Through 08-12-2017",
year = "2017",
month = jul,
day = "2",
doi = "10.1109/APSEC.2017.32",
language = "英语",
series = "Proceedings - Asia-Pacific Software Engineering Conference, APSEC",
publisher = "IEEE Computer Society",
pages = "259--268",
editor = "Jian Lv and He Zhang and Mike Hinchey and Xiao Liu",
booktitle = "Proceedings - 24th Asia-Pacific Software Engineering Conference, APSEC 2017",
address = "美国",
}