Travelling securely on the Grid to the origin of the Universe - - PowerPoint PPT Presentation

▶
travelling securely on the grid to the origin of the
SMART_READER_LITE
LIVE PREVIEW

Travelling securely on the Grid to the origin of the Universe - - PowerPoint PPT Presentation

Mar 24, 2024 253 likes •706 views

Travelling securely on the Grid to the origin of the Universe F-Secure SPECIES 2007 conference Wolfgang von Rden 1 Head, IT Department, CERN, Geneva 24 January 2007 1 Zurich January 2007 CERN stands for over 50 years of

slide-1
SLIDE 1

Zurich – January 2007 1

1

Travelling securely on the Grid to the origin of the Universe

Wolfgang von Rüden Head, IT Department, CERN, Geneva 24 January 2007

F-Secure SPECIES 2007 conference

slide-2
SLIDE 2

Zurich – January 2007 2

2

CERN stands for over 50 years of

1954 Rebuilding Europe First meeting of the CERN Council 1980 East meets West Visit of a delegation from Beijing 2004 Global Collaboration The Large Hadron Collider involves over 80 countries

  • fundamental research and discoveries
  • technological innovation
  • training and education
  • bringing the world together
slide-3
SLIDE 3

Zurich – January 2007 3

3

CERN’s mission in Science

  • Understand the fundamental laws of nature
  • We accelerate elementary particles and make them collide.
  • We observe the results and compare them with the theory.
  • We try to understand the origin of the Universe.
  • Provide a world-class laboratory to researchers in Europe

and beyond

  • New: Support world-wide computing using Grid technologies
  • A few numbers …
  • 2500 employees: physicists, engineers, technicians, craftsmen,

administrators, secretaries, …

  • 8000 visiting scientists (half of the world’s particle physicists),

representing 500 universities and over 80 nationalities

  • Budget: ~1 Billion Swiss Francs per year
  • Additional contributions by participating institutes
slide-4
SLIDE 4

Zurich – January 2007 4

4

slide-5
SLIDE 5

Zurich – January 2007 5

5

slide-6
SLIDE 6

Zurich – January 2007 6

6

slide-7
SLIDE 7

Zurich – January 2007 7

7

slide-8
SLIDE 8

Zurich – January 2007 8

8

How does the Grid work?

  • It relies on advanced software,

called middleware.

  • Middleware automatically finds

the data the scientist needs, and the computing power to analyse it.

  • Middleware balances the load
  • n different resources. It also

handles security, accounting, monitoring and much more.

slide-9
SLIDE 9

Zurich – January 2007 9

9

Why does CERN need the Grid?

slide-10
SLIDE 10

Zurich – January 2007 10

10

The LHC accelerator and the four experiments

slide-11
SLIDE 11

Zurich – January 2007 11

11

View of the LHC tunnel

slide-12
SLIDE 12

Zurich – January 2007 12

12

View of the ATLAS detector (under construction)

150 million sensors deliver data … … 40 million times per second

slide-13
SLIDE 13

Zurich – January 2007 13

13

slide-14
SLIDE 14

Zurich – January 2007 14

14

slide-15
SLIDE 15

Zurich – January 2007 15

15

slide-16
SLIDE 16

Zurich – January 2007 16

16

slide-17
SLIDE 17

Zurich – January 2007 17

17

slide-18
SLIDE 18

Zurich – January 2007 18

18

slide-19
SLIDE 19

Zurich – January 2007 19

19

slide-20
SLIDE 20

Zurich – January 2007 20

20

8500 CPUs (Linux) in 3500 boxes 4000 TB

  • n 14’000 drives

(NAS Disk Storage) 45’000 Tape Slots installed and 170 high speed drives (10 PB capacity)

Today’s installation at CERN:

slide-21
SLIDE 21

Zurich – January 2007 21

21

Massive ramp-up during 2006-08

slide-22
SLIDE 22

Zurich – January 2007 22

22

Massive ramp-up during 2006-08

slide-23
SLIDE 23

Zurich – January 2007 23

23

Massive ramp-up during 2006-08

slide-24
SLIDE 24

les robertson - cern-it-lcg

LCG

CERN 18% A ll Tier-1s 39% A ll Tier-2s 43% CERN 12% A ll Tier-1s 55% A ll Tier-2s 33% CERN 34% A ll Tier-1s 66%

