skip to main content

Title: Fingerprinting Communication and Computation on HPC Machines

How do we identify what is actually running on high-performance computing systems? Names of binaries, dynamic libraries loaded, or other elements in a submission to a batch queue can give clues, but binary names can be changed, and libraries provide limited insight and resolution on the code being run. In this paper, we present a method for"fingerprinting" code running on HPC machines using elements of communication and computation. We then discuss how that fingerprint can be used to determine if the code is consistent with certain other types of codes, what a user usually runs, or what the user requested an allocation to do. In some cases, our techniques enable us to fingerprint HPC codes using runtime MPI data with a high degree of accuracy.
Authors:
Publication Date:
OSTI Identifier:
983323
Report Number(s):
LBNL-3483E
TRN: US201014%%610
DOE Contract Number:
DE-AC02-05CH11231
Resource Type:
Technical Report
Research Org:
Ernest Orlando Lawrence Berkeley National Laboratory, Berkeley, CA (US)
Sponsoring Org:
Computational Research Division
Country of Publication:
United States
Language:
English
Subject:
97; ACCURACY; COMMUNICATIONS; QUEUES; RESOLUTION intrusion detection, anomaly detection, machine learning, MPI, IPM, Message-Passing Interface, Integrated Performance Monitoring, high-performance computing, computational dwarves, fingerprinting, computer forensics