{"id":"https://openalex.org/W4404181470","doi":"https://doi.org/10.14778/3685800.3685808","title":"Membrane - Safe and Performant Data Access Controls in Apache Spark in the Presence of Imperative Code","display_name":"Membrane - Safe and Performant Data Access Controls in Apache Spark in the Presence of Imperative Code","publication_year":2024,"publication_date":"2024-08-01","ids":{"openalex":"https://openalex.org/W4404181470","doi":"https://doi.org/10.14778/3685800.3685808"},"language":"en","primary_location":{"id":"doi:10.14778/3685800.3685808","is_oa":false,"landing_page_url":"https://doi.org/10.14778/3685800.3685808","pdf_url":null,"source":{"id":"https://openalex.org/S4210226185","display_name":"Proceedings of the VLDB Endowment","issn_l":"2150-8097","issn":["2150-8097"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the VLDB Endowment","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114567658","display_name":"Andrei Paduroiu","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrei Paduroiu","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031737402","display_name":"Sungheun Wi","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sungheun Wi","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103326209","display_name":"Yan Yan","orcid":"https://orcid.org/0000-0003-1980-1169"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yan Yan","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066273966","display_name":"Roni Burd","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Roni Burd","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025094275","display_name":"Ruhollah Farchtchi","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruhollah Farchtchi","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051078721","display_name":"Giovanni Matteo Fumarola","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Matteo Fumarola","raw_affiliation_strings":["Amazon Web Services"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon Web Services","institution_ids":["https://openalex.org/I1311688040"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1311688040"],"apc_list":null,"apc_paid":null,"fwci":2.0266,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.90233493,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"17","issue":"12","first_page":"3813","last_page":"3826"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spark","display_name":"SPARK (programming language)","score":0.8467466235160828},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.625611424446106},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5921187400817871},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.37559688091278076},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3511772155761719},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3469761610031128}],"concepts":[{"id":"https://openalex.org/C2781215313","wikidata":"https://www.wikidata.org/wiki/Q3493345","display_name":"SPARK (programming language)","level":2,"score":0.8467466235160828},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.625611424446106},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5921187400817871},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.37559688091278076},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3511772155761719},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3469761610031128},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.14778/3685800.3685808","is_oa":false,"landing_page_url":"https://doi.org/10.14778/3685800.3685808","pdf_url":null,"source":{"id":"https://openalex.org/S4210226185","display_name":"Proceedings of the VLDB Endowment","issn_l":"2150-8097","issn":["2150-8097"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the VLDB Endowment","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5699999928474426,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W1964691382","https://openalex.org/W1991271936","https://openalex.org/W2014191184","https://openalex.org/W2038412523","https://openalex.org/W2042567627","https://openalex.org/W2043226436","https://openalex.org/W2081495863","https://openalex.org/W2085772207","https://openalex.org/W2096745467","https://openalex.org/W2105947650","https://openalex.org/W2134343480","https://openalex.org/W2173213060","https://openalex.org/W2177986285","https://openalex.org/W2350587909","https://openalex.org/W2902718458","https://openalex.org/W3112202346","https://openalex.org/W3196324538","https://openalex.org/W3213132294","https://openalex.org/W4380433191"],"related_works":["https://openalex.org/W1975949872","https://openalex.org/W3159871278","https://openalex.org/W2230552005","https://openalex.org/W2905242764","https://openalex.org/W3109411864","https://openalex.org/W3017846737","https://openalex.org/W4379407450","https://openalex.org/W3003280185","https://openalex.org/W2613379984","https://openalex.org/W3198126144"],"abstract_inverted_index":{"Data":[0],"Governance":[1],"is":[2],"an":[3],"increasingly":[4],"critical":[5],"feature":[6],"of":[7],"modern":[8],"cloud":[9,63],"database":[10],"systems,":[11],"enabling":[12],"administrators":[13],"to":[14,25,106,126,144,165,192],"set":[15],"granular":[16],"access":[17,37,77,105,190],"policies":[18],"on":[19,31,80],"their":[20,32,70],"data.":[21],"AWS":[22,46,62],"customers":[23],"want":[24],"define":[26],"row":[27],"or":[28,118],"column":[29],"filtering":[30],"blob":[33],"storage":[34],"data":[35,189],"and":[36,51,66,87,93,150,195,202],"it":[38],"using":[39,177],"popular":[40],"tools":[41],"such":[42,114,129],"as":[43,115,130],"Apache":[44],"Spark.":[45],"EMR":[47],"provides":[48],"a":[49,101,141],"managed":[50],"serverless":[52],"solution":[53],"that":[54],"lets":[55],"users":[56],"run":[57],"Spark":[58,83,159,197],"jobs":[59],"in":[60,97,124,161,163],"the":[61,75,90,158],"with":[64,148,169,199],"imperative":[65,151],"declarative":[67,149],"programming":[68],"against":[69],"data,":[71],"while":[72,172],"securely":[73],"enforcing":[74],"fine-grained":[76],"controls":[78,191],"defined":[79],"those":[81],"datasets.":[82],"runs":[84],"its":[85,107],"compiler":[86],"scheduler":[88],"alongside":[89],"user":[91],"application":[92],"embeds":[94],"user-defined":[95],"functions":[96],"query":[98,146,167],"plans,":[99],"giving":[100],"threat":[102],"actor":[103],"direct":[104],"memory":[108],"space.":[109],"This":[110],"introduces":[111],"attack":[112],"vectors":[113],"information":[116],"disclosure":[117],"privilege":[119],"escalation":[120],"during":[121],"policy":[122],"enforcement,":[123],"addition":[125],"well-researched":[127],"threats":[128],"SQL":[131,194],"side":[132],"channel":[133],"attacks.":[134],"In":[135],"this":[136],"paper,":[137],"we":[138],"present":[139],"Membrane:":[140],"novel":[142],"approach":[143,182],"secure":[145],"plans":[147,168],"code.":[152],"The":[153,181],"innovation":[154],"comes":[155],"from":[156],"splitting":[157],"driver":[160],"two":[162],"order":[164],"rewrite":[166],"security":[170],"boundaries":[171],"avoiding":[173],"traditional":[174],"tradeoffs":[175],"when":[176],"container":[178],"isolation":[179],"techniques.":[180],"described":[183],"herein":[184],"enables":[185],"applying":[186],"fine":[187],"grained":[188],"both":[193],"map-reduce":[196],"jobs,":[198],"negligible":[200],"performance":[201],"cost":[203],"differences.":[204]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}