Comparison of advanced authorisation infrastructures for grid computing

Proceedings - International Symposium on High Performance Computing Systems and Applications

Volumn , Issue , 2005, Pages 195-201

  Stell, A J ^a   Sinnott, R O ^a   Watt, J P ^a  

^a UNIVERSITY OF GLASGOW   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL LISTS (ACL); GRID TECHNOLOGY; PUBLIC KEY INFRASTRUCTURES (PKI); ROLE-BASED ACCESS CONTROL (RBAC);

CONTROL SYSTEMS; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 28744436133     PISSN: 15505243     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HPCS.2005.20     Document Type: Conference Paper

References (29)

1. Johnston, W., Mudumbai, S., Thompson, M. Authorization and Attribute Certificates for Widely Distributed Access Control, IEEE 7th Int. Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises, Stanford, CA, June, 1998, p340-345 (http://www-itg.lbl.gov/security/Akenti/)
2. L Pearlman, et al., A Community Authorisation Service for Group Collaboration, in Proceedings of the IEEE 3rd International Workshop on Policies for Distributed Systems and Networks. 2002.
3. Lepro, R., Cardea: Dynamic Access Control in Distributed Systems, NASA Technical Report NAS-03-020, November 2003
4. Globus Grid Security Infrastructure (GSI), http://www-unix.globus.org/ toolkit/docs/3.2/gsi/index.html
5. D.W.Chadwick, A. Otenko, E.Ball, Role-based Access Control with X.509 Attribute Certificates, IEEE Internet Computing, March-April 2003, pp. 62-69.
6. D.W.Chadwick, A. Otenko, The PERMIS X.509 Role Based Privilege Management Infrastructure, Future Generation Computer Systems, 936 (2002) 1-13, December 2002. Elsevier Science BV.
7. Privilege and Role Management Infrastructure Standards Validation project www.permis.org
8. VOMS Architecture, European Datagrid Authorization Working group, 5 September 2002.
9. Steven Newhouse, Virtual Organisation Management, The London E-Science centre, http://www.lesc.ic.ac.uk/projects/oscar-g.html
10. Dynamic Virtual Organisations in e-Science Education project (DyVOSE), www.nesc.ac.uk/hub/projects/dyvose
11. Globus, http://www.globus.org
12. R. Housley, T. Polk, Planning for PKI: Best Practices Guide for Deploying Public Key Infrastructures, Wiley Computer Publishing, 2001.
13. ITU-T Recommendation X.509 (2001) | ISO/IEC 9594-8: 2001, Information technology - Open Systems Interconnection - Public-Key and Attribute Certificate Frameworks.
14. JISC Authentication, Authorisation and Accounting (AAA) Programme Technologies for Information Environment Security (TIES), http://www.edina.ac. uk/projects/ties/ties_ 23-9.pdf.
15. D. Chadwick, O. Otenko, A Comparison of the Akenti and PERMIS Authorization Infrastructures, in Ensuring Security in IT Infrastructures, Proceedings of ITI First International Conference on Information and Communications Technology (ICICT 2003) Cairo University, Ed. Mahmoud T El-Hadidi, p5-26, 2003
16. A.J. Stell, Grid Security: An Evaluation of Authorisation Infrastructures for Grid Computing, MSc Dissertation, University of Glasgow, 2004.
17. ITU-T Rec. X.509 (2000) | ISO/IEC 9594-8. The Directory: Authentication Framework.
18. UK e-Science Certification Authority, http://www.grid-support.ac.uk
19. ITU-T Rec X.812 (1995) | ISO/IEC 10181-3:1996, Security Frameworks for open systems: Access control framework
20. V. Welch, F. Siebenlist, D. Chadwick, S. Meder, L. Pearlman, Use of SAML for OGSA Authorization, June 2004, https://forge.gridforum.org/projects/ogsa- authz
21. OASIS. Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) v1.1,. 2 September 2003, http://www.oasis-open.org/committees/ security/
22. OpenSSL to create certificates, http://www.flatmtn.com/computer/Linux- SSLCertificates.html
23. J. Jokl, J. Basney and M. Humphrey, Experiences using Bridge CAs for Grids, Proceedings of UK Workshop on Grid Security Practice - Oxford, July 2004
24. Virtual Organisations for Trials and Epidemiological Studies project (VOTES), www.nesc.ac.uk/hub/projects/votes
25. Shibboleth, http://shibboleth.internet2.edu
26. OpenLDAP, http://www.openldap.org
27. A. Otenko, personal communications
28. PERMIS development pages, http://sec.isi.salford.ac.uk
29. BRIDGES (Biomedical Research Informatics Delivered by Grid Enabled Services) - http://www.brc.dcs.gla.ac.uk/projects/bridges