TY - JOUR
T1 - GridSec
T2 - 5th International Conference on Computational Science - ICCS 2005
AU - Hwang, Kai
AU - Kwok, Yu Kwong
AU - Song, Shanshan
AU - Cai, Min
AU - Chen, Yu
AU - Chen, Ying
AU - Zhou, Runfang
AU - Lou, Xiaosong
N1 - Funding Information:
The paper was presented in the International Workshop on Grid Computing Security and Resource Management (GSRM’05) in conjunction with the International Conference on Computational Science (ICCS 2005), Emory University, Atlanta, May 22-25, 2005. The research reported here was fully supported by an NSF ITR Grant 0325409. Corresponding author: Kai Hwang, USC Internet and Grid Computing Lab, EEB 212, Los Angeles, CA 90089. E-mail: [email protected], Tel.: (213) 740-4470. Y.-K. Kwok participated in this project when he was a visiting associate professor at USC on sabbatical leave from HKU.
Funding Information:
The paper was presented in the International Workshop on Grid Computing Security and Resource Management (GSRM’05) in conjunction with the International Conference on Computational Science (ICCS 2005), Emory University, Atlanta, May 22-25, 2005. The research reported here was fully supported by an NSF ITR Grant 0325409. Corresponding author_ Kai Hwang, USC Internet and Grid Computing Lab, EEB 212, Los Angeles, CA 90089. E-mail: [email protected], Tel.: (213) 740-4470. Y.-K. Kwok participated in this project when he was a visiting associate professor at USC on sabbatical leave from HKU.
PY - 2005
Y1 - 2005
N2 - The USC GridSec project develops distributed security infrastructure and self-defense capabilities to secure wide-area networked resource sites participating in a Grid application. We report new developments in trust modeling, security-binding methodology, and defense architecture against intrusions, worms, and flooding attacks. We propose a novel architectural design of Grid security infrastructure, security binding for enhanced Grid efficiency, distributed collaborative IDS and alert correlation, DHT-based overlay networks for worm containment, and pushback of DDoS attacks. Specifically, we present a new pushback scheme for tracking attack-transit routers and for cutting malicious flows carrying DDoS attacks. We discuss challenging research issues to achieve secure Grid computing effectively in an open Internet environment.
AB - The USC GridSec project develops distributed security infrastructure and self-defense capabilities to secure wide-area networked resource sites participating in a Grid application. We report new developments in trust modeling, security-binding methodology, and defense architecture against intrusions, worms, and flooding attacks. We propose a novel architectural design of Grid security infrastructure, security binding for enhanced Grid efficiency, distributed collaborative IDS and alert correlation, DHT-based overlay networks for worm containment, and pushback of DDoS attacks. Specifically, we present a new pushback scheme for tracking attack-transit routers and for cutting malicious flows carrying DDoS attacks. We discuss challenging research issues to achieve secure Grid computing effectively in an open Internet environment.
UR - https://www.scopus.com/pages/publications/25144500526
U2 - 10.1007/11428862_27
DO - 10.1007/11428862_27
M3 - Conference article
AN - SCOPUS:25144500526
SN - 0302-9743
VL - 3516
SP - 187
EP - 195
JO - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
JF - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
IS - III
Y2 - 22 May 2005 through 25 May 2005
ER -