Security in the CernVM File System and the Frontier Distributed Database Caching System

20th International Conference on Computing in High Energy and Nuclear Physics

物理学;计算机科学

Dykstra, D.^1 ; Blomer, J.^2

Scientific Computing Division, Fermilab, Batavia

IL

60510, United States^1

PH-SFT Department, CERN, Geneva, Switzerland^2

关键词: All distributed;    Caching system;    Control access;    Distributed database;    File systems;    Integrity checking;    LHC experiments;    Security model;   

Others  :  https://iopscience.iop.org/article/10.1088/1742-6596/513/4/042015/pdf
DOI  :  10.1088/1742-6596/513/4/042015

学科分类：计算机科学（综合）

来源: IOP

【 摘 要 】

Both the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of the data and can guarantee the authenticity and integrity of the data transferred to clients over the internet. CVMFS has since its early days required digital signatures and secure hashes on all distributed data, and recently Frontier has added X.509-based authenticity and integrity checking. In this paper we detail and compare the security models of CVMFS and Frontier.