Security in the CernVM File System and the Frontier Distributed Database Caching System

Both the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of t...

Descripción completa

Detalles Bibliográficos
Autores principales: Dykstra, David, Blomer, J
Lenguaje:eng
Publicado: 2013
Materias:
Detectors and Experimental Techniques
Acceso en línea:https://dx.doi.org/10.1088/1742-6596/513/4/042015
http://cds.cern.ch/record/1619650
_version_ 1780933023101878272
author Dykstra, David
Blomer, J
author_facet Dykstra, David
Blomer, J
author_sort Dykstra, David
collection CERN
description Both the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of the data and can guarantee the integrity of the data transferred to clients over the internet. CVMFS has since its early days required digital signatures and secure hashes on all distributed data, and recently both CVMFS and Frontier have added X509-based integrity checking. In this paper we detail and compare the security models of CVMFS and Frontier.
id cern-1619650
institution Organización Europea para la Investigación Nuclear
language eng
publishDate 2013
record_format invenio
spelling cern-16196502019-09-30T06:29:59Zdoi:10.1088/1742-6596/513/4/042015http://cds.cern.ch/record/1619650engDykstra, DavidBlomer, JSecurity in the CernVM File System and the Frontier Distributed Database Caching SystemDetectors and Experimental TechniquesBoth the CernVM File System (CVMFS) and the Frontier Distributed Database Caching System (Frontier) distribute centrally updated data worldwide for LHC experiments using http proxy caches. Neither system provides privacy or access control on reading the data, but both control access to updates of the data and can guarantee the integrity of the data transferred to clients over the internet. CVMFS has since its early days required digital signatures and secure hashes on all distributed data, and recently both CVMFS and Frontier have added X509-based integrity checking. In this paper we detail and compare the security models of CVMFS and Frontier.CMS-CR-2013-273oai:cds.cern.ch:16196502013-10-01
spellingShingle Detectors and Experimental Techniques
Dykstra, David
Blomer, J
Security in the CernVM File System and the Frontier Distributed Database Caching System
title Security in the CernVM File System and the Frontier Distributed Database Caching System
title_full Security in the CernVM File System and the Frontier Distributed Database Caching System
title_fullStr Security in the CernVM File System and the Frontier Distributed Database Caching System
title_full_unstemmed Security in the CernVM File System and the Frontier Distributed Database Caching System
title_short Security in the CernVM File System and the Frontier Distributed Database Caching System
title_sort security in the cernvm file system and the frontier distributed database caching system
topic Detectors and Experimental Techniques
url https://dx.doi.org/10.1088/1742-6596/513/4/042015
http://cds.cern.ch/record/1619650
work_keys_str_mv AT dykstradavid securityinthecernvmfilesystemandthefrontierdistributeddatabasecachingsystem
AT blomerj securityinthecernvmfilesystemandthefrontierdistributeddatabasecachingsystem

Ejemplares similares