=Paper=
{{Paper
|id=Vol-1871/paper4
|storemode=property
|title=An Innovative Workspace for The Cherenkov Telescope Array
|pdfUrl=https://ceur-ws.org/Vol-1871/paper4.pdf
|volume=Vol-1871
|authors=Alessandro Costa,Eva Sciacca,Ugo Becciani,Piero Massimino,Simone Riggi,David Sanchez,Fabio Vitello
|dblpUrl=https://dblp.org/rec/conf/iwsg/CostaSBMRSV16
}}
==An Innovative Workspace for The Cherenkov Telescope Array==
8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 An Innovative Workspace for The Cherenkov Telescope Array Alessandro Costa ∗ , Eva Sciacca ∗ , Ugo Becciani ∗ , Piero Massimino ∗ , Simone Riggi ∗ , David Sanchez † and Fabio Vitello ∗ ∗ INAF-Osservatorio Astrofisico di Catania, Italy † Laboratoire d’Annecy-le-Vieux de Physique des Particules, France Email: alessandro.costa@oact.inaf.it Abstract—The Cherenkov Telescope Array (CTA) is an ini- Centre, which provides and disseminates data and analysis tiative to build the next generation, ground-based gamma-ray software to the science community at large, using common observatories. We present a prototype workspace developed at astronomical standards and existing computing infrastructures. INAF that aims at providing innovative solutions for the CTA community. The workspace leverages open source technologies The total data volume to be managed by the CTA Science providing web access to a set of tools widely used by the CTA Data Centre is of the order of 27 PB/year [2], when all data- community. Two different user interaction models, connected to set versions and backup replicas are considered. All levels of an authentication and authorization infrastructure, have been data (from the raw data to the high-level final products) will be implemented in this workspace. The first one is a workflow archived in a standardised way, to allow access and reprocess- management system accessed via a science gateway (based on the Liferay platform) and the second one is an interactive virtual ing. The “CTA science gateway” will provide access to data, desktop environment. The integrated workflow system allows to support services, software and data center infrastructures. It is run applications used in astronomy and physics researches into foreseen that individual scientists using the analysis software distributed computing infrastructures (ranging from clusters to made available by CTA can conduct the high-level analysis grids and clouds). The interactive desktop environment allows of CTA data. The Gateway aims at supporting workflow to use many software packages without any installation on local desktops exploiting their native graphical user interfaces. The handling, virtualization of hardware, visualization as well as science gateway and the interactive desktop environment are resource discovery, job execution, access to data collections, connected to the authentication and authorization infrastructure and applications and tools for data analysis. composed by a Shibboleth identity provider and a Grouper Access to the developed services within the “CTA science authorization solution. The Grouper released attributes are consumed by the science gateway to authorize the access to gateway” and other CTA web resources will be based on specific web resources and the role management mechanism in each users profile and category (e.g. unsigned user, guest Liferay provides the attribute-role mapping. observer, advanced user, principal investigator, archive user, Keywords—Workflow Systems; Science Gateways; Collabora- pipeline user, etc). For such a purpose the Authentication tive Environments; Astrophysics; DCIs and Authorization Infrastructure (AAI) plays a key role in the scientific process and will be widely discussed in this I. I NTRODUCTION paper. The AAI is also a fundamental part of the workspace The Cherenkov Telescope Array (CTA) project1 aims at developed by INAF and described in this work. building a new observatory for very high-energy (VHE) The “CTA science gateway” is implemented as a set of gamma rays [1]. CTA has ambitious science goals focused in complementary modules. Three of them are being developed understanding the origin of cosmic rays and their role in the with different aims: the first one is developed by INAF and Universe, the nature and variety of particle acceleration around presented in this paper, it provides a workflow management black holes and in searching for the ultimate nature of matter system, it is powered by WS-PGRADE/gUSE2 [3], based on and physics beyond the Standard Model. For reaching these Liferay platform 3 and an added value of this module is a web- goals it is aimed to achieve full-sky coverage by deploying desktop environment (with a VNC-based User Interface); the hundreds of telescopes at two sites in the southern and the second one integrates existing CTA applications in a specific northern hemispheres. InSilicoLab platform [4] developed by Cyfronet; and the third To guarantee the smooth running of the complex CTA obser- module, developed by the Observatoire de Paris, is compliant vatory three main management elements have been identified: with the Virtual Observatory and it is based on the Django (i) the Science Operation Centre, which is in charge of the platform. organisation of observations, (ii) the Array Operation Centre, The INAF prototype workspace is composed by a science which conducts the operation, monitors the telescopes and the gateway module and by the Authentication and Authorization atmosphere, and provides all calibration and environmental Infrastructure. The science gateway, first introduced in [5], data necessary for the analysis, and (iii) the Science Data 2 WS-PGRADE/gUSE web page: http://guse.hu 1 CTA project web page: https://portal.cta-observatory.org 3 Liferay web page: https://www.liferay.com 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 allows the user to access a workflow management system nector) [8], Globus8 [9], gLite9 [10], UNICORE10 (Uniform with a customizable graphical web user interface (see Section Interface to Computing Resources) [11], PBS11 as well as web II-A) and a web-desktop environment (see Section III) which services or clouds [12]. allows the use of plenty of software packages for both on-line The web-desktop environment: Astronomical & Physics and off-line analysis of astrophysical data also exploiting their Cloud Interactive Desktop (ACID), allows to use many soft- native Graphical User Interface. The gateway has been further ware packages without any installation on local desktops developed to enable the processing of the Fermi Workflow exploiting their native Graphical User Interface. Finally, a Demonstrator (see Section II-B) and connected to the Authen- common menu bar has been added to allow the integration tication and Authorization Infrastructure developed by INAF with the different “CTA science gateway” modules. The role (see Section IV). Moreover the gateway has been combined of the common menu-bar is to i) standardize the layout of and integrated with the other modules put in place by the each module using a shared Common cascading Style Sheet; Observatoire de Paris and Cyfronet using a common menu-bar ii) prompt the user with a common top-menu that provides and the shared authentication and authorization infrastructure. access to each module; iii) prompt the user with information about her/his current session: such as username and log-out / II. T HE INAF CTA S CIENCE G ATEWAY log-in facilities. The overall architecture of the INAF Catania workspace is The INAF CTA science gateway4 is aiming at providing depicted in Figure 1. The gateway is able to connect with a a web instrument for high energy astrophysics. It leverages variety of DCIs thanks to the integrated workflow management on open source technologies giving web access to a set of system (see Section II-A), the embedded ACID environment tools and software widely used by the CTA community. An allows both on-line and off-line analysis through commonly extended (though not exhaustive) list5 of tools provided by this used CTA tools (see Section III). It is connected to the AAI technology embrace XANADU software package, GammaLib to open the access to the CTA community accordingly to each & ctools, Fermi Science Tools, Aladin, IRAF. Each tool is user own role and/or access right. available interactively via a dedicated web-desktop environ- ment or through a workflow management system. Fig. 1. INAF Catania Workspace Architecture. The gateway is based on the Liferay platform. Liferay is an enterprise-level framework, offering both an advanced development infrastructure and a flexible content management system. We used the Liferay community edition that is released under an open source GNU LGPL license. This provides a cutting-edge and inexpensive solution that best suits our purposes; Liferay is moreover used by a wide community of users. These aspects are an important added