{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T14:36:52Z","timestamp":1768401412492,"version":"3.49.0"},"publisher-location":"Cham","reference-count":46,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319611754","type":"print"},{"value":"9783319611761","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-61176-1_4","type":"book-chapter","created":{"date-parts":[[2017,6,21]],"date-time":"2017-06-21T01:54:25Z","timestamp":1498010065000},"page":"63-81","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":30,"title":["Object-Tagged RBAC Model for the Hadoop Ecosystem"],"prefix":"10.1007","author":[{"given":"Maanak","family":"Gupta","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Farhan","family":"Patwa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ravi","family":"Sandhu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,6,22]]},"reference":[{"key":"4_CR1","unstructured":"Apache Hadoop. http:\/\/hadoop.apache.org\/"},{"key":"4_CR2","unstructured":"Apache Knox. https:\/\/knox.apache.org\/"},{"key":"4_CR3","unstructured":"Apache Ranger. http:\/\/ranger.apache.org\/"},{"key":"4_CR4","unstructured":"Apache Sentry. https:\/\/sentry.apache.org\/"},{"key":"4_CR5","unstructured":"Data Age 2025: The Evolution of Data to Life-Critical. https:\/\/www.idc.com\/"},{"key":"4_CR6","unstructured":"Big Data: Securing Intel IT\u2019s Apache Hadoop Platform (2016). http:\/\/www.intel.com\/content\/dam\/www\/public\/us\/en\/documents\/white-papers\/big-data-securing-intel-it-apache-hadoop-platform-paper.pdf"},{"key":"4_CR7","unstructured":"Securing Hadoop: Security Recommendations for Hadoop Environments (2016). https:\/\/securosis.com\/assets\/library\/reports\/Securing_Hadoop_Final_V2.pdf"},{"key":"4_CR8","doi-asserted-by":"crossref","unstructured":"Al-Kahtani, M.A., Sandhu, R.: A model for attribute-based user-role assignment. In: Proceedings of IEEE ACSAC, pp. 353\u2013362 (2002)","DOI":"10.1109\/CSAC.2002.1176307"},{"issue":"2","key":"4_CR9","first-page":"70","volume":"6","author":"A Armando","year":"2015","unstructured":"Armando, A., Bezzi, M., Metoui, N., Sabetta, A.: Risk-based privacy-aware information disclosure. IJSSE 6(2), 70\u201389 (2015)","journal-title":"IJSSE"},{"key":"4_CR10","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1007\/978-3-319-01433-3_5","volume-title":"Automated Security Management","author":"N Badar","year":"2013","unstructured":"Badar, N., Vaidya, J., Atluri, V., Shafiq, B.: Risk based access control using classification. In: Al-Shaer, E., Ou, X., Xie, G. (eds.) Automated Security Management, pp. 79\u201395. Springer, Cham (2013)"},{"key":"4_CR11","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1007\/978-3-642-38709-8_3","volume-title":"Advanced Information Systems Engineering","author":"M Barhamgi","year":"2013","unstructured":"Barhamgi, M., Benslimane, D., Oulmakhzoune, S., Cuppens-Boulahia, N., Cuppens, F., Mrissa, M., Taktak, H.: Secure and privacy-preserving execution model for data services. In: Salinesi, C., Norrie, M.C., Pastor, \u00d3. (eds.) CAiSE 2013. LNCS, vol. 7908, pp. 35\u201350. Springer, Heidelberg (2013). doi:10.1007\/978-3-642-38709-8_3"},{"key":"4_CR12","unstructured":"Colombo, P., Ferrari, E.: Complementing MongoDB with advanced access control features: concepts and research challenges. In: Proceedings of SEBD 2015 (2015)"},{"issue":"4","key":"4_CR13","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1016\/j.bdr.2015.08.001","volume":"2","author":"P Colombo","year":"2015","unstructured":"Colombo, P., Ferrari, E.: Privacy aware access control for Big Data: a research roadmap. Big Data Res. 2(4), 145\u2013154 (2015)","journal-title":"Big Data Res."