<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00473944</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-01T06:08:36+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Mandatory access control for shared HPC clusters: setup and performance evaluation</title>
            <author role="aut">
              <persName>
                <forename type="first">Mathieu</forename>
                <surname>Blanc</surname>
              </persName>
              <idno type="halauthorid">150841-0</idno>
              <affiliation ref="#struct-119523"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jean-François</forename>
                <surname>Lalande</surname>
              </persName>
              <email type="md5">093eace8509dc1cfb1719109909bd075</email>
              <email type="domain">irisa.fr</email>
              <idno type="idhal" notation="string">jean-francois-lalande</idno>
              <idno type="idhal" notation="numeric">3</idno>
              <idno type="halauthorid" notation="string">2461-3</idno>
              <idno type="ARXIV">https://arxiv.org/a/lalande_j_1</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-4984-2199</idno>
              <idno type="IDREF">https://www.idref.fr/086082655</idno>
              <affiliation ref="#struct-1625"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Jean-François</forename>
                <surname>Lalande</surname>
              </persName>
              <email type="md5">093eace8509dc1cfb1719109909bd075</email>
              <email type="domain">irisa.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2010-04-16 19:35:25</date>
              <date type="whenModified">2024-11-19 09:28:02</date>
              <date type="whenReleased">2010-04-16 19:35:25</date>
              <date type="whenProduced">2010-06-28</date>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="111648">
                <persName>
                  <forename>Jean-François</forename>
                  <surname>Lalande</surname>
                </persName>
                <email type="md5">093eace8509dc1cfb1719109909bd075</email>
                <email type="domain">irisa.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00473944</idno>
            <idno type="halUri">https://hal.science/hal-00473944</idno>
            <idno type="halBibtex">blanc:hal-00473944</idno>
            <idno type="halRefHtml">&lt;i&gt;HPCS 2010&lt;/i&gt;, Jun 2010, Caen, France. pp.291-298, &lt;a target="_blank" href="https://dx.doi.org/10.1109/HPCS.2010.5547118"&gt;&amp;#x27E8;10.1109/HPCS.2010.5547118&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">HPCS 2010, Jun 2010, Caen, France. pp.291-298, &amp;#x27E8;10.1109/HPCS.2010.5547118&amp;#x27E9;</idno>
            <availability status="restricted"/>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CEA">CEA - Commissariat à l'énergie atomique</idno>
            <idno type="stamp" n="UNIV-ORLEANS">Université d'Orléans</idno>
            <idno type="stamp" n="ENSI-BOURGES">Ecole Nationale Supérieure d'Ingénieurs de Bourges</idno>
            <idno type="stamp" n="CASCIMODOT">CaSciModOT (calcul scientifique et modelisation Orleans-Tours)</idno>
            <idno type="stamp" n="MSL">Modelisation Systemes Langages</idno>
            <idno type="stamp" n="MSL-THESE">Modelisation Systemes Langages</idno>
            <idno type="stamp" n="DAM" corresp="CEA">Direction des applications militaires</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Mandatory access control for shared HPC clusters: setup and performance evaluation</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Mathieu</forename>
                    <surname>Blanc</surname>
                  </persName>
                  <idno type="halauthorid">150841-0</idno>
                  <affiliation ref="#struct-119523"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jean-François</forename>
                    <surname>Lalande</surname>
                  </persName>
                  <email type="md5">093eace8509dc1cfb1719109909bd075</email>
                  <email type="domain">irisa.fr</email>
                  <idno type="idhal" notation="string">jean-francois-lalande</idno>
                  <idno type="idhal" notation="numeric">3</idno>
                  <idno type="halauthorid" notation="string">2461-3</idno>
                  <idno type="ARXIV">https://arxiv.org/a/lalande_j_1</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-4984-2199</idno>
                  <idno type="IDREF">https://www.idref.fr/086082655</idno>
                  <affiliation ref="#struct-1625"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">International Conference on High Performance Computing &amp; Simulation</title>
                <meeting>
                  <title>HPCS 2010</title>
                  <date type="start">2010-06-28</date>
                  <date type="end">2010-07-02</date>
