Browse > Article
http://dx.doi.org/10.33778/kcsa.2021.21.2.003

Application of access control policy in ScienceDMZ-based network configuration  

Kwon, Woo Chang (한국과학기술정보연구원/과학기술연구망센터)
Lee, Jae Kwang (한남대학교/컴퓨터공학과)
Kim, Ki Hyeon (한국과학기술정보연구원/과학기술연구망센터)
Publication Information
Convergence Security Journal / v.21, no.2, 2021 , pp. 3-10 More about this Journal
Abstract
Nowadays, data-based scientific research is a trend, and the transmission of large amounts of data has a great influence on research productivity. To solve this problem, a separate network structure for transmitting large-scale scientific big data is required. ScienceDMZ is a network structure designed to transmit such scientific big data. In such a network configuration, it is essential to establish an access control list(ACL) for users and resources. In this paper, we describe the R&E Together project and the network structure implemented in the actual ScienceDMZ network structure, and define users and services to which access control policies are applied for safe data transmission and service provision. In addition, it presents a method for the network administrator to apply the access control policy to all network resources and users collectively, and through this, it was possible to achieve automation of the application of the access control policy.
Keywords
High speed network; ScienceDMZ; ACL; KREONET;
Citations & Related Records
연도 인용수 순위
  • Reference
1 최명석, 이승복, 이상환, "국내 과학기술분야 연구기관의 과학데이터 관리 현황." 한국콘텐츠학회논문지 제17권, 제12호, pp. 117-126, 2017.   DOI
2 한국항공우주연구원(KARI), https://www.kari.re.kr/
3 한국생명공학연구원(KRIBB), https://www.kribb.re.kr/
4 ESNET, https://www.es.net/
5 Dart, Eli, et al. "The science dmz: A network design pattern for data-intensive science." Scientific Programming Vol. 22, No. 2, pp. 173-185, 2014.   DOI
6 NRP (National Research Platform), https://pacificresearchplatform.org/nrp/
7 DTN (Data Transfer Node), https://pacificresearchplatform.org/nrp/
8 GRP (Global Reasearch Platform) http://www.theglobalresearchplatform.net
9 KREONET, https://www.kreonet.net/
10 Red Hat ansible, https://www.redhat.com/en/resources/ansible-automation-platform-brief
11 한국천문연구원(KASI), https://www.kasi.re.kr/
12 PRP(Pacific Research Platform), https://pacificresearchplatform.org/
13 APRP (Acia Pacific Reasearch Platform) https://aprnet.org/
14 Globus Online, https://www.globus.org/
15 한국핵융합에너지연구원(KFE), https://www.kfe.re.kr/