Security in high-performance computing environments

doi:10.1145/3096742

Title: Security in high-performance computing environments

Abstract

Exploring the many distinctive elements that make securing HPC systems much different than securing traditional systems.

Authors:

Peisert, Sean ^[1]

Lawrence Berkeley National Lab. (LBNL), Berkeley, CA (United States); Univ. of California, Davis, CA (United States)

Publication Date:: 2017-09-09

Research Org.:: Lawrence Berkeley National Lab. (LBNL), Berkeley, CA (United States). National Energy Research Scientific Computing Center

Sponsoring Org.:: USDOE Office of Science (SC), Advanced Scientific Computing Research (ASCR)

OSTI Identifier:: 1524065

Grant/Contract Number:: AC02-05CH11231

Resource Type:: Accepted Manuscript

Journal Name:: Communications of the ACM

Additional Journal Information:: Journal Volume: 60; Journal Issue: 9; Journal ID: ISSN 0001-0782

Publisher:: Association for Computing Machinery

Country of Publication:: United States

Language:: English

Subject:: 97 MATHEMATICS AND COMPUTING

Citation Formats


                    Peisert, Sean. Security in high-performance computing environments.  United States: N. p., 2017. 
        Web.  doi:10.1145/3096742.

Copy to clipboard


                    Peisert, Sean. Security in high-performance computing environments.  United States.  doi:10.1145/3096742.

Copy to clipboard


                    Peisert, Sean. Sat .  
        "Security in high-performance computing environments".  United States.  doi:10.1145/3096742.  https://www.osti.gov/servlets/purl/1524065.

Copy to clipboard


                    
@article{osti_1524065,

  title        = {Security in high-performance computing environments},

  author       = {Peisert, Sean},

  abstractNote = {Exploring the many distinctive elements that make securing HPC systems much different than securing traditional systems.},

  doi          = {10.1145/3096742},

  journal      = {Communications of the ACM},

  number       = 9,

  volume       = 60,

  place        = {United States},

  year         = {2017},

  month        = {9}

}

Copy to clipboard

Journal Article:

Free Publicly Available Full Text

Accepted Manuscript (DOE)

Publisher's Version of Record

DOI: 10.1145/3096742

Other availability

Search WorldCat to find libraries that may hold this journal

Citation Metrics:

Cited by: 2 works

Citation information provided by
Web of Science

Figures / Tables:

Figure 1: Three typical high-level workflow diagrams of scientific computing. The diagram at top shows a typical workflow for data analysis in HPC; the middle diagram shows a typical workflow for modeling and simulation; and the bottom diagram shows a coupled, interactive compute-visualization workflow.

All figures and tables (2 total)

Save / Share:

Export Metadata

Save to My Library

Works referenced in this record:

Precimonious: tuning assistant for floating-point precision
conference, January 2013

Rubio-González, Cindy; Nguyen, Cuong; Nguyen, Hong Diep
Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis on - SC '13
DOI: 10.1145/2503210.2503296

WarpIV: In Situ Visualization and Analysis of Ion Accelerator Simulations
journal, May 2016

Rubel, Oliver; Loring, Burlen; Vay, Jean-Luc
IEEE Computer Graphics and Applications, Vol. 36, Issue 3
DOI: 10.1109/MCG.2016.62

The Medical Science DMZ
journal, May 2016

Peisert, Sean; Barnett, William; Dart, Eli
Journal of the American Medical Informatics Association, Vol. 23, Issue 6
DOI: 10.1093/jamia/ocw032

Human Attention in Visual Question Answering: Do Humans and Deep Networks look at the same regions?
conference, January 2016

Das, Abhishek; Agrawal, Harsh; Zitnick, Larry
Proceedings of the 2016 Conference on Empirical Methods in Natural Language Processing
DOI: 10.18653/v1/D16-1092

Multiclass classification of distributed memory parallel computations
journal, February 2013

Whalen, Sean; Peisert, Sean; Bishop, Matt
Pattern Recognition Letters, Vol. 34, Issue 3
DOI: 10.1016/j.patrec.2012.10.007

Identifying HPC codes via performance logs and machine learning
conference, January 2013

DeMasi, Orianna; Samak, Taghrid; Bailey, David H.
Proceedings of the first workshop on Changing landscapes in HPC security - CLHS '13
DOI: 10.1145/2465808.2465812

How to time-stamp a digital document
journal, January 1991

Haber, Stuart; Stornetta, W. Scott
Journal of Cryptology, Vol. 3, Issue 2
DOI: 10.1007/BF00196791

Computing arbitrary functions of encrypted data
journal, March 2010

Gentry, Craig
Communications of the ACM, Vol. 53, Issue 3
DOI: 10.1145/1666420.1666444

mOS: an architecture for extreme-scale operating systems
conference, January 2014

