Automation of Security Analysis for Service Grid Systems

There are hundred of computers in a grid infrastructure and the proper operation of such large scale system depends on the security status of these computers. In order to increase the security level of the grid infrastructure a security assessment tool: Grid Site Software Vulnerability Analyzer (GSSVA) has been designed and implemented by SZTAKI [1]. This developed monitoring tool overcomes the issues with communication through firewalls and client side installation without root privileges. GSSVA is using basic grid services, and can automatically explore the installed Linux packages locating on the grid machines. Our approach is extended with a modified PAKITI [2] status monitoring system, which can be re-used as a toolkit for further security parameter monitoring. In this paper we show the inner architecture of the developed GSSVA monitoring tool and assess its usability on the SEE-GRID-SCI [3] grid infrastructure.