PIGA-HIPS: Protection of a shared HPC cluster - Archive ouverte HAL Access content directly
Journal Articles International Journal On Advances in Security Year : 2011

PIGA-HIPS: Protection of a shared HPC cluster

(1) , (2) , (3) , (1)
1
2
3

Abstract

Protecting a shared High Performance Computing cluster is still an open research problem. Existing solutions deal with sand-boxing and Discretionary Access Control for controlling remote connections. Guaranteeing security properties for a shared cluster is complex since users demand an environment at the same time efficient and preventing confidentiality and integrity violations. This paper proposes two different approaches for protecting remote interactive accesses against malicious operations. Those two approaches leverage the SELinux protection. They have been successfully implemented using standard MAC from SELinux, and guarantee supplementary security properties thanks to our PIGA HIPS. The paper compares those two different approaches. It presents a real use case for the security of a shared cluster that allows interactive connections for users while preventing confidentiality and integrity violations. That paper takes advantage of previous works and goes one step further for protecting shared clusters against malicious activities. It proposes a new framework to share a cluster among partners while guaranteeing advanced security properties. This solution aims to prevent complex or indirect malicious activities that use combinations of processes and covert channels in their attempt to bypass the required properties.
Not file

Dates and versions

hal-00671586 , version 1 (17-02-2012)

Identifiers

  • HAL Id : hal-00671586 , version 1

Cite

Mathieu Blanc, Jérémy Briffaut, Christian Toinard, Damien Gros. PIGA-HIPS: Protection of a shared HPC cluster. International Journal On Advances in Security, 2011, 4 (1), pp.44-53. ⟨hal-00671586⟩
102 View
0 Download

Share

Gmail Facebook Twitter LinkedIn More