Security for Grid services

By Von Welch, F. Siebenlist, Ian T Foster, John Bresnahan, Karl Czajkowski, Jarek Gawor, Carl Kesselman, Sam Meder, Laura Pearlman, Steven Tuecke. High Performance Distributed Computing, 2003. Proceedings. 12th IEEE International Symposium on, 2003

588 citations recorded by the source corpus.

Grid computing is concerned with the sharing and coordinated use of diverse resources in distributed "virtual organizations." The dynamic and multiinstitutional nature of these environments introduces challenging security issues that demand new technical approaches. In particular, one must deal with diverse local mechanisms, support dynamic creation of services, and enable dynamic creation of trust domains. We describe how these issues are addressed in two generations of the Globus Toolkit/spl reg/. First, we review the Globus Toolkit version 2 (GT2) approach; then we describe new approaches developed to support the Globus Toolkit version 3 (GT3) implementation of the Open Grid Services Architecture, an initiative that is recasting Grid concepts within a service-oriented framework based on Web services. GT3's security implementation uses Web services security mechanisms for credential exchange and other purposes, and introduces a tight least-privilege model that avoids the need for any privileged network service.

Subfields: Computer Networks and Communications, Information Systems and Management

View Paper: https://www.semanticscholar.org/paper/acc60115c7c08719074fdd7405ac7050cecd99ed

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Computer Networks and Communications

1. Ewa Deelman
2. Gaurang Mehta
3. Karan Vahi
4. Dennis Gannon
5. John Good
6. Yolanda Gil
7. Gurmeet Singh
8. Mei-Hui Su

In Information Systems and Management

1. Ewa Deelman
2. Gaurang Mehta
3. Karan Vahi
4. Dennis Gannon
5. John Good
6. Yolanda Gil
7. Gurmeet Singh
8. Ian J. Taylor

Citations in the corpus

• Workflows and e-Science: An overview of workflow system features and capabilities (2009, methodology): “Authentication to remote resources is done via GSI (79) and Pegasus uses the DAGMan workflow engine for the execution of jobs.”
• SecPAL: Design and semantics of a decentralized authorization language (2010, unknown): “Access control in grids typically involves interaction between several administrative domains with individual policies and requires attribute-based authorization and delegation [21,65,66].”
• Pegasus: A framework for mapping complex scientific workflows onto distributed systems (2005, background): “GridAnt, Nimrod-G and Pegasus use GRAM for remote job submission and GSI [37] for authentication purposes.”