The CloudGrid approach: Security analysis and performance evaluation

Future Generation Computer Systems

Volumn 29, Issue 1, 2013, Pages 387-401

  Casola, Valentina ^a   Cuomo, Antonio ^b   Rak, Massimiliano ^c   Villano, Umberto ^b  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^b UNIVERSITY OF SANNIO   (Italy)

^c SECOND UNIVERSITY OF NAPLES   (Italy)

Author keywords

Access control; Cloud computing; Grid; Identity federation; Performance; Security

Indexed keywords

ACCESS CONTROL MECHANISM; COMPUTING MODEL; COMPUTING PARADIGM; DISTRIBUTED RESOURCES; EXTENSIVE TESTING; GRID; GRID INTEGRATION; IDENTITY FEDERATION; PERFORMANCE; PERFORMANCE EVALUATION; PROTOTYPE IMPLEMENTATIONS; SCIENTIFIC COMMUNITY; SECURITY; SECURITY ANALYSIS; SECURITY AND PERFORMANCE; SECURITY ISSUES; THREELAYER ARCHITECTURE; TRADE-OFF ANALYSIS;

ACCESS CONTROL; CLOUD COMPUTING;

SECURITY SYSTEMS;

EID: 84867856545     PISSN: 0167739X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.future.2011.08.008     Document Type: Article

References (57)

