首页 > 最新文献

The 6th IEEE/ACM International Workshop on Grid Computing, 2005.最新文献

英文 中文
A scalable and efficient self-organizing failure detector for grid applications 用于网格应用程序的可伸缩且高效的自组织故障检测器
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542743
Yuuki Horita, K. Taura, T. Chikayama
Failure detection and group membership management are basic building blocks for self-repairing systems in distributed environments, which need to be scalable, reliable, and efficient in practice. As available resources become larger in size and more widely distributed, it is more essential that they can be easily used with a small amount of manual configuration in grid environments, where connectivities between different networks may be limited by firewalls and NATs. In this paper, we present a scalable failure detection protocol that self-organizes in grid environments. Our failure detectors autonomously create dispersed monitoring relationships among participating processes with almost no manual configuration so that each process will be monitored by a small number of other processes, and quickly disseminate notifications along the monitoring relationships when failures are detected. With simulations and real experiments, we showed that our failure detector has a practical scalability, a high reliability, and a good efficiency. The overhead with 313 processes was at most 2-percent even when the heartbeat interval was set to 0.1 second, and accordingly smaller when it was longer.
故障检测和组成员管理是分布式环境中自修复系统的基本组成部分,在实践中需要具有可扩展性、可靠性和高效性。随着可用资源的规模越来越大,分布越来越广泛,在网格环境中,通过少量的手动配置就可以轻松地使用这些资源变得更加重要,在网格环境中,不同网络之间的连接可能受到防火墙和nat的限制。在本文中,我们提出了一种在网格环境中自组织的可扩展故障检测协议。我们的故障检测器在参与的流程之间自主地创建分散的监视关系,几乎不需要手动配置,这样每个流程都将由少量其他流程监视,并且在检测到故障时沿着监视关系快速传播通知。仿真和实际实验表明,该故障检测器具有实用的可扩展性、高可靠性和良好的效率。即使在心跳间隔设置为0.1秒时,313个进程的开销最多也只有2%,当心跳间隔较长时,相应的开销更小。
{"title":"A scalable and efficient self-organizing failure detector for grid applications","authors":"Yuuki Horita, K. Taura, T. Chikayama","doi":"10.1109/GRID.2005.1542743","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542743","url":null,"abstract":"Failure detection and group membership management are basic building blocks for self-repairing systems in distributed environments, which need to be scalable, reliable, and efficient in practice. As available resources become larger in size and more widely distributed, it is more essential that they can be easily used with a small amount of manual configuration in grid environments, where connectivities between different networks may be limited by firewalls and NATs. In this paper, we present a scalable failure detection protocol that self-organizes in grid environments. Our failure detectors autonomously create dispersed monitoring relationships among participating processes with almost no manual configuration so that each process will be monitored by a small number of other processes, and quickly disseminate notifications along the monitoring relationships when failures are detected. With simulations and real experiments, we showed that our failure detector has a practical scalability, a high reliability, and a good efficiency. The overhead with 313 processes was at most 2-percent even when the heartbeat interval was set to 0.1 second, and accordingly smaller when it was longer.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129788183","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 41
Grid-level computing needs pervasive debugging 网格级计算需要普遍的调试
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542741
Rashid Mehmood, J. Crowcroft, S. Hand, Steven Smith
Developing applications for parallel and distributed systems is hard due to their nondeterministic nature; developing debugging tools for such systems and applications is even harder. A number of distributed debugging tools and techniques exist; however, we believe that they lack the infrastructure to scale to large-scale distributed systems, systems with hundreds and thousands of nodes, such as grids. In this paper, we introduce PDB, our prototype debugger, which is based on a hierarchical, scalable architecture. We explain the design of the PDB, highlight its functionality, and demonstrate its usability with two case studies. Before concluding, we discuss portability and extensibility issues for PDB, and discuss some solutions.
