Author

Randy Butler

10 papers · 1999–2012

1999peak 2 in 20002012

Frequent co-authors

Papers

showing 1–10 of 10 RSS

A national-scale authentication infrastructure

Carl Kesselman, J. Volmer, Steven Tuecke +4 more

Computer Networks and Communications · Computer · 2000 · cited 299× · DOI ↗ · more like this ·

Participants in virtual organizations commonly need to share resources such as data archives, computer cycles, and networks, resources usually available only with restrictions based on the requested resource's nature and the user's identity. Thus, any sharing mechanism must have the ability to authenticate the user's identity and determine whether the user is authorized to request the resource. Virtual organizations tend to be fluid, however, so authentication mechanisms must be flexible and lightweight, allowing administrators to quickly establish and change resource-sharing arrangements. Nevertheless, because virtual organizations complement rather than replace existing institutions, sharing mechanisms cannot change local policies and must allow individual institutions to maintain control over their own resources. Our group has created and deployed an authentication and authorization…

Palantir

Himanshu Khurana, Jim Basney, Mehedi Bakht +3 more

Information Systems · 14 Apr 2009 · cited 30× · DOI ↗ · more like this ·

Organizations owning cyber-infrastructure assets face large scale distributed attacks on a regular basis. In the face of increasing complexity and frequency of such attacks, we argue that it is insufficient to rely on organizational incident response teams or even trusted coordinating response teams. Instead, there is need to develop a framework that enables responders to establish trust and achieve an effective collaborative response and investigation process across multiple organizations and legal entities to track the adversary, eliminate the threat and pursue prosecution of the perpetrators. In this work we develop such a framework for effective collaboration. Our approach is motivated by our experiences in dealing with a large-scale distributed attack that took place in 2004 known as Incident 216. Based on our approach we present the Palantir system that comprises conceptual and…

CyberInfrastructure for the Analysis of Ecological Acoustic Sensor Data: A Use Case Study in Grid Deployment

Randy Butler, Mark Servilla, Stuart H. Gage +9 more

Computer Networks and Communications · 21 Jul 2006 · cited 8× · DOI ↗ · more like this ·

The LTER grid pilot study was conducted by the National Center for Supercomputing Applications, the University of New Mexico, and Michigan State University, to design and build a prototype grid for the ecological community. The featured grid application, the Biophony Grid Portal, manages acoustic data from field sensors and allows researchers to conduct real-time digital signal processing analysis on high-performance systems via a Web-based portal. Important characteristics addressed during the study include the management, access, and analysis of a large set of field collected acoustic observations from microphone sensors, single signon, and data provenance. During the development phase of this project new features were added to standard grid middleware software and have already been successfully leveraged by other, unrelated grid projects. This paper provides an overview of the…

Security for science gateways and campus bridging: XSEDE12 panel (extended abstract)

Jim Basney, Randy Butler, D. T. Fraser +2 more

Information Systems · IUScholarWorks (Indiana University) · 2012 · cited 0× · DOI ↗ · more like this ·

This is a preprint of the extended abstract of a Birds of a Feather panel presented at the XSEDE12 conference, held July 16-19, 2012 in Chicago, IL. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the National Science Foundation.

2011 Report of NSF Workshop Series on Scientific Software Security Innovation Institute

Mine Altunay, Rachana Ananthakrishnan, M. Arrott +9 more

Information Systems · IDEALS (University of Illinois Urbana-Champaign) · 2011 · cited 0× · OpenAlex ↗ · more like this ·

Over the period of 2010-2011, a series of two workshops were held in response to NSF Dear Colleague Letter NSF 10-050 calling for exploratory workshops to consider requirements for Scientific Software Innovation Institutes (S2I2s). The specific topic of the workshop series was the potential benefits of a security-focused software institute that would serve the entire NSF research and development community.\n\nThe first workshop was held on August 6th, 2010 in Arlington, VA and represented an initial exploration of the topic. The second workshop was held on October 26th, 2011 in Chicago, IL and its goals were to 1) Extend our understanding of relevant needs of MREFC and large NSF Projects, 2) refine outcome from first workshop with broader community input, and 3) vet concepts for a trusted cyberinfrastructure institute. Towards those goals, the participants other 2011workshop…

