SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Security in Research Computing

rowa avatar
rowa
15 diapositives · 283 Views · Oct 23, 2014

In federated environments like caBIG, trust is critical. This framework emphasizes the importance of robust identity verification (NIST Level 2), seamless authentication without password sharing (using SAML and certificates), and meaningful authorization based on trusted relationships. The caGrid security utilizes standards-based packages for user authentication, group management, and access control. UAB’s Research Computing aims to enhance secure collaborations across institutions by developing scalable infrastructure, demonstrated through initiatives like UABgrid. Explore how these methodologies enable secure data sharing and research collaboration.

Security in Research Computing - slide 1
01 / 15Security in Research Computing
1 / 17

Télécharger la présentation

Security in Research Computing
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Security in Research Computing John Sandefur UAB Comprehensive Cancer Center John-Paul Robinson UAB Research Computing

  2. So, we have this application… caBIG How do we know who to trust in this federated environment?

  3. Ideally… • Identity – We must document in person identity verification (NIST “Level 2”) • Authentication – Systems must trust each other to authenticate users without sharing passwords (using SAML & certificates) • Authorization – Relationships must be built to support meaningful authorization to resources owned by independent organizations (trusted attributes) Federated systems solve on-campus collaboration problems and build a technology and trust fabric capable of crossing many institutions.

  4. Source: www.cagrid.org caGrid Infrastructure & Tooling:

  5. Lesson 6: Focusing on the Grid caGrid Security is Standards-Based • caGrid uses several packages to provide security services: • Dorian allows institutions to locally authenticate their users onto caGrid. • GridGrouper group memberships and resource access rights are to be managed. • Trust Relationships specify which institutions trust each other’s authentication. • GAARDS was developed on top of the Globus Toolkit and extends the Grid Security Infrastructure (GSI) to provide enterprise services and administrative tools for: • Identity federation • Grid user management • Trust management • Group/VO management • Access control policy management and enforcement • Integration between existing security domains and the grid security domain

  6. Lesson 6: Focusing on the Grid caGrid GAARDS Security

  7. GAARDS In Action To access secure Grid resources, a user needs to obtain a Grid credential

  8. GAARDS In Action

  9. GAARDS In Action Authenticate with local institution and obtain proof of authentication (SAML Assertion)

  10. GAARDS In Action Obtain Grid credential from Dorian using SAML Assertion

  11. GAARDS In Action Invoke Secure Grid Service using credential provided by Dorian

  12. GAARDS In Action Validate that the credential provided by the user is issued by a trusted provider

  13. GAARDS In Action Determine if user is authorized to access requested resources.

  14. Lesson 6: Focusing on the Grid caGrid Security Flows

  15. UAB is Well-Positioned • UAB IT’s Research Computing group has extensive background in federated systems (integrated systems that span many organizations): • UABgrid: A pilot federated system supporting trusted transactions for high performance computing (HPC) • SURAgrid, Open Science Grid (OSG), TeraGrid: Engaged participant in regional and national cyberinfrastructure development • Demonstrated scalability: Migrated Section on Statistical Genetics (SSG) workflow to OSG using 1000 CPU-hours in 4 hours of wall clock time: a 5-fold increase • Trusted networks: Building secure environments to share data and compute power • UAB IT Research Computing: Named Oct 1, 2009; formerly High Performance Computing Services (HPCS) • Collaboration between Research Computing and CCC on caBIG’s Getting Connected grant exposed the need to add new services for authorization and data sharing (caGrid) to this campus platform. • SoM sponsored CCC Brain SPORE tissue bank is exploring caBIG tool adoption. • Data Access and Sharing Initiative (DASI) is implementing expanded grid data services framework to share data within UAB.