Decentralized trust management and accountability in federated systems

Proceedings of the Hawaii International Conference on System Sciences

Volumn 37, Issue , 2004, Pages 4417-4425

  Chun, Brent N ^a   Bavier, Andy ^b  

^a INTEL RESEARCH   (United States)

^b PRINCETON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BANDWIDTH; COMPUTER NETWORKS; ELECTRIC NETWORK TOPOLOGY; PROBABILITY DISTRIBUTIONS; PROBLEM SOLVING; SECURITY SYSTEMS;

FEDERATED SYSTEMS; NETWORK INTRUSION DETECTION SYSTEMS (NIDS); SCALABILITY; TRUST MANAGEMENT;

NETWORK PROTOCOLS;

EID: 12344311915     PISSN: 10603425     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/hicss.2004.1265656     Document Type: Conference Paper

References (32)

1. P. R. Barham, B. Dragovic, K. A. Fraser, S. M. Hand, T. L. Harris, A. C. Ho, E. Kotsovinos, A. V. S. Madhavapeddy, R. Neugebauer, I. A. Pratt, and A. K. Warfield. Xen 2002. Technical Report UCAM-CL-TR-553, University of Cambridge, Computer Laboratory, January 2003.
2. E. Belani, A. Vahdat, T. Anderson, and M. Dahlin. The crisis wide area security architecture. In Proceedings of the 1998 USENIX Security Symposium, January 1998.
3. BlackIce. Blackice defender (http://blackice.iss.net).
4. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The role of trust management in distributed systems security. In Proceedings of Secure Internet Programming, 1999.
5. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proceedings of the 1996 IEEE Conference on Privacy and Security, May 1996.
6. D. Bruschi and E. Rosti. Angel: A tool to disarm computer systems. In Proceedings of the 2001 New Security Paradigms Workshop, pages 63-69, September 2001.
7. B. Chun, D. Culler, T. Roscoe, A. Bavier, L. Peterson, M. Wawrzoniak, and M. Bowman. Planetlab: An overlay testbed for broad-coverage services, January 2003. Planet-Lab PDN-03-009.
8. B. Crispo. Delegation protocols for electronic commerce. In Proceedings of the 6th IEEE Symposium on Computers and Communications, July 2001.
9. B. Crispo and G. Ruffo. Reasoning about accountability within delegation. In Proceedings of the 3rd International Conference on Information and Communications Security, November 2001.
10. F. Dabek, B. Zhao, P. Druschel, J. Kubiatowicz, and I. Stoica. In Proceedings of the 2nd International Workshop on Peer-to-Peer Systems, February 2003.
11. A. Demers, S. Keshav, and S. Shenker. Anaylsis and simulation of a fair queueing algorithm. In Proceedings of the 35th IEEE Computer Society International Conference (COMPCON), pages 380-386, March 1990.
12. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. Spki certificate theory, September 1999. RFC 2693.
13. I. Foster and C. Kesselman. Globus: A metacomputing infrastructure toolkit. International Journal of Supercomputer Applications, 11(2):115-128, 1997.
14. I. Foster, C. Kesselman, J. Nick, and S. Tuecke. The physiology of the grid: An open grid services architecture for distributed systems integration, June 2002. Open Grid Service Infrastructure WG.
15. S. Hand. Self-paging in the nemesis operating system. In Proceedings of the 3rd USENIX Symposium on Operating Systems Design and Implementation, February 1999.
16. R. Kailar. Reasoning about accountability in protocols for electronic commerce. In Proceedings of the 14th IEEE Symposium on Security and Privacy, pages 236-250, 1995.
17. P.-H. Kamp and R. N. M. Watson. Jails: Confining the omnipotent root. In Proceedings of the 2nd International SANE Conference, Maastricht, The Netherlands, May 2000.
18. Z. Labs. Zone alarm (http://www.zonelabs.com).
19. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. The spread of the sapphire/slammer worm, February 2003.
20. D. Moore, C. Shannon, and J. Brown. Code-red: a case study on the spread and victims of an internet worm. In Proceedings of the SIGCOMM Internet Measurement Workshop 2002, August 2002.
21. V. Paxson. Bro: A system for detecting network intruders in real-time. In Proceedings of the 1998 USENIX Security Symposium, January 1998.
22. L. Peterson, D. Culler, T. Anderson, and T. Roscoe. A blueprint for introducing disruptive technology into the internet. In Proceedings of HotNets-I, October 2002.
23. R. L. Rivest and B. Lampson. Sdsi - a simple distributed security infrastructure. Available from: http://theory. lcs.mit.edu/~rivest/sdsi10.html, 1996.
24. M. Roesch. Snort - lightweight intrusion detection for networks. In Proceedings of the 13th Systems Administration Conference, November 1999.
25. M. Rozier, V. Abrossimov, F. Armand, I. Boule, M. Gien, M. Guillemont, F. Herrmann, C. Kaiser, S. Langlois, P. Leonard, and W. Neuhauser, Overview of the chorus distributed operating systems. In Proceedings of the USENIX Workshop on Micro-Kernels and Other Kernel Architectures, pages 39-70, April 1992.
26. P. Shenoy and H. M. Vin. Cello: A disk scheduling framework for next generation operating systems. In Proceedings of the 1998 ACM SIGMETRICS Conference, pages 44-55, June 1998.
27. Solucorp. Whitepaper: Virtual private servers and security contexts. Available from: http://www.solucorp.qc.ca/miscprj/s_context.hc, September 2002.
28. A. S. Tanenbaum, S. J. Mullender, and R. van Renesse. Using sparse capabilities in a distributed operating system. In Proceedings of the 6th International Conference on Distributed Computing Systems, pages 558-563, 1986.
29. C. A. Waldspurger and W. E. Weihl. Lottery scheduling: Flexible proportional-share resource management. In Proceedings of the 1st USENIX Symposium on Operating Systems Design and Implementation, pages 1-11, 1994.
30. A. Whitaker, M. Shaw, and S. D. Gribble. Scale and performance in the denali isolation kernel. In Proceedings of the 5th USENIX Symposium on Operating Systems Design and Implementation, December 2002.
31. B. White, J. Lepreau, L. Stoller, R. Ricci, S. Guruprasad, M. Newbold, M. Hibler, C. Barb, and A. Joglekar. An integrated experimental environment for distributed systems and networks. In Proceedings of the 5th USENIX Symposium on Operating Systems Design and Implementation, December 2002.
32. M. M. Williamson. Throttling viruses: Restricting propagation to defeat malicious code. In Proceedings of the 2002 Annual Computer Security Applications Conference, December 2002.