},{"key":"4_CR14","unstructured":"Das, D., O\u2019Malley, O., Radia, S., Zhang, K.: Adding security to Apache Hadoop. Hortonworks, IBM (2011)"},{"key":"4_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.cosrev.2016.05.001","volume":"20","author":"P Derbeko","year":"2016","unstructured":"Derbeko, P., Dolev, S., Gudes, E., Sharma, S.: Security and privacy aspects in mapreduce on clouds: a survey. Comput. Sci. Rev. 20, 1\u201328 (2016)","journal-title":"Comput. Sci. Rev."},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Di Vimercati, S.D.C., Foresti, S., Paraboschi, S., Pelosi, G., Samarati, P.: Protecting access confidentiality with data distribution and swapping. In: Proceedings of IEEE BdCloud, pp. 167\u2013174 (2014)","DOI":"10.1109\/BDCloud.2014.59"},{"issue":"3","key":"4_CR17","doi-asserted-by":"publisher","first-page":"224","DOI":"10.1145\/501978.501980","volume":"4","author":"DF Ferraiolo","year":"2001","unstructured":"Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST standard for role-based access control. ACM TISSEC 4(3), 224\u2013274 (2001)","journal-title":"ACM TISSEC"},{"key":"4_CR18","doi-asserted-by":"crossref","unstructured":"Gupta, M., Patwa, F., Benson, J., Sandhu, R.: Multi-layer authorization framework for a representative Hadoop ecosystem deployment. In: Proceedings of ACM SACMAT (2017, to appear). 8 pages","DOI":"10.1145\/3078861.3084173"},{"key":"4_CR19","doi-asserted-by":"crossref","unstructured":"Gupta, M., Patwa, F., Sandhu, R.: POSTER: access control model for the Hadoop ecosystem. In: Proceedings of ACM SACMAT (2017, to appear). 3 pages","DOI":"10.1145\/3078861.3084164"},{"key":"4_CR20","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"318","DOI":"10.1007\/978-3-319-46298-1_21","volume-title":"Network and System Security","author":"M Gupta","year":"2016","unstructured":"Gupta, M., Sandhu, R.: The $$\\rm GURA_G$$ administrative model for user and group attribute assignment. In: Chen, J., Piuri, V., Su, C., Yung, M. (eds.) NSS 2016. LNCS, vol. 9955, pp. 318\u2013332. Springer, Cham (2016). doi:10.1007\/978-3-319-46298-1_21"},{"key":"4_CR21","doi-asserted-by":"crossref","unstructured":"Hsu, A.C., Ray, I.: Specification and enforcement of location-aware attribute-based access control for online social networks. In: Proceedings of ACM ABAC 2016, pp. 25\u201334 (2016)","DOI":"10.1145\/2875491.2875495"},{"key":"4_CR22","doi-asserted-by":"crossref","unstructured":"Hu, V.C., Grance, T., Ferraiolo, D.F., Kuhn, D.R.: An access control scheme for Big Data processing. In: Proceedings of IEEE CollaborateCom, pp. 1\u20137 (2014)","DOI":"10.4108\/icst.collaboratecom.2014.257649"},{"issue":"2","key":"4_CR23","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1109\/MC.2015.33","volume":"48","author":"VC Hu","year":"2015","unstructured":"Hu, V.C., Kuhn, D.R., Ferraiolo, D.F.: Attribute-based access control. IEEE Comput. 48(2), 85\u201388 (2015)","journal-title":"IEEE Comput."},{"key":"4_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1007\/978-3-642-31540-4_4","volume-title":"Data and Applications Security and Privacy XXVI","author":"X Jin","year":"2012","unstructured":"Jin, X., Krishnan, R., Sandhu, R.: A unified attribute-based access control model covering DAC, MAC and RBAC. In: Cuppens-Boulahia, N., Cuppens, F., Garcia-Alfaro, J. (eds.) DBSec 2012. LNCS, vol. 7371, pp. 41\u201355. Springer, Heidelberg (2012). doi:10.1007\/978-3-642-31540-4_4"},{"key":"4_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1007\/978-3-642-33704-8_8","volume-title":"Computer Network Security","author":"X Jin","year":"2012","unstructured":"Jin, X., Sandhu, R., Krishnan, R.: RABAC: role-centric attribute-based access control. In: Kotenko, I., Skormin, V. (eds.) MMM-ACNS 2012. LNCS, vol. 7531, pp. 84\u201396. Springer, Heidelberg (2012). doi:10.1007\/978-3-642-33704-8_8"},{"key":"4_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1007\/978-3-319-07076-6_6","volume-title":"Risk Assessment and Risk-Driven Testing","author":"L Krautsevich","year":"2014","unstructured":"Krautsevich, L., Lazouski, A., Martinelli, F., Yautsiukhin, A.: Towards attribute-based access control policy engineering using risk. In: Bauer, T., Gro\u00dfmann, J., Seehusen, F., St\u00f8len, K., Wendland, M.