DyVOSE project: experiences in applying privilege management infrastructures

Privilege Management Infrastructures (PMI) are emerging as a necessary alternative to authorization through Access Control Lists (ACL) as the need for finer grained security on the Grid increases in numerous domains. The 2-year JISC funded DyVOSE Project has investigated applying PMIs within an e-Science education context. This has involved establishing a Grid Computing module as part of Glasgow University’s Advanced MSc degree in Computing Science. A laboratory infrastructure was built for the students realising a PMI with the PERMIS software, to protect Grid Services they created. The first year of the course centered on building a static PMI at Glasgow. The second year extended this to allow dynamic attribute delegation between Glasgow and Edinburgh to support dynamic establishment of fine grained authorization based virtual organizations across multiple institutions. This dynamic delegation was implemented using the DIS (Delegation Issuing) Web Service supplied by the University of Kent. This paper describes the experiences and lessons learned from setting up and applying the advanced Grid authorization infrastructure within the Grid Computing course, focusing primarily on the second year and the dynamic virtual organisation setup between Glasgow and Edinburgh

A Shibboleth-protected privilege management infrastructure for e-science education

Simplifying access to and usage of large scale compute resources via the grid is of critical importance to encourage the uptake of e-research. Security is one aspect that needs to be made as simple as possible for end users. The ESP-Grid and DyVOSE projects at the National e-Science Centre (NeSC) at the University of Glasgow are investigating security technologies which will make the end-user experience of using the grid easier and more secure. In this paper, we outline how simplified (from the user experience) authentication and authorization of users are achieved through single usernames and passwords at users' home institutions. This infrastructure, which will be applied in the second year of the grid computing module part of the advanced MSc in Computing Science at the University of Glasgow, combines grid portal technology, the Internet2 Shibboleth Federated Access Control infrastructure, and the PERMS role-based access control technology. Through this infrastructure inter-institutional teaching can be supported where secure access to federated resources is made possible between sites. A key aspect of the work we describe here is the ability to support dynamic delegation of authority whereby local/remote administrators are able to dynamically assign meaningful privileges to remote/local users respectively in a trusted manner thus allowing for the dynamic establishment of virtual organizations with fine grained security at their heart

Grid infrastructures for secure access to and use of bioinformatics data: experiences from the BRIDGES project

The BRIDGES project was funded by the UK Department of Trade and Industry (DTI) to address the needs of cardiovascular research scientists investigating the genetic causes of hypertension as part of the Wellcome Trust funded (£4.34M) cardiovascular functional genomics (CFG) project. Security was at the heart of the BRIDGES project and an advanced data and compute grid infrastructure incorporating latest grid authorisation technologies was developed and delivered to the scientists. We outline these grid infrastructures and describe the perceived security requirements at the project start including data classifications and how these evolved throughout the lifetime of the project. The uptake and adoption of the project results are also presented along with the challenges that must be overcome to support the secure exchange of life science data sets. We also present how we will use the BRIDGES experiences in future projects at the National e-Science Centre

Single sign-on and authorization for dynamic virtual organizations

The vision of the Grid is to support the dynamic establishment and subsequent management of virtual organizations (VO). To achieve this presents many challenges for the Grid community with perhaps the greatest one being security. Whilst Public Key Infrastructures (PKI) provide a form of single sign-on through recognition of trusted certification authorities, they have numerous limitations. The Internet2 Shibboleth architecture and protocols provide an enabling technology overcoming some of the issues with PKIs however Shibboleth too suffers from various limitations that make its application for dynamic VO establishment and management difficult. In this paper we explore the limitations of PKIs and Shibboleth and present an infrastructure that incorporates single sign-on with advanced authorization of federated security infrastructures and yet is seamless and targeted to the needs of end users. We explore this infrastructure through an educational case study at the National e-Science Centre (NeSC) at the University of Glasgow and Edinburgh

