Monitoring high performance networks in large-scale clusters

International audienceThe number of large-scale clusters is rising. They are included into Grids or become key components o f large structures. As more users and projects rely 071 HPC clusters, high availability and security are requirements for a fast growing adoption and use. I n this paper, ute focus o n high performance networks. All HPC clusters are built o n top of them. We demonstrate that classical instrumentation are ineficient in HPC environment, they do not scale or cause a significant loss of performance. Based 071. this fact, we highlight clusters properties: nodes have assigned roles and are coupled at various levels. Moreover, we study the main characteristics of resource usage for each type of node and propose a n instrumentation that can be effectively deployed. It results in fine-grained mechanisms adapted to system architecture and performance constraints.. Relevant information is collected over time. Two properties are verified online and dynamically: coherency and containment. Each induces a type of verification and both aim at reducin,g recovery time from failure and security risk of a whole cluster. We illustrate our. rnethodology o n QsNet network and provide a way t o increase safety of high performance networks and clusters

NIDS architecture for clusters

International audienceIntrusion detection is a security concept implemented on networks in various academic and commercial solutions. Most of them rely on sensors dedicated to local area networks or Internet. However clusters rely heavily on networks. Because of their uniformity, they are sensible to attacks: one compromised node can lead to the control of whole cluster. In order to solve such security issues, we purpose a NIDS architecture which addresses the same constraints as a cluster: efficiency, scalability and reliability. It is based on the cluster paradigm. We stress on the facts that network packets must be dispatched according to streams and analysis must be load-balanced at process level. Moreover two types of practical parallel analysis are presented, depending on the type of flows. Finally, we discuss implementations and dimensioning issues

An adaptive instrumented node for efficient anomalies and misuse detections in HPC environment

International audienceNowadays, cluster architecture is widely deployed, paving the path for grid computing. Sharing such high concentration of valuable resources requires special dedicated security mechanisms at various levels. Current solutions for autonomous systems are too intrusive to be deployed in a cluster. In order to develop new solutions adapted to the architecture, we consider a coupled approach for performing efficient anomalies and misuse detections in HPC environment. It relies on an instrumented node, and results in periodical sampling of applications, allowing the generation of specific security policies that can be used to perform further monitoring. This paper also deals with performance concerns and an approach is proposed in order to keep a tow overhead

Scedosporiosis/lomentosporiosis observational study (SOS): Clinical significance of Scedosporium species identification

International audienceScedosporiosis/lomentosporiosis is a devastating emerging fungal infection. Our objective was to describe the clinical pattern and to analyze whether taxonomic grouping of the species involved was supported by differences in terms of clinical presentations or outcomes. We retrospectively studied cases of invasive scedosporiosis in France from 2005 through 2017 based on isolates characterized by polyphasic approach. We recorded 90 cases, mainly related to Scedosporium apiospermum (n = 48), S. boydii/S. ellipsoideum (n = 20), and Lomentospora prolificans (n = 14). One-third of infections were disseminated, with unexpectedly high rates of cerebral (41%) and cardiovascular (31%) involvement. In light of recent Scedosporium taxonomic revisions, we aimed to study the clinical significance of Scedosporium species identification and report for the first time contrasting clinical presentations between infections caused S. apiospermum, which were associated with malignancies and cutaneous involvement in disseminated infections, and infections caused by S. boydii, which were associated with solid organ transplantation, cerebral infections, fungemia, and early death. The clinical presentation of L. prolificans also differed from that of other species, involving more neutropenic patients, breakthrough infections, fungemia, and disseminated infections. Neutropenia, dissemination, and lack of antifungal prescription were all associated with 3-month mortality. Our data support the distinction between S. apiospermum and S. boydii and between L. prolificans and Scedosporium sp. Our results also underline the importance of the workup to assess dissemination, including cardiovascular system and brain. Lay Summary Scedosporiosis/lomentosporiosis is a devastating emerging fungal infection. Our objective was to describe the clinical pattern and to analyze whether taxonomic grouping of the species involved was supported by differences in terms of clinical presentations or outcomes