Grid security: Next steps

Information Security Technical Report

Volumn 12, Issue 3, 2007, Pages 113-122

  Martin, Andrew ^a   Yau, Po Wah ^b  

^a UNIVERSITY OF OXFORD   (United Kingdom)

^b UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTATIONAL METHODS; DATA VISUALIZATION; GRID COMPUTING; MATHEMATICAL MODELS; PROBLEM SOLVING;

DATA GRIDS; EMERGING ARCHITECTURES; TRUSTED COMPUTING;

SECURITY OF DATA;

EID: 35348980286     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.istr.2007.05.009     Document Type: Article

References (51)

1. Allen M. Do-it-yourself climate prediction. Nature 401 6754 (Oct 1999) 642
2. Anderson D.P. BOINC: a system for public-resource computing and storage. Proceedings of the fifth IEEE/ACM international workshop on grid computing (GRID '04), Pittsburgh, USA, November 8, 2004 (Nov 2004), IEEE Computer Society 4-10
3. Balfe S., Lakhani A.D., and Patterson K.G. Trusted computing: providing security for peer-to-peer networks. In: Caronni G., et al. (Ed). Proceedings of the fifth international conference on peer-to-peer computing (P2P '05), Konstanz, Germany, August 31-September 2, 2005 (Aug-Sep 2005), IEEE Computer Society 117-124
4. Basney J., Humphrey M., and Welch V. The MyProxy online credential repository. Software Pract Exper 35 9 (Jul 2005) 801-816
5. Basney J, Nejdl W, Olmedilla D, Welch V, Winslett M. Negotiating trust on the Grid. In: Goble C, Kesselman C, Sure Y, editors. Proceedings of seminar 05271 - semantic grid: the convergence of technologies, Dagstuhl, Germany, July 3-8, 2005, Internationales Begegnungs- und Forschungszentrum fuer Informatik (IBFI), Schloss Dagstuhl, Germany; July 2005. p. 50-60.
6. Chadwick D. Authorisation in grid computing. Inform Secur Tech Rep 10 1 (Jan 2005) 33-40
7. Chadwick D., Otenko A., and Ball E. Role-based access control with x.509 attribute certificates. IEEE Internet Comput 7 2 (Mar 2003) 62-69
8. Cooper A., and Martin A. Towards a secure, tamper-proof grid platform. Proceedings of the sixth IEEE international symposium on cluster computing and the grid, Singapore, May 2006 (May 2006), IEEE Press 373-380
9. Cooper A., and Martin A. Towards an open, trusted digital rights management platform. Proceedings of the ACM workshop on digital rights management (DRM '06), Alexandria, Virginia, USA, October 30, 2006 (Oct 2006), ACM Press 79-88
10. Czajkowski K., Foster I., and Kesselman C. Resource and service management. In: Foster I., and Kesselman C. (Eds). The grid 2: blueprint for a new computing infrastructure (2004), Morgan Kaufmann Publishers 259-283 [2nd ed., Chapter 18]
11. Knight Christopher G, Knight Sylvia HE, Massey Neil, Aina Tolu, Christensen Carl, Frame Dave J, et al. Association of parameter, software and hardware variation with large scale behavior across 57,000 climate models. Proc Natl Acad Sci U S A. National Academy of Sciences; in press.
12. Dierks T, Allen C. The TLS protocol, version 1.0. RFC 2246, Internet and Engineering Task Force; January 1999.
13. I. Foster. Globus Toolkit version 4: software for service-oriented systems. In Proceedings of the IFIP international conference on network and parallel computing (NPC 2006), Tokyo, Japan, October 2-4, 2006, pages 2-13. [Springer-Verlag] (LNCS 3779), Oct 2006.
14. Foster I., and Karonis N.T. A grid-enabled MPI: message passing in heterogeneous distributed computing systems. Proceedings of the 1998 ACM/IEEE conference on supercomputing (CDROM), Orlando, FL, USA, November, 1998 (Nov 1998), IEEE Computer Society 1-11
15. Foster I., and Kesselman C. The grid 2: blueprint for a new computing infrastructure. 2nd ed. (2004), Morgan Kaufmann Publishers, San Francisco
16. Foster I., Kesselman C., and Tuecke S. The anatomy of the grid: enabling scalable virtual organizations. Int J High Perform Comput Appl 15 3 (2001) 200-222
