A Kerberos security architecture for web services based instrumentation grids

Future Generation Computer Systems

Volumn 25, Issue 7, 2009, Pages 804-818

  Moralis, Athanasios ^a   Pouli, Vassiliki ^a   Papavassiliou, Symeon ^a   Maglaris, Vasilis ^a  

^a NATIONAL TECHNICAL UNIVERSITY OF ATHENS NTUA   (Greece)

Author keywords

AAI; Instrumentation Grid; Kerberos; Web Services Security (WSS)

Indexed keywords

AAI; AUTHORIZATION INFRASTRUCTURES; COMPARATIVE MEASUREMENTS; EXCHANGE MECHANISMS; GRID SECURITY INFRASTRUCTURES; HETEROGENEOUS RESOURCES; INSTRUMENTATION GRID; KERBEROS; MESSAGE EXCHANGES; PERFORMANCE IMPROVEMENTS; PROXY CERTIFICATES; SECURITY ARCHITECTURES; WEB SERVICES SECURITY (WSS); WS SECURITIES; X.509 CERTIFICATES;

INSTRUMENTS; SERVICE ORIENTED ARCHITECTURE (SOA); WEB SERVICES;

AUTHENTICATION;

EID: 67349084099     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2008.11.004     Document Type: Article

References (34)

