The 6th IEEE/ACM International Workshop on Grid Computing, 2005.最新文献

Web-enabled grid authentication in a non-Kerberos environment 在非kerberos环境中启用web的网格身份验证

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542763

John-Paul Robinson, J. Gemmill, Pravin Joshi, P. Bangalore, Yiyi Chen, Silbia Peechakara, Song Zhou, Prahalad Achutharao

{"title":"Web-enabled grid authentication in a non-Kerberos environment","authors":"John-Paul Robinson, J. Gemmill, Pravin Joshi, P. Bangalore, Yiyi Chen, Silbia Peechakara, Song Zhou, Prahalad Achutharao","doi":"10.1109/GRID.2005.1542763","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542763","url":null,"abstract":"UABgrid is a collaboration between academic and administrative IT units at the University of Alabama at Birmingham (UAB). UABgrid provides a Web-based grid client environment, access to shared campus computational resources, and user identities defined by the authoritative campus identity provider. A Weblogin service leveraging UAB's authoritative identity directory is provided for grid authentication. Previous integrations of institutional identity management and grid authentication depended on a Kerberos environment and use of KX.509. We accomplish similar functionality in a non-Kerberos environment by leveraging our Weblogin service to drive applications which require grid credentials. The UABgrid registration process employs the Weblogin service to generate certificates and keys signed by our UABgridCA and automatically provisions accounts for UABgrid users based on resource center policies. After successful registration, UABgrid leverages the Weblogin service to allow users to access resources and to submit jobs using only a Web browser and their familiar username and password.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"83 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124403642","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

Adaptive trust negotiation and access control for grids 网格自适应信任协商与访问控制

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542724

T. Ryutov, Li Zhou, B. C. Neuman, N. Foukia, Travis Leithead, K. Seamons

{"title":"Adaptive trust negotiation and access control for grids","authors":"T. Ryutov, Li Zhou, B. C. Neuman, N. Foukia, Travis Leithead, K. Seamons","doi":"10.1109/GRID.2005.1542724","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542724","url":null,"abstract":"Access control in computational grids is typically provided by a combination of identity certificates and local accounts. This approach does not scale as the number of users and resources increase. Moreover, identity-based access control is not sufficient because users and resources may reside in different security domains and may not have pre-existing knowledge about one another. Trust negotiation is well-suited for grid computing because it allows participants to establish mutual trust based on attributes other than identity. The adaptive trust negotiation and access control (ATNAC) framework addresses the problem of access control in open systems by protecting itself from adversaries who may want to misuse, exhaust or deny service to resources. ATNAC is based on the GAA-API, which provides adaptive access control capturing dynamically changing system security requirements. The GAA-API utilizes TrustBuilder to establish a sufficient level of trust between the negotiating participants, based on the sensitivity of the access request and a suspicion level associated with the requester. A federated security context allows Grid participants to communicate their security appraisal and make judgments based on collective wisdom and the level of trust among them. We plan to apply ATNAC techniques to negotiation agreements in virtual organizations and P2P environments.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129709465","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 30

Legacy code support for production grids 对生产网格的遗留代码支持

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542754

T. Kiss, G. Terstyánszky, G. Kecskeméti, S. Illes, T. Delaittre, S. Winter, P. Kacsuk, G. Sipos

引用次数: 7

HIPernet: a decentralized security infrastructure for large scale grid environments HIPernet:用于大规模网格环境的分散安全基础设施

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542735

J. Laganier, P. Primet

引用次数: 20

A language-driven tool for fault injection in distributed systems 分布式系统中故障注入的语言驱动工具

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542742

William Hoarau, S. Tixeuil

引用次数: 38

Web services and grid security vulnerabilities and threats analysis and model Web服务和网格安全漏洞和威胁分析和建模

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542751

Y. Demchenko, L. Gommans, C. D. Laat, B. V. Oudenaarde

引用次数: 56

A credential renewal service for long-running jobs 用于长时间运行的作业的凭据续订服务

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542725

D. Kouril, J. Basney

{"title":"A credential renewal service for long-running jobs","authors":"D. Kouril, J. Basney","doi":"10.1109/GRID.2005.1542725","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542725","url":null,"abstract":"Jobs on the Grid require security credentials throughout their run for accessing secure Grid resources, such as GridFTP data repositories. However, delegating long-lived credentials to long-running jobs brings an increased risk that a credential will be compromised and misused. Additionally, it is often difficult to predict the run-time of jobs on the Grid, due to changes in application performance and resource load, making it difficult to set the lifetime of the delegated credential in advance. We have developed a solution to this problem for the EU DataGrid project using the MyProxy online credential repository and have further evolved it during the EGEE project. Users store their long-lived credentials in a dedicated MyProxy server and delegate short-lived credentials to their jobs. When a job's credential nears expiration, the workload management system retrieves a new short-lived credential from the MyProxy server on the user's behalf and uses it to refresh the job's credential. The MyProxy server's policy specifies which services may obtain credentials on the user's behalf, and all operations are logged at the MyProxy server, where access to credentials may be restricted if a compromise is detected or suspected. This system has been used for credential renewal in Grids in Europe for over three years. In this paper, we present the system design, describe our experiences, and discuss the security implications of this approach.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"18 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130838864","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 37

Auto-adaptive distributed hash tables 自适应分布式哈希表

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542752

A. Dury

引用次数: 2

Grid'5000: a large scale and highly reconfigurable grid experimental testbed Grid’5000:一个大规模和高度可重构的网格实验试验台

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/grid.2005.1542730

F. Cappello, E. Caron, M. Daydé, F. Desprez, Y. Jégou, P. Primet, E. Jeannot, S. Lanteri, J. Leduc, N. Melab, Guillaume Mornet, R. Namyst, Benjamin Quétier, Olivier Richard

引用次数: 280

Comparison of end-to-end bandwidth measurement tools on the 10GigE TeraGrid backbone 10GigE TeraGrid骨干网端到端带宽测量工具的比较

The 6th IEEE/ACM International Workshop on Grid Computing, 2005. Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542759

M. Murray, Shava Smallen, Omid Khalili, D. M. Swany

引用次数: 10