CC* Integration: End-to-End Performance and Security Driven Federated Data-Intensive Workflow Management

CC* 集成：端到端性能和安全驱动的联合数据密集型工作流管理

• 批准号: 1827177
• 负责人: Prasad Calyam
• 金额: $ 50万
• 依托单位: University of Missouri-Columbia
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2021-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1827177&HistoricalAwards=false
• 关键词: CC; Integration; End; Performance; Security

Data-intensive science applications in research fields such as bioinformatics, chemistry,and material science are increasingly becoming multi-domain in nature. To augment localcampus CyberInfrastructure (CI) resources, these applications rely on multi-institutional resourcesthat are remotely accessible (e.g., scientific instruments, supercomputers, public clouds).Provisioning of such federated CI resources has been traditionally based on applications'performance and quality of service (QoS) requirements. This project aims to augmenttraditional resource provisioning schemes through novel schemes forformalizing end-to-end security requirements to align security postureacross multi-domain resources with heterogeneous policies.This project addresses the end-to-end multi-domain security design forscientific applications by defining and formalizing security specifications along an application's workflow lifecycle stages.The research work will advance the current knowledge for a CI engineer in the following areas:(i) how to intelligently perform resource allocations among private and public cloud locations;(ii) by streamlining end-to-end security posture across domains that are constructed via dynamic network services; and(iii) how to "bring your own compute" programs in large facilities to reduce turnaround times in a secured and policy-compliant manner.The resulting security formalization and alignment schemes will be implemented as a security middleware coupled within a unified resource broker framework that: (a) operationally integrates various software tools and systems such as perfSONAR, OpenStack, iRODS and Shibboleth; and (b) supports prototypes of web-portals and actual users (e.g., researchers and educators) within usability evaluation and validation experiments.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

生物信息学、化学和材料科学等研究领域的数据密集型科学应用本质上越来越多领域化。为了增强本地校园网络基础设施 (CI) 资源，这些应用程序依赖于可远程访问的多机构资源（例如科学仪器、超级计算机、公共云）。传统上，此类联合 CI 资源的配置基于应用程序的性能和服务质量（服务质量）要求。该项目旨在通过新颖的方案来增强传统的资源配置方案，以形式化端到端安全要求，从而使跨多域资源的安全态势与异构策略保持一致。该项目通过定义和解决科学应用程序的端到端多域安全设计问题。沿着应用程序的工作流程生命周期阶段形式化安全规范。这项研究工作将提高 CI 工程师在以下领域的当前知识：(i) 如何在私有云和公共云位置之间智能地执行资源分配；(ii)简化通过动态网络服务构建的跨域的端到端安全态势； (iii) 如何在大型设施中“自带计算”程序，以安全且符合策略的方式减少周转时间。由此产生的安全形式化和对齐方案将作为耦合在统一资源代理框架内的安全中间件来实现(a) 在操作上集成了各种软件工具和系统，例如 perfSONAR、OpenStack、iRODS 和 Shibboleth； (b) 在可用性评估和验证实验中支持门户网站和实际用户（例如研究人员和教育工作者）的原型。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优点和更广泛的影响进行评估，被认为值得支持审查标准。

项目成果

Multi-Cloud Performance and Security-driven Brokering for Bioinformatics Workflows

生物信息学工作流程的多云性能和安全驱动的代理

• DOI: 10.1109/icnp.2019.8888071
• 发表时间: 2019-10
• 期刊: 2019 IEEE 27th International Conference on Network Protocols (ICNP
• 作者: Nguyen, Minh;Debroy, Saptarshi;Calyam, Prasad;Lyu, Zhen;Joshi, Trupti
• 通讯作者: Joshi, Trupti

OnTimeURB: Multi-Cloud Resource Brokering for Bioinformatics Workflows

OnTimeURB：生物信息学工作流程的多云资源代理

• DOI: 10.1109/bibm47256.2019.8983386
• 发表时间: 2019-11
• 期刊: 2019 IEEE International Conference on Bioinformatics and Biomedicine (BIBM
• 作者: Pandey, Ashish;Lyu, Zhen;Joshi, Trupti;Calyam, Prasad
• 通讯作者: Calyam, Prasad

Increasing protected data accessibility for age-related cataract research using a semi-automated honest broker

使用半自动诚实经纪人提高与年龄相关的白内障研究的受保护数据的可访问性

• 发表时间: 2019-07
• 期刊: Journal for modeling in ophthalmology
• 作者: Valluripally, Samaikya;Raju, Murugesan;Calyam, Prasad;Lemus, Mauro;Purohit, Soumya;Mosa, Abu;Joshi, Trupti
• 通讯作者: Joshi, Trupti

Data-intensive Workflow Execution using Distributed Compute Resources

使用分布式计算资源执行数据密集型工作流程

• DOI: 10.1109/icnp.2019.8888119
• 发表时间: 2019-10
• 期刊: 2019 IEEE 27th International Conference on Network Protocols (ICNP
• 作者: Pandey, Ashish;Wang, Songjie;Calyam, Prasad
• 通讯作者: Calyam, Prasad

VECTrust: trusted resource allocation in volunteer edge-cloud computing workflows

VECTrust：志愿者边缘云计算工作流程中的可信资源分配

• DOI: 10.1145/3468737.3494099
• 发表时间: 2021-12-06
• 期刊: Proceedings of the 14th IEEE/ACM International Conference on Utility and Cloud Computing
• 作者: Ashish P;ey;ey;P. Calyam;S. Debroy;Songjie Wang;Mauro Lemus Alarcon
• 通讯作者: Mauro Lemus Alarcon