HPC with Enhanced User Separation

Abstract

HPC systems used for research run a wide variety of software and workflows. This software is often written or modified by users to meet the needs of their research projects, and rarely is built with security in mind. In this paper we explore several of the key techniques that MIT Lincoln Laboratory Supercomputing Center has deployed on its systems to manage the security implications of these workflows by providing enforced separation for processes, filesystem access, network traffic, and accelerators to make every user feel like they are running on a personal HPC.

References in corpus (10)

• Interactive Supercomputing on 40,000 Cores for Machine Learning and Data Analysis
• D4M 2.0 Schema: A General Purpose High Performance Schema for the Accumulo Database
• Achieving 100,000,000 database inserts per second using Accumulo and D4M
• D4M: Bringing Associative Arrays to Database Engines
• Enabling On-Demand Database Computing with MIT SuperCloud Database Management System
• Measuring the Impact of Spectre and Meltdown
• Scalability of VM Provisioning Systems
• MIT SuperCloud Portal Workspace: Enabling HPC Web Application Deployment
• Enhancing HPC Security with a User-Based Firewall
• Best of Both Worlds: High Performance Interactive and Batch Launching