Collaborative Research: CICI: Secure and Resilient Architecture: Scientific Workflow Integrity with Pegasus.

科学家使用计算机系统来分析和存储他们的科学数据，有时需要跨多台机器进行复杂的处理。这个过程可能很乏味，而且容易出错，这就导致了“工作流管理系统”软件的开发。工作流管理系统允许科学家以一种人性化的方式描述他们的过程，然后软件为科学家处理处理的细节，处理繁琐和重复的步骤和处理错误。一个流行的工作流管理系统是Pegasus，在过去的三年中，它被许多领域的科学家使用，包括天文学、生物信息学、地震科学、引力波物理学、海洋科学和神经科学，运行超过700,000个工作流。“科学工作流完整性与Pegasus”项目增强了Pegasus额外的安全功能。科学家对他们想要的工作的描述是不被篡改的，Pegasus处理的数据是经过检查的，以确保它没有被意外或恶意修改。这种篡改保护是通过确保数据完整性的加密技术实现的。这些变化使科学家和我们的社会对基于收集数据的科学发现更有信心。Pegasus的科学工作流程完整性项目加强了Pegasus工作流程管理系统中的网络安全控制，以保证计算科学方法的完整性。这些强化的控制增强了Pegasus对科学数据的处理，以及软件定义网络和基础设施的编排。其结果是增加了对计算科学的信任，并增加了我们复制科学的能力的保证，允许科学家验证数据在工作流完成后没有被更改，并且来自多个工作流的结果是一致的。之所以关注Pegasus，是因为它作为一种计算和数据管理自动化方法在科学界很受欢迎。例如，美国国家科学基金会资助的引力波物理项目LIGO最近使用Pegasus工作流管理系统来构建和执行分析，证实并量化了它对引力波的历史性探测，证实了爱因斯坦100年前的预言。拟议的项目已经与LIGO和其他关键的NSF基础设施提供者和科学项目建立了合作关系，以确保广泛应用的结果。

Scientists use computer systems to analyze and store their scientific data, sometimes in a complex process across multiple machines. This process can be tedious and error-prone, which has led to the development of software known as a "workflow management system". Workflow management systems allow scientists to describe their process in a human-friendly way and then the software handles the details of the processing for the scientists, dealing with tedious and repetitive steps and handling errors. One popular workflow management system is Pegasus, which, over the past three years, was used to run over 700,000 workflows by scientists in a number of domains including astronomy, bioinformatics, earthquake science, gravitational wave physics, ocean science, and neuroscience. The "Scientific Workflow Integrity with Pegasus" project enhances Pegasus with additional security features. The scientist's description of their desired work is protected from tampering and the data processed by Pegasus is checked to ensure it hasn't been accidentally or maliciously modified. Such tamper protection is attained by cryptographic techniques that ensure data integrity. These changes allow scientists, and our society, to be more confident of scientific findings based on collected data.The Scientific Workflow Integrity with Pegasus project strengthens cybersecurity controls in the Pegasus Workflow Management System in order to provide assurances with respect to the integrity of computational scientific methods. These strengthened controls enhance both Pegasus' handling of science data and its orchestration of software-defined networks and infrastructure. The result is increased trust in computational science and increased assurance in our ability to reproduce the science by allowing scientists to validate that data has not been changed since a workflow completed and that the results from multiple workflows are consistent. The focus on Pegasus is due to its popularity in the scientific community as a method of computation and data management automation. For example, LIGO, the NSF-funded gravitational-wave physics project, recently used the Pegasus Workflow Management System to structure and execute the analyses that confirmed and quantified its historic detection of a gravitational wave, confirming the prediction made by Einstein 100 years ago. The proposed project has established collaborations with LIGO and additional key NSF infrastructure providers and science projects to ensure broadly applied results.