Microsoft preps security code for grid computing

Microsoft is developing a security language for grids, designed to deal with some of the security issues raised by grids’ decentralized nature.

Grids are becoming widely used in enterprises, as well as for sharing computing resources among academic research institutions. However, there is no single, widely used approach to dealing with grid security.

Microsoft researcher Blair Dillaway outlined Microsoft’s approach in a talk called “A Unified Approach to Trust, Delegation, and Authorization in Large-scale Grids” at GridWorld in Washington. The company has developed a prototype of a grid-oriented security language called Security Policy Assertion Language, or SecPAL, according to a report in industry journal eWeek.

SecPAL is part of an ongoing Microsoft research project looking at access control for large-scale grids, according to the report. In a white paper, Dillaway described SecPAL as also designed “for expressing trust relationships, authorization policies, delegation policies, identity and attribute assertions, capability assertions, revocations and audit requirements,” the report said.

The prototype reportedly deals with multidomain grids and uses Microsoft technologies such as the Microsoft Windows Compute Cluster Server 2003, the .Net Framework, Windows Communication Foundation (formerly known as Indigo), the Active Directory directory service, and Kerberos and X.509-based identity management infrastructures.

Currently SecPAL is at the research stage, and there are no immediate plans to turn it into a product, Dillaway said.

SecPAL is designed to be more encompassing and usable than existing grid security technologies, such as XrML (Extensible Rights Markup Language), XACML (Extensible Access Control Markup Language) and SAML (Security Assertion Markup Language). The Globus Alliance, an academic organization, has also created a security architecture for grid computing.

Last month, the US Department of Energy’s Argonne National Laboratory released an open-source communications software toolkit, the Access Grid Toolkit, which uses industry standards such as SSL to handle security.

Grid technology once reserved for high-end research centers is making its way into more enterprises, though plenty of obstacles to wider adoption remain, according to panelists at GridWorld. Online auctioneer eBay, which exploits a massive computing grid to power its site, is one example of a successful implementation and was the topic of a Tuesday keynote at the conference.

Acknowledging that grids aren’t appropriate for every application a company runs, Ken King, vice president of grid computing with IBM, said the technology is becoming more mainstream. “To me mainstream means something is used in [a company’s] core data center for mission-critical applications, things that are core to revenue-generating aspects of business,” he said. “We are just starting to see aspects of grid move into that.”

But that point at which companies attempt to expand their use of grid computing is also where they often run into headaches, said another panelist. “Often grids just don’t get used to the degree promised, therefore they can’t achieve enterprise adoption” or the expected ROI, said Dan Hushon, chief technologist with EMC.

–Cara Garretson of Network World contributed to this report.

Would you recommend this article?

Share

Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.


Jim Love, Chief Content Officer, IT World Canada

Featured Download

Featured Articles

Cybersecurity in 2024: Priorities and challenges for Canadian organizations 

By Derek Manky As predictions for 2024 point to the continued expansion...

Survey shows generative AI is a top priority for Canadian corporate leaders.

Leaders are devoting significant budget to generative AI for 2024 Canadian corporate...

Related Tech News

Tech Jobs

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

Tech Companies Hiring Right Now