The Experts below are selected from a list of 33 Experts worldwide ranked by ideXlab platform

Marlon Pierce - One of the best experts on this subject based on the ideXlab platform.

  • Integrating Apache Airavata with Docker, Marathon, and Mesos
    Concurrency Computation, 2016
    Co-Authors: Pankaj Saha, Madhusudhan Govindaraju, Suresh Marru, Marlon Pierce
    Abstract:

    Science Gateways provide scientists with tools for creating, executing, and monitoring scientific experiments on multiple resource infrastructures. Apache Airavata abstracts interactions between gateways and distributed computing infrastructures like Extreme Science and Engineering Discovery Environment, international grids, and campus clusters. Airavata consists of several component services such as the API server, Orchestrator, Workflow Interpreter, Credential Store, and Application Factory. In addition, Airavata uses third party software, including RabbbitMQ for messaging, MySQL for production database management, and Apache Zookeeper for internal communications. In this paper, we discuss our initial experiences with leveraging open source technologies to manage Airavata and its dependent components to deploy, detect, and restart failed components in an auto-scaling platform. Such capabilities will allow Airavata services to be deployed in a wide area, large Virtual Machine (VM) based cluster, and a developer's laptop. The emerging technologies in cloud computing and Big Data that address these needs are the following: Docker, Marathon, and Apache Mesos. Docker is a Linux-based lightweight container that allows different applications to run isolated from each other but safely share the machine's resources. Docker images of applications can be published in registries and retrieved for execution in the target infrastructures. Marathon provides a cluster-wide init and control system for services, including Docker containers. Mesos provides a cluster-wide framework to schedule tasks based on fine-grained resource needs. Mesosphere provides the packages, scripts, and web interface to ease the use of these technologies. We present the design, experience, and lessons learned from integrating Mesos, Docker, and Marathon with Apache Airavata. Copyright (c) 2015 John Wiley & Sons, Ltd.

  • a Credential Store for multi tenant science gateways
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyberinfrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

  • CCGRID - A Credential Store for Multi-tenant Science Gateways
    2014 14th IEEE ACM International Symposium on Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyber infrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

Thejaka Amila Kanewala - One of the best experts on this subject based on the ideXlab platform.

  • a Credential Store for multi tenant science gateways
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyberinfrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

  • CCGRID - A Credential Store for Multi-tenant Science Gateways
    2014 14th IEEE ACM International Symposium on Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyber infrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

Suresh Marru - One of the best experts on this subject based on the ideXlab platform.

  • Integrating Apache Airavata with Docker, Marathon, and Mesos
    Concurrency Computation, 2016
    Co-Authors: Pankaj Saha, Madhusudhan Govindaraju, Suresh Marru, Marlon Pierce
    Abstract:

    Science Gateways provide scientists with tools for creating, executing, and monitoring scientific experiments on multiple resource infrastructures. Apache Airavata abstracts interactions between gateways and distributed computing infrastructures like Extreme Science and Engineering Discovery Environment, international grids, and campus clusters. Airavata consists of several component services such as the API server, Orchestrator, Workflow Interpreter, Credential Store, and Application Factory. In addition, Airavata uses third party software, including RabbbitMQ for messaging, MySQL for production database management, and Apache Zookeeper for internal communications. In this paper, we discuss our initial experiences with leveraging open source technologies to manage Airavata and its dependent components to deploy, detect, and restart failed components in an auto-scaling platform. Such capabilities will allow Airavata services to be deployed in a wide area, large Virtual Machine (VM) based cluster, and a developer's laptop. The emerging technologies in cloud computing and Big Data that address these needs are the following: Docker, Marathon, and Apache Mesos. Docker is a Linux-based lightweight container that allows different applications to run isolated from each other but safely share the machine's resources. Docker images of applications can be published in registries and retrieved for execution in the target infrastructures. Marathon provides a cluster-wide init and control system for services, including Docker containers. Mesos provides a cluster-wide framework to schedule tasks based on fine-grained resource needs. Mesosphere provides the packages, scripts, and web interface to ease the use of these technologies. We present the design, experience, and lessons learned from integrating Mesos, Docker, and Marathon with Apache Airavata. Copyright (c) 2015 John Wiley & Sons, Ltd.

  • a Credential Store for multi tenant science gateways
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyberinfrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

  • CCGRID - A Credential Store for Multi-tenant Science Gateways
    2014 14th IEEE ACM International Symposium on Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyber infrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

Jim Basney - One of the best experts on this subject based on the ideXlab platform.

  • a Credential Store for multi tenant science gateways
    IEEE ACM International Symposium Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyberinfrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

  • CCGRID - A Credential Store for Multi-tenant Science Gateways
    2014 14th IEEE ACM International Symposium on Cluster Cloud and Grid Computing, 2014
    Co-Authors: Thejaka Amila Kanewala, Suresh Marru, Jim Basney, Marlon Pierce
    Abstract:

    Science Gateways bridge multiple computational grids and clouds, acting as overlay cyber infrastructure. Gateways have three logical tiers: a user interfacing tier, a resource tier and a bridging middleware tier. Different groups may operate these tiers. This introduces three security challenges. First, the gateway middleware must manage multiple types of Credentials associated with different resource providers. Second, the separation of the user interface and middleware layers means that security Credentials must be securely delegated from the user interface to the middleware. Third, the same middleware may serve multiple gateways, so the middleware must correctly isolate user Credentials associated with different gateways. We examine each of these three scenarios, concentrating on the requirements and implementation of the middleware layer. We propose and investigate the use of a Credential Store to solve the three security challenges.

Nicolas Williams - One of the best experts on this subject based on the ideXlab platform.

  • Using Generic Security Service Application Program Interface (GSS-API
    2010
    Co-Authors: Nicolas Williams
    Abstract:

    This document defines a new function for the Generic Security Service Application Program Interface (GSS-API), which allows applications to Store delegated (and other) Credentials in the implicit GSS-API Credential Store. This is needed for GSS-API applications to use delegated Credentials as they would use other Credentials. Status of This Memo This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards " (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust’s Legal Provisions Relating to IETF Documents in effect on the date of publication of this documen

  • Using Generic Security Service Application Program Interface (GSS-API
    2010
    Co-Authors: Nicolas Williams
    Abstract:

    This document defines a new function for the Generic Security Service Application Program Interface (GSS-API), which allows applications to Store delegated (and other) Credentials in the implicit GSS-API Credential Store. This is needed for GSS-API applications to use delegated Credentials as they would use other Credentials. Status of This Memo This document specifies an Internet standards track protocol for the Internet community, and requests discussion and suggestions for improvements. Please refer to the current edition of the "Internet Official Protocol Standards " (STD 1) for the standardization state and status of this protocol. Distribution of this memo is unlimited. Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as th

  • Generic Security Service Application Program Interface (GSS-API) Extension for Storing Delegated Credentials
    2009
    Co-Authors: Nicolas Williams
    Abstract:

    This document defines a new function for the GSS-API which allows applications to Store delegated (and other) Credentials in the implicit GSS-API Credential Store. This is needed for GSS-API applications to use delegated Credentials as they would use other Credentials.