A framework model for grid security Export

@article{lacetti:gridsec, abstract = {Computational grids can be considered as tiered objects; following a widespread terminology, cluster grids may be grouped into enterprise grids, that in turn may belong to global grids. Therefore, computing grid security has to be "tiered" too, with the ground level remaining the OS one. In this work, we introduce a sort of unified approach, an overall architectural framework for access control to grid resources, and one that adheres as much as possible to current security principles. Current grid security implementations are viewed in the light of this model, their main drawbacks are described, and we show how our proposal is able to avoid them. We believe that a main strategy could be to adopt both PKI and PMI infrastructures at the grid layer, ensuring that an adequate transfer of authentication and authorization will be made between the Virtual Organization and Resource Provider layers. This can be achieved by extending those features at the OS layer as system applications and services.}, author = {Laccetti, G. and Schmid, G.}, citeulike-article-id = {1269594}, citeulike-linkout-0 = {http://www.sciencedirect.com/science/article/B6V06-4MV74WG-1/2/0679fc68669a3c9de2f0fe11ca5ad16d}, citeulike-linkout-1 = {http://dx.doi.org/10.1016/j.future.2007.01.002}, doi = {10.1016/j.future.2007.01.002}, journal = {Future Generation Computer Systems}, keywords = {grid, grid\_security, pki}, month = {June}, number = {5}, pages = {702--713}, posted-at = {2009-10-14 10:51:07}, priority = {4}, title = {A framework model for grid security}, url = {http://dx.doi.org/10.1016/j.future.2007.01.002}, volume = {23}, year = {2007} }

TY - JOUR ID - lacetti:gridsec L3 - citeulike-article-id:1269594 N2 - Computational grids can be considered as tiered objects; following a widespread terminology, cluster grids may be grouped into enterprise grids, that in turn may belong to global grids. Therefore, computing grid security has to be "tiered" too, with the ground level remaining the OS one. In this work, we introduce a sort of unified approach, an overall architectural framework for access control to grid resources, and one that adheres as much as possible to current security principles. Current grid security implementations are viewed in the light of this model, their main drawbacks are described, and we show how our proposal is able to avoid them. We believe that a main strategy could be to adopt both PKI and PMI infrastructures at the grid layer, ensuring that an adequate transfer of authentication and authorization will be made between the Virtual Organization and Resource Provider layers. This can be achieved by extending those features at the OS layer as system applications and services. IS - 5 JF - Future Generation Computer Systems EP - 713 TI - A framework model for grid security VL - 23 SP - 702 KW - grid KW - grid_security KW - pki AU - Laccetti, G AU - Schmid, G PY - 2007/06// UR - http://dx.doi.org/10.1016/j.future.2007.01.002 ER -