Protecting Grids from Cross-Domain Attacks Using Security Alert Sharing Mechanism

Raheel Hassan Syed (1) , Maxime Syrame (1) , Julien Bourgeois (1)

1 FEMTO-ST - Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies (UMR 6174)

In single administrative domain networks there is only one security policy which can be evaluated by the IT security manager thanks, to monitoring and reporting tools. Grid networks are often composed of different administrative domains owned by different organizations dispersed globally. Such networks are referred to as multi-administrative domain networks. Each domain might have its own security policy and may not want to share its security data with less-protected networks, making it more complex to ensure the security of such networks and protecting them from cross-domain attacks. We propose a Security Event Manager (SEM) called Grid Security Operation Center (GSOC), which facilitate IT security managers in giving a view of the security of the whole grid network without compromising confidentiality of security data. To do so, GSOC provides a security evaluation of each administrative domain (AD) and a parametric security alerts-sharing scheme. Alert sharing can then be tuned in order to meet local security policy rules.

Domaines: Génie logiciel [cs.SE]; Calcul parallèle, distribué et partagé [cs.DC]; Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Raheel Hassan Syed, Maxime Syrame, Julien Bourgeois. Protecting Grids from Cross-Domain Attacks Using Security Alert Sharing Mechanism. Future Generation Computer Systems, 2013, 29, pp.536--547. ⟨10.1016/j.future.2012.07.002⟩. ⟨hal-00935186⟩