Hi Jonathan,
I guess a simple way to prevent "grid-viruses", would be to use the .NEt
CAS (Code access security)
feature. We will need to implement some code in Alchemi to run user code
under reduced priveleges inside a sand-box kind of environment on
an Executor.
Cheers
Krishna.
Jonathan Mitchem wrote:
I've been thinking about security recently, and started questioning
the security of a distributed system such as Alchemi.
Is there anything that actually "constrains" the grid environment on a
machine so that a user doesn't allow some sort of distributed malware
to damage their machine?
For instance, an application that reads the files on the machine
hosting the Executor, searches for certain files or filetypes (like,
password and private key files), and then sends them to a specified
address. And maybe even proceeds to break their encryption.
Or, an application that creates several threads so that every machine
has a copy of the required DLLs, which subsequently proceeds to remove
critical system files from every machine.
Is there anything to prevent such sort of usage? And if not (since
I'm presuming there isn't), how would we go about preventing such
damage?
Jonathan
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=k&kid3432&bid#0486&dat1642
_______________________________________________
Alchemi-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/alchemi-developers
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_______________________________________________
Alchemi-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/alchemi-developers