value for a technology destined to follow the CTA consortium for its lifetime. Liferay platform has a large set of configurations implementing High Availability (HA) solutions. The resulting Liferay system will be able to handle the expected number of concurrent users and subsequent traffic, and will reduce single points of failure resulting in a more robust system. Liferay can also be configured to load balancing and clustering at A. Workflow Management System the server level. Both user profile management and workspace Scientific workflow management systems [13] offer means applications are provided by the Liferay platform and can be to compose and distribute steps needed to perform com- easily improved and customized according to the CTA present putations for data analysis or simulations, whereas hiding and future requirements. INAF CTA science gateway provides details about the complex infrastructures underneath [14], [15]. a workflow management system with a customizable graphical More importantly, workflow descriptions capture the process web user interface [6] and a web-desktop environment. of scientific experimentation, which are useful to reproduce, The integrated workflow system (based on gUSE/WS- reuse or re-purpose these processes [16]. PGRADE) seamlessly enables the execution of astronomical A plethora of mature workflow systems has evolved and physics workflows (and jobs) on major platforms such that support diverse concepts and languages with different as DIRAC (Distributed Infrastructure with Remote Agent strengths and focus on different modes of processing. Few Control) INTERWARE6 [7], ARC7 (Advanced Resource Con- workflow systems deliver the power of diverse digital re- sources and most of the web-based creation and editing tools 4 INAF CTA science gateway: http://cta-sg.oact.inaf.it/ 5 List of Software and tools available in the INAF CTA science gateway: 8 GLOBUS web page: https://www.globus.org/ http://acid.oact.inaf.it/ACID/Included packages.html 9 gLite web page: http://cern.ch/glite 6 DIRAC INTERWARE web page: http://diracgrid.org/ 10 UNICORE web page https://www.unicore.eu/ 7 ARC web page: http://www.nordugrid.org/arc/ 11 PBS (Portable Batch System) web page http://www.pbsworks.com/ 2 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 either require local software installations with inherent security • the instrument response functions (IRFS). problems or offer incomplete functionalities. Therefore gUSE The output of this use case are a set of FITS files returning has been selected mainly because of: i) its usability via the processed maps. web-based user interfaces; ii) its availability, with respect On the science gateway two workflows have been imple- to licensing terms and cost; iii) its anticipated long-term mented: BINNED and UNBINNED running on to the INAF support, e.g. via an active open-source community; and iv) Astrophysical Observatory of Catania clusters: muoni-server- its ability to deal efficiently with the scales of data, com- 02.oact.inaf.it, and acid.oact.inaf.it. The workflows have been putation and concurrent use required [17]. gUSE enables designed to set the input datasets and the parameters to run users convenient and easy access to distributed computing the process into the InputSet job so that only the entry job infrastructures (clusters, DIRAC INTERWARE, clouds) by is configured and then the parameters are passed to the other providing a general purpose, workflow-oriented web-based jobs automatically. user interface WS-PGRADE consisting of web services for The separation of the Fermi processing into different jobs the workflow management and accessing various distributed within the workflow allowed us to exploit the full paralleliza- data storages. tion of the computations within the configured DCIs. Finally the OutputFileSet job collects all the jobs output files (typically B. Fermi Workflow Demonstrator in the order of tens of MB in this kind of analyses) and send A demonstrator has been implemented following a typical them also to the ownCloud14 server which is synchronized Fermi analysis performed with the Fermi Science Tools12 . with the user account hosted into the ACID environment. Fermi Science Tools and data analysis chain is used to simulate Currently a step-up authentication allows the access to the CTA analysis. The tools and data are publicly available on- ownCloud server and the integration with the AAI is foreseen line13 . Figure 2 gives the diagram of the test case. Two as a future work. analysis chains are available and should give similar results. The 2 chains (BINNED and UNBINNED) share few steps in Fig. 3. BINNED workflow developed within the INAF CTA science gateway. common. These chains are standard analysis steps for CTA analysis. Fig. 2. Fermi analysis test case. III. ACID The Astronomical & Physics Cloud Interactive Desktop15 [18] allows to use many software packages without any The Fermi analysis requires 3 input files: an event file in installation on local desktops. Through the ACID environment FITS format, a spacecraft file in FITS format, and the sky the users are able to exploit the native Graphical User Interface model in XML format. of the available applications. A long list of astronomical The user has to provide also few parameters for the analysis: and physics software suites are already available in ACID including among others: ctools & GammaLib, Fermi Science • the position of the target : Right Ascension (RA in Tools, Geant4 PGPlot. Moreover it uses ownCloud to easily degrees) and Declination (Dec in degrees), share data between the user device and the ACID server(s). • the energy ranges in MeV (Minimum energy Emin and ACID is exploited by the science gateway offering two maximum energy Emax), modes of usage (see Figure 4): • the time range in MET (Mission Elapsed Time, start time and stop time), • on-line analysis: to perform interactive analysis through • the radius of the region of interest to use (ROI in degrees), the Virtual Network Computing (VNC) and the native GUIs or shell environment of the CTA applications. It 12 Fermi Science Tools web page: http://fermi.gsfc.nasa.gov/ssc/data/ analysis/scitools/overview.html 14 Owncloud web site: http://www.owncloud.com 13 Fermi Data: http://fermi.gsfc.nasa.gov/ssc/data 15 ACID web site: http://acid.oact.inaf.it/ACID/Home page.html 3 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 Fig. 4. ACID usage modes from the science gateway: on-line analysis and national research and education network (NREN) organisa- off-line analysis. tions and the European Union. eduGAIN interconnects identity federations around the world, simplifying access to content, services and resources for the global research and education community. It enables the trustworthy exchange of information related to identity, authentication and authorisation by coordi- nating elements of the federation technical infrastructure and providing a policy framework that controls this information exchange. We see eduGAIN as the best approach to achieve a CTA consortium-wide authentication Infrastructure since the major- ity of the consortium members already belong to eduGAIN. INAF is therefore running an AAI (Authentication and Authorization Infrastructure) composed by a Shibboleth17 CTA Identity Provider and a Grouper18 authorization solution fully compatible with the eduGAIN standards. The INAF CTA science gateway module is able to handle users authenticated Fig. 5. Geographical distribution of CTA consortium members. by multiple federated Identity Provides, this is done by a Shib- boleth Discovery Service19 . The CTA Identity Provider acts as a cross-border/cross-domain CTA access complementing the eduGAIN identity federation and granting access to each CTA consortium user even in the case he is not (yet) member of any national federation. Federations participating in eduGAIN adhere to a common lightweight technical and policy infrastructure and post their local federation policies so that others can learn about their registration practices and other relevant details. Each national federation already publishes a trust registry in the form of a metadata file. Each federation sends its registry to eduGAIN, except the entries that a member organization does not want to be included. eduGAIN combines all the national registries and republishes them in one large file (see Fig. 6). A national federation imports the eduGAIN consolidated international registry, merges it with our local entries and publishes them for your use. does not require any installation from the user since the browser loads and launches ACID as a Java Applet. Fig. 6. eduGAIN structure. • off-line analysis: through workflow submissions to ACID employed as Distributed Computing Infrastructure (e.g. as a node of a cluster). In this case a workflow job can be configured to exploit the large number of command line-based