Security issues in on-demand grid and cluster computing

Sixth IEEE International Symposium on Cluster Computing and the Grid Workshops, 2006. CCGRID 06

Volumn , Issue , 2006, Pages

  Smith, Matthew ^a   Engel, Michael ^a   Friese, Thomas ^a   Freisleben, Bernd ^a   Koenig, Gregory A ^b   Yurcik, William ^b  

^a PHILIPPS UNIVERSITY MARBURG   (Germany)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); COMPUTER CRIME; DISTRIBUTED COMPUTER SYSTEMS; LARGE SCALE SYSTEMS; RESOURCE ALLOCATION; WORLD WIDE WEB;

AUTHENTICATION; GRID COMPUTING; SINGLE SIGN-ON; WEB SERVICES;

SECURITY OF DATA;

EID: 42549172780     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (45)

1. I. Foster, C. Kesselman, J. Nick, and S. Tuecke, "The Physiology of the Grid: An Open Grid Services Architecture for Distributed Systems Integration," in Open Grid Service Infrastructure WG, Global Grid Forum, 2002, pp. 1-31.
2. I. Foster and C. Kesselman, The Grid 2: Blueprint for a New Computing Infrastructure. Morgan Kaufmann, 2003.
3. IBM Global Services, "FAQs: IBM e-Business On Demand," 2002, http://www.ibm.com/services/ondemand/files/Q&A.pdf.
4. M. Smith, T. Friese, and B. Freisleben, "Towards a Service-Oriented Ad Hoc Grid," in Proc. of the 3rd International Symposium on Parallel and Distributed Computing, Cork, Ireland, 2004, pp. 201-208.
5. G. A. Koenig and W. Yurcik, "Design of an Economics-Based Software Infrastructure for Secure Utility Computing on Supercomputing Clusters," in Proceedings of 12th International Conference on Telecommunication Systems Modeling and Analysis (ICTSM), Monterey, CA USA, July 2004.
6. M. Smith, T. Friese, and B. Freisleben, "Intra-Engine Service Security for Grids Based on WSRF," in Proc. of Cluster Computing and Grid, Cardiff, UK, 2005.
7. W. Yurcik, G. Koenig, X. Meng, and J. Greenseid, "Cluster Security as a Unique Problem with Emergent Properties: Issues and Techniques," in Proceedings of the 5th LCI Intl. Conference on Linux Clusters, 2004.
8. Computer Security Institute, "CSI/FBI Computer Crime and Security Survey," 2004.
9. ITSS, "Multiple Unix Compromises on Campus," Stanford ITSS Security Alert, April 10, 2004.
10. B. Krebs, "Hackers Strike Advanced Computing Networks," Washington Post, April 13, 2004.
11. M. Pourzandi, D. Gordon, W. Yurcik, and G. A. Koenig, "Clusters and Security: Distributed Security for Distributed Systems," in Cluster Security (Cluster-Sec) Workshop at the 5th IEEE International Symposium on Cluster Computing and the Grid (CCGrid), 2005.
12. SANS Institute, "The Twenty Most Critical Internet Security Vulnerabilities," November 2005, http://www.sans.org/top20/.
13. D. Safford, "The Need for TCPA," White Paper, IBM Research, 2002.
14. EUGridPMA, "The European Policy Management Authority for Grid Authentication in e-Science," 2006, http://eugridpma.org/.
15. D. Safford, M. Zohar, and A. Boulanger, "Presentation: Trusted Computing for Linux," IBM Research, August 2005.
16. The Enabling Grids for E-Science (EGEE) Project, "Global Security Architecture," 2004, EU Deliverable DJRA3.1.
17. W. Yurcik and C. Liu, "A First Step Toward Detecting SSH Identity Theft in HPC Cluster Environments: Discriminating Masqueraders Based on Command Behavior," in Cluster Security (Cluster-Sec) Workshop at the 5th IEEE/ACM International Symposium on Cluster Computing and the Grid (CCGrid), 2005.
18. The Globus Project, "The Globus Toolkit 4," 2006, http://www.globus.org/toolkit/.
19. R. Alfieri, R. Cecchini, V. Ciaschini, L. dell'Agnello, Á. Frohner, A. Gianoli, K. Lörentey, and F. Spataro, "VOMS, an Authorization System for Virtual Organizations," in Proc. of the European Across Grids Conference, ser. Lecture Notes in Computer Science, vol. 2970. Santiago de Compostela, Spain: Springer, 2003, pp. 33-40.
20. L. Pearlman, V. Welch, I. Foster, C. Kesselman, and S. Tuecke, "A Community Authorization Service for Group Collaboration," in Proceedings of the IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, Monterey, CA USA, 2003, pp. 50-59.
