Building a Demilitarized Zone with Data Encryption for Grid Environments

Matthias Schmidt; Matthew Smith; Niels Fallenbeck; Hans Picht; Bernd Freisle

1st International ICST Conference on Networks for Grid Applications

Research Article

Building a Demilitarized Zone with Data Encryption for Grid Environments

Download1094 downloads

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.4108/gridnets.2007.2160,
    author={Matthias Schmidt and Matthew Smith and Niels Fallenbeck and Hans Picht and Bernd Freisle},
    title={Building a Demilitarized Zone with Data Encryption for Grid Environments},
    proceedings={1st International ICST Conference on Networks for Grid Applications},
    publisher={ICST},
    proceedings_a={GRIDNETS},
    year={2007},
    month={10},
    keywords={Grid computing cluster computing network-level security and protection site security monitoring cryptography},
    doi={10.4108/gridnets.2007.2160}
}

Matthias Schmidt
Matthew Smith
Niels Fallenbeck
Hans Picht
Bernd Freisle
Year: 2007
Building a Demilitarized Zone with Data Encryption for Grid Environments
GRIDNETS
ICST
DOI: 10.4108/gridnets.2007.2160

Matthias Schmidt¹^,*, Matthew Smith¹^,*, Niels Fallenbeck¹^,*, Hans Picht¹^,*, Bernd Freisle¹^,*

1: Department of Mathematics and Computer Science, University of Marburg Hans-Meerwein-Strasse, D-35032 Marburg, Germany

*Contact email: schmidtm@informatik.uni-marburg.de, matthew@informatik.uni-marburg.de, fallenbe@informatik.uni-marburg.de, picht@informatik.uni-marburg.de, freisleb@informatik.uni-marburg.de

Abstract

Security and data integrity are important aspects in the fields of Grid and cluster computing. When these two areas are combined, the security issues intermingle and new security concepts are needed to ensure protection of both Grid users and local cluster users. In this paper, a novel dual laned Demilitarized Zone (DMZ) to protect local clusters from Grid attacks is introduced. The Globus Security Infrastructure (GSI) is extended to enable safe end-to-end encryption of Grid jobs through the DMZ and into virtualized execution hosts. Finally, an integrated Network Intrusion Detection System with Grid-specific rules, further protecting the Grid DMZ, is presented.

Keywords: Grid computing cluster computing network-level security and protection site security monitoring cryptography

Published: 2007-10-16
Publisher: ICST
Modified: 2011-08-22

: http://dx.doi.org/10.4108/gridnets.2007.2160