Secure on-demand grid computing

Authors:
M. Smith;M. Schmidt;N. Fallenbeck;T. Dörnemann;C. Schridde;B. Freisleben
Affiliations:
Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany;Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany;Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany;Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany;Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany;Department of Mathematics and Computer Science, University of Marburg, Hans-Meerwein-Street 3, D-35032 Marburg, Germany
Venue:
Future Generation Computer Systems
Year:
2009

Citing 12
Cited 8

An Online Credential Repository for the Grid: MyProxy

HPDC '01 Proceedings of the 10th IEEE International Symposium on High Performance Distributed Computing
The Grid 2: Blueprint for a New Computing Infrastructure

The Grid 2: Blueprint for a New Computing Infrastructure
From Sandbox to Playground: Dynamic Virtual Environments in the Grid

GRID '04 Proceedings of the 5th IEEE/ACM International Workshop on Grid Computing
Hot service deployment in an ad hoc grid environment

Proceedings of the 2nd international conference on Service oriented computing
VMPlants: Providing and Managing Virtual Machine Execution Environments for Grid Computing

Proceedings of the 2004 ACM/IEEE conference on Supercomputing
GridAssist, a User Friendly Grid-Based Workflow Management Tool

ICPPW '05 Proceedings of the 2005 International Conference on Parallel Processing Workshops
VSched: Mixing Batch And Interactive Virtual Machines Using Periodic Real-time Scheduling

SC '05 Proceedings of the 2005 ACM/IEEE conference on Supercomputing
Virtual Clusters for Grid Communities

CCGRID '06 Proceedings of the Sixth IEEE International Symposium on Cluster Computing and the Grid
Intra-engine service security for grids based on WSRF

CCGRID '05 Proceedings of the Fifth IEEE International Symposium on Cluster Computing and the Grid (CCGrid'05) - Volume 2 - Volume 02
Xen and the art of repeated research

ATEC '04 Proceedings of the annual conference on USENIX Annual Technical Conference
Deploying virtual machines as sandboxes for the grid

WORLDS'05 Proceedings of the 2nd conference on Real, Large Distributed Systems - Volume 2
Building a demilitarized zone with data encryption for grid environments

Proceedings of the first international conference on Networks for grid applications

A secure broadcasting cryptosystem and its application to grid computing

Future Generation Computer Systems
Compromise through USB-based Hardware Trojan Horse device

Future Generation Computer Systems
SLA-based resource provisioning for heterogeneous workloads in a virtualized cloud datacenter

ICA3PP'11 Proceedings of the 11th international conference on Algorithms and architectures for parallel processing - Volume Part I
Virtualized HPC: a contradiction in terms?

Software—Practice & Experience
Efficient storage of virtual machine images

Proceedings of the 3rd workshop on Scientific Cloud Computing Date
Improving Mandatory Access Control for HPC clusters

Future Generation Computer Systems
RETENTION: A reactive trust-based mechanism to detect and punish malicious nodes in ad hoc grid environments

Journal of Network and Computer Applications
Technology Acceptance Model Applied to the Adoption of Grid and Cloud Technology

International Journal of Grid and High Performance Computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, a novel approach for enabling Grid users to autonomously install and use custom software on demand using an image creation station is presented, while at the same time offering new security mechanisms to protect both software and data from other Grid users and external attackers. An automated dynamic firewalling mechanism enables both virtual organization and user-based network security setups. Furthermore, the Grid environment is partitioned into several zones to protect local cluster resources from compromised Grid middleware. To enable the secure integration of this Grid environment into existing business processes, an extension of BPEL is presented which allows the execution of GSI secured Grid services in combination with existing business web services. The workflow engine transparently handles proxy certificate creation and monitors proxy certificate lifetime. An implementation based on the Globus Toolkit 4, the Sun Grid Engine and the ActiveBPEL Engine is presented. A performance evaluation of the critical components of the new Grid setup is provided.