{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:45:32Z","timestamp":1783788332243,"version":"3.55.0"},"reference-count":93,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Strategic Priority Research Program of Chinese Academy of Sciences","award":["XDC02010300"],"award-info":[{"award-number":["XDC02010300"]}]},{"name":"Ripple University Blockchain Research Initiative"},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["71871090"],"award-info":[{"award-number":["71871090"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3149544","type":"journal-article","created":{"date-parts":[[2022,2,8]],"date-time":"2022-02-08T20:38:18Z","timestamp":1644352698000},"page":"1104-1123","source":"Crossref","is-referenced-by-count":14,"title":["SparkAC: Fine-Grained Access Control in Spark for Secure Data Sharing and Analytics"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2279-1988","authenticated-orcid":false,"given":"Tao","family":"Xue","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0658-0742","authenticated-orcid":false,"given":"Yu","family":"Wen","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8196-2436","authenticated-orcid":false,"given":"Bo","family":"Luo","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, University of Kansas, Lawrence, KS, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1583-641X","authenticated-orcid":false,"given":"Gang","family":"Li","sequence":"additional","affiliation":[{"name":"Centre for Cyber Security Research and Innovation, Deakin University, Geelong, VIC, Australia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8256-6988","authenticated-orcid":false,"given":"Yingjiu","family":"Li","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Science, University of Oregon, Eugene, OR, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Boyang","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Zheng","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yanfei","family":"Hu","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dan","family":"Meng","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2497680"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.14778\/2850583.2850595"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2017.123"},{"key":"ref56","year":"0"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2016.7498402"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14778\/2994509.2994530"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2014.2312112"},{"key":"ref58","first-page":"273","article-title":"Provenance for generalized map and reduce workflows","author":"ikeda","year":"2011","journal-title":"Proc Conf Innov Data Syst Res"},{"key":"ref53","author":"hu","year":"2013","journal-title":"Guide to Attribute Based Access Control (ABAC) Definition and Considerations (DRAFT)"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660348"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-006-0023-0"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1145\/1376616.1376726"},{"key":"ref10","article-title":"Data governance model","year":"2021"},{"key":"ref54","article-title":"Gitbook","year":"2019"},{"key":"ref17","first-page":"15","article-title":"Resilient Distributed Datasets: A fault-tolerant abstraction for in-memory cluster computing","author":"zaharia","year":"2012","journal-title":"Proc USENIX Symp Netw Syst Des Implementation"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2723372.2742797"},{"key":"ref19","article-title":"TPC-DS standard specification version 2.3.0, transaction processing performance council","year":"2016"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2012.6297930"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/1377836.1377857"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.48"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-5906-5_752"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/3230833.3232816"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61893-7_25"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2014.01.015"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/2463676.2467797"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29011-4_23"},{"key":"ref89","first-page":"1","article-title":"Scalable access controls for lineage","author":"rosenthal","year":"2009","journal-title":"Proc 1st Workshop Theory Pract Provenance"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3064176.3064184"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2043556.2043566"},{"key":"ref42","first-page":"1205","article-title":"PeX: A permission check analysis framework for linux kernel","author":"zhang","year":"2019","journal-title":"Proc 28th USENIX Secur Symp"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134607"},{"key":"ref41","article-title":"AMD memory encryption","author":"kaplan","year":"2016"},{"key":"ref85","article-title":"MrLazy: Lazy runtime label propagation for MapReduce","author":"akoush","year":"2014","journal-title":"Proc 6th USENIX Workshop Hot Top Cloud Comput"},{"key":"ref44","first-page":"283","article-title":"Opaque: An oblivious and encrypted distributed analytics platform","author":"zheng","year":"2017","journal-title":"Proc 14th USENIX Symp Netw Syst Des Implementation"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2015.2399296"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1989323.1989346"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/2714064.2660212"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/IE.2015.21"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3205977.3205998"},{"key":"ref9","article-title":"Introducing