由于并行和分布式系统的不确定性,开发应用程序很困难;为这样的系统和应用程序开发调试工具更加困难。存在许多分布式调试工具和技术;然而,我们认为它们缺乏扩展到大规模分布式系统的基础设施,即具有成百上千个节点的系统,例如网格。在本文中,我们介绍了PDB,我们的原型调试器,它是基于一个分层的,可扩展的体系结构。我们将解释PDB的设计,强调其功能,并通过两个案例研究演示其可用性。在结束之前,我们将讨论PDB的可移植性和可扩展性问题,并讨论一些解决方案。
{"title":"Grid-level computing needs pervasive debugging","authors":"Rashid Mehmood, J. Crowcroft, S. Hand, Steven Smith","doi":"10.1109/GRID.2005.1542741","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542741","url":null,"abstract":"Developing applications for parallel and distributed systems is hard due to their nondeterministic nature; developing debugging tools for such systems and applications is even harder. A number of distributed debugging tools and techniques exist; however, we believe that they lack the infrastructure to scale to large-scale distributed systems, systems with hundreds and thousands of nodes, such as grids. In this paper, we introduce PDB, our prototype debugger, which is based on a hierarchical, scalable architecture. We explain the design of the PDB, highlight its functionality, and demonstrate its usability with two case studies. Before concluding, we discuss portability and extensibility issues for PDB, and discuss some solutions.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132815974","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 18
A self-organized grouping (SOG) method for efficient Grid resource discovery 一种高效网格资源发现的自组织分组方法
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542762
Anand Padmanabhan, Shaowen Wang, Sukumar Ghosh, R. Briggs
This paper presents a self-organized grouping (SOG) method that achieves efficient Grid resource discovery by forming and maintaining autonomous resource groups. Each group dynamically aggregates a set of resources that are similar to each other in some pre-specified resource characteristic. The SOG method takes advantage of the strengths of both centralized and decentralized approaches that were previously developed for Grid/P2P resource discovery. The design of the SOG method minimizes the overhead incurred in forming and maintaining groups and maximizes resource discovery performance. The way SOG method handles resource discovery queries is metaphorically similar to searching for a word in an English dictionary by identifying its alphabetical groups at the first place. It is shown from a series of computational experiments that SOG method achieves more stable (i.e., independent of the factors such as resource densities, and Grid sizes) and efficient lookup performance than other existing approaches.
提出了一种自组织分组(SOG)方法,通过形成和维护自治的资源组来实现网格资源的高效发现。每个组动态地聚合一组资源,这些资源在某些预先指定的资源特征上彼此相似。SOG方法利用了以前为网格/P2P资源发现开发的集中式和分散式方法的优点。SOG方法的设计最大限度地减少了形成和维护组的开销,并最大限度地提高了资源发现性能。SOG方法处理资源发现查询的方式类似于通过首先识别其字母组在英语字典中搜索单词。一系列的计算实验表明,SOG方法比其他现有方法具有更稳定(即不受资源密度和网格大小等因素的影响)和更高效的查找性能。
{"title":"A self-organized grouping (SOG) method for efficient Grid resource discovery","authors":"Anand Padmanabhan, Shaowen Wang, Sukumar Ghosh, R. Briggs","doi":"10.1109/GRID.2005.1542762","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542762","url":null,"abstract":"This paper presents a self-organized grouping (SOG) method that achieves efficient Grid resource discovery by forming and maintaining autonomous resource groups. Each group dynamically aggregates a set of resources that are similar to each other in some pre-specified resource characteristic. The SOG method takes advantage of the strengths of both centralized and decentralized approaches that were previously developed for Grid/P2P resource discovery. The design of the SOG method minimizes the overhead incurred in forming and maintaining groups and maximizes resource discovery performance. The way SOG method handles resource discovery queries is metaphorically similar to searching for a word in an English dictionary by identifying its alphabetical groups at the first place. It is shown from a series of computational experiments that SOG method achieves more stable (i.e., independent of the factors such as resource densities, and Grid sizes) and efficient lookup performance than other existing approaches.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"70 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131777527","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 49
Policy-based access control in peer-to-peer grid systems 对等网格系统中基于策略的访问控制
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542731
J. F. Silva, L. Gaspary, M. Barcellos, André Detsch
Access control to resources is one of the most important requirements to be satisfied in grid systems that span over multiple administrative domains. Such a mechanism allows every institution taking part of a grid community to define and enforce policies for the use of their local resources by remote users. Despite the efforts of the research community to address this topic, existing approaches do not scale (e.g., in terms of communication overhead) for a large number of nodes (peers) providing resources, as these approaches rely on centralized servers to process access requests. Furthermore, they provide limited, large-grain policy specification functionality and are not committed to employing open, standardized formats to express policies. In this paper, we address these limitations by proposing PeGAC (peer-to-peer grid access control), a policy-based, distributed access control mechanism, which can be applied to P2P grid systems. In our proposal, policies are specified using the role-based access control model and coded using the extensible access control markup language. As a proof-of-concept we have integrated PeGAC into OurGrid, a middleware for the implementation of P2P grid systems. Preliminary results of experiments carried out at the resulting infrastructure show that our solution poses small communication and processing overhead, and can handle large policy repositories efficiently.
