Securing Grid Workflows with Trusted Computing (Extended Abstract)

Summary form only given. The grid, a distributed computing paradigm, seeks to exploit the synergies of technology and social collaboration to solve data or computation-intensive problems. The risk to a user's data and results is dramatically increased when using workflows, because the entire dataset is exposed to the grid. The use of reputation and provenance information has been proposed to avoid selecting 'untrusted' nodes when provisioning grid jobs. However, this information may be unreliable or open to manipulation. We propose a scheme that uses trusted platforms that are compliant with the trusted computing group specifications. We make use of integrity measurement, sealing and platform attestation to provide the following security services to grid workflows: trusted resource provider selection, confidentiality of job information, integrity of job information, and audit data for process provenance.