Managing application whitelists in trusted distributed systems

Journal article

Many distributed batch systems, such as computational grids, require a level of integrity protection to guarantee the proper execution of a job or workflow. One way of achieving this, implicit in many trusted computing proposals, is to use application whitelisting to prevent unknown and untrusted applications from being executed on remote services. However, this approach has significant shortcomings across multiple administrative domains, as conflicts between locally managed whitelists will result in many useful services appearing untrustworthy to users. This has the potential to limit availability and prevent trusted distributed systems from ever being successfully deployed. We propose a set of requirements for a system which will manage these conflicts, and provide a mechanism for updating application whitelists that will increase service availability and trustworthiness. We also suggest and specify a set of components, including a centralised configuration manager, which will meet these requirements. © 2010 Elsevier B.V. All rights reserved.

Authors: Huh, J; Lyle, J; Namiluko, C; Martin, A

• Publication status: Published
• Journal: FUTURE GENERATION COMPUTER SYSTEMS-THE INTERNATIONAL JOURNAL OF GRID COMPUTING AND ESCIENCE
• Volume: 27
• Issue: 2
• Pages: 211-226
• Publication date: 2011-02-01
• DOI: 10.1016/j.future.2010.08.014
• ISSN: 0167-739X
• Language: English
• Keywords: Trusted computing; Configuration management; Whitelisting; Virtual organisations; Trusted grid