Effective Access Control in Shared-Operator Multi-tenant Data Stream Management Systems - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Effective Access Control in Shared-Operator Multi-tenant Data Stream Management Systems

Marian Zaki
  • Fonction : Auteur
  • PersonId : 1100422
Adam J. Lee
  • Fonction : Auteur
  • PersonId : 1059359
Panos K. Chrysanthis
  • Fonction : Auteur
  • PersonId : 1100423

Résumé

The proliferation of stream-based applications has led to the widespread use of Data Stream Management Systems (DSMSs), which can support the real-time requirements of these applications. DSMSs were developed to efficiently execute continuous queries (CQs) over incoming data. Multiple CQs can be optimized together to form a query network by sharing operators across CQs. DSMSs are also required to enforce access controls over operators according to data providers’ policies. In this paper, we propose the first solution to satisfy access control policies at run-time in shared-operator networks in an non-disruptive, efficient manner. Specifically, we propose a new set of low overhead streaming operators, coined as Privacy Switches (PrSs), which are strategically placed in the operator network to dynamically allow or deny the flow of data in certain branches of the network based upon the current state of access control permissions. Our experimental evaluation confirms that our approach introduces low overheads in the shared operator networks while achieving high savings in the overall network performance.
Fichier principal
Vignette du fichier
496047_1_En_7_Chapter.pdf (918.7 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03243646 , version 1 (31-05-2021)

Licence

Paternité

Identifiants

Citer

Marian Zaki, Adam J. Lee, Panos K. Chrysanthis. Effective Access Control in Shared-Operator Multi-tenant Data Stream Management Systems. 34th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jun 2020, Regensburg, Germany. pp.118-136, ⟨10.1007/978-3-030-49669-2_7⟩. ⟨hal-03243646⟩
22 Consultations
10 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More