1. Gridshell Security Master Project Akylbek Zhumabayev Rochester Institute of Technology

2. Agenda Problem Statement Approach to solution Grid and Gridshell Web Service Security Standards Solution

3. Problem Statement Security solution for gridshell:  Easy setup and configuration of client  Integrated with grid systems  Supports all security dimensions  Can be applied to popular web platform  Scalable: nodes, layers  Optimized for better performance  Reliable: message delivery, QoS

4. Approach to Solution Solution – specification for developers Examples of implementation Based on technologies considered secure Designed on open security standards Web Services – solution platform Combination of transport and message security

5. Grid  HPC nodes  Middleware HPC Server Client

6. Gridshell  Teragrid  Simple API  Features Grid 1 Grid 3 Grid 2 Gridshell Web Service Client

7. Web Service (WS) Proved platform for distributed systems Popular XML-based web technology WS Client SOAP Transport Layer Message

8. Transport security context Security Cryptography Security Context WS Client SOAP Grid Message security context Transport security context Message security context Access Control Trust Delegation Access Control Trust Delegation

9. Security Standards for WS XML XML Signature (W3C) XML Encryption (W3C) SOAP WS-Addressing (W3C) WS-Security (OASIS) Resource Trust Secure Context Policy SAML Kerberos REL X.509 WS-SecureConversation (IBM) XACML (OASIS) RBAC (NIST) EPAL (IBM) WS-Policy (W3C) WS-Security Policy (OASIS) WS-Trust (OASIS) XKMS (W3C) WS-Federation (IBM) IDFF Shibboleth Reliability WS-Reliable Messaging (OASIS) WS-Reliability (OASIS) U/P

10. Popular WS Solutions 1.Microsoft WCF 2.Sun Metro 3.Apache Axis2 4.Apache CXF 5.IBM WebSphere 6.BEA WebLogic 7.WSO2 WSF

11. WS-* Stack XML XML Signature XML Encryption SOAP WS-Addressing WS-Security Resource Trust Secure Context Policy SAML Kerberos (1,2) REL X.509 WS-SecureConversation (1,2,3) XACML RBAC EPAL WS-Policy (1,2,4) WS-Security Policy (1,2) WS-Trust (1,2,3) XKMS WS-Federation IDFF Shibboleth Reliability WS-Reliable Messaging WS-Reliability (2) U/P Implemented in all solutionsPartially implementedNot implemented

12. GSI Grid Community did much in security field Security standard for grid systems Supports some open security standards

13. Solution Common specifications Platform-dependent specifications Gridshell modules Security dimensions Performance Client security infrastructure Third-party products

14. Examples Microsoft WCF Sun Metro + Apache