Version 6, as of 19 March 2002

Security and Networks Track

Track description

The development of modern distributed computing and complex data management systems, such as exemplified by the GRID, relies increasingly on two components where specific advances are necessary to satisfy these stringent requirements. These two areas are Computer Security and Network Performance. This track addresses each of them, in the form of two series of lectures, and via a selection of topics at the forefront of the technology. The security part starts with background knowledge and move to specific technologies such as cryptography, authentication, and their use in the Grid context.
The Networking part focuses on two aspects that are of primary importance in a Grid context: TCP/IP enhancements and network monitoring. The aim is to present the fundamentals and the evolutions of the TCP/IP stack and to explore advanced Network measurement and analysis tools and services for end-to-end performance measurement and prediction.

Track coordinators

François Fluckiger, CERN francois.fluckiger@cern.ch;Pascale Primet, ENS Lyon, Pascale.Primet@ens-lyon.fr

 

Series Ref

Title of the Lecture Series

Description of the Lecture

Lecturer (s) name, affiliation,

Lecturer (s) data: email, tel number

Lecturer (s) Biography

L / E

Total # of hours

Lecture Description

Ref.

Lecture description

SN1

Computer Security

Safe computing on the Internet requires understanding the techniques for reducing risk without sacrificing function. This series of lectures presents the background knowledge and discussion of the concepts and tools for protecting computing resources from misuse. Emphasis is placed on the role individuals play in improving the security of the whole community.

Robert D. Cowles, SLAC

rdc@Slac.Stanford.edu  +1(650)926-4965

With more than 30 years of experience in computing and as the Computer Security Officer at SLAC, the lecturer can ground the more abstract discussions with practical, real-world examples. In addition to seminars in the US and Europe, he has taught regular classes on Internet and web security for the University of California and Hong Kong University.  Education: BS Physics from University of Kansas, 1969; MS Computer Science from Cornell University, 1971.

Lectures

3

SN1.1/L

Your Workstation
Threats
  Destruction
  Modification
  Embarrassment
Responsibilities
  Backup & Virus protection
  Patching and configuration management
  Email security

SN1.2/L

Cryptography and PKI
Symmetric and Asymmetric encryption
Public Key Infrastructure
  X.509 Certificates
  Certificate Authorities
  Registration Authority
  Obtaining a certificate
  Protecting your private key

SN1.3/L

Grid Security
Registering your identity
Authentication models
Authorization to use resources
Proxy Certificates and delegation
MyProxy server
Community Access services
Threats
Vulnerabilities
How *you* can make the Grid more secure

Exercises

2

SN1.1/E

Generate a key pair;
Perform steps necessary to send email that is signed and encrypted either using PGP or using X.509 certificates.

SN1.2/E

Register with a MyProxy server and use a web Grid portal to submit a job for execution

SN2

High performance Grid Networking

These lectures present the fundamentals of the TCP/IP stack and the limits of the protocols to meet the  network requirements of the Grid application and middleware. The evolution of the network layer and of the transport layer are examine in order to understand the tendencies in the  high performance networking. Emphasis is placed on the practices that permit end to end performance measurement and improvement.

Pascale PRIMET Ec-Lyon Inria 

Pascale.Primet@ens-lyon.fr

Pascale Primet is assistant professor in Computer Sciences. gives lectures in Advanced Networks, Quality of Service and  Operating System since more than ten years. member of the INRIA Reso project. Manager of the Workpackage Network (WP7) of the EU DataGRID project and scientifical coordinator of the french Grid project E-TOILE; Engineering).

Lectures

3

SN2.1/L

Grid Networks requirements. IP protocol. TCP protocol : main features, limits

SN2.2/L

IP Service Differentiation - Elevated services - Non elevated services : ABE, EDS, QBSS.

SN2.3/L

High Performance Transport protocol and TCP optimization

Exercises

2

SN2.1/E

Configure and use tools and services for Grid status and networks performance measurement.

SN2.2/E

Mesure and understand end to end performance of TCP connections over different types of links.