在跨越多个管理域的网格系统中,对资源的访问控制是需要满足的最重要的需求之一。这种机制允许作为网格社区一部分的每个机构定义和执行远程用户使用其本地资源的策略。尽管研究团体努力解决这个问题,但现有的方法不能扩展(例如,在通信开销方面),因为这些方法依赖于集中式服务器来处理访问请求。此外,它们提供有限的大粒度策略规范功能,并且不致力于使用开放的、标准化的格式来表示策略。在本文中,我们通过提出PeGAC(点对点网格访问控制)来解决这些限制,PeGAC是一种基于策略的分布式访问控制机制,可应用于P2P网格系统。在我们的建议中,使用基于角色的访问控制模型指定策略,并使用可扩展访问控制标记语言进行编码。作为概念验证,我们已经将PeGAC集成到OurGrid中,这是一个实现P2P网格系统的中间件。在所得到的基础设施上进行的实验的初步结果表明,我们的解决方案具有很小的通信和处理开销,并且可以有效地处理大型策略存储库。
{"title":"Policy-based access control in peer-to-peer grid systems","authors":"J. F. Silva, L. Gaspary, M. Barcellos, André Detsch","doi":"10.1109/GRID.2005.1542731","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542731","url":null,"abstract":"Access control to resources is one of the most important requirements to be satisfied in grid systems that span over multiple administrative domains. Such a mechanism allows every institution taking part of a grid community to define and enforce policies for the use of their local resources by remote users. Despite the efforts of the research community to address this topic, existing approaches do not scale (e.g., in terms of communication overhead) for a large number of nodes (peers) providing resources, as these approaches rely on centralized servers to process access requests. Furthermore, they provide limited, large-grain policy specification functionality and are not committed to employing open, standardized formats to express policies. In this paper, we address these limitations by proposing PeGAC (peer-to-peer grid access control), a policy-based, distributed access control mechanism, which can be applied to P2P grid systems. In our proposal, policies are specified using the role-based access control model and coded using the extensible access control markup language. As a proof-of-concept we have integrated PeGAC into OurGrid, a middleware for the implementation of P2P grid systems. Preliminary results of experiments carried out at the resulting infrastructure show that our solution poses small communication and processing overhead, and can handle large policy repositories efficiently.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"8 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132219085","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 23
Saleve: simple Web-services based environment for parameter study applications Saleve:用于参数研究应用程序的基于web服务的简单环境
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542757
Z. Molnár, I. Szeberényi
The goal of the Saleve Project is to develop and evaluate mechanisms and abstractions that may connect the diverse research community of the distributed (mainly the grid) computing to those users, who are not familiar with distributed computing as such, but who would simply like to use the results in their everyday tasks. We show a simple Web-services based, domain-specific computational framework that integrates smoothly into the well-known, traditional user environments and requires learning no new technologies.
Saleve项目的目标是开发和评估各种机制和抽象,这些机制和抽象可以将分布式(主要是网格)计算的不同研究社区与那些不熟悉分布式计算的用户联系起来,这些用户只是想在日常任务中使用这些结果。我们展示了一个简单的基于web服务的特定于领域的计算框架,它可以顺利地集成到众所周知的传统用户环境中,并且不需要学习新技术。
{"title":"Saleve: simple Web-services based environment for parameter study applications","authors":"Z. Molnár, I. Szeberényi","doi":"10.1109/GRID.2005.1542757","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542757","url":null,"abstract":"The goal of the Saleve Project is to develop and evaluate mechanisms and abstractions that may connect the diverse research community of the distributed (mainly the grid) computing to those users, who are not familiar with distributed computing as such, but who would simply like to use the results in their everyday tasks. We show a simple Web-services based, domain-specific computational framework that integrates smoothly into the well-known, traditional user environments and requires learning no new technologies.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"2000 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128273129","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
An end-to-end Web services-based infrastructure for biomedical applications 用于生物医学应用程序的端到端基于Web服务的基础设施
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542727
S. Krishnan, K. Baldridge, J. Greenberg, B. Stearn, K. Bhatia
Services-oriented architectures hold a lot of promise for grid-enabling scientific applications. In recent times, Web services have gained wide-spread acceptance in the grid community as the standard way of exposing application functionality to end-users. Web services-based architectures provide accessibility via a multitude of clients, and the ability to enable composition of data and applications in novel ways for facilitating innovation across scientific disciplines. However, issues of diverse data formats and styles which hinder interoperability and integration must be addressed. Providing Web service wrappers for legacy applications alleviates many problems because of the exchange of strongly typed data, defined and validated using XML schemas, that can be used by workflow tools for application integration. In this paper, we describe the end-to-end architecture of such a system for biomedical applications that are part of the National Biomedical Computation Resource (NBCR). We present the technical challenges in setting up such an infrastructure, and discuss in detail the back-end resource management, application services, user-interfaces, and the security infrastructure for the same. We also evaluate our prototype infrastructure, discuss some of its shortcomings, and the future work that may be required to address them.