software packages available in the ACID en- vironment. IV. AUTHENTICATION AND AUTHORIZATION I NFRASTRUCTURE The CTA consortium is an experimental scientific collabora- tion, it consists of over 1200 members working in 32 countries from 200, mostly academic, institutes. The geographical loca- tion of consortium members, as shown in Figure 5, leads to the need of a pervasive Federated Identity Management network. A. Authentication 17 Shibboleth web site: https://shibboleth.net/ eduGAIN16 is a service developed within the GANT net- 18 Grouper web site: http://www.internet2.edu/products-services/ work Project which is a major collaboration between European trust-identity-middleware/grouper/ 19 Shibboleth Discovery Service web site: https://wiki.shibboleth.net/ 16 eduGAIN web site:http://services.geant.net/edugain/Pages/Home.aspx confluence/display/SHIB2/DiscoveryService 4 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 1) Discovery Service: In the CTA INAF science gateway Fig. 7. Authentication & Authorization Infrastructure. the user can be authenticated by multiple IdPs (in principle each IdP of the eduGAIN inter-federation); this is currently done by using the Shibboleth Discovery Service. The Dis- covery Service is the process by which a service provider identifies the appropriate Identity Provider. In the case shown in this paper, the discovery service watches the federation metadata providing the user with a list identity providers. It also provides a “Search-as-you-type” selection: an effective search that guides the user in creating and reformulating her/his selection. B. Authorization On top of the eduGAIN federated authentication infrastruc- ture INAF Catania is providing a CTA authorization solution based on Grouper. Grouper is an authorization solution that keeps the membership affiliation consistent across multiple applications allowing to create and manage groups. Groups are used within each CTA application (e.g. a science gateway, the archive user interface or the project management portal) to track an individual role, or to determine which users are authorized to access the resources. If groups are managed requests passing them to the gateway using AJP23 (Apache separately in each application, keeping the membership list JServ Protocol). consistent across these services becomes very difficult. The Shibboleth Service Provider has been configured to Grouper provides a way to define a group once and use include the attribute prefix as ”AJP ”, otherwise user attributes that group across multiple applications managing it at a single from Shibboleth could not be accessible in the gateway. point. The single point of control implies that, once a person It was set the AJP communication with the backend and is added or removed from a group, the group-related privileges configured Shibboleth to be ”activated” for the whole gateway are automatically updated in all of the collaborative appli- and required a Shibboleth session at the login. cations. The current Grouper prototype proposed by INAF We have so far identified two roles: Catania is designed to manage and release the isMemberOf at- • Advanced WF User: Creates new workflows with the tribute and the eduPersonEntitlement attribute. These attributes science gateway WorkFlow management User Interface are consumed by the CTA INAF science gateway and are • WF User: Defines the workflow parameters, launches used to authorize the access to specific web resources. These workflow processes and check results attributes are released using standard SAML assertions. Figure 7 shows the architectural diagram of the Grouper-based AAI The attribute “isMemberOf” is mapped within the gateway prototype. control panel as shown in the Figure 8 and the role permissions are set at portlet level in order to allow/deny access to specific gateway functionalities. In this case the “Advanced C. Connection with the Science Gateway WF User” role will have full access to the whole workflow To connect the INAF CTA science gateway with the pro- management system functionalities (e.g. workflow design and posed AAI an open-source Shibboleth Plugin available on implementation) while the “WF User” will be enabled only GitHub20 has been employed and configured within the gate- to import pre-defined workflows developed by the advanced way. The plugin provides an interface on the Liferay Control workflow users and customize them to run. Panel, it allows for mapping