Secure Grid Computing - GridSec Project - University of Southern ...

NPC-2004 Oct. 18, 2004
Trust Integration over a VPN Ring
Aggregate costs in Single Sign-on
operation over VPN vs. PKI Services
V
V
Site S 2
Site S 1
Site S 4
V
SeGO
Server
VPN
Gateway
Hosts
Site S 3
Physical backbone
VPN tunnel ring
V Trust Vector
Trust vector
propagation
User application
and SeGO server
negotiation
Cooperating gateways working together
to establish VPN tunnels for trust integration
V
Aggregate Service Cost
10
8
6
4
GSI based
VPN based
2
0
10 20 30 40 50 60 70 80 90 100
Grid Size
October 18, 2004, Kai Hwang http://GridSec.usc.edu
7
October 18, 2004, Kai Hwang http://GridSec.usc.edu
8
Global GridSec Testing Environment
International Collaborators in USA,
France, China, and Australia
USC NetShield Intrusion Defense System
for Protecting Local Network
of Grid Computing Resources
INRIA,
Sophia
Antipolis,
France
ICT of CAS
Beijing,
China
Melbourne
University,
Australia
The GridSec
over Internet
USC Gateway,
Los Angeles
Trojan
Cluster in
IGC Lab.
USC/ISD
Supercluster
USC NetShield Defense
System and Testing
Facilities
Security
Policy
Manager
Security
Database
ISP
The
Internet
Network
Router
The
NetShield
System
Firewall
Datamining for Anomaly
Intrusion Detection (IDS)
Risk
Assessment
System (RAS)
Intrusion
Response
System (IRS)
Victim’s
Internal
Network
October 18, 2004, Kai Hwang http://GridSec.usc.edu
9
October 18, 2004, Kai Hwang http://GridSec.usc.edu
10
Security-Driven Heuristics for Trusted Job
Scheduling on Risky Grids
• Min-min heuristics:
‣ For each job, the resource site that gives the earliest completion time is
selected first. The job that has the minimum earliest completion time is
assigned to the selected resource site.
• Sufferage heuristics:
‣ The Sufferage heuristic is based on the idea that better mappings are
generated by assigning a site to a job that would “suffer” most in terms of
expected completion time
• Three secure and risky scheduling modes:
‣ Secure mode – Allocate jobs only to those Grid sites with security level
exceeding the job requirement (SD < SL)
‣ Risky mode – Allocate jobs to any available Grid sites without checking
the risk level or the job demand
‣ f-risky mode – Allocate jobs to those Grid sites taking at most f % risk
Risk scale:
0 f 100%
( ) 0 P fail = P( fail)
f
P( fail )