GridSec: trusted grid computing with security binding and self-defense against network worms and DDoS attacks

  • Authors:

  • Kai Hwang;Yu-Kwong Kwok;Shanshan Song;Min Cai Yu Chen;Ying Chen;Runfang Zhou;Xiaosong Lou

  • Affiliations:

  • Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA;Internet and Grid Computing Laboratory, University of Southern California, Los Angeles, CA

  • Venue:
  • ICCS'05 Proceedings of the 5th international conference on Computational Science - Volume Part III
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

The USC GridSec project develops distributed security infrastructure and self-defense capabilities to secure wide-area networked resource sites participating in a Grid application. We report new developments in trust modeling, security-binding methodology, and defense architecture against intrusions, worms, and flooding attacks. We propose a novel architectural design of Grid security infrastructure, security binding for enhanced Grid efficiency, distributed collaborative IDS and alert correlation, DHT-based overlay networks for worm containment, and pushback of DDoS attacks. Specifically, we present a new pushback scheme for tracking attack-transit routers and for cutting malicious flows carrying DDoS attacks. We discuss challenging research issues to achieve secure Grid computing effectively in an open Internet environment.