Information Security
The World Community Grid
What is the World Community Grid?
Sponsored by IBM, World Community Grid's stated mission is "to create the largest public computing grid benefiting humanity." This work combines network computing, scientific research, and large-scale volunteerism.
How does it work?
The grid is created by using the processing power of computers worldwide during times when they would normally be idle. Participants download an "agent" (small program) onto their Windows PCs that launches when the computers are started and communicates periodically through the Internet to return data it has been working on and to receive new tasks. The agent will be configured at RIT to run only when the computer is idle and no user is logged on.
When a user returns to the computer, the grid connection shuts itself off until the next time the computer is idle. Similar programs include NASA's "SETI at Home" and DistributedFolding.net.
What exactly is the World Community Grid researching?
The WCG is now conducting research known as Human Proteome Folding, which investigates the relationships between our genes and the proteins our bodies create. This project builds on the results of the Human Genome project. The ultimate goal of the research is to identify and catalogue the functions of the body's proteins. The World Community Grid is being utilized to model the way the human body folds, or constructs, these proteins.
How will RIT participate?
RIT will participate in the grid using only computers in an ITS managed computer lab during periods when there are no active users on the system.
Who should not participate?
Because of the security issues inherent in placing an agent onto a computer, the World Community Grid agent should not be installed on computers which:
- Handle sensitive information, including, but not limited to information regulated by law or contracts, student records, social security numbers, health records, financial records, employee/faculty performance information, HR information, human subject, or other Institutional Review Board regulated information. This information may be contained in e-mail or on local or network drives.
- Host information critical to the operations of RIT or its departments.
- Are used in research projects where the potential corruption of data could impact research results.
Why are there limitations to RIT's participation?
Legal regulations require access control to certain types of RIT information. RIT has a responsibility to protect information entrusted to us in good faith. The World Community Grid encrypts and transfers the contents of files back to their centralized host. However, there is no way to verify that the files leaving the system are only the ones that are work product files. RIT will participate in WCG by piloting installation of the "agent" onto a select group of RIT owned computers in an ITS-managed computer lab environment and continue to evaluate broader university launch.
The World Community Grid provides limited security safeguards. Although the World Community Grid is an important endeavor, RIT must continue to protect its network and computing/information resources. RIT must maintain the confidentiality of many types of information. RIT must also ensure that its computing resources are protected against data corruption.
What information security safeguards has the World Community Grid provided?
Current safeguards include:
- An architecture that encrypts files and transmissions.
- A world class, hardened commercial hosting facility
- An architecture where the agent initiates all communications
At RIT's behest, World Community Grid is considering additional safeguards including:
- Independent verification of the security architecture, through Common Criteria or other means
- Computer security expertise on their group of advisors
- Better processes and communication to prevent phishing attempts
Will RIT participate more fully in the future?
Any increased participation by RIT will be consistent with RIT Information Security Standards.
For more information about RIT's participation, contact Jim Moore, RIT Information Security Officer at jhmfa@rit.edu or 585-475-5406
For information on the World Community Grid, go to http://www.worldcommunitygrid.org/.
