基于HBase的细粒度访问控制方法研究

为增强HBase的安全访问控制能力，提出一种针对HBase的细粒度访问控制方法。该方法通过修改优化HBase源码，扩展访问控制权限、重写访问控制器达到细粒度访问控制的目的。归纳出应用于HBase的RBAC模型，内建数据库角色以解决权限扩展后细粒度权限管理难度增大的问题。通过设计实验测试用例，验证了提出的细粒度访问控制方法能更全面地保护HBase数据，解决了原有方法带来的权限过粗的问题，降低了数据可能被恶意地执行修改、删除等操作所带来的巨大安全风险。

Research on fine-grained access control method based on HBase

In order to enhance the access control ability of HBase, this paper proposed a fine-grained access control method for HBase. This method achieved the purpose of fine-grained access control by modifying and optimizing the HBase source code, extending the access control permissions, and rewriting the access controller. Moreover, this paper generalized the RBAC model that applied in HBase, and used built-in database roles to solve the problem that fine-grained permissions management becomes more difficult after extending permissions. By designing experimental test cases, it verified that the proposed fine-grained access control method can protect HBase data more comprehensively, and solve the problem that excessive permissions caused by the original method, and reduce the huge security risk caused by data may be maliciously performing operations such as modification and deletion, etc.