of attributes and, thank to the role mapping feature of Liferay it has been exploited for both V. R ELATED W ORK authentication and authorization. Related prototyping works in the context of the “CTA sci- The INAF CTA science gateway has been protected with ence gateway” activities comprise two other modules namely: Shibboleth by running Apache HTTP21 server in front of the Cyfronet InSilicoLab module and the Data Distiller module the Tomcat22 servlet container. It has been configured to run developed by the Observatoire de Paris. The InSilicoLab on a private address and the Apache server intercepts all gateway supports Monte Carlo simulations performed on distributed computing infrastructures (grids) thanks to the 20 Liferay Shibboleth Plugin: https://github.com/ivan-novakov/ integration with the DIRAC middleware. The Data Distiller liferay-shibboleth-plugin 21 Apache HTTP web site: https://httpd.apache.org 23 AJP documentation: https://tomcat.apache.org/tomcat-7.0-doc/config/ajp. 22 Tomcat web page: http://tomcat.apache.org html 5 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 Fig. 8. Shibboleth configuration within the INAF CTA science gateway. the possibilities of ACID for on-line interactive analysis and off-line processing. We presented the Fermi Workflow Demon- strator used as a test-bench for the typical CTA analyses. We highlighted the possibilities for exploiting the full job parallelization of the workflow management system and the connection with the ACID environment for cloud storage of output results. Finally we detailed the implementation and usage within the science gateway of the authentication and authorization infrastructure which guarantee the access to CTA users tuned according to his/her own role and/or access rights. Wide adopted standards (such as SAML 2.0 and Shib- boleth 2.0) and open-source technologies (such as WS- PGRADE/gUSE and Grouper) have been adopted within the proposed workspace. This aims at enlarging the developer community and improving the sustainability of the workspace during the whole CTA lifetime. The proposed solution pro- vides an highly flexible ecosystem in order to tailor a product suitable to the present and future requirements of the CTA community. is implemented using the Python based Django framework 24 . The next steps within this work are foreseen to be focused This prototype allows to search, retrieve and analyse high level on the integration of the proposed workspace with the other CTA data products using the Virtual Observatory standards 25 . modules and services of CTA. In particular the consortium is The aforementioned modules will be kept separated and an focusing on solutions to provide messaging protocols between homogeneous user experience will be guaranteed using the the different modules. Moreover we will give support for the same style-sheet. This will offer a common graphical inter- integration with the developed AAI to the other modules. face including a menu-bar to navigate between the different modules. An AAI assures to maintain the same user profiles ACKNOWLEDGMENT and sessions; a message-passing paradigm will be employed The authors would like to thank colleagues from the to share user data between the modules. CTA DATA Management group, in particular Nadine Ney- Regarding the AAI for CTA, apart from the one discussed roud, Bruno Khelifi from LAPP (FR); Tomasz Szepieniec, in this paper, a UNITY 26 (UNIfied identiTY) management Joanna Kocot, Hubert Siejkowski from Cyfronet (PL); a prototype is under testing. It supports multiple authentication part of this work was developed within SCI-BUS (FP7- protocols to allow integration with various consumers/clients INFRASTRUCTURES-2011 contract 283481) project. and has the ability to outsource credentials management to a 3rd party service. The Grouper-based AAI has been preferred R EFERENCES by the authors instead of the UNITY one because of its reliability: it is deployed at many Universities and other [1] B. Acharya, M. Actis, T. Aghajani, G. Agnetta, J. Aguilar, F. Aharonian, M. Ajello, A. Akhperjanian, M. Alcubierre, J. Aleksić et al., “Introduc- organizations on 4 continents. Furthermore it provides features ing the cta concept,” Astroparticle Physics, vol. 43, pp. 3–18, 2013. not currently available in UNITY such as the connection with [2] G. Lamanna, L. Antonelli, J. Contreras, J. Knödlseder, K. Ko- the System for Cross-domain Identity Management27 (SCIM) sack, N. Neyroud, A. Aboudan, L. Arrabito, C. Barbier, D. Bastieri et al., “Cherenkov telescope array data management,” arXiv preprint or VOOT28 (an extensible protocol for dynamic exchange of arXiv:1509.01012, 2015. group and authorization data), bulk user import/export and user [3] P. Kacsuk, Z. Farkas, M. Kozlovszky, G. Hermann, A. Balasko, data (memberships) expiration. K. Karoczkai, and I. Marton, “WS-PGRADE/gUSE Generic DCI gate- way framework for a large variety of user communities,” Journal of Grid VI. C ONCLUSIONS AND F UTURE W ORKS Computing, vol. 10, no. 4, pp. 601–630, 2012. [4] M. Hanasz, K. Kowalik, A. Gawryszczak, and D. Wóltański, “High per- In this paper, we have introduced a workspace tailored to the formance astrophysical fluid simulations using insilicolab framework,” requirements of the CTA community. The workspace consists in eScience on Distributed Computing Infrastructure. Springer, 2014, pp. 293–304. of a science gateway module based on the Liferay framework [5] A. Costa, P. Massimino, M. Bandieramonte, U. Becciani, M. Krokos, endowed of a workflow management system and embedding a C. Pistagna, S. Riggi, E. Sciacca, and F. Vitello, “An innovative science web-desktop environment (ACID). The workspace provides an gateway for the cherenkov telescope array,” Journal of Grid Computing, vol. 13, no. 4, pp. 547–559, 2015. authentication and authorization infrastructure. We described [6] A. Balasko, Z. Farkas, and P. Kacsuk, “Building science gateways by 24 Django web site: https://www.djangoproject.com utilizing the generic WS-PGRADE/gUSE workflow system,” Computer 25 IVOA web site: http://www.ivoa.net Science, vol. 14, no. 2, pp. 307–325, 2013. [7] A. Casajus, K. Ciba, V. Fernandez, R. Graciani, V. Hamar, V. Mendez, 26 UNITY web site: http://unity-idm.eu S. Poss, M. Sapunov, F. Stagni, A. Tsaregorodtsev et al., “Status of the 27 SCIM web site: http://www.simplecloud.info dirac project,” in Journal of Physics: Conference Series, vol. 396, no. 3. 28 VOOT: http://openvoot.org IOP Publishing, 2012, p. 032107. 6 8th International Workshop on Science Gateways (IWSG 2016), 8-10 June 2016 [8] M. Ellert, M. Grønager, A. Konstantinov, B. Kónya, J. Linde- mann, I. Livenson, J. L. Nielsen, M. Niinimäki, O. Smirnova, and A. Wäänänen, “Advanced resource connector middleware for lightweight computational grids,” Future Generation computer systems, vol. 23, no. 2, pp. 219–240, 2007. [9] I. Foster and C. Kesselman, “The globus toolkit,” The grid: blueprint for a new computing infrastructure, pp. 259–278, 1999. [10] E. Laure, F. Hemmer, F. Prelz, S. Beco, S. Fisher, M. Livny, L. Guy, M. Barroso, P. Buncic, P. Z. Kunszt et al., “Middleware for the next generation grid infrastructure,” Computing in High Energy Physics and Nuclear Physics (CHEP 2004), 2004. [11] V. Huber, “Unicore: A grid computing environment for distributed and parallel computing,” in Parallel Computing Technologies. Springer, 2001, pp. 258–265. [12] M. Kozlovszky, K. Karóczkai, I. Márton, P. Kacsuk, and T. Gottdank, “Dci bridge: Executing ws-pgrade workflows in distributed computing infrastructures,” in Science Gateways for Distributed Computing Infras- tructures. Springer, 2014, pp. 51–67. [13] J. Liu, E. Pacitti, P. Valduriez, and M. Mattoso, “A survey of data- intensive scientific workflow management,” Journal of Grid Computing, vol. 13, no. 4, pp. 457–493, 2015. [14] A. Belloum, M. Inda, D. Vasunin, V. Korkhov, Z. Zhao, H. Rauwerda, T. Breit, M. Bubak, and L. Hertzberger, “Collaborative e-science ex- periments and scientific workflows,” Internet Computing, IEEE, vol. 15, no. 4, pp. 39–47, 2011. [15] S. Olabarriaga, G. Pierantoni, G. Taffoni, E. Sciacca, M. Jaghoori, V. Korkhov, G. Castelli, C. Vuerli, U. Becciani, E. Carley et al., “Scientific workflow management–for whom?” in e-Science (e-Science), 2014 IEEE 10th International Conference on, vol. 1. IEEE, 2014, pp. 298–305. [16] U. Becciani, E. Sciacca, A. Costa, P. Massimino, C. Pistagna, S. Riggi, F. Vitello, C. Petta, M. Bandieramonte, and M. Krokos, “Science gateway technologies for the astrophysics community,” Concurrency and Computation: Practice and Experience, 2014. [17] P. Kacsuk, Science Gateways for Distributed Computing Infrastructures. Springer, 2014. [18] P. Massimino, A. Costa, U. Becciani, F. Vitello, and E. Sciacca, “Acid: an interactive desktop for cta science gateway,” in Science Gateways (IWSG), 2014 6th International Workshop on. IEEE, 2014, pp. 55–60. 7