Large scale distributed systems like the computational Grid combine network access with multiple computing and storage units. The need for efficient and secure data transportation over potentially insecure channels creates new security and privacy issues, which are exacerbated by the heterogeneous nature of the collaborating resources. Traditional security approaches require adequate overhauling to address these paradigms. In this paper, we propose a new two-pronged approach to address Grid security issues. First, the virtualization of security services provides an abstraction layer on the top of the security infrastructure, which harmonizes the heterogeneity of underlying security mechanisms. Second, the pluggable nature of the various security services permits the users and resource providers to configure the security architecture according to their requirements and satisfaction level. This approach allows the security infrastructure to develop with minimal impact on the Grid resource management functionalities, which are still being developed.
Citation:
Syed Naqvi, Michel Riguidel, "VIPSEC: Virtualized and Pluggable Security Services Infrastructure for Adaptive Grid Computing," nca, pp.362-365, Network Computing and Applications, Third IEEE International Symposium on (NCA'04), 2004