17. Foster I., Kishimoto H., Savva A., et al. The open grid services architecture. Version 1.5. Open Grid Forum (Jul 2006)
18. Foster I., Kesselman C., Tsudik G., and Tuecke S. A security architecture for computational grids. Proceedings of the 5th ACM conference on computer and communications security, San Francisco, CA, United States, November 02-05 (Nov 1998), ACM Press, New York 83-92
19. Grawrock D. The Intel safer computing initiative: building blocks for trusted computing (2006), Intel Press
20. Haldar V., Chandra D., and Franz M. Semantic remote attestation - a virtual machine directed approach to trusted computing. Proceedings of the 3rd USENIX virtual machine research & technology symposium (VM '04), San Jose, CA, USA, May 6-7, 2004 (May 2004), USENIX 29-41
21. Hollingsworth J., and Tierney B. Instrumentation and monitoring. In: Foster I., and Kesselman C. (Eds). The grid 2: blueprint for a new computing infrastructure (2004), Morgan Kaufmann Publishers 319-351 [2nd ed., Chapter 20]
22. Jensen J.G. UK e-science certification authority certificate policy and certification practices statement. 1.3 ed. (August 2006), Rutherford Appleton Laboratory
23. Karonis N.T., Toonen B., and Foster I. MPICH-G2: A grid-enabled implementation of the Message Passing Interface. J Parallel Distrib Comput Spec Issue Comput Grids 63 5 (May 2003) 551-563
24. Krsul I., Ganguly A., Zhang J., Fortes J.A.B., and Figueiredo R.J. VMPlants: providing and managing virtual machine execution environments for grid computing. Proceedings of the 2004 ACM/IEEE conference on supercomputing, Pittsburgh, PA, USA, November 6-12, 2004 (Nov 2004), IEEE Computer Society 7
25. Löhr H., Ramasamy H.V., Sadeghi A.-R., Schulz S., Schunter M., and Stüble C. Enhancing grid security using trusted virtualization. Proceedings of the 1st Benelux workshop on information and system security (WISSEC '06), Antwerpen, Belgium, November 8-9, 2006. COmputer Security and Industrial Cryptography (COSIC) (Nov 2006), K.U. Leuven [ESAT/SCD]
26. Mao W, Martin A, Jin H, Zhang H. Innovations for grid security from trusted computing - protocol solutions to sharing of security resource. In: Proceedings of the 14th international workshop on security protocols, Cambridge, UK, March 2006. LNCS. Springer-Verlag; in press.
27. Mao W., Yan F., and Chen C. Daonity - grid security with behaviour conformity from trusted computing. Proceedings of the first ACM workshop on scalable trusted computing, Alexandria, Virginia, US, Nov 2006 (Nov 2006), ACM Press 43-46
28. Marchesini J, Smith SW. SHEMP: secure hardware enhanced MyProxy. In: Proceedings of the third annual conference on privacy, security and trust (PST '05), New Brunswick, Canada, October 12-14, 2005; October 2005.
29. Martin A., Aina T., Christensen C., Kettleborough J., and Stainforth D. On two kinds of public-resource distributed computing. Proceedings of the UK e-science all hands meeting 2005 (AHM '05), Nottingham, UK, September 19-22, 2005 (Sep 2005), EPSRC 931-936
30. Mitchell C.J. Trusted computing. IEE professional applications of computing. 1st ed. vol. 6 (2005), IEE Press, London
31. Moore P.C., Johnson W.R., and Detry R.J. Adapting globus and kerberos for a secure ASCI grid. Proceedings of the 2001 ACM/IEEE conference on supercomputing (CDROM), Denver, Colorado, USA, November 10-16, 2001 (Nov 2001), ACM Press 21
32. Moreau L, Chapman S, Schreiber A, Hempel R, Rana O, Varga L, et al. Provenance-based trust for grid computing: Position paper. Technical report, University of Southampton; May 2004.
33. Novotny J., Tuecke S., and Welch V. An online credential repository for the grid: MyProxy. Proceedings of the 10th international symposium on high performance distributed computing (HPDC-10), San Francisco, CA, USA, August 7-9, 2001 (Aug 2001), IEEE Computer Society 104-111
