关键词: 高性能计算机群, 强制访问控制（MAC）, SE Linux, 机群安全策略

Abstract: The high performance computing (HPC) cluster has the features of single system and distributed system, the cluster security is a new challenge. According to the research and analysis on the security and demand of cluster, this paper puts forward a suitable model for HPC cluster, and designs an implementation framework based on the node-level mandatory access control (MAC) system, SE Linux. Then, this paper builds a prototype system. In the last section, this paper studies the feasibility of the distributed mandatory access control for HPC cluster, both the function and the performance. The results show that, the MAC technology for HPC cluster can satisfy the security demand of the HPC cluster in the function, and the cost of MAC also can be acceptable.

Key words: high performance computing cluster, mandatory access control (MAC), SE Linux, cluster security strategy