Daonity: grid security with behaviour conformity from trusted computing

ABSTRACT

A central security requirement for grid computing can be referred to as behaviour conformity. This is an assurance that ad hoc related principals (users, platforms or instruments) forming a grid virtual organisation (VO) must each act in conformity with the rules for the VO constitution. Existing grid security practice has little means to enforce behaviour conformity and consequently falls short of satisfactory solutions to a number of problems.Trusted Computing (TC) technology can add to grid computing the needed property of behaviour conformity. With TC using an essentially in-platform (trusted) third party, a principal can be imposed to have conformed behaviour and this fact can be reported to interested parties who may only need to be ad hoc related to the former. In this extended abstract we report Daonity, a TC enabled emerging work in grid security standard, to manifest how behaviour conformity can help to improve grid security.

REFERENCES

• 1: R. Bair (editor), D. Agarwal, et. al. (contributors). National Collaboratories Horizons, Report of the August 10-12, 2004, National Collaboratories Program Meeting, the U.S. Department of Energy Office of Science.
• 2: Ian Foster , Carl Kesselman, Computational grids, The grid: blueprint for a new computing infrastructure, Morgan Kaufmann Publishers Inc., San Francisco, CA, 1998
• 3: Ian Foster , Carl Kesselman , Steven Tuecke, The Anatomy of the Grid: Enabling Scalable Virtual Organizations, International Journal of High Performance Computing Applications, v.15 n.3, p.200-222, August 2001 [doi>10.1177/109434200101500302]
• 4: T. Garfunkel, M. Rosenblum and D. Boneh. Flexible OS support and applications for Trusted Computing. In the 9th Hot Topics in Operating Systems (HOTOS-IX), 2003.
• 5: Globus Toolkit 4. www-unix.globus.org/toolkit/
• 6: J. Marchesini and S. Smith. SHEMP--Secure Hardware Enhancement for MyProxy. Technical Report TR2005-532, Dept of Comp. Sci. Dartmouth College, Feb 2005.
• 7: Open Grid Forum. Overview of the GSI www.globus.org/security/overview.html/
• 8: OpenSSL. www.openssl.org/
• 9: Ahmad-Reza Sadeghi , Christian Stüble, Property-based attestation for computing platforms: caring about properties, not mechanisms, Proceedings of the 2004 workshop on New security paradigms, September 20-23, 2004, Nova Scotia, Canada [doi>10.1145/1065907.1066038]
• 10: TrouSerS. The open-source TCG Software Stack. trousers.sourceforge.net/
• 11: Trusted Computing Group. www.trustedcomputinggroup.org.
• 12: Trusted Computing Research Group. Open Grid Forum. forge.gridforum.org/projects/tc-rg/

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.5 COMPUTER SYSTEM IMPLEMENTATION

General Terms:
Security