Abstract
Recent developments in information and web technologies have resulted in huge data outburst. This has posed challenging demands in efficiently storing and managing large volume of structured and unstructured data. Traditional relational models exposed its weakness so much so that need for new data storage and management techniques became highly desirable. This resulted in the birth of NoSQL databases. Several business houses that churn out large volume of data have been successfully using NoSQL databases to store bulk of their data. Since the prime objective of such DB’s were efficient data storage and retrieval, core security features like data security techniques, proper authentication mechanisms etc. were given least priority. MongoDB is one among the most popular NoSQL databases. It is a document oriented NoSQL database which helps in empowering business to be more agile and scalable. As MongoDB is gaining more popularity in the IT market, more and more sensitive information is being stored in it and so security issues are becoming a major concern. It does not guarantee privacy of information stored in it. This paper is about enabling security features in MongoDB for safe storage of sensitive information through “MongoKAuth” Driver, a new MongoDB client side component developed in order to automate a lot of manual configuration steps.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Okman, L., Gal-Oz, N., Gonen, Y., Gudes, E., Abramo, J.: Security issues in NoSQL databases, http://jmiller.uaa.alaska.edu/csce465fall2013/papers/okman2011.pdf
MongoDB overview, http://www.mongodb.com/mongodb.overview
Lane, A.: Securing big data-Security recommendations for hadoop and NoSql environment, https://securosis.com/assets/library/reports/SecuringBigData_FINAL.pdf
Bhatewara, A., Waghmare, K.: Improving network scalability using NoSQL database. IJACR (December 2012)
NoSQL does not have to mean no security, http://public.dhe.ibm.com/common/ssi/ecm/en/nib03019usen/NIB03019USEN.PDF
Virtual panel: Security consideration in accessing NoSQL databases, http://www.infoq.com/articles/nosql-data-security-virtual-panel
Kaur, H., Kaur, J., Kaur, K.: A review on non-relational databases, their types, advantages and disadvantages. IJERT (February 2013)
MongoDB-Security weaknesses in a typical NoSQL database, http://blog.spiderlabs.com/2013/03/mongodb-security-weaknesses-in-a-typical-nosql-database.html
Kerberos ubuntu documentation, https://help.ubuntu.com/community/kerberos
Deploy mongodb with kerberos support, http://docs.mongodb.org/manual/tutorial/control-access-mongodb-with-kerberos-authentication
Authenticate to mongodb with java driver, http://docs.monggodb.org/ecosystem/tutorial/authenticate-with-java-driver/
Kerberos- community help wiki, https://help.ubuntu.com/community/kerberos
MongoDB, http://en.wikipedia.org/wiki/MongoDB
Lakshman, A., Malik, P.: Cassandra: a decentralized structured storage system. SIGOPS Oper. Syst. Rev. 44, 35–40 (2010), http://doi.acm.org/10.1145/1773912.1773927
Securosis blog-NoSQL and no security, http://securosis.com/blog/nosql-and-nosecurity
MongoDB, Officialwebsite, http://www.mongodb.org/
NoSql does not have to mean no security, http://IBM-public.dhe.ibm.com/common/ssi/ecm/en/../NIB03019USEN.PDF
Neuman, B.C.: Kerberos: an authentication service for computer networks. Inf. Sci. Inst., Univ. of Southern California, Marina del Rey, CA, USA
Kerberos, http://www.centos.org/docs/5/html/Deployment_Guide-en-US/chkerberos.html
Arora, R.P.: Head of the Department, Computer Sc and Engg; Dehradun Institute of Technology, Garima Verma; Implementation of authentication and transaction security base on Kerberos. IJITCE (February 2011)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2015 Springer International Publishing Switzerland
About this paper
Cite this paper
Sathyadevan, S., Muraleedharan, N., Rajan, S.P. (2015). Enhancement of Data Level Security in MongoDB. In: Buyya, R., Thampi, S. (eds) Intelligent Distributed Computing. Advances in Intelligent Systems and Computing, vol 321. Springer, Cham. https://doi.org/10.1007/978-3-319-11227-5_18
Download citation
DOI: https://doi.org/10.1007/978-3-319-11227-5_18
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-11226-8
Online ISBN: 978-3-319-11227-5
eBook Packages: EngineeringEngineering (R0)