CPU Disk Tape

Summary of Computing Resource Requirements

All experiments - 2008 From LCG TDR - June 2005 CERN All Tier-1s All Tier-2s Total CPU (MSPECint2000s) 25 56 61 142 Disk (PetaBytes) 7 31 19 57 Tape (PetaBytes) 18 35 53

Distribution of Computing Services

slide-25
SLIDE 25

les robertson - cern-it-lcg

LCG

WLCG Collaboration

  • The Collaborat ion

4 LHC experiment s ~120 comput ing cent res 12 large cent res (Tier-0, Tier-1) 38 f ederat ions of smaller “Tier-2” cent res Growing t o ~40 count ries

  • Memorandum of Underst anding

Agreed in Oct ober 2005, now being signed

  • Resources

Commit ment made each Oct ober f or t he coming year 5-year f orward look

slide-26
SLIDE 26

Zurich – January 2007 26

26

  • Worldwide Grid for science
  • ~200 sites – some very big,

some very small

  • 60 Virtual Organisations

with >25 000 CPUs

slide-27
SLIDE 27

27

Enabling Grids for E-sciencE

EGEE-II INFSO-RI-031688

The EGEE project

  • EGEE

– Started in April 2004 – Now in 2nd phase with 91 partners in 32 countries

  • Objectives

– Large-scale, production-quality grid infrastructure for e-Science – Attracting new resources and users from industry as well as science – Maintain and further improve “gLite” Grid middleware – Improve Grid security

slide-28
SLIDE 28

CERN – January 2007

Entering the Grid VO A VO B SITE A SITE B SITE X ... VO X ... ...

International Grid Trust Federation

(X.509/PKI)

peer Grids peer Grids

Authorization flow

Users Virtual Organizations Resources

Users

Institute A

Users

Institute B

Users

Institute X

slide-29
SLIDE 29

CERN – January 2007

peer Grids peer Grids Entering the Grid VO A VO B SITE A SITE B SITE X ... VO X ... ...

International Grid Trust Federation

(X.509/PKI)

Users Virtual Organizations Resources

Users

Institute A

Users

Institute B

Users

Institute X

ITGF brings common policies and standards among accredited CAs Users are then registered in Virtual Organisations (VO)

Authorization flow

slide-30
SLIDE 30

CERN – January 2007

peer Grids peer Grids Entering the Grid VO A VO B SITE A SITE B SITE X ... VO X ... ...

International Grid Trust Federation

(X.509/PKI)

Users Virtual Organizations Resources

Users

Institute A

Users

Institute B

Users

Institute X

Users are authenticated using X509 certificates issued by Certificate Authorities (CAs) According to their role in the VO, users are authorized to use the Grid services

Authorization flow

slide-31
SLIDE 31

Zurich – January 2007 31

31

International Grid Trust Federation Joint Security Policy Group MiddleWare Security Group

Common Policies for Grids Architecture Framework Interoperability Trust anchor CA

Grid Security Vulnerability Group Operational Security Coordination Team

Operations Best Practice CERTs/CSIRTs

Security Collaboration in the LHC Grid

(Initial picture by Ake Edlund)

Software vulnerabilities

slide-32
SLIDE 32

Zurich – January 2007 32

32

International Grid Trust Federation Joint Security Policy Group MiddleWare Security Group

Common Policies for Grids Architecture Framework Interoperability Trust anchor CA

Grid Security Vulnerability Group Operational Security Coordination Team

Operations Best Practice CERTs/CSIRTs

Security Collaboration in the LHC Grid

(Initial picture by Ake Edlund)

Software vulnerabilities

International Grid Trust Federation is maintaining global trust relationships between the Certificate Authorities Joint Security Policy Group is providing a coherent set of security policies to be used by the Grids

slide-33
SLIDE 33

Zurich – January 2007 33

33

International Grid Trust Federation Joint Security Policy Group MiddleWare Security Group

Common Policies for Grids Architecture Framework Interoperability Trust anchor CA

Grid Security Vulnerability Group Operational Security Coordination Team

Operations Best Practice CERTs/CSIRTs

Security Collaboration in the LHC Grid

(Initial picture by Ake Edlund)

Software vulnerabilities

Grid Security Vulnerability Group is handling Grid middleware security vulnerabilities Middleware Security Group is defining the security framework and architecture

