PIGA-HIPS: Protection of a shared HPC cluster - Inria - Institut national de recherche en sciences et technologies du numérique
Article Dans Une Revue International Journal On Advances in Security Année : 2011

PIGA-HIPS: Protection of a shared HPC cluster

Résumé

Protecting a shared High Performance Computing cluster is still an open research problem. Existing solutions deal with sand-boxing and Discretionary Access Control for controlling remote connections. Guaranteeing security properties for a shared cluster is complex since users demand an environment at the same time efficient and preventing confidentiality and integrity violations. This paper proposes two different approaches for protecting remote interactive accesses against malicious operations. Those two approaches leverage the SELinux protection. They have been successfully implemented using standard MAC from SELinux, and guarantee supplementary security properties thanks to our PIGA HIPS. The paper compares those two different approaches. It presents a real use case for the security of a shared cluster that allows interactive connections for users while preventing confidentiality and integrity violations. That paper takes advantage of previous works and goes one step further for protecting shared clusters against malicious activities. It proposes a new framework to share a cluster among partners while guaranteeing advanced security properties. This solution aims to prevent complex or indirect malicious activities that use combinations of processes and covert channels in their attempt to bypass the required properties.
Fichier non déposé

Dates et versions

hal-00671586 , version 1 (17-02-2012)

Identifiants

  • HAL Id : hal-00671586 , version 1

Citer

Mathieu Blanc, Jérémy Briffaut, Christian Toinard, Damien Gros. PIGA-HIPS: Protection of a shared HPC cluster. International Journal On Advances in Security, 2011, 4 (1), pp.44-53. ⟨hal-00671586⟩
124 Consultations
0 Téléchargements

Partager

More