Distributed authorization using delegation with acyclic paths

Proceedings of the Computer Security Foundations Workshop

Volumn 2006, Issue , 2006, Pages 257-269

  Lain, Antonio ^a   Mowbray, Miranda ^a  

^a HEWLETT PACKARD LABORATORIES   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ABSTRACTING; COMPUTATIONAL METHODS; POLYNOMIALS; SECURITY OF DATA;

DISTRIBUTED AUTHORIZATION;

VERIFICATION;

EID: 33947688770     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.2006.12     Document Type: Conference Paper

References (19)

1. M. Blaze, J. Feigenbaum, J. loannidis, and A. Keromytis. The KeyNote trust-management system, version 2. IETF RFC 2704, Sept. 1999.
2. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proc. 17th Symposium on Security and Privacy, pages 164-173, Los Alamitos, 1996. IEEE Computer Society Press.
3. CCITT (Consultative Committee on International Telegraphy and Telephony). Recommendation X. 509: The Directory-Authentication Framework, 1988.
4. D. Clarke, J.-E. Elien, C. Ellison, M. Fredette, A. Morcos, and R. L. Rivest. Certificate Chain Discovery in SPKI/SDSI. Journal of Computer Security, 9(4):285-322, November 2001.
5. M. Cooper, Y. Dzambasow, P. Hesse, S. Joseph, and R. Nicholas. Internet X.509 Public Key Infrastructure: Certification Path Building. RFC 4158, Sept. 2005.
6. C. Ellison and B. Schneier. Ten Risks of PKI: What You're Not Being Told About Public Key Infrastructure. Computer Security Journal, 16(1), 2000. http://www.schneier.com/paper-pki.pdf.
7. C. M. Ellison, B. Frantz, B. Lampson, R. Rivest, B. M. Thomas, and T. Ylonen. Simple public key certificate. Internet Engineering Task Force Draft IETF, July 1997.
8. S. Farrell and R. Housley. An Internet Attribute Certificate Profile for Authorization. RFC 3281 (Proposed Standard), Apr. 2002.
9. I. Foster, C. Kesselman, G. Tsudik, and S. Tuecke. A security architecture for computational grids. In Proceedings of the 5th ACM Conference on Computer and Communications Security (CCS-98), pages 83-92, New York, Nov. 3-5 1998. ACM Press.
10. Hewlett-Packard. The SmartFrog Reference Manual, July 2005. http://www.smartfrog.org.
11. S. Ioannidis, A. D. Keromytis, S. M. Bellovin, and J. M. Smith. Implementing a distributed firewall. In S. Jajodia and P. Samarati, editors, Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-00), pages 190-199, N.Y., Nov. 1-4 2000. ACM Press.
12. A. Lain. Using the new SmartFrog Security. Hewlett-Packard, Jan. 2006. http://www.smartfrog.org.
13. B. W. Lampson. Protection. In 5th Princeton Symposium on Information Sciences and Systems,. Princeton University, Mar. 1971. Reprinted in Operating Systems Review 8,1 January 74.
14. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust-management framework. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 114-130, Oakland, CA, May 2002. IEEE Computer Society, Technical Committee on Security and Privacy, IEEE Computer Society Press.
15. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management: extended abstract. In P. Samarati, editor, Proceedings of the 8th ACM Conference on Computer and Communications Security, pages 156-165, Philadelphia, PA, USA, Nov. 2001. ACM Press.
16. A. O. Mendelzon and P. T. Wood. Finding regular simple paths in graph databases. SIAM J. Comput., 24(6):1235-1258, 1995.
17. OASIS Open. OASIS eXtensible Access Control Markup Language (XACML) TC, 2006.
18. R. Oberg. Mastering RMI: Developing Enterprise Applications in Java and EJB. John Wiley & Sons, Inc., New York, NY, USA, 2001.
19. R. L. Rivest and B. Lampson. SDSI - A simple distributed security infrastructure. Presented at CRYPTO'96 Rumpsession, Apr. 1996. SDSI Version 1.0.