1. Utility Computing: Security & Trust Issues Dr Steven Newhouse Technical Director London e-Science Centre Department of Computing, Imperial College London

2. 2 ICENI The Iceni, under Queen Boudicca, united the tribes of South-East England in a revolt against the occupying Roman forces in AD60. IC e-Science Networked Infrastructure Developed by LeSC Grid Middleware Group Collect and provide relevant Grid meta-data Use to define and develop higher-level services Interaction with other frameworks: OGSA, Jxta etc.

3. 3 ICENI Architecture Resource Manager Policy Manager CR SR Identity Manager Domain Manager CR SR Gateway between private and public regions Public Public Computational Community SR CR Public Computational Community SR Private Administrative Domain SR CR Resource Broker Application Design Tools Component Design Tools Application Mapper Web Services Gateway Applicatio n Portal Private Computational Resource Software Resources Network Resources Storage Resources JavaCoG Globus Resource Browser RESOURCESPOLICY SERVICESUSERS

4. 4 SOAP RMI Component Execution Compute Resource Hardware RTR Code RTR Network Resource MPI APO Jini OGSA, Jxta, etc.

5. 5 Exposing Resources as Services ICENI Domain Manager FileResource newFile() getFile() saveFile() jini://private.doc Public Domain jini://public.grid.ac.uk Public Domain jini://public.grid.edu DomainManager publishes resource to public domain with the attached SLA. PublicFileService newFile() getFile() saveFile() subContract() SLA Life in the Public Domain

6. 6 RUNNING COMPONENTS Security Cone Permissible SLA RESOURCE SERVICE POLICY B A C D SLA defines: What? Who? When?

7. 7 Trading Grid Services UK Core e-Science Programme –Partially funded by Department of Trade & Industry –Adoption by UK business is a key success criteria –Joint projects between Industry & Academics Computational Markets project –Requested by Tony Hey, UK e-Science Director –Led by Professor John Darlington, Director, LeSC –Define service interfaces & protocols to enable the trading of services

8. 8 Partners Research –London e-Science Centre –Manchester e-Science Centre –Southampton e-Science Centre –UK Grid Support Centre (Deployment & Support) Commercial –SME’s: Software & service provision –Multi-national’s: Hardware & Software vendors

9. 9 Proposed Scope Core Logging & Accounting Services –For contribution to GT3 Secure Charging and Payment Mechanisms –Define interfaces that leverage existing infrastructures Performance Engineering –Prediction and optimisation of execution time Computational Economics –Development and reference implementation of protocols –Exploration of advanced mechanisms (e.g. futures) Deployment within UK e-Science Grid –Utilise UK’s Grid Infrastructure –Exposure to real environment, users & applications

10. 10 Architecture OGSA Grid Service Service InterfaceService Data Service InterfaceService Data OGSA Chargeable Grid Service Grid Economic Service Interface Record Resource Usage OGSA Resource Usage Service Contract Negotiation Economic Service Data Contract Verification Service Charging OGSA Grid Banking Service Grid User

11. 11 Issues in Selling Services Reliability: –Will they deliver as advertised? Trustworthiness: –Can I rely on what is advertised? Liability: –Who do I prosecute if it goes wrong? Contract: –How can the contract be broken? Secure execution: –Can I rely on the provider?

12. 12 RealityGrid Applications: LB3D, … Resources: UCL, LeSC, Manchester, EPCC Runtime access: Visualisation & Steering Using Globus, OGSA & Unicore Output data: Post-processing & publication

13. 13 Grid Enabled Integrated Earth Systems Model - GENIE NERC Pilot Project Distributed ESM’s located at various sites Visualisation and steering of running simulations Portals Data Sets: For simulation initiation & output