Details
| Original language | English |
|---|---|
| Title of host publication | e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops |
| Pages | 11-18 |
| Number of pages | 8 |
| Publication status | Published - 1 Dec 2009 |
| Event | 2009 5th IEEE International Conference on e-Science Workshops, e-science 2009 - Oxford, United Kingdom (UK) Duration: 9 Dec 2009 → 11 Dec 2009 |
Publication series
| Name | e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops |
|---|
Abstract
Single sign-on and delegation of rights are key requirements for modern Grid infrastructures. These requirements are usually facilitated by X.509 und Private-Key Infrastructures (PKI) and proxy certificates. Proxy certificates, however, can be obtained and abused by a malicious third party. There is currently no method for end users to detect such abuse. We have designed a solution that enables a thorough auditing of Grid proxy usage in Globus-based Grids and implemented a service that accepts auditing information via a web service interface and saves them to a back-end database. We introduce modifications to the Grid Security Infrastructure that allow sending audit trails from within Globus components if the user desires to track credential usage. A web-based front-end shows all logged information. With our approach, expert users can now closely monitor how their credentials are used after job submission. This will help build trust in Grid infrastructures and delegated authentication and authorization.
ASJC Scopus subject areas
- Arts and Humanities(all)
- General Arts and Humanities
- Earth and Planetary Sciences(all)
- General Earth and Planetary Sciences
- Engineering(all)
- Biomedical Engineering
- Social Sciences(all)
- Education
Cite this
- Standard
- Harvard
- Apa
- Vancouver
- BibTeX
- RIS
e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops. 2009. p. 11-18 5407982 (e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops).
Research output: Chapter in book/report/conference proceeding › Conference contribution › Research › peer review
}
TY - GEN
T1 - Design and implementation of a Grid proxy auditing infrastructure
AU - Kunz, Christopher
AU - Szongott, Christian
AU - Wiebelitz, Jan
AU - Grimm, Christian
PY - 2009/12/1
Y1 - 2009/12/1
N2 - Single sign-on and delegation of rights are key requirements for modern Grid infrastructures. These requirements are usually facilitated by X.509 und Private-Key Infrastructures (PKI) and proxy certificates. Proxy certificates, however, can be obtained and abused by a malicious third party. There is currently no method for end users to detect such abuse. We have designed a solution that enables a thorough auditing of Grid proxy usage in Globus-based Grids and implemented a service that accepts auditing information via a web service interface and saves them to a back-end database. We introduce modifications to the Grid Security Infrastructure that allow sending audit trails from within Globus components if the user desires to track credential usage. A web-based front-end shows all logged information. With our approach, expert users can now closely monitor how their credentials are used after job submission. This will help build trust in Grid infrastructures and delegated authentication and authorization.
AB - Single sign-on and delegation of rights are key requirements for modern Grid infrastructures. These requirements are usually facilitated by X.509 und Private-Key Infrastructures (PKI) and proxy certificates. Proxy certificates, however, can be obtained and abused by a malicious third party. There is currently no method for end users to detect such abuse. We have designed a solution that enables a thorough auditing of Grid proxy usage in Globus-based Grids and implemented a service that accepts auditing information via a web service interface and saves them to a back-end database. We introduce modifications to the Grid Security Infrastructure that allow sending audit trails from within Globus components if the user desires to track credential usage. A web-based front-end shows all logged information. With our approach, expert users can now closely monitor how their credentials are used after job submission. This will help build trust in Grid infrastructures and delegated authentication and authorization.
UR - http://www.scopus.com/inward/record.url?scp=77950133010&partnerID=8YFLogxK
U2 - 10.1109/ESCIW.2009.5407982
DO - 10.1109/ESCIW.2009.5407982
M3 - Conference contribution
AN - SCOPUS:77950133010
SN - 9781424459452
T3 - e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops
SP - 11
EP - 18
BT - e-science 2009 - Proceedings of the 2009 5th IEEE International Conference on e-Science Workshops
T2 - 2009 5th IEEE International Conference on e-Science Workshops, e-science 2009
Y2 - 9 December 2009 through 11 December 2009
ER -