Safety in Automated Trust Negotiation

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2004, Issue , 2004, Pages 147-160

  Winsborough, William H ^a   Li, Ninghui ^b  

^a George Mason University   (United States)

^b Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ATTRIBUTE-BASED ACCESS CONTROL (ABAC); AUTOMATED TRUST NEGOTIATION (ATN); CREDENTIAL SYSTEMS;

ACCIDENT PREVENTION; CONTROL SYSTEMS; INFORMATION TECHNOLOGY; ITERATIVE METHODS; PROBABILITY; PROGRAM DOCUMENTATION; SECURITY OF DATA; SET THEORY;

COMPUTER SCIENCE;

EID: 3543128965     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SECPRI.2004.1301321     Document Type: Conference Paper

References (27)

1. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 164-173. IEEE Computer Society Press, May 1996.
2. P. Bonatti, S. Kraus, and V. S. Subrahmanian. Foundations of secure deductive databases. Knowledge and Data Engineering, 7(3):406-422, 1995.
3. P. Bonatti and P. Samarati. Regulating service access and information release on the web. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7), pages 134-143. ACM Press, Nov. 2000.
4. J. Domingo-Ferrer, editor. Inference Control in Statistical Databases, From Theory to Practice, volume 2316 of Lecture Notes in Computer Science. Springer, 2002.
5. J. Goguen and J. Meseguer. Security policies and security models. In In Proceedings of the 1982 IEEE Symposium on Security and Privacy, pages 11-20. IEEE Computer Society Press, Apr. 1982.
6. A. Herzberg, Y. Mass, J. Mihaeli, D. Naor, and Y. Ravid. Access control meets public key infrastructure, or: Assigning roles to strangers. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, pages 2-14. IEEE Computer Society Press, May 2000.
7. A. Hess, J. Jacobson, H. Mills, R. Wamsley, K. E. Seamons, and B. Smith. Advanced client/server authentication in TLS. In Network and Distributed System Security Symposium, pages 203-214, Feb. 2002.
8. J. E. Holt, R. W. Bradshaw, K. E. Seamons, and H. Orman. Hidden credentials. In Proceedings of the 2nd ACM Workshop on Privacy in the Electronic Society, Oct. 2003.
9. N. Li, W. Du, and D. Boneh. Oblivious signature-based envelope. In Proceedings of the 22nd ACM Symposium on Principles of Distributed Computing (PODC 2003). ACM Press, July 2003.
10. N. Li, B. N. Grosof, and J. Feigenbaum. Delegation Logic: A logic-based approach to distributed authorization. ACM Transaction on Information and System Security (TISSEC), 6(1):128-171, Feb. 2003.
11. N. Li, J. C. Mitchell, and W. H. Winsborough. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy, pages 114-130. IEEE Computer Society Press, May 2002.
12. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 11(1):35-86, Feb. 2003.
13. R. L. Rivest, A. Shamir, and L. M. Adleman. A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21:120-126, 1978.
14. K. E. Seamons, M. Winslett, and T. Yu. Limiting the disclosure of access control policies during automated trust negotiation. In Proceedings of the Symposium on Network and Distributed System Security (NDSS'01), February 2001.
15. K. E. Seamons, M. Winslett, T. Yu, L. Yu, and R. Jarvis. Protecting privacy during on-line trust negotiation. In 2nd Workshop on Privacy Enhancing Technologies. Springer-Verlag, Apr. 2002.
16. J. Staddon. Dynamic inference control. In Proceedings of the 8th ACM SIGMOD workshop on Research issues in data mining and knowledge discovery, pages 94-100. ACM Press, 2003.
17. D. Sutherland. A model of information. In Proceedings of the 9th National Computer Security Conference, pages 175-183, Sept. 1986.
18. L. Wang, D. Wijesekera, and S. Jajodia. Cardinality-based inference control in data cubes, 2003. To appear in: Journal of Computer Security.
19. W. H. Winsborough and N. Li. Protecting sensitive attributes in automated trust negotiation. In Proceedings of the ACM Workshop on Privacy in the Electronic Society, pages 41-51. ACM Press, Nov. 2002.
20. W. H. Winsborough and N. Li. Towards practical automated trust negotiation. In Proceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002), pages 92-103. IEEE Computer Society Press, June 2002.
21. W. H. Winsborough and N. Li. Safety in automated trust negotiation. Technical Report CSIS-TR-1-04, Center for Secure Information Systems, George Mason University, Mar. 2004.
22. W. H. Winsborough, K. E. Seamons, and V. E. Jones. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, volume I, pages 88-102. IEEE Press, Jan. 2000.
23. M. Winslett, T. Yu, K. E. Seamons, A. Hess, J. Jacobson, R. Jarvis, B. Smith, and L. Yu. Negotiating trust on the web. IEEE Internet Computing, 6(6):30-37, November/December 2002.
24. T. Yu, X. Ma, and M. Winslett. Prunes: An efficient and complete strategy for trust negotiation over the internet. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7), pages 210-219. ACM Press, Nov. 2000.
25. T. Yu and M. Winslett. Policy migration for sensitive credentials in trust negotiation. In Proceedings of the ACM Workshop on Privacy in the Electronic Society, pages 9-20. ACM Press, Oct. 2003.
26. T. Yu and M. Winslett. Unified scheme for resource protection in automated trust negotiation. In Proceedings of IEEE Symposium on Security and Privacy, pages 110-122. IEEE Computer Society Press, May 2003.
27. T. Yu, M. Winslett, and K. E. Seamons. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Transactions on Information and System Security (TISSEC), 6(1):1-42, Feb. 2003.