Status of This Memo

Randy Butler Ncsa, Tony J. Genovese

Sociology and Political Science · 2003 · cited 0× · OpenAlex ↗ · more like this ·

This memo provides information to the Grid community; it is a GGF community practice document. It does not define any standards or technical recommendations. Distribution is unlimited. Copyright Notice Copyright © Global Grid Forum (2003). All Rights Reserved This document describes a reference certificate policy (CP) for the operation of certificate authorities (CAs) within Grid environments. Specifically, the CP addresses the use of X.509 certificates for authentication but explicitly avoids documenting policies for digital signature and encryption. The goal of this CP is guide organizations in the deployment of public key infrastructure (PKI) to support technical interoperation with other Grid PKIs. This document serves as a model; it is written at times as if it were a policy, in order to give readers an

Global grid forum certificate policy model. Tech. rep., Global Grid Forum

Randy Butler, Tony J. Genovese

Sociology and Political Science · 2003 · cited 0× · OpenAlex ↗ · more like this ·

This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as &quot;work in progress.&quot; The list of current Internet-Drafts can be accessed at

Global Grid Forum Certificate Policy Model Status of This Memo

Randy Butler Ncsa, Tony J. Genovese

Computer Networks and Communications · 2002 · cited 0× · OpenAlex ↗ · more like this ·

This memo provides information to the Grid community; it is a GGF community practice document. It does not define any standards or technical recommendations. Distribution is unlimited. Copyright Notice Copyright © Global Grid Forum (2002). All Rights Reserved This document describes a reference certificate policy for Certificate Authorities (CA) operating within the Global Grid Community (GGF). It is not a CP to be used for operating a CA in the GGF. This CP only addresses the use of X.509 certificates for authentication and explicitly avoided documenting policies for digital signature and encryption. The goal of this CP is help the GGF to deploy PKI to support technical interoperation of our various Grid PKIs. This document is meant to serve as a model and is written at times as if it were a policy to give readers an example. In many cases there are suggestions and alternatives that…

A National-Scale Authentication Infrastructure

Randy Butler, Von Welch, Ian Foster +1 more

Computer Networks and Communications · 2000 · cited 0× · OpenAlex ↗ · more like this ·

ver access policies and local security. It provides its own versions of common applications, such as FTP and remote login, and a programming interface for creating secure applications. Dozens of supercomputers and storage systems already use GSI, a level of acceptance reached by few other security infrastructures. MULTISITE AUTHENTICATION Virtual organizations must have a reliable means for identifying requestors, but participant independence complicates authentication across multiple sites. PACIs provide a good example of both the issues and technical requirements for a multisite authentication infrastructure. The PACI community The NSF PACIs---two consortia of some 50 universities and government laboratories---are dedicated to developing next-generation scientific problem-solving tools. Virtual organizations in their own right, the PACIs independently provide resources to an even…

Design and Deployment of a National-Scale Authentication Infrastructure

Randy Butler, Doug Engert, Ian Foster +5 more

Sociology and Political Science · 1999 · cited 0× · OpenAlex ↗ · more like this ·

Increasingly, independent institutions with similar goals and interests are forming loosely coupled virtual organizations for collaboration and resource sharing. The construction of virtual organizations is hampered, however, by two conflicting goals: all members of the organization should have access to a resource as if it was their own, but participating institutions must not be required to change local security mechanisms or surrender control over their access control policies. We describe our experience designing, developing, and deploying the Grid Security Infrastructure (GSI), an authentication and authorization infrastructure that meets these requirements. GSI capabilities include single sign-on, no plaintext passwords, proxy credentials, mapping to local security mechanisms (including Kerberos), site control over access control policies, and user-controlled delegation. We have…