New FABRIC Artifact for Remote Attestation in Science DMZ with AMD Xilinx U280

[Hyun Suk Bang]

I’m excited to announce the availability of a new FABRIC Artifact demonstrating the application of in-network remote attestation to enhance security and compliance within Science DMZ environments.

You can accessed the artifact here: https://artifacts.fabric-testbed.net/artifacts/bcf64ac9-1fb7-4dc4-823e-b6158fd2cd41

The Science DMZ network design pattern excels at removing friction from large data transfers, but this often leads to tension with traditional network security policies. This experiment addresses this challenge by leveraging the power of AMD Xilinx U280 FPGAs to implement an in-network function for remote attestation. This allows for in-band control signaling of transfer authorization information between research institutions, significantly improving security posture without sacrificing performance.

This work, co-mentored by Chris Neely at AMD/Xilinx and Prof. Nik Sultana at Illinois Institute of Technology, was recently showcased in an NRE (Network Research Experiment) demo at SC24. You can check other related works at https://transparnet.cs.iit.edu/

 

Additionally, this artifact demonstrates how to significantly increase reproducibility and time-efficiency for bootstrapping experiments after FABRIC nodes are provisioned. I utilized Ansible and tmux to streamline the process, enabling faster and more consistent experiment setups.

Happy Networking!

[Author]

Posts