Using a virtual machine to protect sensitive Grid resources

Concurrency and Computation: Practice and Experience

Volumn 19, Issue 14, 2007, Pages 1917-1935

  Zhao, Xin ^a   Borders, Kevin ^a   Prakash, Atul ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

Grid computing; RPC; Virtual machine

Indexed keywords

COMPUTER OPERATING SYSTEMS; INFORMATION TECHNOLOGY; INTRUSION DETECTION; NETWORK SECURITY; VIRTUAL REALITY;

GRID SYSTEMS; SECURITY PROTECTIONS; SYSTEM RESOURCES; VIRTUAL MACHINES;

GRID COMPUTING;

EID: 34548775028     PISSN: 15320626     EISSN: 15320634     Source Type: Journal    
DOI: 10.1002/cpe.1134     Document Type: Article

References (37)

1. Foster IT. The anatomy of the Grid: Enabling scalable virtual organizations. Proceedings of the 7th International Euro-Par Conference on Parallel Processing (Euro-Par '01), London, 2001. Springer: New York, 2001.
2. Foster I, Kesselman C (eds.). The Grid: Blueprint for a New Computing Infrastructure. Morgan Kaufmann: San Fransisco, CA, 1999.
3. Foster I, Kesselman C. Globus: A metacomputing infrastructure toolkit. International Journal of Supercomputer Applications 1997; 11(2):115-128.
4. Zalewski M. Remote vulnerability in SSH daemon CRC32 compensation attack detector, February 2001. http://www.bindview.com/Services/RAZOR/Advisories/2001/ adv.sshlcrc.cfm [September 2006].
5. NetFilter/IPTables Project Team. What is netfilter/iptables? http://www.netfilter.org [September 2006].
6. McGrath R. Chroot-run command or interactive shell with special root directory. The Linux Manual Pages. Free Software Foundation, 2004.
7. Goldberg I, Wagner D, Thomas R, Brewer E. A secure environment for untrusted helper applications. Proceedings of the 6th USENIX Security Symposium, San Jose, CA, 1996. USENIX Association: Berkeley, CA, 1996; 1-13.
8. Dodonov E, Sousa JQ, Guardia HC. Gridbox: Securing hosts from malicious and greedy applications. Proceedings of the 2nd Workshop on Middleware for Grid Computing, New York, NY, 2004. ACM Press: New York, 2004; 17-22.
9. Loscocco P, Smalley S. Integrating flexible support for security policies into the linux operating system. Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference. USENIX Association: Berkeley, CA, 2001; 29-42.
10. Butt AR, Adabala S, Kapadia NH, Figueiredo RJ, Fortes JAB. Grid-computing portals and security issues. Journal of Parallel and Distributed Computing 2003; 63(10): 1006-1014.
11. Kernel brk() vulnerability. http://seclists.org/lists/bugtraq/2003/Dec/ 0064.html [September 2006].
12. Sunderam VS. PVM: A framework for parallel distributed computing. Concurrency: Practice and Experience 1990; 2(4):315-339.
13. Sugerman J, Venkitachalam G, Lim B. Virtualizing I/O devices on VMware workstation's hosted virtual machine monitor. Proceedings of the General Track: 2002 USENIX Annual Technical Conference, Berkeley, CA, 2001. USENIX Association: Berkeley, CA, 2001; 1-14.
14. Barham P, Dragovic B, Fraser K, Hand S, Harris T, Ho A, Neugebauer R, Pratt I, Warfield A. Xen and the art of virtualization. Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP '03), New York, NY, 2003. ACM Press: New York, 2003; 164-177.
15. SWsoft Inc. Virtuozzo for Windows and Linux server virtualization. http://www.swsoft.com/en/products/virtuozzo/ [September 2006].
16. Spafford EH. Crisis and aftermath. Communications of the ACM 1989; 32(6):678-687.
17. Schuba CL, Krsul IV, Kuhn MG, spafford EH, Sundaram A, Zamboni D. Analysis of a denial of service attack on tcp. Proceedings of the 1997 IEEE Symposium on Security and Privacy (SP '97), Washington, DC, 1997. IEEE Computer Society Press: Los Alamitos, CA, 1997; 208.
18. de Vivo M, Carrasco E, Isern G, de Vivo GO. A review of port scanning techniques. SIGCOMM Computer Communication Review 1999; 29(2):41-48.
