ScienceSDS: A Novel Software Defined Security Framework for Large-scale Data-intensive Science

Authors

Deepak Nadig Anantha, University of Nebraska-LincolnFollow
Byrav Ramamurthy, University of Nebraska-LincolnFollow

Document Type

Article

Date of this Version

2017

Citation

SDN-NFV Pages 13-18

Comments

Copyright 2017 ACM.

DOI: http://dx.doi.org/10.1145/3040992.3040999

Abstract

Experimental science workflows from projects such as Compact Muon Solenoid (CMS) [6] and Laser Interferometer Gravitational Wave Observatory (LIGO) [2] are characterized by data-intensive computational tasks over large datasets transferred over encrypted channels. The Science DMZ [7] approach to network design favors lossless packet forwarding through a separate isolated network over secure lossy forwarding through stateful packet processors (e.g. fire-walls). We propose ScienceSDS, a novel software denied security framework for securely monitoring large-scale science datasets over a software defined networking and network functions virtualization (SDN/NFV) infrastructure.