Design and Implementation of Data Encryption in Cloud based on HDFS

DOI

10.2991/ccis-13.2013.64How to use a DOI?

Keywords

Hadoop; Distributed File System; Data Encryption;

Abstract

As an open-source distributed programmingframework, Hadoop hasgradually becomepopular in industry recently. Its distributed file system (HDFS) enables storing large data with advantages of high fault tolerance and throughput. However, the fact that the current HDFS does not support intra-cloud data encryption yetmakes data privacybecomes a key security issue. This paper presents ahybrid encryption method based on HDFS. We adopt symmetric encryption to encrypt and decrypt file blocks atdatanodes and use asymmetric encryption scheme to protect the symmetric keys. By this method, we can prevent datanode intruders from stealing userdata, while ensuring that clientsarelightweight. The experiments show that withand withoutblock encryption algorithm, our solution brings43% and 2% performance degradationcompared to the generic HDFS.

Copyright

© 2013, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Cheng Zhonghan
AU  - Zhang Diming
AU  - Huang Hao
AU  - Qian Zhenjiang
PY  - 2013/11
DA  - 2013/11
TI  - Design and Implementation of Data Encryption in Cloud based on HDFS
BT  - Proceedings of the The 1st International Workshop on Cloud Computing and Information Security
PB  - Atlantis Press
SP  - 274
EP  - 277
SN  - 1951-6851
UR  - https://doi.org/10.2991/ccis-13.2013.64
DO  - 10.2991/ccis-13.2013.64
ID  - Zhonghan2013/11
ER  -