通信学报2017，Vol.38Issue(7)：56-69,14.DOI:10.11959/j.issn.1000-436x.2017143
基于多属性决策及污点跟踪的大数据平台敏感信息泄露感知方法
Sensitive information leakage awareness method for big data platform based on multi-attributes decision-making and taint tracking
摘要
Abstract
Based on multiple-attribute-decision-making and taint tracking,a sensitive-information leakage awareness me-thod was proposed, some relative known vulnerabilities in big data platform was analyzed, target database was extracted and extended, multiple attribute model was built combined with operation semantic, a grey-correlation-analysis and tech-nique for order preference by similarity to an ideal solution based sensitivity measurement was designed in combination of regular operation semantic for sensitive information. A prototype was built based on taint tracking, sensi-tive-information leakage vulnerabilities could be verified and discovered across big data platforms in this method. The experiment shows that verification for known bugs and discovery for unknown vulnerabilities can be accomplished based on leakage scenarios, which can be regarded as a support for protection in dynamic sensitive information data flow.关键词
多属性决策/污点跟踪/大数据平台/敏感信息Key words
multi-attributes decision making/taint tracking/big data platform/sensitive information分类
信息技术与安全科学引用本文复制引用
沙乐天,肖甫,陈伟,孙晶,王汝传..基于多属性决策及污点跟踪的大数据平台敏感信息泄露感知方法[J].通信学报,2017,38(7):56-69,14.基金项目
国家自然科学基金资助项目(No.61373137) （No.61373137）
江苏省高校自然科学研究计划重大基金资助项目(No.14KJA520002) （No.14KJA520002）
江苏省自然科学基金资助项目(No.BK20161516) The National Natural Science Foundation of China (No. 61373137), Major Program for Natural Science Foundation of Jiangsu Higher Education Institutions (No.14KJA520002), The Nature Science Foundation of Jiangsu Province (No.BK20161516) （No.BK20161516）