面向服务的体系结构为支持网格的科学应用程序带来了很多希望。最近,Web服务作为向最终用户公开应用程序功能的标准方式在网格社区中得到了广泛的接受。基于Web服务的体系结构通过大量客户端提供了可访问性,并且能够以新颖的方式组合数据和应用程序,从而促进科学学科之间的创新。但是,必须解决妨碍互操作性和集成的各种数据格式和样式的问题。为遗留应用程序提供Web服务包装器可以减轻许多问题,因为可以交换使用XML模式定义和验证的强类型数据,工作流工具可以使用这些数据进行应用程序集成。在本文中,我们描述了这种生物医学应用系统的端到端架构,该系统是国家生物医学计算资源(NBCR)的一部分。我们提出了建立这样一个基础设施的技术挑战,并详细讨论了后端资源管理、应用程序服务、用户界面和安全基础设施。我们还评估了我们的原型基础结构,讨论了它的一些缺点,以及可能需要解决它们的未来工作。
{"title":"An end-to-end Web services-based infrastructure for biomedical applications","authors":"S. Krishnan, K. Baldridge, J. Greenberg, B. Stearn, K. Bhatia","doi":"10.1109/GRID.2005.1542727","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542727","url":null,"abstract":"Services-oriented architectures hold a lot of promise for grid-enabling scientific applications. In recent times, Web services have gained wide-spread acceptance in the grid community as the standard way of exposing application functionality to end-users. Web services-based architectures provide accessibility via a multitude of clients, and the ability to enable composition of data and applications in novel ways for facilitating innovation across scientific disciplines. However, issues of diverse data formats and styles which hinder interoperability and integration must be addressed. Providing Web service wrappers for legacy applications alleviates many problems because of the exchange of strongly typed data, defined and validated using XML schemas, that can be used by workflow tools for application integration. In this paper, we describe the end-to-end architecture of such a system for biomedical applications that are part of the National Biomedical Computation Resource (NBCR). We present the technical challenges in setting up such an infrastructure, and discuss in detail the back-end resource management, application services, user-interfaces, and the security infrastructure for the same. We also evaluate our prototype infrastructure, discuss some of its shortcomings, and the future work that may be required to address them.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"146 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132827406","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 21
Peer-to-peer discovery of computational resources for Grid applications 网格应用程序计算资源的点对点发现
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542740
Adeep S. Cheema, M. Muhammad, Indranil Gupta
Grid applications need to discover computational resources quickly, efficiently and scalably, but most importantly in an expressive manner. An expressive query may specify a variety of required metrics for the job, e.g., the number of hosts required, the amount of free CPU required on these hosts, and the minimum amount of RAM required on these hosts, etc. We present a peer-to-peer (P2P) solution to this problem, using structured naming to enable both (1) publishing of information about available computational resources, as well as (2) expressive and efficient querying of such resources. Extensive traces collected from hosts within the Computer Science department at UIUC are used to evaluate our proposed solution. Finally, our solutions are based upon a well known P2P system called Pastry, albeit for Grid applications; this is another step towards the much-needed convergence of Grid and P2P computing.
