Building a demilitarized zone with data encryption for grid environments

Authors:
Matthias Schmidt;Matthew Smith;Niels Fallenbeck;Hans Picht;Bernd Freisleben
Affiliations:
University of Marburg, Marburg, Germany;University of Marburg, Marburg, Germany;University of Marburg, Marburg, Germany;University of Marburg, Marburg, Germany;University of Marburg, Marburg, Germany
Venue:
Proceedings of the first international conference on Networks for grid applications
Year:
2007

Citing 7
Cited 2

A security architecture for computational grids

CCS '98 Proceedings of the 5th ACM conference on Computer and communications security
Xen and the art of virtualization

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
Integrating Grid with Intrusion Detection

AINA '05 Proceedings of the 19th International Conference on Advanced Information Networking and Applications - Volume 1
Security Issues in On-Demand Grid and Cluster Computing

CCGRID '06 Proceedings of the Sixth IEEE International Symposium on Cluster Computing and the Grid
Countering security threats in service-oriented on-demand grid computing using sandboxing and trusted computing techniques

Journal of Parallel and Distributed Computing - Special issue: Security in grid and distributed systems
Xen and the Art of Cluster Scheduling

VTDC '06 Proceedings of the 2nd International Workshop on Virtualization Technology in Distributed Computing
Threat model for grid security services

EGC'05 Proceedings of the 2005 European conference on Advances in Grid Computing

Securing stateful grid servers through virtual server rotation

HPDC '08 Proceedings of the 17th international symposium on High performance distributed computing
Secure on-demand grid computing

Future Generation Computer Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Security and data integrity are important aspects in the fields of Grid and cluster computing. When these two areas are combined, the security issues intermingle and new security concepts are needed to ensure protection of both Grid users and local cluster users. In this paper, a novel dual laned Demilitarized Zone (DMZ) to protect local clusters from Grid attacks is introduced. The Globus Security Infrastructure (GSI) is extended to enable safe end-to-end encryption of Grid jobs through the DMZ and into virtualized execution hosts. Finally, an integrated Network Intrusion Detection System with Grid-specific rules, further protecting the Grid DMZ, is presented.