Cyclotron: a secure, isolated, virtual cycle-scavenging grid in the enterprise

ABSTRACT

Cycle-scavenging grids appeal to organizations with large numbers of workstations that remain idle outside of working hours as potential sources of grid computing cycles, but security and isolation issues that come with the use of non-dedicated resources have slowed their adoption in the enterprise. In this paper we present Cyclotron, a prototype cycle-scavenging grid solution that leverages virtualization and a declarative policy-based access control infrastructure supporting flexible authorization rules and the constrained delegation of access rights to address these requirements.

REFERENCES

• 1: Becker, M., Fournet, C. and Gordon A. "SecPAL: Design and Semantics of a Decentralized Authorization Language." Technical Report MSR-TR-2006-120, Microsoft Research, Sept. 2006.
• 2: Nadalin, A., Kaler, C., Monzillo, R., and Hallam-Baker, P. "Web Services Security: SOAP Message Security 11. (WS-Security 1.1). http://www.oasis-open.org/committees/download.php/16790/wss-v1.1-spe-os-SOAPMessageSecurity.pdf
• 3: Douglas Thain , Todd Tannenbaum , Miron Livny, Distributed computing in practice: the Condor experience: Research Articles, Concurrency and Computation: Practice & Experience, v.17 n.2-4, p.323-356, February 2005 [doi>10.1002/cpe.v17:2/4]
• 4: David P. Anderson , Jeff Cobb , Eric Korpela , Matt Lebofsky , Dan Werthimer, SETI@home: an experiment in public-resource computing, Communications of the ACM, v.45 n.11, p.56-61, November 2002 [doi>10.1145/581571.581573]
• 5: Digipede Technologies, LLC. "The Digipede Network" (web site). http://www.digipede.net/products/digipede-network.html
• 6: "Enterprise Grid Security Requirements", Enterprise Grid Alliance, http://www.ogf.org/gf/docs/egadocs.php, 2005.
• 7: Selby, Nick, "Grid security: ?", The 451 Group. Presentation at OGF20, http://www.ogf.org/OGF20/materials/672/OGF20_GMB_Nick_Selby.ppt, 2007.
• 8: David P. Anderson, BOINC: A System for Public-Resource Computing and Storage, Proceedings of the 5th IEEE/ACM International Workshop on Grid Computing, p.4-10, November 08-08, 2004 [doi>10.1109/GRID.2004.14]
• 9: Microsoft Corporation. "Microsoft Authenticode Reference Guide" (web site). http://www.microsoft.com/technet/archive/security/topics/secaps/authcode.mspx?mfr=true
• 10: Univa UD. "Grid MP Overview" (web site). http://www.univaud.com/hpc/products/grid-mp/
• 11: Bhattacharya, T. et al. "Founder Effects in the Assessment of HIV Polymorphisms and HLA Allele Associations." Science, 315(5818):1583--1586, March 2007.
• 12: Dillaway, B. and Hogg, J. "Security Policy Assertion Language (SecPAL) Specification 1.0." http://research.microsoft.com/projects/secpal/downloadSecPALSpecification.aspx, February 2007.
• 13: Microsoft Corporation. "Windows Communication Foundation (WCF)" (web site). http://msdn.microsoft.com/en-us/netframework/aa663324.aspx
• 14: Persistence of Vision Raytracer Pty. Ltd. "POV-Ray - The Persistence of Vision Raytracer" (web site). http://www.povray.org
• 15: "OurGrid, Open source software for peer-to-peer computing", (web site) http://www.ourgrid.org.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.4 Distributed Systems
          Subjects: Distributed applications

General Terms:
Design, Experimentation, Management, Reliability, Security

Keywords:
access control, cycle-scavenging, cycle-stealing, grid computing, policy language, security, virtualization