                  <settlement>Caen</settlement>
                  <country key="FR">France</country>
                </meeting>
                <imprint>
                  <publisher>IEEE Computer Society</publisher>
                  <biblScope unit="serie">ISBN: 978-1-4244-6827-0</biblScope>
                  <biblScope unit="pp">291-298</biblScope>
                  <date type="datePub">2010-06-28</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/HPCS.2010.5547118</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">HPC Clusters</term>
                <term xml:lang="en">Access Control</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Protecting a HPC cluster against real world cyber threats is a critical task, with the increasing trend to open and share computing resources. As partners can upload data that is conﬁdential regarding other partners, a company managing a shared cluster has to enforce strong security measures. It has to prevent both accidental data leakage and voluntary data stealing. When using an operating system based on Linux, the offered protections are difﬁcult to set up in large scale environments. This article presents how to use the Mandatory Access Control feature of SELinux in order to guarantee strong security properties for HPC clusters. The proposed solution is based on the use of the Multi-Category System, the conﬁnement of user proﬁles and the use of a dual SSH server. The issues encountered during the implementation and the most difﬁcult technical points are presented. Finally, this paper shows experimental results about the performance of our solution and the impact on a large scale cluster.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="laboratory" xml:id="struct-119523" status="VALID">
          <orgName>DAM Île-de-France</orgName>
          <orgName type="acronym">DAM/DIF</orgName>
          <desc>
            <address>
              <addrLine>CEA Bruyères-le-Châtel 91297 Arpajon cedex</addrLine>
              <country key="FR"/>
            </address>
          </desc>
          <listRelation>
            <relation name="DAM/DIF" active="#struct-5981" type="direct"/>
            <relation name="DAM" active="#struct-300016" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-1625" status="OLD">
          <idno type="IdRef">075434695</idno>
          <idno type="RNSR">200615274F</idno>
          <orgName>Laboratoire d'Informatique Fondamentale d'Orléans</orgName>
          <orgName type="acronym">LIFO</orgName>
          <date type="start">1987-01-01</date>
          <date type="end">2013-12-31</date>
          <desc>
            <address>
              <addrLine>Batiment IIIA 6 Rue Léonard de Vinci - BP 6759 45067 ORLEANS CEDEX 2</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-orleans.fr/lifo/</ref>
          </desc>
          <listRelation>
            <relation name="EA4022" active="#struct-300297" type="direct"/>
            <relation name="EA4022" active="#struct-300379" type="direct"/>
          </listRelation>
        </org>
        <org type="regrouplaboratory" xml:id="struct-5981" status="VALID">
          <idno type="IdRef">026372096</idno>
          <idno type="ISNI">0000000119569481</idno>
          <idno type="ROR">https://ror.org/00kn4eb29</idno>
          <idno type="Wikidata">Q2931222</idno>
          <orgName>Direction des Applications Militaires</orgName>
          <orgName type="acronym">DAM</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www-dam.cea.fr/</ref>
          </desc>
          <listRelation>
            <relation name="DAM" active="#struct-300016" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300016" status="VALID">
          <idno type="IdRef">026372061</idno>
          <idno type="ISNI">0000000122998025</idno>
          <idno type="ROR">https://ror.org/00jjx8s55</idno>
          <idno type="Wikidata">Q868550</idno>
          <orgName>Commissariat à l'énergie atomique et aux énergies alternatives</orgName>
          <orgName type="acronym">CEA</orgName>
          <desc>
            <address>
              <addrLine>Centre de SaclayCentre de GrenobleCentre de Cadaracheetc</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.cea.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300297" status="VALID">
          <idno type="IdRef">026402971</idno>
          <idno type="ISNI">0000 0001 2158 1666</idno>
          <idno type="ROR">https://ror.org/014zrew76</idno>
          <orgName>Université d'Orléans</orgName>
          <orgName type="acronym">UO</orgName>
          <desc>
            <address>
              <addrLine>Château de la Source - Avenue du Parc Floral - BP 6749 - 45067 Orléans cedex 2</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-orleans.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-300379" status="VALID">
          <orgName>Ecole Nationale Supérieure d'Ingénieurs de Bourges</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>