A Security Monitoring Framework For Virtualization Based HEP Infrastructures

High Energy Physics (HEP) distributed computing infrastructures require automatic tools to monitor, analyze and react to potential security incidents. These tools should collect and inspect data such as resource consumption, logs and sequence of system calls for detecting anomalies that indicate the presence of a malicious agent. They should also be able to perform automated reactions to attacks without administrator intervention. We describe a novel framework that accomplishes these requirements, with a proof of concept implementation for the ALICE experiment at CERN. We show how we achieve a fully virtualized environment that improves the security by isolating services and Jobs without a significant performance impact. We also describe a collected dataset for Machine Learning based Intrusion Prevention and Detection Systems on Grid computing. This dataset is composed of resource consumption measurements (such as CPU, RAM and network traffic), logfiles from operating system services, and system call data collected from production Jobs running in an ALICE Grid test site and a big set of malware. This malware was collected from security research sites. Based on this dataset, we will proceed to develop Machine Learning algorithms able to detect malicious Jobs.Comment: Proceedings of the 22nd International Conference on Computing in High Energy and Nuclear Physics, CHEP 2016, 10-14 October 2016, San Francisco. Submitted to Journal of Physics: Conference Series (JPCS

An Application of Multimedia Services on Transportation: The Use of the World Wide Web (WWW)

INTRODUCTION In recent years, there is an ever-increasing demand and interest in the use of multimedia technology and applications in industry, government and academia. Multimedia is often seen by researchers as the next step forward in interfacing science, technology and community. Yet, the terminology of multimedia bears several meanings. It may refer to Compact Disc (CD), moving pictures or video-conferencing. The multimedia technology referred in this paper is the World Wide Web (WWW) hypertext publishing information system which was developed by and started at the European Laboratory for Particle Physics (CERN) in Geneva, Switzerland. Since the introduction of WWW, its use has increased dramatically within a couple of years in a widely diverse community including government departments, university and research establishments, and commercial organisations. It has significant influence to our communities and our daily lives. Yet, in most cases, applications of WWW services are largely restricted to electronic library referencelcatalogue search facilities, electronic mail systems, electronic conference and discussion systems, electronic news and publishing agents, and remote access to computing resources on the Internet. The primary objective of this paper is to exploit the potential of this multimedia technology as a simple, easy-to-use and effective means of telematics application in transportation research. It is hoped that initiatives are highlighted via this study and hence encourage participations and collaborations from different sectors of industries. In this paper, a brief history of WWW is given in section (2). An overview of the technical aspects in providing a WWW service is presented in section (3) in terms of computer hardware requirements, software installation, network connections, application maintenance and administration, and system security. Compared to most commercially available multimedia software in the market, WWW services are cheap to run, userfriendly and readily available to the public on the Internet. In order to exploit the potential of WWW on transportation research, a study was carried out and results of the findings are reported in section (4). To further substantiate the level of usefulness, two particular WWW applications were chosen amongst other web services and they are reported in section (5) for illustrative purposes. The selected applications are the 'Transportation Resources on the Internet' developed in mid-1994 in the Institute for Transport Studies (ITS) at the University of Leeds in England, and the 'Southern California Real-Time Traffic Report' developed by Maxwell Laboratories, Inc. in collaboration with the California State Department of Transportation in the US. Finally, a set of issues are raised in section (6), highlighting the directions of future development of WWW as an easy-touse, cheap and effective multimedia telematics application on transportation

An Efficient Transport Protocol for delivery of Multimedia An Efficient Transport Protocol for delivery of Multimedia Content in Wireless Grids

A grid computing system is designed for solving complicated scientific and commercial problems effectively,whereas mobile computing is a traditional distributed system having computing capability with mobility and adopting wireless communications. Media and Entertainment fields can take advantage from both paradigms by applying its usage in gaming applications and multimedia data management. Multimedia data has to be stored and retrieved in an efficient and effective manner to put it in use. In this paper, we proposed an application layer protocol for delivery of multimedia data in wireless girds i.e. multimedia grid protocol (MMGP). To make streaming efficient a new video compression algorithm called dWave is designed and embedded in the proposed protocol. This protocol will provide faster, reliable access and render an imperceptible QoS in delivering multimedia in wireless grid environment and tackles the challenging issues such as i) intermittent connectivity, ii) device heterogeneity, iii) weak security and iv) device mobility.Comment: 20 pages, 15 figures, Peer Reviewed Journa

Installing, Running and Maintaining Large Linux Clusters at CERN

Having built up Linux clusters to more than 1000 nodes over the past five years, we already have practical experience confronting some of the LHC scale computing challenges: scalability, automation, hardware diversity, security, and rolling OS upgrades. This paper describes the tools and processes we have implemented, working in close collaboration with the EDG project [1], especially with the WP4 subtask, to improve the manageability of our clusters, in particular in the areas of system installation, configuration, and monitoring. In addition to the purely technical issues, providing shared interactive and batch services which can adapt to meet the diverse and changing requirements of our users is a significant challenge. We describe the developments and tuning that we have introduced on our LSF based systems to maximise both responsiveness to users and overall system utilisation. Finally, this paper will describe the problems we are facing in enlarging our heterogeneous Linux clusters, the progress we have made in dealing with the current issues and the steps we are taking to gridify the clustersComment: 5 pages, Proceedings for the CHEP 2003 conference, La Jolla, California, March 24 - 28, 200