Wisniewski, Robert W.; Inglett, Todd; Keppel, Pardo
Proceedings of the 4th International Workshop on Runtime and Operating Systems for Supercomputers - ROSS '14
DOI: 10.1145/2612262.2612263

What Can We Learn Privately?
journal, January 2011

Kasiviswanathan, Shiva Prasad; Lee, Homin K.; Nissim, Kobbi
SIAM Journal on Computing, Vol. 40, Issue 3
DOI: 10.1137/090756090

The Science DMZ: a network design pattern for data-intensive science
conference, January 2013

Dart, Eli; Rotman, Lauren; Tierney, Brian
Proceedings of the International Conference for High Performance Computing, Networking, Storage and Analysis on - SC '13
DOI: 10.1145/2503210.2503245

Bro: a system for detecting network intruders in real-time
journal, December 1999

Paxson, Vern
Computer Networks, Vol. 31, Issue 23-24
DOI: 10.1016/S1389-1286(99)00112-7

IPython: A System for Interactive Scientific Computing
journal, January 2007

Perez, Fernando; Granger, Brian E.
Computing in Science & Engineering, Vol. 9, Issue 3
DOI: 10.1109/MCSE.2007.53

Osprey: a practical type system for validating dimensional unit correctness of C programs
conference, January 2006

Jiang, Lingxiao; Su, Zhendong
Proceeding of the 28th international conference on Software engineering - ICSE '06
DOI: 10.1145/1134285.1134323

Stalking the wily hacker
journal, May 1988

Stoll, Clifford
Communications of the ACM, Vol. 31, Issue 5
DOI: 10.1145/42411.42412

Outside the Closed World: On Using Machine Learning for Network Intrusion Detection
conference, May 2010

Sommer, Robin; Paxson, Vern
2010 IEEE Symposium on Security and Privacy
DOI: 10.1109/SP.2010.25

Experiences with User-Centered Design for the Tigres Workflow API
conference, October 2014

Ramakrishnan, Lavanya; Poon, Sarah; Hendrix, Valerie
2014 IEEE 10th International Conference on e-Science (e-Science)
DOI: 10.1109/eScience.2014.56

CryptDB: processing queries on an encrypted database
journal, September 2012

Popa, Raluca Ada; Redfield, Catherine M. S.; Zeldovich, Nickolai
Communications of the ACM, Vol. 55, Issue 9
DOI: 10.1145/2330667.2330691

Works referencing / citing this record:

Implementing efficient data compression and encryption in a persistent key-value store for HPC
journal, May 2019

Kim, Jungwon; Vetter, Jeffrey S.
The International Journal of High Performance Computing Applications, Vol. 33, Issue 6
DOI: 10.1177/1094342019847264

Figures / Tables found in this record:

Figure 1 (p. 3)

Figure 2 (p. 7)

Figures/Tables have been extracted from DOE-funded journal article accepted manuscripts.

Similar Records in DOE PAGES and OSTI.GOV collections:

Secure Enclaves: An Isolation-centric Approach for Creating Secure High Performance Computing Environments

Technical Report Aderholdt, Ferrol ; Caldwell, Blake A. ; Hicks, Susan Elaine ; ...

High performance computing environments are often used for a wide variety of workloads ranging from simulation, data transformation and analysis, and complex workflows to name just a few. These systems may process data at various security levels but in so doing are often enclaved at the highest security posture. This approach places significant restrictions on the users of the system even when processing data at a lower security level and exposes data at higher levels of confidentiality to a much broader population than otherwise necessary. The traditional approach of isolation, while effective in establishing security enclaves poses significant challenges formore »« less
DOI: 10.2172/1341562

Full Text Available
Managing security in high-performance distributed computations.

Journal Article Foster, I ; karonis, N T ; Kesselman, C ; ... - Cluster Comput.

We describe a software infrastructure designed to support the development of applications that use highspeed networks to connect geographically distributed supercomputers, databases, and scientific instruments. Such applications may need to operate over open networks and access valuable resources, and hence can require mechanisms for ensuring integrity and confidentiality of communications and for authenticating both users and resources. Yet security solutions developed for traditional client-server applications do not provide direct support for the distinctive program structures, programming tools, and performance requirements encountered in these applications. To address these requirements, we are developing a security enhanced version of a communication library calledmore »« less
DOI: 10.1023/A:1019021129146
Performance Analysis of Scientific Computing Workloads on Trusted Execution Environments

Technical Report Akram, Ayaz ; Giannakou, Anna ; Akella, Venkatesh ; ...