Contracts for Cross-Organizational Workflow Management

Nowadays, many organizations form dynamic partnerships to deal effectively with market requirements. As companies use automated workflow systems to control their processes, a way of linking workflow processes in different organizations is useful in turning the co-operating companies into a seamless operating virtual enterprise. The CrossFlow Esprit project aims at developing information technology for advanced process support in dynamic virtual organizations with contract based service trading. Contracts are necessary for flexible service outsourcing. This report presents contracts as a way of finding suitable partners, connect WFMSs of different kinds, control outsourced workflow, and share an abstraction of the workflow specification between the partners. The contract defines the data, process, and conditions relevant to the co-operation and the outsourced workflow on an abstract level. This information can be fed through an interface to the WFMSs on both sides of the outsourcing in order to automate fully the co-operation between the partners

A strongly interacting Bose gas: Nozi\`eres and Schmitt-Rink theory and beyond

We calculate the critical temperature for Bose-Einstein condensation in a gas of bosonic atoms across a Feshbach resonance, and show how medium effects at negative scattering lengths give rise to pairs reminiscent of the ones responsible for fermionic superfluidity. We find that the formation of pairs leads to a large suppression of the critical temperature. Within the formalism developed by Nozieres and Schmitt-Rink the gas appears mechanically stable throughout the entire crossover region, but when interactions between pairs are taken into account we show that the gas becomes unstable close to the critical temperature. We discuss prospects of observing these effects in a gas of ultracold Cs133 atoms where recent measurements indicate that the gas may be sufficiently long-lived to explore the many-body physics around a Feshbach resonance.Comment: 8 pages, 8 figures, RevTeX. Significantly expanded to include effects beyond NS

Kuddegedrag van pensioenfondsen per beleggingscategorie

FdR – Publicaties zonder aanstelling Universiteit Leide

A user-friendly web portal for T-Coffee on supercomputers

<p>Abstract</p> <p>Background</p> <p>Parallel T-Coffee (PTC) was the first parallel implementation of the T-Coffee multiple sequence alignment tool. It is based on MPI and RMA mechanisms. Its purpose is to reduce the execution time of the large-scale sequence alignments. It can be run on distributed memory clusters allowing users to align data sets consisting of hundreds of proteins within a reasonable time. However, most of the potential users of this tool are not familiar with the use of grids or supercomputers.</p> <p>Results</p> <p>In this paper we show how PTC can be easily deployed and controlled on a super computer architecture using a web portal developed using Rapid. Rapid is a tool for efficiently generating standardized portlets for a wide range of applications and the approach described here is generic enough to be applied to other applications, or to deploy PTC on different HPC environments.</p> <p>Conclusions</p> <p>The PTC portal allows users to upload a large number of sequences to be aligned by the parallel version of TC that cannot be aligned by a single machine due to memory and execution time constraints. The web portal provides a user-friendly solution.</p

Minimally Invasive Stent Screw-Assisted Internal Fixation Technique Corrects Kyphosis in Osteoporotic Vertebral Fractures with Severe Collapse: A Pilot "Vertebra Plana" Series.

BACKGROUND AND PURPOSE Fractures with "vertebra plana" morphology are characterized by severe vertebral body collapse and segmental kyphosis; there is no established treatment standard for these fractures. Vertebroplasty and balloon kyphoplasty might represent an undertreatment, but surgical stabilization is challenging in an often elderly osteoporotic population. This study assessed the feasibility, clinical outcome, and radiologic outcome of the stent screw-assisted internal fixation technique using a percutaneous implant of vertebral body stents and cement-augmented pedicle screws in patients with non-neoplastic vertebra plana fractures. MATERIALS AND METHODS Thirty-seven consecutive patients with vertebra plana fractures were treated with the stent screw-assisted internal fixation technique. Vertebral body height, local and vertebral kyphotic angles, outcome scales (numeric rating scale and the Patient's Global Impression of Change), and complications were assessed. Imaging and clinical follow-up were obtained at 1 and 6 months postprocedure. RESULTS Median vertebral body height restoration was 7 mm (+74%), 9 mm (+150%), and 3 mm (+17%) at the anterior wall, middle body, and posterior wall, respectively. Median local and vertebral kyphotic angles correction was 8° and 10° and was maintained through the 6-month follow-up. The median numeric rating scale score improved from 8/10 preprocedure to 3/10 at 1 and 6 months (P < .001). No procedural complications occurred. CONCLUSIONS The stent screw-assisted internal fixation technique was effective in obtaining height restoration, kyphosis correction, and pain relief in patients with severe vertebral collapse