Collaborative Research: CICI: Secure and Resilient Architecture: Scientific Workflow Integrity with Pegasus.

合作研究：CICI：安全和弹性架构：与 Pegasus 的科学工作流程完整性。

• 批准号: 1642090
• 负责人: Ilya Baldin
• 金额: $ 23万
• 依托单位: University of North Carolina at Chapel Hill
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2019-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1642090&HistoricalAwards=false
• 关键词: Collaborative; Research; CICI; Secure; Resilient

Scientists use computer systems to analyze and store their scientific data, sometimes in a complex process across multiple machines. This process can be tedious and error-prone, which has led to the development of software known as a "workflow management system". Workflow management systems allow scientists to describe their process in a human-friendly way and then the software handles the details of the processing for the scientists, dealing with tedious and repetitive steps and handling errors. One popular workflow management system is Pegasus, which, over the past three years, was used to run over 700,000 workflows by scientists in a number of domains including astronomy, bioinformatics, earthquake science, gravitational wave physics, ocean science, and neuroscience. The "Scientific Workflow Integrity with Pegasus" project enhances Pegasus with additional security features. The scientist's description of their desired work is protected from tampering and the data processed by Pegasus is checked to ensure it hasn't been accidentally or maliciously modified. Such tamper protection is attained by cryptographic techniques that ensure data integrity. These changes allow scientists, and our society, to be more confident of scientific findings based on collected data.The Scientific Workflow Integrity with Pegasus project strengthens cybersecurity controls in the Pegasus Workflow Management System in order to provide assurances with respect to the integrity of computational scientific methods. These strengthened controls enhance both Pegasus' handling of science data and its orchestration of software-defined networks and infrastructure. The result is increased trust in computational science and increased assurance in our ability to reproduce the science by allowing scientists to validate that data has not been changed since a workflow completed and that the results from multiple workflows are consistent. The focus on Pegasus is due to its popularity in the scientific community as a method of computation and data management automation. For example, LIGO, the NSF-funded gravitational-wave physics project, recently used the Pegasus Workflow Management System to structure and execute the analyses that confirmed and quantified its historic detection of a gravitational wave, confirming the prediction made by Einstein 100 years ago. The proposed project has established collaborations with LIGO and additional key NSF infrastructure providers and science projects to ensure broadly applied results.

科学家使用计算机系统来分析和存储他们的科学数据，有时是在跨多台机器的复杂过程中。这一过程可能会很繁琐，而且容易出错，这导致了被称为“工作流管理系统”的软件的开发。工作流管理系统允许科学家以一种友好的方式描述他们的过程，然后软件为科学家处理处理的细节，处理乏味和重复的步骤，并处理错误。Pegasus是一个流行的工作流管理系统，在过去的三年里，它被天文学、生物信息学、地震科学、引力波物理、海洋科学和神经科学等多个领域的科学家用来运行超过70万个工作流。“飞马科学工作流程完整性”项目为飞马系统提供了额外的安全功能。科学家对他们想要的工作的描述受到保护，不会被篡改，飞马座处理的数据会被检查，以确保它没有被意外或恶意修改。这种篡改保护是通过确保数据完整性的加密技术实现的。这些变化使科学家和我们的社会对基于收集的数据的科学发现更有信心。飞马科学工作流完整性项目加强了飞马工作流管理系统中的网络安全控制，以确保计算科学方法的完整性。这些加强的控制既加强了飞马对科学数据的处理，也加强了对软件定义的网络和基础设施的协调。其结果是增加了对计算科学的信任，并通过允许科学家验证自工作流完成以来数据未被更改以及来自多个工作流的结果是一致的，从而增强了对我们再现科学的能力的信心。飞马之所以受到关注，是因为它作为一种计算和数据管理自动化的方法在科学界很受欢迎。例如，NSF资助的引力波物理项目LIGO最近使用Pegasus工作流管理系统来构建和执行分析，这些分析证实并量化了其历史上对引力波的探测，证实了爱因斯坦100年前的预测。拟议的项目已经与LIGO以及其他关键的NSF基础设施提供商和科学项目建立了合作，以确保广泛应用的成果。

项目成果

Integrity Protection for Scientific Workflow Data: Motivation and Initial Experiences

科学工作流程数据的完整性保护：动机和初步经验

• DOI: 10.1145/3332186.3332222
• 发表时间: 2019
• 期刊: PEARC ’19
• 作者: Rynge, Mats;Poehlman, William L.;Feltus, F. Alex;Vahi, Karan;Deelman, Ewa;Mandal, Anirban;Baldin, Ilya;Bhide, Omkar;Heiland, Randy;Welch, Von
• 通讯作者: Welch, Von