-F. (eds.) RISK 2013. LNCS, vol. 8418, pp. 80\u201390. Springer, Cham (2014). doi:10.1007\/978-3-319-07076-6_6"},{"issue":"6","key":"4_CR27","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1109\/MC.2010.155","volume":"43","author":"DR Kuhn","year":"2010","unstructured":"Kuhn, D.R., Coyne, E.J., Weil, T.R.: Adding attributes to role-based access control. IEEE Comput. 43(6), 79\u201381 (2010)","journal-title":"IEEE Comput."},{"issue":"1","key":"4_CR28","doi-asserted-by":"publisher","first-page":"107","DOI":"10.3233\/JCS-140519","volume":"23","author":"H Lu","year":"2015","unstructured":"Lu, H., Hong, Y., Yang, Y., Duan, L., Badar, N.: Towards user-oriented RBAC model. J. Comput. Secur. 23(1), 107\u2013129 (2015)","journal-title":"J. Comput. Secur."},{"issue":"4","key":"4_CR29","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1109\/MNET.2014.6863131","volume":"28","author":"R Lu","year":"2014","unstructured":"Lu, R., Zhu, H., Liu, X., Liu, J.K., Shao, J.: Toward efficient and privacy-preserving computing in Big Data era. IEEE Netw. 28(4), 46\u201350 (2014)","journal-title":"IEEE Netw."},{"key":"4_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1007\/978-3-642-32287-7_8","volume-title":"Trust, Privacy and Security in Digital Business","author":"F Moyano","year":"2012","unstructured":"Moyano, F., Fernandez-Gago, C., Lopez, J.: A conceptual framework for trust models. In: Fischer-H\u00fcbner, S., Katsikas, S., Quirchmayr, G. (eds.) TrustBus 2012. LNCS, vol. 7449, pp. 93\u2013104. Springer, Heidelberg (2012). doi:10.1007\/978-3-642-32287-7_8"},{"key":"4_CR31","doi-asserted-by":"crossref","unstructured":"Nunez, D., Agudo, I., Lopez, J.: Delegated access for Hadoop clusters in the cloud. In: Proceedings of IEEE CloudCom, pp. 374\u2013379 (2014)","DOI":"10.1109\/CloudCom.2014.50"},{"key":"4_CR32","unstructured":"OMalley, O., Zhang, K., Radia, S., Marti, R., Harrell, C.: Hadoop security design. Technical report, Yahoo Inc. (2009)"},{"issue":"2","key":"4_CR33","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"RS Sandhu","year":"1996","unstructured":"Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. IEEE Comput. 29(2), 38\u201347 (1996)","journal-title":"IEEE Comput."},{"key":"4_CR34","doi-asserted-by":"crossref","unstructured":"S\u00e4nger, J., Richthammer, C., Hassan, S., Pernul, G.: Trust and Big Data: a roadmap for research. In: Proceedings of IEEE DEXA, pp. 278\u2013282. IEEE (2014)","DOI":"10.1109\/DEXA.2014.63"},{"key":"4_CR35","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"187","DOI":"10.1007\/978-3-319-17040-4_12","volume-title":"Foundations and Practice of Security","author":"D Servos","year":"2015","unstructured":"Servos, D., Osborn, S.L.: HGABAC: towards a formal model of hierarchical attribute-based access control. In: Cuppens, F., Garcia-Alfaro, J., Zincir Heywood, N., Fong, P.W.L. (eds.) FPS 2014. LNCS, vol. 8930, pp. 187\u2013204. Springer, Cham (2015). doi:10.1007\/978-3-319-17040-4_12"},{"key":"4_CR36","first-page":"2126","volume":"5","author":"PP Sharma","year":"2014","unstructured":"Sharma, P.P., Navdeti, C.P.: Securing big data Hadoop: a review of security issues, threats and solution. IJCSIT 5, 2126\u20132131 (2014)","journal-title":"IJCSIT"},{"issue":"1","key":"4_CR37","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1007\/s41019-015-0001-x","volume":"1","author":"J Soria-Comas","year":"2016","unstructured":"Soria-Comas, J., Domingo-Ferrer, J.: Big Data privacy: challenges to privacy principles and models. Data Sci. Eng. 1(1), 21\u201328 (2016)","journal-title":"Data Sci. Eng."