PIGA-HIPS: Protection of a shared HPC cluster

Abstract : Protecting a shared High Performance Computing cluster is still an open research problem. Existing solutions deal with sand-boxing and Discretionary Access Control for controlling remote connections. Guaranteeing security properties for a shared cluster is complex since users demand an environment at the same time efficient and preventing confidentiality and integrity violations. This paper proposes two different approaches for protecting remote interactive accesses against malicious operations. Those two approaches leverage the SELinux protection. They have been successfully implemented using standard MAC from SELinux, and guarantee supplementary security properties thanks to our PIGA HIPS. The paper compares those two different approaches. It presents a real use case for the security of a shared cluster that allows interactive connections for users while preventing confidentiality and integrity violations. That paper takes advantage of previous works and goes one step further for protecting shared clusters against malicious activities. It proposes a new framework to share a cluster among partners while guaranteeing advanced security properties. This solution aims to prevent complex or indirect malicious activities that use combinations of processes and covert channels in their attempt to bypass the required properties.
Document type :
Journal articles
Complete list of metadatas

https://hal.inria.fr/hal-00671586
Contributor : Jérémy Briffaut <>
Submitted on : Friday, February 17, 2012 - 6:02:39 PM
Last modification on : Thursday, February 7, 2019 - 3:45:24 PM

Identifiers

  • HAL Id : hal-00671586, version 1

Collections

Citation

Mathieu Blanc, Jérémy Briffaut, Christian Toinard, Damien Gros. PIGA-HIPS: Protection of a shared HPC cluster. International Journal On Advances in Security, IARIA, 2011, 4 (1), pp.44-53. ⟨hal-00671586⟩

Share

Metrics

Record views

146