all InfoSec news
Break it, Fix it: Attack and Defense for "Add-on'' Access Control Solutions in Distributed Data Analytics Platforms. (arXiv:2106.13123v3 [cs.CR] UPDATED)
cs.CR updates on arXiv.org arxiv.org
Distributed data analytics platforms (i.e., Apache Spark, Hadoop) enable
cost-effective storage and processing by distributing data and computation to
multiple nodes. Since these frameworks' design was primarily motivated by
performance and usability, most were assumed to operate in non-malicious
settings. Hence, they allow users to execute arbitrary code to analyze the
data. To make the situation worse, they do not support fine-grained access
control inherently or offer any plugin mechanism to enable it - which makes
them risky to be …
access access control analytics attack control data data analytics defense distributed fix platforms solutions