Building a Demilitarized Zone with Data Encryption for Grid Environments
Matthias Schmidt, Matthew Smith, Niels Fallenbeck, Hans Picht, Bernd Freisleben · 2007
Security and data integrity are important aspects in the fields of Grid and cluster computing. When these two ar-eas are combined, the security issues intermingle and new security concepts are needed to ensure protection of both Grid users and local cluster users. In this paper, a novel dual laned Demilitarized Zone (DMZ) to protect local clus-ters from Grid attacks is introduced. The Globus Security Infrastructure (GSI) is extended to enable safe end-to-end encryption of Grid jobs through the DMZ and into virtu-alized execution hosts. Finally, an integrated Network In-trusion Detection System with Grid-specific rules, further protecting the Grid DMZ, is presented.