Using SAML and XACML for complex resource provisioning in grid based applications

Proceedings - Eighth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2007

Volumn , Issue , 2007, Pages 183-187

  Demchenko, Yuri ^a   Gommans, Leon ^a   De Laat, Cees ^a  

^a UNIVERSITY OF AMSTERDAM   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; JAVA PROGRAMMING LANGUAGE; PROJECT MANAGEMENT; XML;

AUTHZ SESSION CONTEXT; COMPLEX RESOURCE PROVISIONING (CRP); DYNAMIC SECURITY CONTEXT; GLITE JAVA AUTHORISATION FRAMEWORK (GJAF);

DISTRIBUTED COMPUTER SYSTEMS;

EID: 34748845082     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/POLICY.2007.48     Document Type: Conference Paper

References (17)

1. Foster, I. et al (2006). The Open Grid Services Architecture, Version 1.5. Global Grid Forum. [Online]. Available: http://www.ggf.org/documents/GFD. 80.pdf
2. Hacker, T., B. Athey, A Methodology for Account Management in Grid Computing Environments, Proceedings of the 2nd International Workshop on Grid Computing, November 2001, Denver, Colorado. Lecture Notes in Computer Science, Springer Verlag Press.
3. Demchenko, Y., Leon Gommans, Cees de Laat, Rene van Buuren, "Domain Based Access Control Model for Distributed Collaborative Applications", Proceedings of The 2nd IEEE International Conference on e-Science and Grid Computing, December 4-6, 2006, Amsterdam.
4. Gommans, L. et al. "Applications Drive Secure Lightpath Creation across Heterogeneous Domains", Special Issue "IEEE Communications Magazine, Feature topic Optical Control Planes for Grid Networks: Opportunities, Challenges and the Vision", March 2006.
5. gJAF Developer's guide. [Online]. https://edms.cern.ch/document/501718
6. RFC 2904 - "AAA Authorization Framework" J. Vollbrecht, P. Calhoun, S. Farrell, L. Gommans, G. Gross, B. de Bruijn, C. de Laat, M. Holdrege, D. Spence, August 2000 -ftp://ftp.isi.edu/in-notes/rfc2904.txt
7. GFD.38 Conceptual Grid Authorization Framework and Classification. M. Lorch, B. Cowles, R. Baker, L. Gommans, P. Madsen, A. McNab, L. Ramakrishnan, K. Sankar, D. Skow, M. Thompson - http://www.ggf.org/documents/GWD-I-E/GFD-I.038. pdf
8. "Assertions and Protocols for the OASIS Security Assertion Markup Language (SAML) V2.0", OASIS Standard, 15 March 2005. [Online]. Available: http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
9. "eXtensible Access Control Markup Language (XACML) Version 2.0, OASIS Standard", 1 February 2005. [Online]. Available: http://docs.oasis- open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf
10. [10 "Core and hierarchical role based access control (RBAC) profile of XACML v2.0", OASIS Standard, 1 February 2005. [Online]. Available: http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-rbac-profile1 - spec-os.pdf
11. "Multiple resource profile of XACML 2.0", OASIS Standard, 1 February 2005, available from http://docs.oasis-open.org/xacml/access_control- xacml-2.0-mult_profile-spec-cd-01.pdf
12. "Hierarchical resource profile of XACML 2.0", OASIS Standard, 1 February 2005, available from http://docs.oasis-open.org/xacml/access_control- xacml-2.0-hier_profile-spec-cd-01.pdf
13. "XACML 3.0 administrative policy", OASIS Draft, 10 December 2005. [Online]. Available from http://docs.oasis-open.org/access_control
14. AAAuthreach Project Information Page [Online]. http://staff.science.uva. nl/~demch/projects/aaauthreach/
15. Generic Authorization Authentication and Accounting. [Online]. Available: http://www.science.uva.nl/research/air/projects/aaa/
16. GT 4.0: Security: Authorization Framework. [Online]. Available: http://www.globus.org/toolkit/docs/4.0/security/ authzframe/
17. The Grid Policy Box G-PBox. [Online]. Available: http://littleblue.cnaf. infn.it/twiki/bin/view/GPBox/WebHome