CAJ | 학술논문

高性能计算（high performance computing，HPC）机群具有单一系统和分布式系统的双重特点，从而对机群的安全性提出了新的挑战。根据高性能计算机群的安全现状和需求，提出了一种适用于高性能计算机群的分布式强制访问控制模型；根据该模型设计了一个基于单节点的强制访问控制系统SE Linux，实现了高性能计算机群访问控制系统框架，并搭建了一个原型系统。最后，对高性能计算机群强制访问控制技术的可行性进行了分析和验证。分析结果表明，高性能计算机群分布式强制访问控制技术在功能上能够满足高性能计算机群的安全需求，对系统的计算和带宽的消耗也在可接受的范围内。
고성능계산（high performance computing，HPC）궤군구유단일계통화분포식계통적쌍중특점，종이대궤군적안전성제출료신적도전。근거고성능계산궤군적안전현상화수구，제출료일충괄용우고성능계산궤군적분포식강제방문공제모형；근거해모형설계료일개기우단절점적강제방문공제계통SE Linux，실현료고성능계산궤군방문공제계통광가，병탑건료일개원형계통。최후，대고성능계산궤군강제방문공제기술적가행성진행료분석화험증。분석결과표명，고성능계산궤군분포식강제방문공제기술재공능상능구만족고성능계산궤군적안전수구，대계통적계산화대관적소모야재가접수적범위내。
The high performance computing (HPC) cluster has the features of single system and distributed system, the cluster security is a new challenge. According to the research and analysis on the security and demand of cluster, this paper puts forward a suitable model for HPC cluster, and designs an implementation framework based on the node-level mandatory access control (MAC) system, SE Linux. Then, this paper builds a prototype system. In the last section, this paper studies the feasibility of the distributed mandatory access control for HPC cluster, both the function and the performance. The results show that, the MAC technology for HPC cluster can satisfy the security demand of the HPC cluster in the function, and the cost of MAC also can be acceptable.