Fingerprinting Communication and Computation on HPC Machines

Peisert, Sean

Lawrence Berkeley National Laboratory

关键词: Queues;    Resolution Intrusion Detection, Anomaly Detection, Machine Learning, Mpi, Ipm, Message-Passing Interface, Integrated Performance Monitoring, High-Performance Computing, Computational Dwarves, Fingerprinting, Computer Forensics;    Communications;    Intrusion Detection, Anomaly Detection, Machine Learning, Mpi, Ipm, Message-Passing Interface, Integrated Performance Monitoring, High-Performance Computing, Computational Dwarves, Fingerprinting, Computer Forensics;    97;   

DOI  :  10.2172/983323
RP-ID  :  LBNL-3483E
RP-ID  :  DE-AC02-05CH11231
RP-ID  :  983323

美国|英语

来源: UNT Digital Library

【 摘 要 】

How do we identify what is actually running on high-performance computing systems?Names of binaries, dynamic libraries loaded, or other elements in a submission to a batch queue can give clues, but binary names can be changed, and libraries provide limited insight and resolution on the code being run.In this paper, we present a method for"fingerprinting" code running on HPC machines using elements of communication and computation.We then discuss how that fingerprint can be used to determine if the code is consistent with certain other types of codes, what a user usually runs, or what the user requested an allocation to do.In some cases, our techniques enable us to fingerprint HPC codes using runtime MPI data with a high degree of accuracy.