Scientific computing sometimes involves computation on sensitive data. Depending on the data and the execution environment, the HPC (high-performance computing) user or data provider may require confidentiality and/or integrity guarantees. To study the applicability of hardware-based trusted execution environments (TEEs) to enable secure scientific computing, we deeply analyze the performance impact of AMD SEV and Intel SGX for diverse HPC benchmarks including traditional scientific computing, machine learning, graph analytics, and emerging scientific computing workloads. We observe three main findings: 1) SEV requires careful memory placement on large scale NUMA machines (1×−3.4× slowdown without and 1×−1.15× slowdown with NUMA aware placement),more »« less
DOI: 10.2172/1768054

Full Text Available
A case for Virtual Machine based Fault Injection in a High-Performance Computing Environment

Conference Naughton, III, Thomas J ; Vallee, Geoffroy R ; Engelmann, Christian ; ...

Large-scale computing platforms provide tremendous capabilities for scientific discovery. These systems have hundreds of thousands of computing cores, hundreds of terabytes of memory, and enormous high-performance interconnection networks. These systems are facing enormous challenges to achieve performance at such scale. Failures are an Achilles heel of these enormous systems. As applications and system software scale up to multi-petaflop and beyond to exascale platforms, the occurrence of failure will be much more common. This has given rise to a push in fault-tolerance and resilience research for HPC systems. This includes work on log analysis to identify types of failures, enhancements tomore »« less
Cray XMT Brings New Energy to High-Performance Computing

Journal Article Chavarría-Miranda, Daniel ; Gracio, Deborah K ; Marquez, Andres ; ... - SciDAC Review, Fall 2008(9):36-41

The ability to solve our nation’s most challenging problems—whether it’s cleaning up the environment, finding alternative forms of energy or improving public health and safety—requires new scientific discoveries. High performance experimental and computational technologies from the past decade are helping to accelerate these scientific discoveries, but they introduce challenges of their own. The vastly increasing volumes and complexities of experimental and computational data pose significant challenges to traditional high-performance computing (HPC) platforms as terabytes to petabytes of data must be processed and analyzed. And the growing complexity of computer models that incorporate dynamic multiscale and multiphysics phenomena place enormous demandsmore »« less

Similar Records

Title: Security in high-performance computing environments

Abstract

Citation Formats

Figures / Tables:

Precimonious: tuning assistant for floating-point precision conference, January 2013

WarpIV: In Situ Visualization and Analysis of Ion Accelerator Simulations journal, May 2016

The Medical Science DMZ journal, May 2016

Human Attention in Visual Question Answering: Do Humans and Deep Networks look at the same regions? conference, January 2016

Multiclass classification of distributed memory parallel computations journal, February 2013

Identifying HPC codes via performance logs and machine learning conference, January 2013

How to time-stamp a digital document journal, January 1991

Computing arbitrary functions of encrypted data journal, March 2010

mOS: an architecture for extreme-scale operating systems conference, January 2014

What Can We Learn Privately? journal, January 2011

The Science DMZ: a network design pattern for data-intensive science conference, January 2013

Bro: a system for detecting network intruders in real-time journal, December 1999

IPython: A System for Interactive Scientific Computing journal, January 2007

Osprey: a practical type system for validating dimensional unit correctness of C programs conference, January 2006

Stalking the wily hacker journal, May 1988

Outside the Closed World: On Using Machine Learning for Network Intrusion Detection conference, May 2010

Experiences with User-Centered Design for the Tigres Workflow API conference, October 2014

CryptDB: processing queries on an encrypted database journal, September 2012

Implementing efficient data compression and encryption in a persistent key-value store for HPC journal, May 2019

Precimonious: tuning assistant for floating-point precision
conference, January 2013

WarpIV: In Situ Visualization and Analysis of Ion Accelerator Simulations
journal, May 2016

The Medical Science DMZ
journal, May 2016

Human Attention in Visual Question Answering: Do Humans and Deep Networks look at the same regions?
conference, January 2016

Multiclass classification of distributed memory parallel computations
journal, February 2013

Identifying HPC codes via performance logs and machine learning
conference, January 2013

How to time-stamp a digital document
journal, January 1991

Computing arbitrary functions of encrypted data
journal, March 2010

mOS: an architecture for extreme-scale operating systems
conference, January 2014

What Can We Learn Privately?
journal, January 2011

The Science DMZ: a network design pattern for data-intensive science
conference, January 2013

Bro: a system for detecting network intruders in real-time
journal, December 1999

IPython: A System for Interactive Scientific Computing
journal, January 2007

Osprey: a practical type system for validating dimensional unit correctness of C programs
conference, January 2006

Stalking the wily hacker
journal, May 1988

Outside the Closed World: On Using Machine Learning for Network Intrusion Detection
conference, May 2010

Experiences with User-Centered Design for the Tigres Workflow API
conference, October 2014

CryptDB: processing queries on an encrypted database
journal, September 2012

Implementing efficient data compression and encryption in a persistent key-value store for HPC
journal, May 2019