1. Amazon Inc. Elastic Compute Cloud, November 2008. http://aws.amazon.com/ ec2.
2. I. Foster, Y. Zhao, I. Raicu, S. Lu, Cloud computing and grid computing 360-degree compared, in: 2008 Grid Computing Environments Workshop, 2008, pp. 1-10. doi:10.1109/GCE.2008.4738445.
3. Peter Mell, Tim Grance, The NIST definition of cloud computing, 2009.
4. Doug Tidwell, et al., The cloud computing use cases group, 2010.
5. I. Foster, The physiology of the grid: an open grid services architecture for distributed systems integration, 2002.
6. I.T. Foster Globus toolkit version 4: software for service-oriented systems Journal of Computer Science and Technology 21 4 2006 513 520
7. E. Laure, et al., Programming the grid with gLite, Tech. Rep. EGEE-TR-2006-001, CERN, Geneva, March 2006.
8. L. Cherkasova, D. Gupta, A. Vahdat, Optimizing grid site manager performance with virtual machines, in: Proc. of the 3rd USENIX Workshop on Real Large Distributed Systems, WORLDS06, 2006.
9. I.T. Foster, T. Freeman, K. Keahey, D. Scheftner, B. Sotomayor, and X. Zhang Virtual clusters for grid communities CCGRID 2006 IEEE Computer Society 513 520
10. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield Xen and the art of virtualization SIGOPS Oper. Syst. Rev. 37 5 2003 164 177 10.1145/1165389.945462
11. VMWare Staff, Virtualization overview, White Paper. http://www.vmware. com/pdf/virtualization.pdf.
12. A. Gavrilovska, et al., High-performance hypervisor architectures: virtualization in HPC systems, in: Proc. of HPCVirt 2007, Portugal, 2007.
13. University of Chicago, Nimbus project, 2009. http://workspace.globus.org/ clouds/nimbus.html.
14. Purdue University, Wispy, 2009. http://www.rcac.purdue.edu/teragrid/ resources/.
15. V. Casola, M. Rak, U. Villano, Perfcloud: performance-oriented integration of cloud and GRID, in: Proc. of CloudComp 2009, Munich, DE, October 2009.
16. V. Casola, R. Lettiero, M. Rak, U. Villano, Access control in cloud on grid: the PerfCloud case study, in: The Proc. of SPCC2010, 2010.
17. V. Casola, M. Rak, U. Villano, Identity federation in cloud computing, in: Proc. of SPEDA2010, Atlanta, August 2010.
18. V. Casola, A. Cuomo, M. Rak, and U. Villano Security and performance trade-off in perfcloud M. Guarracino, F. Vivien, J. Traff, M. Cannatoro, M. Danelutto, A. Hast, F. Perla, A. Knopfer, B. Di Martino, M. Alexander, Euro-Par 2010 Parallel Processing Workshops Lecture Notes in Computer Science Vol. 6586 2011 Springer Berlin/Heidelberg 633 640 10.1007/978-3-642-21878-178
19. Cloud security alliance, security guidance for critical areas of focus in cloud computing, 2009.
20. R. Buyya, and R. Ranjan Special section: federated resource management in grid and cloud computing systems Future Generation Computer Systems 8 26 2010 1189 1191
21. E.P. Mancini, M. Rak, and U. Villano Perfcloud: grid services for performance-oriented development of cloud computing applications S. Reddy, WETICE 2009 IEEE Computer Society 201 206
22. Qumranet, KVM. http://www.linux-kvm.org/page/MainPage.
23. Distributed Systems Architecture Research Group, Opennebula project, Tech. Rep., Universidad Complutense de Madrid, 2009. http://www.opennebula.org.
24. T. Banks, Web services resource framework (WSRF) - primer v1. 2, OASIS Committee Draft.
25. M. Rak, A. Cuomo, and U. Villano A service for virtual cluster performance evaluation Enabling Technologies: Infrastructures for Collaborative Enterprises, WETICE 2010 19th IEEE International Workshop on 2010 IEEE 249 251
26. R. Housley, et al., Internet Engineering Task Force, Rfc3280 Internet x.509 public key infrastructure certificate and certificate revocation list (crl) profile, 2002. www.ietf.org/rfc/rfc3280.txt.
27. The Globus Security Team, globus toolkit version 4 grid security infrastructure: a standards perspective, 2005. www.globus.org/toolkit/docs/4.0/ security/GT4-GSI-Overview.pdf.
28. V. Welch, I. Foster, C. Kesselman, O. Mulmo, L. Pearlman, S. Tuecke, J. Gawor, S. M, F. Siebenlist, X.509 proxy certificates for dynamic delegation, in: Proc. of the 3rd Annual PKI R&D Workshop, 2004.
29. I. Foster, C. Kesselman, J.M. Nick, S. Tuecke, The physiology of the grid: an open grid services architecture for distributed systems integration, 2002. http://www.globus.org/research/papers/ogsa.pdf.
30. V. Casola, A. Mazzeo, N. Mazzocca, and V. Vittorini A security metric for public key infrastructures Journal of Computer Security 15 2 2007
31. J. Luna, O. Manso, M. Manel, Ocsp for grids: comparing prevalidation versus caching, in: 7th IEEE/ACM International Conference on Grid Computing, Barcelona, 2006.
