Distributed proving in access-control systems

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2005, Pages 81-95

  Bauer, Lujo ^a   Garriss, Scott ^b   Reiter, Michael K ^a,b,c  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

^c Carnegie Mellon University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS-CONTROL SYSTEMS; PROOF-GENERATION ALGORITHMS;

ALGORITHMS; OPTIMIZATION;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 27544508109     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2005.9     Document Type: Conference Paper

References (23)

1. M. Abadi. On SDSI's linked local name spaces. Journal of Computer Security, 6(1-2):3-21, Oct. 1998.
2. M. Abadi, M. Burrows, B. Lampson, and G. D. Plotkin. A calculus for access control in distributed systems. ACM Transactions on Programming Languages and Systems, 15(4):706-734, Sept. 1993.
3. A. W. Appel and E. W. Felten. Proof-carrying authentication. In Proceedings of the 6th ACM Conference on Computer and Communications Security, Singapore, Nov. 1999.
4. D. Balfanz, D. Dean, and M. Spreitzer. A security infrastructure for distributed Java applications. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, Oakland, CA, May 2000.
5. L. Bauer, M. A. Schneider, and E. W. Felten. A general and flexible access-control system for the Web. In Proceedings of the 11th USENIX Security Symposium, San Francisco, CA, Aug. 2002.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote mat-management system, version 2, Sept. 1999. IETF RFC 2704.
7. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 164-173, Oakland, CA, 1996.
8. M. Blaze, J. Feigenbaum, and M. Strauss. Compliance checking in the PolicyMaker trust-management system. In Proceedings of the 2nd Financial Crypto Conference, volume 1465 of Lecture Notes in Computer Science, Berlin, 1998. Springer.
9. D. E. Clarke. SPKI/SDSI HTTP server / certificate chain discovery in SPKI/SDSI. Master's thesis, Massachusetts Institute of Technology, Sept. 2001.
10. D. E. Clarke, J.-E. Elien, C. M. Ellison, M. Fredette, A. Morcos, and R. L. Rivest. Certificate chain discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, 2001.
11. J.-E. Elien. Certificate discovery using SPKI/SDSI 2.0 certificates. Master's thesis, Massachusetts Institute of Technology, May 1998.
12. C. M. Ellison, B. Frantz, B. Lampson, R. L. Rivest, B. M. Thomas, and T. Ylonen. Simple public key certificate. Internet Engineering Task Force Draft JETF, July 1997.
13. C. M. Ellison, B. Frantz, B. Lampson, R. L. Rivest, B. M. Thomas, and T. Ylonen. SPKI Certificate Theory, Sept. 1999. RFC2693.
14. C. A. Gunter and T. Jim. Policy-directed certificate retrieval. Software-Practice and Experience, 30(15): 1609-1640, Dec. 2000.
15. T. Jim. SD3: A trust management system with certified evaluation. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, pages 106-115, Los Alamitos, CA, May 14-162001.
16. B. Lampson, M. Abadi, M. Burrows, and E. Wobbcr. Authentication in distributed systems: Theory and practice. ACM Transactions on Computer Systems, 10(4):265-310, Nov. 1992.
17. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130, Oakland, CA, May 2002.
18. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, Feb. 2003.
19. A. J. Maywah. An implementation of a secure Web client using SPKI/SDSI certificates. Master's thesis, Massachusetts Institute of Technology, May 2000.
20. L. Paulson. Isabelle: A generic theorem prover. Lecture Notes in Computer Science, 828, 1994.
21. R. L. Rivest and B. Lampson. SDSI - A simple distributed security infrastructure. Presented at CRYPTO'96 Rumpsession, Apr. 1996.
22. S. Russel and P. Norvig. Artificial Intelligence, A Modern Approach. Prentice Hall, second edition, 2003.
23. E. Wobber, M. Abadi, M. Burrows, and B. Lampson. Authentication in the Taos operating system. ACM Transactions on Computer Systems, 12(1):3-32, Feb. 1994.