Enhancing NoSQL datastores with fine-grained context-aware access control: a preliminary study on MongoDB
by Pietro Colombo; Elena Ferrari
International Journal of Cloud Computing (IJCC), Vol. 6, No. 4, 2017

Abstract: NoSQL datastores are getting increasing attention by companies and organisation for the ease and efficiency of handling high volumes of heterogeneous and unstructured data. Nowadays, as majority of these systems are available as cloud based services, this potentially favours their use even among small companies that could not afford the management of server farms for local cluster based solutions. However, besides all their benefits in terms of performance, availability and scalability as well as support for advanced analysis forms, NoSQL datastores also have some weaknesses, such as poor natively provided support for data protection. Recent surveys show that several companies consider the poor support for security features of NoSQL databases as a valid reason not to use them (Intel Co., 2013). In this paper, we do a first step to overcome these weaknesses by first proposing a roadmap to enhance the data protection functionalities of NoSQL datastores. Then, we illustrate our preliminary experience of designing an enhanced access control mechanism for MongoDB (http://www.mongodb.org), which, according to recent surveys (DB-Engines Ranking, 2017) ranks as the most popular NoSQL database.

Online publication date: Mon, 05-Mar-2018

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Cloud Computing (IJCC):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com