34. Olson T., et al. CA-based trust model for grid authentication and identity delegation. Open Grid Forum (Oct 2002)
35. Oasis Standards. WS-Trust 1.3; March 2007.
36. Patel J., Teacy W.T.L., Jennings N.R., and Luck M. Monitoring, policing and trust for grid-based virtual organisations. Proceedings of the UK e-science all hands meeting 2005 (AHM '05), Nottingham, UK, September 19-22, 2005 (Sep 2005), EPSRC 891-898
37. Pearlman L., Welch V., Foster I., Kesselman C., and Tuecke S. A community authorization service for group collaboration. Proceedings of the 3rd international workshop on policies for distributed systems and networks (POLICY '02), Monterey, CA, USA, June 5-7, 2002 (June 2002), IEEE Computer Society 50-60
38. Rajbhandari S., Wootten I., Ali A.S., and Rana O.F. Evaluating provenance-based trust for scientific workflows. Proceedings of the sixth IEEE international symposium on cluster computing and the grid, Singapore, May 2006 (May 2006), IEEE Press 365-372
39. Sadeghi A.-R., and Stüble C. Property-based attestation for computing platforms: caring about properties, not mechanisms. Proceedings of the 2004 workshop on new security paradigms (NSPW '04), Nova Scotia, Canada, September 20-23, 2004 (Sep 2004), ACM Press 67-77
40. Shi E., Perrig A., and Doorn L.V. BIND: a fine-grained attestation service for secure distributed systems. Proceedings of the 2005 IEEE symposium on security and privacy, Oakland, CA, USA, May 8-11, 2005 (May 2005), IEEE Press 154-168
41. Stainforth D., Martin A., Simpson A., Christensen C., Kettleborough J., Aina T., et al. Security principles for public-resource modeling research. Proceedings of the 13th IEEE international workshops on enabling technologies: infrastructure for collaborative enterprises (WETICE'04), Modena, Italy, June 14-16, 2004 (Nov 2004), IEEE Computer Society 319-324
42. Stainforth D.A., Aina T., Christensen C., Collins M., Faull N., Frame D.J., et al. Uncertainty in the predictions of the climate response to rising levels of greenhouse gases. Nature 433 7024 (Jan 2005) 403-406
43. Thain D., Tannenbaum T., and Livny M. Distributed computing in practice: the condor experience. Concurr Comput Pract Exper 17 2-4 (Feb 2005) 323-356
44. Thompson M.R., Essiari A., and Mudumbai S. Certificate-based authorization policy in a PKI environment. ACM Trans Inform Syst Secur 6 4 (Nov 2003) 566-588
45. Trusted Computing Group. TPM Main Part 1 design principles specification, Version 1.2. Revision 94; March 2006.
46. Trusted Computing Group. TCG specification architecture overview. Revision 1.3; March 2007.
47. Tuecke S, Welch V, Engert D, Perlman L, Thompson M. Internet X.509 public key infrastructure (PKI) proxy certificate profile. RFC 3820, Internet and Engineering Task Force; June 2004.
48. Venugopal S., Buyya R., and Ramamohanarao K. A taxonomy of data grids for distributed data sharing, management, and processing. ACM Comput Surv 38 1 (Mar 2006) 1-53
49. Welch V., Siebenlist F., Foster I., Bresnahan J., Czajkowski K., Gawor J., et al. Security for grid services. Proceedings of the twelfth international symposium on high performance distributed computing (HPDC-12), Seattle, Washington, June 22-24, 2003 (Jun 2003), IEEE Press 48-57
50. Xu W., Chadwick D., and Otenko S. A PKI-based secure audit web service. Proceedings of the IASTED international conference on communication, network and information security (CNIS '05), Phoenix, USA, November 14-16, 2005 (Nov 2005), IASTED
51. Yoshihama S., Ebringer T., Nakamura M., Munetoh S., and Maruyama H. WS-attestation: efficient and fine-grained remote attestation on web services. Proceedings of the IEEE international conference on web services (ICWS '05), Orlando, FL, USA, July 11-15, 2005 (Jul 2005), IEEE Computer Society 743-750