网格应用程序需要快速、高效和可伸缩地发现计算资源,但最重要的是要以一种富有表现力的方式。表达性查询可以指定作业所需的各种指标,例如,所需的主机数量、这些主机上所需的空闲CPU数量以及这些主机上所需的最小RAM数量等。我们提出了一个点对点(P2P)解决方案来解决这个问题,使用结构化命名来实现(1)发布关于可用计算资源的信息,以及(2)对这些资源的表达和有效查询。从UIUC计算机科学系的主机收集的大量痕迹用于评估我们提出的解决方案。最后,我们的解决方案是基于一个著名的P2P系统,称为Pastry,尽管它适用于网格应用;这是网格和P2P计算急需的融合的又一步。
{"title":"Peer-to-peer discovery of computational resources for Grid applications","authors":"Adeep S. Cheema, M. Muhammad, Indranil Gupta","doi":"10.1109/GRID.2005.1542740","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542740","url":null,"abstract":"Grid applications need to discover computational resources quickly, efficiently and scalably, but most importantly in an expressive manner. An expressive query may specify a variety of required metrics for the job, e.g., the number of hosts required, the amount of free CPU required on these hosts, and the minimum amount of RAM required on these hosts, etc. We present a peer-to-peer (P2P) solution to this problem, using structured naming to enable both (1) publishing of information about available computational resources, as well as (2) expressive and efficient querying of such resources. Extensive traces collected from hosts within the Computer Science department at UIUC are used to evaluate our proposed solution. Finally, our solutions are based upon a well known P2P system called Pastry, albeit for Grid applications; this is another step towards the much-needed convergence of Grid and P2P computing.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"34 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130593301","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 86
Addressing credential revocation in grid environments 解决网格环境中的凭证撤销问题
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542764
B. Sundaram, B. Chapman
Credential revocation is a critical problem in grid environments and remains unaddressed in existing grid security solutions. We present our ongoing work in designing a novel grid authentication system, based on Globus GSI, that solves the revocation problem. The focus of this work is to ensure instantaneous revocation of both long-term digital identities of hosts/users and short-lived identities of user proxies. Our system employs mediated RSA (mRSA), adapts Boneh's notion of semi-trusted mediators to suit security in virtual organizations and propagates proxy revocation information as in Micali's NOVO-MODO system. We envision that our system would additionally provide a configuration-free security model for end users and fine-grained management of user credentials.
证书撤销是网格环境中的一个关键问题,在现有的网格安全解决方案中仍未得到解决。本文介绍了基于Globus GSI的新型网格认证系统的设计工作,该系统解决了吊销问题。这项工作的重点是确保主机/用户的长期数字身份和用户代理的短期身份的即时撤销。我们的系统采用中介RSA (mRSA),采用Boneh的半信任中介概念来适应虚拟组织的安全性,并像Micali的NOVO-MODO系统一样传播代理撤销信息。我们设想,我们的系统还将为最终用户提供一个无需配置的安全模型,并对用户凭证进行细粒度管理。
{"title":"Addressing credential revocation in grid environments","authors":"B. Sundaram, B. Chapman","doi":"10.1109/GRID.2005.1542764","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542764","url":null,"abstract":"Credential revocation is a critical problem in grid environments and remains unaddressed in existing grid security solutions. We present our ongoing work in designing a novel grid authentication system, based on Globus GSI, that solves the revocation problem. The focus of this work is to ensure instantaneous revocation of both long-term digital identities of hosts/users and short-lived identities of user proxies. Our system employs mediated RSA (mRSA), adapts Boneh's notion of semi-trusted mediators to suit security in virtual organizations and propagates proxy revocation information as in Micali's NOVO-MODO system. We envision that our system would additionally provide a configuration-free security model for end users and fine-grained management of user credentials.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125020675","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 5
Efficient response time predictions by exploiting application and resource state similarities 通过利用应用程序和资源状态的相似性进行有效的响应时间预测
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542747
Hui Li, D. Groep, L. Wolters
In large-scale grids with many possible resources (clusters of computing elements) to run applications, it is useful that the resources can provide predictions of job response times so users or resource brokers can make better scheduling decisions. Two metrics need to be estimated for response time predictions: one is how long a job executes on the resource (application run time), the other is how long the job waits in the queue before starting (queue wait time). In this paper we propose an instance based learning technique to predict these two metrics by mining historical workloads. The novelty of our approach is to introduce policy attributes in representing and comparing resource states, which is defined as the pool of running and queued jobs on the resource at the time to make a prediction. The policy attributes reflect the local resource scheduling policies and they can be automatically discovered using a genetic search algorithm. The main advantages of this approach compared with scheduler simulation are two-folds: Firstly, it has a better performance to meet the real time requirement of Grid resource brokering; secondly, it is more general because the scheduling policies are learned from past observations. Our experimental results on the NIKHEF LCG production cluster show that acceptable prediction accuracy can be obtained, where the relative prediction errors for response times are between 0.35 and 0.70.
