Kerberos應用於雲端運算之研究

CCUR > College of Natural Science and Engineering > College of Engineering > Department of Mechanical Engineering > thesis > Item 987654321/27949

Please use this identifier to cite or link to this item: https://irlib.pccu.edu.tw/handle/987654321/27949

Title:	Kerberos應用於雲端運算之研究 A Study on the Application of Kerberos in Cloud Computing
Authors:	萬明峰 Wan, Ming-Feng
Contributors:	機械工程學系數位機電碩士班
Keywords:	雲端運算資訊安全 Cloud Computing Hadoop Kerberos
Date:	2014-06
Issue Date:	2014-09-04 10:28:30 (UTC+8)
Abstract:	近年來雲端運算之應用已成為趨勢，一些知名的雲端平台諸如Google App Engine、Yahoo Application Platform或Amazon Web Service皆是以Hadoop為發展雲端平台的基礎，Hadoop是依據Google發表的MapReduce所實作的分散式雲端系統，它是一個開源、且以Java為基礎的軟體框架，支援在分散式計算環境中處理大量的資料集。因此，人們可以輕易架設自己的私有雲以執行分散式運算，然而當雲端運算的使用變得很方便時，資訊安全顯得更重要。本論文即著眼於此，主要是在Hadoop操作平台之基礎上，考量安全性之需求而設計一具增強使用者身份鑑別(認證)機制之系統。本論文實驗系統係架構於Linux作業系統平台之上，再以Linux KVM(Kernel-based Virtual Machine)模擬多台電腦之雲端環境，並於此系統上使用Hadoop之雲端運算軟體。其後，再結合Kerberos第5版鑑別機制以模擬與實作雲端平台之使用者身分驗證系統以達到安全性之要求，實驗結果驗證確屬可行並具實用價值。 Recently, the applications of cloud computing have become a trend. Some of well-known cloud platforms such as Google App Engine, Yahoo Application Platform and Amazon web Service are based on Hadoop software inspired by Google's MapReduce. Hadoop is a free, Java-based programming framework that supports the processing of large data sets in a distributed computing environment. Because it’s an open source, people can build a private cloud to perform distributed computing. However, as the use of cloud computing becomes very convenient, information security is more important. In order to provide secure utilization of Hadoop, an identification authentication scheme has been proposed in this study. To experiment on our proposed scheme, Linux operating system has been adopted as the platform in this study. It is implemented based on Linux KVM(Kernel-based Virtual Machine) to simulate cloud computing with multi-clients system. In the system, Hadoop is used as a cloud computing platform. After then, Kerberos 5 has been implemented on this system for performing authentication of users’ identification. In order to provide assurance of information security, some analysis is performed based on the implemented cloud computing system. The enhancement of information security is also proposed to remedy the shortcoming of the implemented cloud computing system. Experimental results demonstrate the feasibility of our proposed scheme and it is validated for physical applications.
Appears in Collections:	[Department of Mechanical Engineering ] thesis

Files in This Item:

There are no files associated with this item.

View Licence

Loading...