1. Wang Y.-X., Wu C., Hu X.-x., Liu L.-C., and Jisuanji Jicheng Z.X. Study of equipment grid based on simulation and modeling. Computer Integrated Manufacturing System (China) 10 9 (2004) 1031-1035
2. Power D.J., Politou E.A., Slaymaker M., and Simpson A.C. Securing web services for deployment in health grids. Future Generation Computer Systems 22 5 (2006) 547-570
3. GRIDCC Project. http://www.gridcc.org
4. Iosup A., Ţãpuş N., and Vialle S. A monitoring architecture for control grids. Proc. Advances in Grid Computing - EGC 2005. LNCS vol. 3470/2005 (July 11 2005) 922-931
5. Litke A., Konstanteli K., Andronikou V., Chatzis S., and Varvarigou T.A. Managing service level agreement contracts in OGSA-based grids. Future Generation Computer Systems 24 4 (2008) 245-258
6. Kyriazis D., Tserpes K., Menychtas A., Litke A., and Varvarigou T. An innovative workflow mapping mechanism for grids in the frame of quality of service. Future Generation Computer Systems 24 6 (2008) 498-511
7. Doulamis N.D., Varvarigos E.A., and Varvarigou T.A. Fair scheduling algorithms in grids. IEEE Transactions Parallel and Distributed Systems 18 11 (2007) 1630-1648
8. Litke A., Skoutas D., Tserpes K., and Varvarigou T.A. Efficient task replication and management for adaptive fault tolerance in mobile grid environments. Future Generation Computer Systems 23 2 (2007) 163-178
9. K. Chiu, M. Govindaraju, R. Bramley, Investigating the limits of SOAP performance for scientific computing, in: 11th IEEE International Symposium on High Performance Distributed Computing, HPDC-11 2002, 2002
10. Laccetti G., and Schmid G. A framework model for grid security. Future Generation Computer Systems 23 5 (2007) 702-713
11. A. Moralis, A. Lenis, M. Grammatikou, S. Papavassiliou, V. Maglaris, A distributed kerberized access architecture for real time grids, in: 4th International Workshop on Security in Information Systems WOSIS, 2006
12. Open Grid Services Architecture, Version 1.5 (OGSA) http://www.ogf.org/documents/GFD.80.pdf
13. Francesco L., Eric F., Michele G., Gaetano M., Salvatore O., Andrea P., and Silvano S. The many faces of the integration of instruments and the grid. International Journal of Web and Grid Services 3 3 (2007) 239-266
14. E. Frizziero, M. Gulmini, F. Lelli, G. Maron, A. Oh, S. Orlando, A. Petrucci, S. Squizzato, S. Traldi, Instrument element: A new grid component that enables the control of remote instrumentation, ccgrid, in: Sixth IEEE International Symposium on Cluster Computing and the Grid Workshops, CCGRIDW'06, 2006, pp. 52
15. Synchrotron Radiation Sotorage Ring Elettra. http://www.elettra.trieste.it/index.php
16. The CMS experiment at the CERN LHC, Chapter 9, Published by the Institute of Physics Publishing and SISSA, August 2008 http://www.iop.org/EJ/article/1748-0221/3/08/S08004/jinst8_08_s08004.pdf
17. The Heimdal Kerberos. http://www.pdc.kth.se/heimdal/
18. WS Security Kerberos Token Profile. http://www.oasis-open.org/committees/download.php/16788/wss-v1.1-spec-os-KerberosTokenProfile.pdf
19. WS Security X509 Token Profile. http://www.oasis-open.org/committees/download.php/16785/wss-v1.1-spec-os-X509TokenProfile
20. V. Welch, et al. Security for grid services, in: Proc. of 12th IEEE International Symposium on High Performance Distributed Computing, HPDC '03
21. Sobh T.S., Elgohary A., and Zaki M. Performance improvements on the network security protocols. International Journal of Network Security 6 1 (2008) 103-115
22. WS Security Core Specification 1.1, http://www.oasis-open.org/specs/index.php#wssv1.1
23. H. Liu, S. Pallickara, G. Fox, Performance of web services security, in: Proceedings of 13th Annual Mardi Gras Conference, Feb. 2005
24. K. Tang, S. Chen, D. Levy, J. Zic, B. Yan, A performance evaluation of web services security, in: 10th IEEE International Enterprise Distributed Object Computing Conference, EDOC '06, 2006
25. S. Hirasuna, A. Slominski, L. Fang, D. Gannon, Performance comparison of security mechanisms for grid services, in: Proc. of Fifth IEEE/ACM International Workshop on Grid Computing, 2004, 8 Nov. 2004, pp. 360-364
26. Wang H., Zhang Y., and Cao J. Access control management for ubiquitous computing. Future Generation Computer Systems, Special section: Scalable Information Systems 24 8 (2008) 870-878
27. L. Pearlman, V. Welch, I. Foster, K. Kesselman, S. Tuecke, A community authorization service for group collaboration, in: IEEE Workshop on Policies for Distributed Systems and Networks, 2002
28. R. Alfieri, et al. VOMS, an Authorization System for Virtual Organizations, Presented at the 1st European Across Grids Conf., Santiago de Compostela, Spain, Feb. 14, 2003
29. Foster I., Kesselman C., and Tuecke S. The anatomy of the grid. International Journal of High Performance Computing Applications 15 3 (2001)
30. V. Welch, I. Foster, C. Kesselman, O. Mulmo, L. Pearlman, S. Teucke, J. Gawor, S. Meder, F. Siebenlist, X.509 proxy certificate for dynamic delegation, in: Proceeding of the 3rd Annual PKI R&D Workshop, 2004
31. Foster I., Kesselman C., Nick J.M., and Tuecker S. The Physiology of the Grid (2002), white paper
32. N. Nagaratnam, P. Janson, J. Dayka, A. Nadalin, F. Siebenlist, V. Welch, I. Foster, S. Tuecke, The security architecture for open grid services, OGSA-SEC-WG document, http://www.cs.virginia.edu/~humphrey/ogsa-sec-wg/OGSA-SecArch-v1-07192002.pdf, July 17 2008
33. BouncyCastle JCE. http://www.bouncycastle.org
34. A. Moralis, V. Pouli, M. Grammatikou, S. Papavassiliou, V. Maglaris, Performance comparison of web services security: Kerberos Token Profile against X.509 Token Profile, in: 3rd International Conference on Networking and Services, Athens Greece, June 19-25, 2007