21. D. W. Chadwick, A. Otenko, and E. Ball, "Role-Based Access Control With X.509 Attribute Certificates," IEEE Internet Computing, vol. 7, no. 2, pp. 62-69, 2003.
22. M. Myers et al., "RFC2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol (OCSP)," http://www.ietf.org/rfc/ rfc2560.txt.
23. M. Treaster, G. A. Koenig, X. Meng, and W. Yurcik, "Detection of Privilege Escalation for Linux Cluster Security," in 6th LCI Intl. Conference on Linux Clusters, 2005.
24. J. Novotny, S. Tuecke, and V. Welch, "An Online Credential Repository for the Grid: MyProxy," in Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing, 2007, pp. 104-111.
25. "Crypto card corp." http://www.cryptocard.com.
26. "Secureid," http://www.ctrl-key.co.uk/index.htm.
27. J. Tucek, P. Stanton, E. Haubert, R. Hasan, L. Brumbaugh, and W. Yurcik, "Trade-offs in Protecting Storage: A Meta-Data Comparison of Cryptographic, Backup/Versioning, Immutable/Tamper-Proof, and Redundant Storage Solutions," in 22nd IEEE - 13th NASA Goddard Conference on Mass Storage Systems and Technologies (MSST), 2005.
28. K. Keahey, K. Doering, and I. Foster, "From Sandbox to Playground: Dynamic Virtual Environments in the Grid," in 5th International Workshop on Grid Computing, 2004.
29. S. Santhanam, P. Elango, A. Arpaci-Dusseau, and M. Livny, "Deploying Virtual Machines as Sandboxes for the Grid," in Second Workshop on Real, Large Distributed Systems, 2005, p. 712.
30. M. Clement, Q. Snell, and G. Judd, "High-Performance Computing for the Masses," in Workshop on Java for Parallel and Distributed Computing, IPDPS, 1999, p. 712.
31. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield, "Xen and the Art of Virtualization," in Proc. of the ACM Symposium on Operating Systems Principles (SOSP), Bolton Landing, NY USA, 2003, pp. 164-177.
32. Distributed Systems University of Marburg, "MAGE," 2006, http://ds. informatik.uni-marburg.de/MAGE/.
33. The Globus Project, "Virtual Workspaces," 2006, http://workspace.globus.org/.
34. B. Clark, T. Deshane, E. Dow, S. Evanchik, M. Finlayson, J. Herne, and J. N. Matthews, "Xen and the Art of Repeated Research," in Proceedings of the USENIX 2004 Annual Technical Conference, 2004, pp. 135-144.
35. B. Cohen, "Incentives Build Robustness in Bittorrent," in Proc. of the 1st Workshop on Economics of Peer-to-Peer Systems, Berkeley, CA USA, 2003.
36. D. Safford, "Clarifying Misinformation on TCPA," White Paper, IBM Research, 2002.
37. D. Safford and M. Zohar, "A Trusted Linux Client (TLC)," Technical Paper, IBM Research, 2005.
38. IBM Watson Research - Global Security Analysis Lab, "TCPA Resources," http://www.research.ibm.com/gsal/tcpa/.
39. J. Dike, "User-Mode Linux," in Proc. of the 5th Annual Linux Showcase and Conference, Oakland, USA, 2001.
40. SWsoft, "OpenVZ," 2006, http://openvz.org/.
41. N. Provos, "Improving Host Security with System Call Policies," in Proc. of the 12th USENIX Security Symposium, Washington, USA, 2003, pp. 257-272.
42. The Apache Software Foundation, "Apache HTTP Server Documentation: suEXEC," http://httpd.apache.org/docs/suexec.html.
43. B. Alpern, J. Auerbach, V. Bala, T. Frauenhofer, T. Mummert, and M. Pigott, "PDS: A Virtual Execution Environment for Software Deployment," in Proceedings of the 1st ACM/USENIX International Conference on Virtual Execution Environments (VEE), Chicago, IL, USA, 2005, pp. 175-185.
44. I. Krsul, A. Ganguly, J. Zhang, J. A. B. Fortes, and R. J. Figueiredo, "VMPlants: Providing and Managing Virtual Machine Execution Environments for Grid Computing," in Proceedings of the 2004 ACM/IEEE Conference on Supercomputing (SC), Pittsburgh, PA USA, 2004, p. 7.
45. B. Calder, A. A. Chien, J. Wang, and D. Yang, "The Entropia Virtual Machine for Desktop Grids," in Proceedings of the 1st ACM/USENIX International Conference on Virtual Execution Environments (VEE), Chicago, IL, USA, 2005, pp. 186-196.