Mandatory access control for shared HPC clusters: setup and performance evaluation - CaSciModOT (calcul scientifique et modelisation Orleans-Tours) Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Mandatory access control for shared HPC clusters: setup and performance evaluation

Résumé

Protecting a HPC cluster against real world cyber threats is a critical task, with the increasing trend to open and share computing resources. As partners can upload data that is confidential regarding other partners, a company managing a shared cluster has to enforce strong security measures. It has to prevent both accidental data leakage and voluntary data stealing. When using an operating system based on Linux, the offered protections are difficult to set up in large scale environments. This article presents how to use the Mandatory Access Control feature of SELinux in order to guarantee strong security properties for HPC clusters. The proposed solution is based on the use of the Multi-Category System, the confinement of user profiles and the use of a dual SSH server. The issues encountered during the implementation and the most difficult technical points are presented. Finally, this paper shows experimental results about the performance of our solution and the impact on a large scale cluster.
Fichier non déposé

Dates et versions

hal-00473944 , version 1 (16-04-2010)

Identifiants

Citer

Mathieu Blanc, Jean-François Lalande. Mandatory access control for shared HPC clusters: setup and performance evaluation. HPCS 2010, Jun 2010, Caen, France. pp.291-298, ⟨10.1109/HPCS.2010.5547118⟩. ⟨hal-00473944⟩
78 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More