Collaborative Research: CICI: Secure and Resilient Architecture: Scientific Workflow Integrity with Pegasus

合作研究：CICI：安全和弹性架构：与 Pegasus 的科学工作流程完整性

• 批准号: 1642070
• 负责人: Von Welch
• 金额: $ 47.99万
• 依托单位: Indiana University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2020-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1642070&HistoricalAwards=false
• 关键词: Collaborative; Research; CICI; Secure; Resilient

Scientists use computer systems to analyze and store their scientific data, sometimes in a complex process across multiple machines. This process can be tedious and error-prone, which has led to the development of software known as a "workflow management system". Workflow management systems allow scientists to describe their process in a human-friendly way and then the software handles the details of the processing for the scientists, dealing with tedious and repetitive steps and handling errors. One popular workflow management system is Pegasus, which, over the past three years, was used to run over 700,000 workflows by scientists in a number of domains including astronomy, bioinformatics, earthquake science, gravitational wave physics, ocean science, and neuroscience. The "Scientific Workflow Integrity with Pegasus" project enhances Pegasus with additional security features. The scientist's description of their desired work is protected from tampering and the data processed by Pegasus is checked to ensure it hasn't been accidentally or maliciously modified. Such tamper protection is attained by cryptographic techniques that ensure data integrity. These changes allow scientists, and our society, to be more confident of scientific findings based on collected data.The Scientific Workflow Integrity with Pegasus project strengthens cybersecurity controls in the Pegasus Workflow Management System in order to provide assurances with respect to the integrity of computational scientific methods. These strengthened controls enhance both Pegasus' handling of science data and its orchestration of software-defined networks and infrastructure. The result is increased trust in computational science and increased assurance in our ability to reproduce the science by allowing scientists to validate that data has not been changed since a workflow completed and that the results from multiple workflows are consistent. The focus on Pegasus is due to its popularity in the scientific community as a method of computation and data management automation. For example, LIGO, the NSF-funded gravitational-wave physics project, recently used the Pegasus Workflow Management System to structure and execute the analyses that confirmed and quantified its historic detection of a gravitational wave, confirming the prediction made by Einstein 100 years ago. The proposed project has established collaborations with LIGO and additional key NSF infrastructure providers and science projects to ensure broadly applied results.

科学家使用计算机系统来分析和存储其科学数据，有时在多个机器的复杂过程中。这个过程可能乏味且容易出错，这导致了被称为“工作流管理系统”的软件的开发。工作流管理系统允许科学家以人类友好的方式描述其过程，然后该软件处理科学家处理的细节，处理乏味，重复的步骤并处理错误。 Pegasus是一个流行的工作流程管理系统，在过去的三年中，该系统被科学家在许多领域中运行700,000多个工作流程，包括天文学，生物信息学，地震科学，引力波物理，海洋科学和神经科学。 “使用Pegasus的科学工作流程完整性”项目通过其他安全功能增强了Pegasus。科学家对他们所需工作的描述受到保护，免受篡改，并检查了Pegasus处理的数据，以确保其没有偶然或恶意修改。这种篡改的保护是通过确保数据完整性的加密技术来实现的。这些变化使科学家和我们的社会能够根据收集的数据对科学发现更有信心。PEGASUS项目的科学工作流程完整性增强了PEGASUS工作流程管理系统中的网络安全控制系统，以提供有关计算科学科学完整性的保证方法。这些加强的控制措施增强了Pegasus对科学数据的处理及其对软件定义的网络和基础架构的编排。结果是对计算科学的信任提高，并提高了我们通过允许科学家验证数据以来没有更改数据的能力来重现科学的能力，并且多个工作流的结果是一致的。对Pegasus的重点是由于它在科学界的流行是一种计算和数据管理自动化方法。例如，NSF资助的重力波物理项目Ligo最近使用Pegasus Workflow Management系统来构建和执行确认并量化其对引力波的历史检测的分析，从而证实了Einstein 100年前的预测。拟议的项目已与LIGO以及其他重要的NSF基础设施提供商和科学项目建立了合作，以确保广泛应用结果。

项目成果

Integrity Protection for Scientific Workflow Data: Motivation and Initial Experiences

科学工作流程数据的完整性保护：动机和初步经验

• DOI: 10.1145/3332186.3332222
• 发表时间: 2019
• 期刊: PEARC ’19
• 作者: Rynge, Mats;Poehlman, William L.;Feltus, F. Alex;Vahi, Karan;Deelman, Ewa;Mandal, Anirban;Baldin, Ilya;Bhide, Omkar;Heiland, Randy;Welch, Von
• 通讯作者: Welch, Von