Flexible and Secure Logging of Grid Data Access

-- In Grid collaborations, scientists use middleware to execute computational experiments, visualize results, and securely share data on resources ranging from desktop machines to supercomputers. While there has been significant effort in authentication and authorization for these distributed infrastructures, it is still difficult to determine, postfacto, exactly what information might have been accessed, what operations might have occurred, and for what reasons. To address this problem, we have designed and implemented a secure logging infrastructure for Grid data access. We uniquely leverage and extend XACML with new capabilities so that data owners can specify logging policies and these policies can be used to engage logging mechanisms to record events of interest to the data owners. A case study based on GridFTP.NET is presented and analyzed, utilizing both local storage of log records and remote storage via SAWS, an independently developed secure audit Web service. We show that wi...

• Type: Journal
• Year: 2006
• Where: GRID
• Authors: Weide Zhang, David Del Vecchio, Glenn S. Wasson, Marty Humphrey
• Keywords: Data Owners, Distributed And Parallel Computing, GRID 2006, Grid Data, Grid Data Access