  • f the Grid software
slide-34
SLIDE 34

Zurich – January 2007 34

34

International Grid Trust Federation Joint Security Policy Group MiddleWare Security Group

Common Policies for Grids Architecture Framework Interoperability Trust anchor CA

Grid Security Vulnerability Group Operational Security Coordination Team

Operations Best Practice CERTs/CSIRTs

Security Collaboration in the LHC Grid

(Initial picture by Ake Edlund)

Software vulnerabilities

Operational Security Coordination Team is dealing with operational issues, from best practice recommendations to multi-site incident response coordination

slide-35
SLIDE 35

35

Enabling Grids for E-sciencE

EGEE-II INFSO-RI-031688

Applications on EGEE

  • More than 25 applications from an

increasing number of domains

– Astrophysics – Computational Chemistry – Earth Sciences – Financial Simulation – Fusion – Geophysics – High Energy Physics – Life Sciences – Multimedia – Material Sciences – …..

slide-36
SLIDE 36

36

Enabling Grids for E-sciencE

EGEE-II INFSO-RI-031688

Example: EGEE Attacks Avian Flu

  • EGEE used to analyse 300,000

possible potential drug compounds against bird flu virus, H5N1.

  • 2000 computers at 60 computer

centres in Europe, Russia, Asia and Middle East ran during four weeks in April - the equivalent of 100 years on a single computer.

  • Potential drug compounds now

being identified and ranked.

Neuraminidase, one of the two major surface proteins of influenza viruses, facilitating the release of virions from infected cells. Image Courtesy Ying-Ta Wu, AcademiaSinica.

slide-37
SLIDE 37

37

Enabling Grids for E-sciencE

EGEE-II INFSO-RI-031688

Example: ITU Project

  • International Telecommunication Union

– ITU/BR: Radio-communication Sector

management of the radio-frequency spectrum and satellite orbits for fixed, mobile, broadcasting and other communication services

  • RRC-06 (15 May–16 June 2006)

– 120 countries negotiate the new frequency plan – introduction of digital broadcasting

UHF (470-862 Mhz) & VHF (174-230 Mhz)

– Demanding computing problem with short- deadlines – Using EGEE grid were able to complete a cycle in less than 1 hour

slide-38
SLIDE 38

38

Enabling Grids for E-sciencE

EGEE-II INFSO-RI-031688

Businesses @ EGEE06 Conference (Sep ‘06)

slide-39
SLIDE 39

39

Sustainability

  • Need to prepare for permanent Grid infrastructure

– Ensure a high quality of service for all user communities – Independent of short project funding cycles – Infrastructure managed in collaboration with National Grid Initiatives (NGIs) – European Grid Initiative (EGI)

Preparation Implementation

EGI

slide-40
SLIDE 40

Zurich – January 2007 40

40

CERN openlab

  • Industry partners provide

state of the art technology, manpower

  • CERN does test and

validation in demanding Grid environment

  • Platform competence centre
  • Grid interoperability centre
  • Security activities
  • Joint events
slide-41
SLIDE 41

Zurich – January 2007 41

41

CERN and F-Secure partnership (1/2)

  • The partnership brings together
  • F-Secure’s computer security know-how, tools and products
  • CERN’s expertise and complex infrastructure as a test bed
  • Collaboration on desktop client security and malware detection

within electronic mail transport. Focus on desktop and portable computers protection, email gateways (incoming and outgoing), email message stores

  • Antivirus, anti-spyware, anti-spam, anti-flood, anti-phishing
  • Current areas of investigation
  • Automated installation of Antivirus client software to large number of

computers (> 6000) with high reliability > 99.9 %

  • Detecting and stripping back-listed file extensions even when contained

in compressed files on mail gateways

  • Regular expressions content filtering in mail gateways
  • Viewers and tools to analyze security log files
slide-42
SLIDE 42

Zurich – January 2007 42

42

CERN and F-Secure partnership (2/2)

  • Technical contact between F-Secure specialists and

CERN mail and desktop security teams established with good and competent communication

  • All level of skills directly accessible: support, developers, product

management, executives

  • F-Secure products are excellent and we are collaborating

to improve them further

  • We aim to standardize CERN’s infrastructure on F-Secure

products

slide-43
SLIDE 43

Zurich – January 2007 43

43

For more information about the Grid:

www.gridcafe.org Thank you for your kind attention!