32. J. Luna, O. Manso, M. Manel, Using OGRO and certiver to improve OCSP validation for grids, in: Proc. of the 1st Grid and Pervasive Conference, GPC2006, 2006.
33. V. Casola, J. Luna, O. Manso, N. Mazzocca, M. Manel, M. Rak, Interoperable grid pkis among untrusted domains: an architectural proposal, in: Proc. of the 2nd Grid and Pervasive Conference, GPC2007, 2007.
34. The Globus Security Team, Globus toolkit version 4, security: authorization framework, 2005. http://www.globus.org/toolkit/docs/4.0/security/ authzframe/.
35. B. Atkinson, et al., WS-security specification, web services security 1.0, April 2002.
36. The OASIS Technical Committee, Xacml: extensible access control markup language, 2005. http://www.oasisopen.org/committees/xacml/repository/.
37. T. Barton, J. Basney, T. Freeman, T. Scavo, F. Siebenlist, V. Welch, R. Ananthakrishnan, B. Baker, M. Goode, K. Keahey, Identity federation and attribute-based authorization through the globus toolkit, shibboleth, gridshib, and myproxy, in: Proc. of 5th Annual PKI R&D Workshop, 2006.
38. D. Ferraiolo, D.R. Kuhn, Role-based access control, in: Proc. of the 15th National Computer Security Conference, 1992, pp. 554-563.
39. OGRO, The open grid OCSP client api, 2006. globusgrid.certiver.com/info/ ogro.
40. R. Jain Art of Computer Systems Performance Analysis Techniques For Experimental Design Measurements Simulation and Modeling 1991 Wiley Computer Publishing John Wiley & Sons
41. M.A. Murphy, and S. Goasguen Virtual organization clusters: self-provisioned clouds on the grid Future Generation Computer Systems 8 26 2010 1271 1281
42. K. Keahey, I.T. Foster, T. Freeman, and X. Zhang Virtual workspaces: achieving quality of service and quality of life in the grid Scientific Programming 13 4 2005 265 275
43. S. Adabala, A. Matsunaga, M. Tsugawa, R. Figueiredo, and J. Fortes Single sign-on in in-vigo: role-based access via delegation mechanisms using short-lived user identities Parallel and Distributed Processing Symposium, 2004, Proceedings, 18th International 2004 IEEE 22
44. J.S. Chase, D.E. Irwin, L.E. Grit, J.D. Moore, S.E. Sprenkle, Dynamic virtual clusters in a grid site manager, in: High-Performance Distributed Computing, International Symposium on, 2003, p. 90. doi:10.1109/HPDC.2003. 1210019.
45. Sun Inc. VirtualBox. http://www.virtualbox.org/.
46. F. Tusa, M. Paone, M. Villari, A. Puliafito, Clever: a cloud-enabled virtual environment, in: Computers and Communications, ISCC, 2010 IEEE Symposium on, 2010, pp. 477-482. doi:10.1109/ISCC.2010.5546555.
47. D. Irwin, J. Chase, L. Grit, A. Yumerefendi, D. Becker, K. Yocum, Sharing networked resources with brokered leases, in: Proceedings of the USENIX Technical Conference, 2006.
48. L. Grit, D. Irwin, and J. Chase Virtual machine hosting for networked clusters: building the foundations for Virtualization Technology in Distributed Computing, 2006. VTDC 2006, First International Workshop on 2007 IEEE 7
49. S. AjayKumar, C. Nachiappan, and K. Periyakaruppan Enhancing portable environment using cloud and grid Computing 2009 728 732 10.1109/ICSPS.2009.106
50. C. Blanco, E. Huedo, R. Montero, and I. Llorente Dynamic provision of computing resources from grid infrastructures and cloud providers Proceedings of the 2009 Workshops at the Grid and Pervasive Computing Conference 2009 IEEE Computer Society 113 120
51. R. Buyya, and R. Ranjan Special section: federated resource management in grid and cloud computing systems Future Generation Computer Systems 26 8 2010 1189 1191
52. S. Ostermann, R. Prodan, and T. Fahringer Resource management for hybrid grid and cloud computing Computer Communications 2010 179 194
53. D. Pallmann, Grid computing on the azure cloud computing platform, 2009. URL: http://www.infoq.com/articles/Grid-Azure-David-Pallmann.
54. R.S.M. Constantino Vzquez, Eduardo Huedo, and I.M. Llorente On the use of clouds for grid resource provisioning Future Generation Computer Systems 5 7 2011 600 605
55. R. Aversa, B. Di Martino, M. Rak, S. Venticinque, and U. Villano Performance prediction for HPC on clouds Wiley Series on Parallel and Distributed Computing 2011 Wiley 437 454 (Chapter 17)
56. D. Recordon, and D. Reed Openid 2.0: a platform for user-centric identity management Proceedings of the Second ACM Workshop on Digital Identity Management DIM'06 2006 ACM New York, NY, USA 11 16
57. E. Hammer-Lahav, Rfc5849. The oauth 1.0 protocol, 2010. http://tools.ietf.org/rfc/rfc5849.txt.