Architecture
OGSA
OGSI
WSRFTechnology
GSI authentication
Kerberos
PKI
Trust Models
X.509 v3, CRL
X.509
CRMF
X.509 Token Profile
Podcasts
GSI
Secure SSL auditing
Security Taxonomy
SAML
WS-Security
Webcasts
GSI
Secure SSL auditing
Security Taxonomy
SAML
WS-Security
|
|
The benefit of grids is information and
resource sharing but controlling access is often a requirement.
Grid security is a form of distributed computing security and it can benefit
from more than a decade of experience with distributed systems. It's
commonplace for
distributed systems to use security technology to ensure privacy and
confidentiality of data. Grids must
provide services to users while controlling access (when necessary) to
computers, data and other resources. They must also ensure message integrity
and provide authorization and authentication procedures.
Distributed applications and grid software often access remote resources
and persistent information from files and databases. Security must also be in place when it's necessary
to restrict access to resources such as hardware and software.
Many security vulnerabilities are not unique to grids. When we build a collaborative
computing environment over an Internet
infrastructure, we must design for security. No server,
application or database is immune from attacks, data theft and other
malicious behavior. Worms, viruses, trojans and malware can bring servers
down, for example, and no operating system is free of risks.
Technology for grid security is an aggregate of Internet security
technologies, web services security technologies, database and operating
systems technologies. It includes specifications and solutions from the
Global Grid Forum (GGF), Globus Alliance, Internet Engineering Task
Force (IETF), World Wide Web Consortium (W3C) and the Organization for
the Advancement of Structured Information Standards (OASIS).
Security for
Virtual Organizations: Federating Trust and Policy Domains
Frank Siebenlist, Nataraj Nagaratnam, Von Welch, Clifford Neuman
This is an excerpt from Grid 2: Blueprint for a New Computing Infrastructure
(Morgan Kaufmann Publishers).
Understanding Grid
Security
Ken North
This overview discusses grid computing architecture documents -- OGSA,
OGSI and WSRF. It explains what they prescribe in the way of security.
It also discusses security tools such as the Globus Toolkit.
 |
Webcast and Podcast: Ashraf Memon of GEON and SDSC
Ashraf Memon of the San Diego Supercomputer Center, a developer of the
Geosciences Cyberinfrastructure grid (GEON), investigated security for web
services and grid services. We recorded an interview with Ashraf about
security and the convergence of grid computing and web services. Ashraf's presentation
about GSI authentication
is also available here. |
|
|
Sponsored Links
Intrusion Detection and Prevention
 IDS
Network Module for Cisco 2600, 3600, 3700 routers
 Cisco IDS 4250-XL Sensor - network monitoring device
 Cyberguard SG580 Firewall VPN Appliance
WatchGuard Firebox® V100
|
with
questions or comments about this web site.