Fine-grained authorization for job execution in the Grid: Design and implementation

Concurrency and Computation: Practice and Experience

Volumn 16, Issue 5, 2004, Pages 477-488

  Keahey, Katarzyna ^a   Welch, V ^b   Lang, S ^a   Liu, B ^c   Meder, S ^b  

^a ARGONNE NATIONAL LABORATORY   (United States)

^b UNIVERSITY OF CHICAGO   (United States)

^c UNIVERSITY OF HOUSTON   (United States)

Author keywords

Authorization; Policy enforcement; Resource management

Indexed keywords

COMPUTER HARDWARE; COMPUTER SOFTWARE; ELECTRONIC COMMUNITIES; JOB ANALYSIS; PUBLIC POLICY; RESOURCE ALLOCATION;

AUTHORIZATION; GRIDS; POLICY ENFORCEMENT; RESOURCE MANAGEMENT;

COMPUTER SCIENCE;

EID: 2342428263     PISSN: 15320626     EISSN: None     Source Type: Journal    
DOI: 10.1002/cpe.827     Document Type: Article

References (21)

1. Foster I, Kesselman C, Tuecke S. The anatomy of the Grid: Enabling scalable virtual organizations. International Journal of High Performance Computing Applications 2001; 15(3):200-222.
2. Keahey K, Fredian T, Peng Q, Schissel DP, Thompson M, Foster I, Greenwald M, McCune D. Computational Grids in action: The National Fusion Collaboratory. Future Generation Computing Systems 2002; 18(8):1005-1015.
3. Czajkowski K, Foster I, Karonis N, Kesselman C, Martin S, Smith W, Tuecke S. A resource management architecture for meta-computing systems. Proceedings of the 4th Workshop on Job Scheduling Strategies for Parallel Processing. Springer: Berlin, 1998; 62-82.
4. Thompson M, Johnston W, Mudumbai S, Hoo G, Jackson K, Essiari A. Certificate-based access control for widely distributed resources. Proceedings of the 8th USENIX Security Symposium. USENIX Association, 1999. http://www.usenix.org/publications [4 March 2004].
5. Butler R, Engert D, Foster I, Kesselman C, Tuecke S, Volmer J, Welch V. Design and deployment of a national-scale authentication infrastructure. IEEE Computer 2000; 33(12):60-66.
6. Dynamic Accounts, http://www.gridpp.ac.uk/gridmapdir/ [4 March 2004].
7. Hacker T, Athey B. A methodology for account management in Grid computing environments. Proceedings of the 2nd International Workshop on Grid Computing (Lecture Notes in Computer Science), Springer: Berlin, 2001.
8. Kapadia NH, Figueiredo RJ, Fortes J. Enhancing the scalability and usability of computational Grids via logical user accounts and virtual file systems. Proceedings 10th Heterogeneous Computing Workshop, San Francisco, CA, 2001. IEEE Computer Society Press: Los Alamitos, CA, 2001.
9. Pearlman L, Welch V, Foster I, Kesselman C, Tuecke S. A community authorization service for group collaboration. IEEE Workshop on Policies for Distributed Systems and Networks (POLICY 2002). IEEE Computer Society Press: Los Alamitos, CA, 2002.
10. Lorch M, Kafura D. Supporting secure ad-hoc user collaboration in Grid environments. Proceedings of the 3rd International Workshop on Grid Computing - Grid 2002 (Lecture Notes in Computer Science), Baltimore, MD, 2002. Springer: Berlin, 2002.
11. Chang F, Itzkovitz A, Karamacheti V. User-level resource-constrained sandboxing. Proceedings of the USENIX Windows Systems Symposium (previously USENIX-NT), 2000. http://www.usenix.org/publications [4 March 2004].
12. Bosilca G, Capello F, Djilali A, Fedak G, Hernault T, Magniette F. Performance evaluation of sandboxing techniques for peer-to-peer computing.
13. Goldberg I, Wagner D, Thomas R, Brewer E. A secure environment for untrusted helper applications - confining the wily hacker. Proceedings of the 1996 USENIX Security Symposium. USENIX Association, 1996.
14. Foster I, Kesselman C, Nick J, Tuecke S. The physiology of the Grid: An open Grid services architecture for distributed systems integration. Open Grid Service Infrastructure WG, Global Grid Forum, 2002.
15. OASIS eXtensible Access Control Markup Language (XACML) Committee Specification 1.0 (Revision 1). http://www.oasis-open.org/committees/download. php/2406/oasis-xacm/-1.0.pdf [4 March 2004].
16. XRML. http://www.xrml.org/get_XrML.asp [4 March 2004].
17. Humphrey M, Knabe F, Ferrari A, Grimshaw A. Accountability and control of process creation in metasystems. Proceedings of the 2000 Network and Distributed System Security Symposium, 2000.
18. Condor Version 6.4.7 Manual: Security In Condor. http://www.cs.wisc.edu/ condor/manual/v6.4/3_7Security_In.html [4 March 2004].
19. Tuecke S, Czajkowski K, Foster I, Frey J, Graham S, Kesselman C. Grid Service Specification. Open Grid Service Infrastructure WG, Global Grid Forum, 2003.
20. VMware. http://www.vmware.com/ [4 March 2004].
21. User Mode Linux (UML). http://user-mode-linux.sourceforge.net/ [4 March 2004].