Trusted Computing for the GRID.ppt
《Trusted Computing for the GRID.ppt》由会员分享,可在线阅读,更多相关《Trusted Computing for the GRID.ppt(20页珍藏版)》请在麦多课文档分享上搜索。
1、Trusted Computing for the GRID,Dirk Kuhlmann Trusted Systems Lab, HPLabs, Bristol,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,2,Platform security concerns for GRID,Large number of dynamically managed nodes Reliably identify a particular node Get reliable information abo
2、ut runtime status Protect user data and programsOS and hardware in GRID scenarios Commercial off the shelve elements to save costs Subjected to COTS vulnerabilities Script kiddies and worms dont care whether they attack a private platform or a GRID nodeTrusted platforms Next-generation hardware and
3、software,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,3,Trusted Nodes as building blocks for Trusted Infrastructure,Are the IT systems on my network the ones I intended to be part of the infrastructure? Is the software and configuration on IT systems what they are intende
4、d it to be? Is the software I deploy on my IT systems going to behave as intended?Trusted Computing could become a foundational component to address the first two question. TC hardware is no silver bullet! Secure product development must address the third issue. Main challenges concern software, in
5、particular OS!,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,4,Trusted Computing and HPLabs,Trusted Computing Platform Alliance - TCPA Founded October 1999 Compaq, HP, IBM, Intel, Microsoft Created Embedded Security chip Specification v1.1bTrusted Computing Group - TCG Fou
6、nded April 2003 Build on TCPA Expands Trusted Computing to other platform categories and infrastructure HPLabs held HPs Technical Committee chair for TCPA and now for TCG.,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,5,Trusted Computing evolution,TPM Hardware availability
7、,Tier 0,HW Platform Root-of-Trust,TC Operating Environment - Chain-of-Trust,Tier 1,TC Apps Enterprise, Biz. Critical, Other,Tier 2,Tier 3,Trusted Ecosystems / GRID,Increased integration,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,6,The Trusted Platform Module - TPM -,Tru
8、sted Computing builds upon a TPM hardware Root of Trust. Think: smartcard-like hardware component embedded into the platform,Available in D530 series desktops and nc4010, nc6000, nc8000, and nw8000 notebooks,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,7,Main value-propos
9、ition for GRID today: platform authentication,With Trusted Computing Platforms, network resources can be restricted for access from approved devices as well as approved usersAccess granted to devices authenticated using the Trusted Platform Module (TPM or Embedded Security Chip)To grant access to se
10、nsitive applications and services To control access to file servers and databases To control access from peers or remote clients through VPN and segment portions of the network,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,8,The VPN example,Remote Employee,Internet,ISP,Res
11、ources,TC-enabled,Sep 15, 2004,GGF12 Security WS - Sep 20, 2004 - Trusted Computing & Grid,9,Authentication of users and devices,User Authentication,Device Authentication,+,Trusted Computing,Creates a Trusted Entity on the networkProvides enhanced network rights, roles, and responsibility Can be int
12、roduced with no disruption to existing IT infrastructure allows IT managers to dynamically assign granular access controlThe device can also now be used as an authentication factor with: Ease of Use for the mobile professional Reduced Total Cost of Ownership for the IT department,Sep 15, 2004,GGF12
13、Security WS - Sep 20, 2004 - Trusted Computing & Grid,10,Value proposition for GRID tomorrow: trustworthiness of nodes,Research / Development,TPM Hardware availability,Tier 0,HW Platform Root-of-Trust,TC Operating Environment - Chain-of-Trust,Tier 1,TC Apps Enterprise, Biz. Critical, Other,Tier 2,Ti
- 1.请仔细阅读文档,确保文档完整性,对于不预览、不比对内容而直接下载带来的问题本站不予受理。
- 2.下载的文档,不会出现我们的网址水印。
- 3、该文档所得收入(下载+内容+预览)归上传者、原创作者;如果您是本文档原作者,请点此认领!既往收益都归您。
下载文档到电脑,查找使用更方便
2000 积分 0人已下载
下载 | 加入VIP,交流精品资源 |
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- TRUSTEDCOMPUTINGFORTHEGRIDPPT
