Big data platform security protection method

The invention relates to a big data platform security protection method. In the method, related components of a hadoop big data platform are isolated from a client by using a firewall, the communication between the client and the related components of the hadoop big data platform is performed by a data permission gateway, and a permission management component performs authentication, authorization, and auditing. In the security protection method, no single-point fault nodes exists, and the performance can be flexibly extended according to requirements; the Hadoop node extension has no impact on the security management, and the management is convenient and simple; and the client uses the software of the own protocol to communicate with the data authority gateway, encryption and automatic load balancing are supported, and the influence on the service caused by the single-point fault of any device can be prevented. 本发明涉及种大数据平台安全防护方法,所述的方法是将hadoop大数据平台相关组件使用防火墙与客户端进行隔离，客户端与hadoop大数据平台相关组件通信需通过数据权限网关进行，由权限管理组件进行认证