Security in the CernVM File System and the Frontier Distributed Database Caching System
- CERN
Both the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of the data and can guarantee the authenticity and integrity of the data transferred to clients over the internet. CVMFS has since its early days required digital signatures and secure hashes on all distributed data, and recently Frontier has added X.509-based authenticity and integrity checking. In this paper we detail and compare the security models of CVMFS and Frontier.
- Research Organization:
- Fermi National Accelerator Lab. (FNAL), Batavia, IL (United States)
- Sponsoring Organization:
- USDOE Office of Science (SC), High Energy Physics (HEP)
- DOE Contract Number:
- AC02-07CH11359
- OSTI ID:
- 1296585
- Report Number(s):
- FERMILAB-CONF-13-469-CD; 1302090
- Journal Information:
- J.Phys.Conf.Ser., Vol. 513; Conference: 20th International Conference on Computing in High Energy and Nuclear Physics, Amsterdam, The Netherlands, 10/14-10/18/2013
- Country of Publication:
- United States
- Language:
- English
Similar Records
Web Proxy Auto Discovery for the WLCG
Engineering the CernVM-Filesystem as a High Bandwidth Distributed Filesystem for Auxiliary Physics Data
Using Pilot Jobs and CernVM File System for Simplified Use of Containers and Software Distribution
Journal Article
·
Thu Nov 23 00:00:00 EST 2017
· Journal of Physics. Conference Series
·
OSTI ID:1296585
+3 more
Engineering the CernVM-Filesystem as a High Bandwidth Distributed Filesystem for Auxiliary Physics Data
Conference
·
Wed Dec 23 00:00:00 EST 2015
· J.Phys.Conf.Ser.
·
OSTI ID:1296585
+3 more
Using Pilot Jobs and CernVM File System for Simplified Use of Containers and Software Distribution
Conference
·
Fri Jan 01 00:00:00 EST 2021
· TBD
·
OSTI ID:1296585