A Framework for Cyber Vulnerability Assessments of InfiniBand Networks

reportActive / Technical Report | Accession Number: AD1076294 | Open PDF

Abstract:

InfiniBand is a popular InputOutput interconnect technology used in High Performance Computing clusters. It is employed in over a quarter of the worlds 500 fastest computer systems. Although it was created to provide extremely low network latency with a high Quality of Service, the cybersecurity aspects of InfiniBand have yet to be thoroughly investigated. The InfiniBand Architecture was designed as a data center technology, logically separated from the Internet, so defensive mechanisms such as packet encryption were not implemented. Cyber communities do not appear to have taken an interest in InfiniBand, but that is likely to change as attackers branch out from traditional computing devices. This thesis considers the security implications of InfiniBand features and constructs a framework for conducting Cyber Vulnerability Assessments. Several attack primitives are tested and analyzed. Finally, new cyber tools and security devices for InfiniBand are proposed, and changes to existing products are recommended.

Author(s):
Schmitt, Daryl W
Author Organization(s):
AIR FORCE INSTITUTE OF TECHNOLOGY WRIGHT-PATTERSON AFB OH WRIGHT-PATTERSON AFB United States
Descriptive Note:
Technical Report
Pagination:
0111

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release;

RECORD

Collection: TR
Identifying Numbers
Report Number(s):
AFIT-ENG-MS-19-M-054, AFRL/RYWA
Project Number(s):
18G230
 Subject Terms
Joint Capability Areas:
JCA_5_Command and Control; JCA_5.3_Planning; JCA_4.7.2_Installation Services; JCA_4.7_Base and Installations Support; JCA_5.3.2_Apply Situational Understanding; JCA_5.2_Understand; JCA_5.4_Decide; JCA_7.2_Mitigate; JCA_7_Protection; JCA_7.2.1_Mitigate Lethal Effects; JCA_5.4.1_Manage Risk; JCA_5.5_Direct; JCA_5.5.1_Communicate Intent and Guidance; JCA_5.3.3_Develop Strategy; JCA_4.6_Engineering; JCA_5.2.2_Develop Knowledge and Situational Awareness; JCA_4.6.1_General Engineering; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_4.1_Deployment and Distribution; JCA_JCA_4.1.2_Sustain the Force; JCA_5.5.2_Task
Modernization Areas:
Cyber
Communities of Interest:
Cyber
Descriptor(s):
computer networks, cybersecurity, computer network security, High Performance Computing, threats
Field(s)/Group(s):
Computer Systems Management and Standards
Keyword(s):
InfiniBand, Cyber Vulnerability Assessment, Planned Attack Primitives, Security Evaluation, Assessment Execution Process, Individual Attacks
Report Date:
2019 Mar 01
Creation Date:
2019 Jul 10