19. Bradley T. Introduction to packet sniffing, http://netsecurity.about.com/ cs/hackertools/a/aal21403.htm [September 2006].
20. A new Adore rootkit. http://lwn.net/Articles/75990 [September 2006].
21. Beale J. Detecting server compromises. Information Security Magazine. TechTarget, 2003. Available at: http://infosecuritymag.techtarget. com/2003/feb/linuxguru.shtml.
22. Aumage O, Mercier G, Namyst R. MPICH/Madeleine: A true multi-protocol MPI for high performance networks. Proceedings of the 15th International Parallel and Distributed Processing Symposium (IPDPS '01), Washington, DC, 2001. IEEE Computer Society Press: Los Alamitos, CA, 2001; 51.
23. Dike J. A user-mode port of the Linux kernel. Proceedings of the 4th Annual Linux Showcase and Conference, October 2000, Spenneberg R (ed.). USENIX Association: Berkeley, CA, 2000. Available at: http://www.linuxshowcase. org/2000/2000papers/papers/dike/dike.pdf [September 2006].
24. Höxer H-J, Sieh V, Waitz M. Advanced virtualization techniques for FAUmachine. Proceedings of the 11th International Linux System Technology Conference, Erlangen, Germany, 7-10 September 2004, Spenneberg R (ed.); 1-12. Available at: http://www3.informatik.uni-erlangen.de/Publications/ Articles/hoexer.linuxkongress04/pdf [September 2006].
25. Whitaker A, Shaw M, Gribble SD. Scale and performance in the Denali isolation kernel. SIGOPS Operating System Review 2002; 36:195-209.
26. Bugnion E, Devine S, Govil K, Rosenblum M. Disco: Running commodity operating systems on scalable multiprocessors. ACM Transactions on Computer Systems 1997; 15(4):412-447.
27. Aslett M. A virtual success. Computer Business Review Online. http://www.cbronline.com/content/COMP/magazine/Articles/Servers_Mainframes/ AVirtual-Success.asp.
28. Sandberg R. The Sun network filesystem: Design, implementation, and experience. Distributed Computing Systems: Concepts and Structures, Ananda AL, Srinivasan B (ed.). IEEE Computer Society Press: Los Alamitos, CA, 1992; 300-316.
29. Leach P, Perry D. CIFS: A Common Internet File System. Microsoft Interactive Developer, November 1996. http://www.microsoft.com/mind/1196/ cifs.asp [September 1996].
30. Samba Team. Samba: Opening Windows to a wider world, http://us1.samba. org/samba [September 2006].
31. Bovet DP, Cassetti M. Understanding the Linux Kernel, Oram A (ed.). O'Reilly: Sebastopol, CA, 2000.
32. Bershad B, Anderson T, Lazowska E, Levy H. Lightweight remote procedure call. Proceedings of the 12th ACM Symposium on Operating Systems Principles (SOSP '89), New York, NY, 1989. ACM Press: New York, 1989; 102-113.
33. Garfinkel T, Rosenblum M. A virtual machine introspection based architecture for intrusion detection. Proceedings of the Network and Distributed Systems Security Symposium, February 2003. IEEE Computer Society Press: Los Alamitos, CA, 2003; 191-206.
34. Kim GH, Spafford EH. The design and implementation of Tripwire: A file system integrity checker. Proceedings of the 2nd ACM Conference on Computer and Communications Security. ACM Press: New York, 1994; 18-29.
35. Kroah-Hartman G. udev - a userspace implementation of devfs. Proceedings of the Linux Symposium, 23-26 July 2003. Available at: http://archive.linuxsymposium.org/ols2003/Proceedings/All-Reprints/ Reprint-Kroah-Hartman-OLS2003.pdf [September 2006].
36. Morton A. Using the Ext3 filesystem in 2.4 kernels. http://www.zip.com. au/~akpm/linux/ext3/ext3-usage.html [September 2006].
37. Radkov P, Yin L, Goyal P, Sarkar P, Shenoy PJ. A performance comparison of NFS and iSCSI for IP-networked storage. Proceedings of the 3rd USENIX Conference on File and Storage Technologies (FAST '04), San Francisco, CA, 2004. USENIX Association: Berkeley, CA 2004; 101-114.