},{"key":"4_CR38","first-page":"xxvii","volume":"11","author":"O Tene","year":"2012","unstructured":"Tene, O., Polonetsky, J.: Big Data for all: privacy and user control in the age of analytics. Nw. J. Tech. Intell. Prop. 11, xxvii (2012)","journal-title":"Nw. J. Tech. Intell. Prop."},{"key":"4_CR39","doi-asserted-by":"crossref","unstructured":"Ulusoy, H., Colombo, P., Ferrari, E., Kantarcioglu, M., Pattuk, E.: GuardMR: fine-grained security policy enforcement for MapReduce systems. In: Proceedings of ACM ASIACCS, pp. 285\u2013296 (2015)","DOI":"10.1145\/2714576.2714624"},{"key":"4_CR40","doi-asserted-by":"crossref","unstructured":"Ulusoy, H., Kantarcioglu, M., Pattuk, E., Hamlen, K.: Vigiles: fine-grained access control for MapReduce systems. In: Proceedings of IEEE Big Data Congress, pp. 40\u201347 (2014)","DOI":"10.1109\/BigData.Congress.2014.16"},{"issue":"4","key":"4_CR41","first-page":"19","volume":"11","author":"SDCD Vimercati","year":"2015","unstructured":"Vimercati, S.D.C.D., Foresti, S., Paraboschi, S., Pelosi, G., Samarati, P.: Shuffle index: efficient and private access to outsourced data. ACM TOS 11(4), 19 (2015)","journal-title":"ACM TOS"},{"key":"4_CR42","doi-asserted-by":"crossref","unstructured":"Wang, L., Wijesekera, D., Jajodia, S.: A logic-based framework for attribute based access control. In: Proceedings of ACM FMSE, pp. 45\u201355 (2004)","DOI":"10.1145\/1029133.1029140"},{"key":"4_CR43","volume-title":"Hadoop: The Definitive Guide","author":"T White","year":"2012","unstructured":"White, T.: Hadoop: The Definitive Guide. O\u2019Reilly Media, Inc., Sebastopol (2012)"},{"key":"4_CR44","doi-asserted-by":"crossref","unstructured":"Wrona, K., Oudkerk, S., Armando, A., Ranise, S., Traverso, R., Ferrari, L., McEvoy, R.: Assisted content-based labelling and classification of documents. In: Proceedings of IEEE ICMCIS, pp. 1\u20137 (2016)","DOI":"10.1109\/ICMCIS.2016.7496589"},{"key":"4_CR45","doi-asserted-by":"crossref","unstructured":"Yu, S., Wang, C., Ren, K., Lou, W.: Attribute based data sharing with attribute revocation. In: Proceedings of ACM ASIACCS, pp. 261\u2013270 (2010)","DOI":"10.1145\/1755688.1755720"},{"issue":"5","key":"4_CR46","first-page":"994","volume":"80","author":"J Zhao","year":"2014","unstructured":"Zhao, J., Wang, L., Tao, J., Chen, J., Sun, W., Ranjan, R., Ko\u0142odziej, J., Streit, A., Georgakopoulos, D.: A security framework in G-Hadoop for Big Data computing across distributed cloud data centres. JCSS 80(5), 994\u20131007 (2014)","journal-title":"JCSS"}],"container-title":["Lecture Notes in Computer Science","Data and Applications Security and Privacy XXXI"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-61176-1_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T21:06:31Z","timestamp":1750367191000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-61176-1_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319611754","9783319611761"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-61176-1_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"22 June 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DBSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP Annual Conference on Data and Applications Security and Privacy","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Philadelphia","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 July 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21 July 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dbsec2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/dbsec2017.ittc.ku.edu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}