Countering security threats in service-oriented on-demand grid computing using sandboxing and trusted computing techniques

Journal of Parallel and Distributed Computing

Volumn 66, Issue 9, 2006, Pages 1189-1204

  Smith, Matthew ^a   Friese, Thomas ^a   Engel, Michael ^a   Freisleben, Bernd ^a  

^a PHILIPPS UNIVERSITY MARBURG   (Germany)

Author keywords

Grid security; On demand computing; Sandboxing; Service orientation; Trusted computing; Virtualization

Indexed keywords

COMPUTER APPLICATIONS; COMPUTER SOFTWARE; INFORMATION SERVICES; SECURITY SYSTEMS; VIRTUAL REALITY;

GRID SECURITY; ON-DEMAND COMPUTING; SANDBOXING; SERVICE-ORIENTATION; TRUSTED COMPUTING; VIRTUALIZATION;

COMPUTATION THEORY;

EID: 33746953456     PISSN: 07437315     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.jpdc.2006.04.009     Document Type: Article

References (38)

1. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell'Agnello, Á. Frohner, A. Gianoli, K. Lörentey, F. Spataro, VOMS, an authorization system for virtual organizations, in: Proceedings of the European Across Grids Conference, Lecture Notes in Computer Science, vol. 2970, Santiago de Compostela, Spain, Springer, Berlin, 2003, pp. 33-40.
2. Apache Software Foundation, Apache Web Services Project, 2004, 〈http://ws.apache.org/axis/〉.
3. Barham P., Dragovic B., Fraser K., Hand S., Harris T., Ho A., Neugebauer R., Pratt I., and Warfield A. Xen and the art of virtualization. Proceedings of the ACM Symposium on Operating Systems Principles (SOSP), Bolton Landing, USA (2003), ACM Press, New York 164-177
4. BMBF, D-Grid, 2006, 〈http://www.d-grid.de/〉.
5. Chadwick D.W., Otenko A., and Ball E. Role-based access control with X.509 attribute certificates. IEEE Internet Comput. 7 2 (2003) 62-69
6. Clark B., Deshane T., Dow E., Evanchik S., Finlayson M., Herne J., and Matthews J.N. Xen and the art of repeated research. Proceedings of the USENIX 2004 Annual Technical Conference (2004) 135-144
7. Computer Security Institute, CSI/FBI Computer Crime and Security Survey, 2004.
8. C.C. Corp, 〈http://www.cryptocard.com〉.
9. I. Foster, D. Berry, A. Djaoui, A. Grimshaw, B. Horn, H. Kishimoto, F. Maciel, A. Savvy, F. Siebenlist, R. Subramaniam, J. Treadwell, J. von Reich, The Open Grid Services Architecture, Version 1.0, 2004, 〈https://forge.gridforum.org/projects/ogsa-wg/document/draft-ggf-ogsa-spec/en/〉.
10. Foster I., Kesselman C., Nick J., and Tuecke S. The physiology of the grid: an open grid services architecture for distributed systems integration. Open Grid Service Infrastructure WG, Global Grid Forum (2002)
11. Friese T., Smith M., and Freisleben B. Hot service deployment in an ad hoc grid environment. Proceedings of the Second International Conference on Service Oriented Computing (2004), ACM Press, New York, USA 75-83
12. IBM, E-business on demand: the race is on Whitepaper, 2003, 〈http://www-5.ibm.com/e-business/de/literature/〉.
13. IBM Watson Research-Global Security Analysis Lab, TCPA Resources, 〈http://www.research.ibm.com/gsal/tcpa/〉.
14. ITSS, Multiple Unix compromises on campus-stanford ITSS security alert, 2004.
15. Keahey K., Doering K., and Foster I. From sandbox to playground: dynamic virtual environments in the grid. Fifth International Workshop on Grid Computing (Grid 2004) (2004)
16. B. Krebs, Hackers strike advanced computing networks, Washington Post, 2004.
17. M. Myers, et al., RFC2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol (OCSP), 〈http://www.ietf.org/rfc/rfc2560.txt〉.
18. Novotny J., Tuecke S., and Welch V. An online credential repository for the grid: MyProxy. Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing (2001) 104-111
19. OASIS, Web Services Resource Framework, 2004, 〈http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=wsrf〉.
20. Pearlman L., Welch V., Foster I., Kesselman C., and Tuecke S. A community authorization service for group collaboration. Proceedings of the IEEE Third International Workshop on Policies for Distributed Systems and Networks, Monterey, USA (2003), IEEE Computer Society, Silver Spring, MD 50-59
21. Pourzandi M., Gordon D., Yurcik W., and Koenig G. Clusters and security: distributed security for distributed systems. Cluster Security Workshop at the Fifth IEEE/ACM International Symposium on Cluster Computing and the Grid (CCGrid) (2005)
22. Provos N. Improving host security with system call policies. Proceedings of the 12th USENIX Security Symposium, Washington, USA (2003) 257-272
23. D. Safford, The need for TCPA, Whitepaper, IBM Research, 2002.
24. D. Safford, M. Zohar, A Trusted Linux Client (TLC), IBM Research, 2005.
25. D. Safford, M. Zohar, A. Boulanger, Trusted computing for Linux, IBM Research, 2005.
26. SANS Institute, The twenty most critical internet security vulnerabilities, November 2005, 〈http://www.sans.org/top20/〉.
27. Santhanam S., Elango P., Arpaci-Dusseau A., and Livny M. Deploying virtual machines as sandboxes for the grid. Second Workshop on Real, Large Distributed Systems (2005) 712
28. SecureID, 〈http://www.ctrl-key.co.uk/index.htm〉.
29. M. Smith, T. Friese, M. Engel, B. Freisleben, G. Koenig, W. Yurcik, Security issues in on-demand grid and cluster computing, 2nd International Workshop on Cluster security (in eonjuction with the 6th IEEE International Symposium on Cluster computing and the Grid),May 2006.
30. Smith M., Friese T., and Freisleben B. Towards a service-oriented ad hoc grid. Proceedings of the Third International Symposium on Parallel and Distributed Computing, Cork, Ireland (2004), IEEE Press, New York 201-208
31. Smith M., Friese T., and Freisleben B. Intra-engine service security for grids based on WSRF. Proceedings of Cluster Computing and Grid, Cardiff, UK (2005) 644-653
32. Sun Microsystems, Inc., Java Native Interface Specification, 2003.
33. SWsoft, OpenVZ, 2006, 〈http://openvz.org/〉.
34. The EGEE Project, Global security architecture, EU deliverable DJRA3.1, 2004.
35. The Globus Project, The Globus Toolkit 4.0 (GT Version 3.9.3), 2004, 〈http://www-unix.globus.org/toolkit/downloads/development/〉.
36. The Globus Project, The Globus Toolkit 4, 2004, 〈http://www.globus.org/toolkit/〉.
37. Yurcik W., Koenig G.A., Meng X., and Greenseid J. Cluster security as a unique problem with emergent properties: issues and techniques. Proceedings of the Fifth LCI International Conference on Linux Clusters (2004)
38. Yurcik W., and Liu C. A first step toward detecting SSH identity theft in HPC cluster environments: discriminating masqueraders based on command behavior. Cluster Security Workshop at the Fifth IEEE/ACM International Symposium on Cluster Computing and the Grid (CCGrid) (2005)