Mandatory access control with a multi-level reference monitor: PIGA-cluster - Archive ouverte HAL Access content directly
Conference Papers Year : 2013

Mandatory access control with a multi-level reference monitor: PIGA-cluster

Mathieu Blanc
  • Function : Author
  • PersonId : 935806
Jérémy Briffaut
Christian Toinard
  • Function : Author
  • PersonId : 867013


The protection of High Performance Computing architectures is still an open research problem. Generally, current solutions only feature confinement using sandboxing but none address the problematic of information flow control. This is why a better integration of mandatory access control mechanisms is needed in the HPC environment. In this paper, we propose a global architecture to protect a whole cluster. This architecture uses the specific cluster technologies in order not to reduce the operating system performances. The protection of the cluster relies on three levels of protection and the use of two kinds of reference monitors. SELinux is installed on the computing nodes and deals with direct information flows. PIGA, only installed on a specific node, performs advanced flow control and detects advanced threats. We present the various components of our architecture called PIGA-Cluster, then the results of several benchmarks on a computing node that show a low impact on the operating system performances. We also apply various security properties in order to protect the computing nodes against simple and advanced attacks. This paper takes advantage of previous works dealing with workstations or virtualisation technologies and extends the concepts for the HPC environment.
No file

Dates and versions

hal-00840735 , version 1 (02-07-2013)



Mathieu Blanc, Damien Gros, Jérémy Briffaut, Christian Toinard. Mandatory access control with a multi-level reference monitor: PIGA-cluster. ACM CLHS '13 Proceedings of the first workshop on Changing landscapes in HPC security, Jun 2013, New-York, United States. pp.1-8, ⟨10.1145/2465808.2465809⟩. ⟨hal-00840735⟩
82 View
0 Download



Gmail Mastodon Facebook X LinkedIn More