AbsIracr-Grid computing allows flexible resource sharing among geographically distributed computing resources in multiple administrative domains. Virtualhation of resources allows jobs to be run on remote resources participating in a Grid. While this computing paradigm has been used primarily for batch jobs, we study interactive Grid applications rich in graphics and multimedia such as scientific visualization and digital content creation. A host of security issues need to be addressed for such Interactive Grids to gain acceptance, particularly in industry. The purpose of this paper is to scope these security issues. The Grid Security Infrastructure. (GSI), a component of the Globus Toolkit 111, creates Grid credentials for every user and resource. We describe how this may be extended to securely set up an interactive session on a remote host, end the additional security issues associated with interactive session management. We propose controlled shell and controlled desktop mechanisms that reslrict the user to execute only authorized commands and applications, and controlled user and super-user accounts that customize the shell and desktop using policy filer We also propose P ncw approach to scoping the security needs of Grid s y~-terns by defining three generic scenarios: mutual trust, partial trust and mutual distrust. New security issues arise u,hen the user may not be trusted, or the user and the host computer's ouner are mutually suspicious.
Dwoskin et al. REF focus specifically on the security issues in interactive applications running on the grid.
Scoping security issues for interactive grids
The Thrity-Seventh Asilomar Conference on Signals, Systems & Computers, 2003
The Thrity-Seventh Asilomar Conference on Signals, Systems & Computers, 2003
Computer Science