在具有许多可能的资源(计算元素集群)来运行应用程序的大规模网格中,资源可以提供作业响应时间的预测,以便用户或资源代理可以做出更好的调度决策。预测响应时间需要估计两个指标:一个是作业在资源上执行的时间(应用程序运行时),另一个是作业在启动前在队列中等待的时间(队列等待时间)。本文提出了一种基于实例的学习技术,通过挖掘历史工作负载来预测这两个指标。我们方法的新颖之处在于在表示和比较资源状态时引入了策略属性,它被定义为在进行预测时资源上运行和排队作业的池。策略属性反映了本地资源调度策略,可以通过遗传搜索算法自动发现。与调度程序仿真相比,该方法具有两方面的优势:首先,它具有更好的性能,能够满足网格资源代理的实时性要求;其次,它更通用,因为调度策略是从过去的观察中学习的。我们在NIKHEF LCG生产集群上的实验结果表明,我们可以获得可接受的预测精度,其中响应时间的相对预测误差在0.35 ~ 0.70之间。
{"title":"Efficient response time predictions by exploiting application and resource state similarities","authors":"Hui Li, D. Groep, L. Wolters","doi":"10.1109/GRID.2005.1542747","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542747","url":null,"abstract":"In large-scale grids with many possible resources (clusters of computing elements) to run applications, it is useful that the resources can provide predictions of job response times so users or resource brokers can make better scheduling decisions. Two metrics need to be estimated for response time predictions: one is how long a job executes on the resource (application run time), the other is how long the job waits in the queue before starting (queue wait time). In this paper we propose an instance based learning technique to predict these two metrics by mining historical workloads. The novelty of our approach is to introduce policy attributes in representing and comparing resource states, which is defined as the pool of running and queued jobs on the resource at the time to make a prediction. The policy attributes reflect the local resource scheduling policies and they can be automatically discovered using a genetic search algorithm. The main advantages of this approach compared with scheduler simulation are two-folds: Firstly, it has a better performance to meet the real time requirement of Grid resource brokering; secondly, it is more general because the scheduling policies are learned from past observations. Our experimental results on the NIKHEF LCG production cluster show that acceptable prediction accuracy can be obtained, where the relative prediction errors for response times are between 0.35 and 0.70.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"81 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130274132","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 41
Authorization of data access in distributed storage systems 分布式存储系统的数据访问授权
Pub Date : 2005-11-13 DOI: 10.1109/GRID.2005.1542739
D. Feichtinger, A. Peters
This paper describes an efficient method for access authorization in distributed (grid) storage systems. Client applications obtain "access tokens" from an organization's file catalogue upon execution of a file name resolution request. Whenever a client application tries to access the requested files, the token is transparently passed to the target storage system. Thus the storage service can decide on the authorization of a request without itself having to contact the authorization service. The token is protected from access and modification by external parties using public key infrastructure. A prototype using the AliEn grid file catalogue and xrootd as a data server has been implemented. A detailed description of the prototype implementation is presented.
本文提出了一种分布式(网格)存储系统中访问授权的有效方法。客户端应用程序在执行文件名解析请求时从组织的文件目录获得“访问令牌”。每当客户端应用程序尝试访问所请求的文件时,令牌就会透明地传递给目标存储系统。因此,存储服务可以决定请求的授权,而不必自己联系授权服务。令牌可以防止外部各方使用公钥基础设施访问和修改。已经实现了一个使用AliEn网格文件目录和xrootd作为数据服务器的原型。给出了原型实现的详细描述。
{"title":"Authorization of data access in distributed storage systems","authors":"D. Feichtinger, A. Peters","doi":"10.1109/GRID.2005.1542739","DOIUrl":"https://doi.org/10.1109/GRID.2005.1542739","url":null,"abstract":"This paper describes an efficient method for access authorization in distributed (grid) storage systems. Client applications obtain \"access tokens\" from an organization's file catalogue upon execution of a file name resolution request. Whenever a client application tries to access the requested files, the token is transparently passed to the target storage system. Thus the storage service can decide on the authorization of a request without itself having to contact the authorization service. The token is protected from access and modification by external parties using public key infrastructure. A prototype using the AliEn grid file catalogue and xrootd as a data server has been implemented. A detailed description of the prototype implementation is presented.","PeriodicalId":347929,"journal":{"name":"The 6th IEEE/ACM International Workshop on Grid Computing, 2005.","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2005-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127436641","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 20
期刊
The 6th IEEE/ACM International Workshop on Grid Computing, 2005.
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1