Collaborative Research: CICI: Secure and Resilient Architecture: Scientific Workflow Integrity with Pegasus

合作研究：CICI：安全和弹性架构：与 Pegasus 的科学工作流程完整性

• 批准号: 1642070
• 负责人: Von Welch
• 金额: $ 47.99万
• 依托单位: Indiana University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2020-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1642070&HistoricalAwards=false
• 关键词: Collaborative; Research; CICI; Secure; Resilient

Scientists use computer systems to analyze and store their scientific data, sometimes in a complex process across multiple machines. This process can be tedious and error-prone, which has led to the development of software known as a "workflow management system". Workflow management systems allow scientists to describe their process in a human-friendly way and then the software handles the details of the processing for the scientists, dealing with tedious and repetitive steps and handling errors. One popular workflow management system is Pegasus, which, over the past three years, was used to run over 700,000 workflows by scientists in a number of domains including astronomy, bioinformatics, earthquake science, gravitational wave physics, ocean science, and neuroscience. The "Scientific Workflow Integrity with Pegasus" project enhances Pegasus with additional security features. The scientist's description of their desired work is protected from tampering and the data processed by Pegasus is checked to ensure it hasn't been accidentally or maliciously modified. Such tamper protection is attained by cryptographic techniques that ensure data integrity. These changes allow scientists, and our society, to be more confident of scientific findings based on collected data.The Scientific Workflow Integrity with Pegasus project strengthens cybersecurity controls in the Pegasus Workflow Management System in order to provide assurances with respect to the integrity of computational scientific methods. These strengthened controls enhance both Pegasus' handling of science data and its orchestration of software-defined networks and infrastructure. The result is increased trust in computational science and increased assurance in our ability to reproduce the science by allowing scientists to validate that data has not been changed since a workflow completed and that the results from multiple workflows are consistent. The focus on Pegasus is due to its popularity in the scientific community as a method of computation and data management automation. For example, LIGO, the NSF-funded gravitational-wave physics project, recently used the Pegasus Workflow Management System to structure and execute the analyses that confirmed and quantified its historic detection of a gravitational wave, confirming the prediction made by Einstein 100 years ago. The proposed project has established collaborations with LIGO and additional key NSF infrastructure providers and science projects to ensure broadly applied results.

科学家使用计算机系统来分析和存储他们的科学数据，有时是在多台机器上进行复杂的过程。这个过程可能是乏味的和容易出错的，这导致了被称为“工作流管理系统”的软件的开发。工作流管理系统允许科学家以人性化的方式描述他们的过程，然后软件为科学家处理处理过程的细节，处理繁琐和重复的步骤并处理错误。一个流行的工作流管理系统是Pegasus，在过去的三年里，它被天文学、生物信息学、地震科学、引力波物理学、海洋科学和神经科学等多个领域的科学家用来运行超过70万个工作流。“与Pegasus的科学工作流程完整性”项目通过额外的安全功能增强了Pegasus。科学家对他们所期望的工作的描述受到保护，不会被篡改，Pegasus处理的数据会被检查，以确保它没有被意外或恶意修改。这种篡改保护是通过确保数据完整性的加密技术来实现的。这些变化使科学家和我们的社会对基于收集的数据的科学发现更有信心。Pegasus科学工作流程完整性项目加强了Pegasus工作流程管理系统的网络安全控制，以确保计算科学方法的完整性。这些强化的控制增强了Pegasus对科学数据的处理以及对软件定义网络和基础设施的协调。其结果是增加了对计算科学的信任，并通过允许科学家验证自工作流程完成以来数据未被更改以及多个工作流程的结果是一致的，从而提高了我们再现科学的能力。对Pegasus的关注是由于它在科学界作为计算和数据管理自动化方法的流行。例如，NSF资助的引力波物理项目LIGO最近使用Pegasus工作流管理系统来构建和执行分析，这些分析证实并量化了其对引力波的历史探测，证实了爱因斯坦100年前的预测。拟议的项目已与LIGO和其他关键的NSF基础设施提供商和科学项目建立了合作，以确保广泛应用的结果。

项目成果

Integrity Protection for Scientific Workflow Data: Motivation and Initial Experiences

科学工作流程数据的完整性保护：动机和初步经验

• DOI: 10.1145/3332186.3332222
• 发表时间: 2019
• 期刊: PEARC ’19
• 作者: Rynge, Mats;Poehlman, William L.;Feltus, F. Alex;Vahi, Karan;Deelman, Ewa;Mandal, Anirban;Baldin, Ilya;Bhide, Omkar;Heiland, Randy;Welch, Von
• 通讯作者: Welch, Von