row\/column level access control for Apache Spark","year":"2017"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2730843"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1016\/j.nbd.2018.05.026"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.bdr.2015.08.001"},{"key":"ref5","author":"chambers","year":"2018","journal-title":"Spark The definitive guide big data processing made simple"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ICSMC.2000.886455"},{"key":"ref81","first-page":"28","article-title":"Apache Flink: Stream and batch processing in a single engine","volume":"36","author":"carbone","year":"2015","journal-title":"Bulletin IEEE Comput Soc Tech Committee Data Eng"},{"key":"ref40","first-page":"857","article-title":"Sanctum: Minimal hardware extensions for strong software isolation","author":"costan","year":"2016","journal-title":"Proc 25th USENIX Secur Symp"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23210"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2015.2388446"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-012-0280-z"},{"key":"ref35","first-page":"599","article-title":"GraphX: Graph processing in a distributed dataflow framework","author":"gonzalez","year":"2014","journal-title":"Proc 11th USENIX Symp Oper Syst Des Implementation"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2010.5447738"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3183713.3190664"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3035918.3056103"},{"key":"ref37","doi-asserted-by":"crossref","first-page":"722","DOI":"10.1145\/3324884.3416641","article-title":"BigFuzz: Efficient Fuzz Testing for Data Analytics Using Framework Abstraction","author":"zhang","year":"2020","journal-title":"IEEE\/ACM Int Conference on Automated Software Engineering (ASE)"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2517349.2522737"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3427228.3427640"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1145\/772862.772864"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3180457.3180463"},{"key":"ref74","author":"pfleeger","year":"2002","journal-title":"Security in Computing"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/2960414.2960416"},{"key":"ref77","year":"0"},{"key":"ref32","first-page":"1","article-title":"MLlib: Machine learning in Apache Spark","volume":"17","author":"meng","year":"2016","journal-title":"J Mach Learn Res"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/CSFW.1998.683168"},{"key":"ref2","article-title":"Privacy by design in big data: An overview of privacy enhancing technologies in the era of big data analytics","author":"d\u2019acquisto","year":"2015"},{"key":"ref1","author":"corti","year":"2019","journal-title":"Managing and sharing research data A Guide to Good Practice"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2488368"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978366"},{"key":"ref71","article-title":"Going beyond the Sandbox: An overview of the new security architecture in the java development kit 1.2","author":"gong","year":"1997","journal-title":"Proc USENIX Symp Internet Technol Syst"},{"key":"ref70","year":"0"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2535505"},{"key":"ref72","article-title":"A secure environment for untrusted helper applications: Confining the wily hacker","author":"goldberg","year":"1996","journal-title":"Proc 6th Conf USENIX Secur Symp Focusing Appl Cryptography"},{"key":"ref24","first-page":"297","article-title":"Airavat: Security and privacy for MapReduce","author":"roy","year":"2010","journal-title":"Proc USENIX Symp Netw Syst Des Implementation"},{"key":"ref68","author":"hoffman","year":"2013","journal-title":"Apache Flume Distributed Log Collection for Hadoop"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/2714576.2714624"},{"key":"ref67","year":"0"},{"key":"ref26","year":"0"},{"key":"ref25","year":"0"},{"key":"ref69","year":"0"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2014.6835958"},{"key":"ref64","year":"0"},{"key":"ref63","year":"0"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.02.052"},{"key":"ref66","article-title":"Kafka: A distributed messaging system for log processing","author":"kreps","year":"2011","journal-title":"NetDB"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataCongress.2015.99"},{"key":"ref65","article-title":"HDFS architecture guide","author":"borthakur","year":"2008","journal-title":"Apache Hadoop Project"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61176-1_4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3078861.3084164"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-27615-7_4"},{"key":"ref60","first-page":"3","article-title":"Maintenance of materialized views: Problems, techniques, and applications","volume":"18","author":"gupta","year":"1995","journal-title":"Data Eng Bull"},{"key":"ref62","year":"0"},{"key":"ref61","article-title":"UCI Repository of ML Databases","author":"blake","year":"1998"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09707647.pdf?arnumber=9707647","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,10]],"date-time":"2023-04-10T19:47:23Z","timestamp":1681156043000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9707647\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":93,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3149544","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}