Access control for big data using data content

Conventional database access control models have difficulties in dealing with big data, especially for the features of volume, variety and velocity. To address the problem, we introduce the Content-based Access Control (CBAC) model for content-centric information sharing. As a complement to conventional models, CBAC makes access control decisions based on the content similarity between user credentials and data content dynamically. We present an enforcement mechanism for CBAC exploiting Oracle's Virtual Private Database (VPD). Experimental results show that CBAC makes reasonable access control decision with a small overhead.