Content-triggered trust negotiation

ACM Transactions on Information and System Security

Volumn 7, Issue 3, 2004, Pages 428-456

  Hess, Adam ^a,b   Holt, Jason ^a,b   Jacobson, Jared ^a,b   Seamons, Kent E ^a,b  

^a BRIGHAM YOUNG UNIVERSITY   (United States)

^b 3361 TMCB   (United States)

Author keywords

Access control; Authentication; Credentials; Trust negotiation

Indexed keywords

ACCESS CONTROL; AUTHENTICATION; CREDENTIALS; TRUST NEGOTIATION;

COMPUTER OPERATING SYSTEMS; CONTROL; INFORMATION ANALYSIS; RESOURCE ALLOCATION; SECURITY OF DATA; SENSITIVITY ANALYSIS; SERVERS;

CLIENT SERVER COMPUTER SYSTEMS;

EID: 4444341241     PISSN: 10949224     EISSN: None     Source Type: Journal    
DOI: 10.1145/1015040.1015044     Document Type: Article

References (32)

1. BERTINO, E., CASTANO, S., AND FERRARI, E. 2001, On specifying security policies for web documents with an XML-based language. In Proceedings of the Sixth ACM Symposium on Access Control Models and Technologies. ACM Press, Chantilly, VA, 57-65.
2. BONATTI, P. AND SAMARATI, P. 2000. Regulating service access and information release on the web. In Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS-7). ACM Press, 134-143.
3. BONEH, D. AND FRANKLIN, M. 2001. Identity-based encryption from the Weil pairing. In Proceedings of Crypto 2001. Lecture Notes in Computer Science, vol. 2139. Springer, Berlin 213-229.
4. CHADWICK, D. AND OTENKO, A. 2002. The permis X.509 role based privilege management infrastructure. In Seventh ACM Symposium on Access Control Models and Technologies, Monterey, California.
5. DIERKS, T. AND ALLEN, C. 1999. The TLS protocol, version 1.0. Available at http://www.ietf.org/rfc/rfc2246.txt.
6. FIELDING, R., GETTYS, J., MOGUL, J., FRYSTYK, H., MASINTER, L., LEACH, P., AND BERNERS-LEE, T. 1999. Hypertext transfer protocol-HTTP/1.1. RFC 2616.
7. HERZBERG, A., MASS, Y., MIHAELI, J., NAOR, D., AND RAVID, Y. 2000. Access control meets public key infrastructure, or assigning roles to strangers. In Proceedings of the 2000 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 2-14.
8. HESS, A. 2003. Content-Triggered Trust Negotiation. M.S. thesis, Computer Science Department, Brigham Young University.
9. HESS, A., JACOBSON, J., MILLS, H., WAMSLEY, R., SEAMONS, K. E., AND SMITH, B. 2002. Advanced client/server authentication in TLS. In Network and Distributed System Security Symposium, San Diego, CA. 203-214.
10. HOLT, J., BRADSHAW, R., SEAMONS, K. E., AND ORMAN, H. 2003. Hidden credentials. In 2nd ACM Workshop on Privacy in the Electronic Society. ACM Press, Washington, D.C., 1-8.
11. INTERNATIONAL TELECOMMUNICATION UNION 1997. Rec. X.509 - Information Technology - Open Systems Interconnection - The Directory: Authentication Framework. International Telecommunication Union.
12. JACOBSON, J. 2003. Trust Negotiation in Session-Layer Protocols. M.S. thesis, Computer Science Department, Brigham Young University.
13. KAGAL, L., FININ, T., AND JOHSHI, A. 2003. A policy language for pervasive computing environment. In 4th International Workshop on Policies for Distributed Systems and Networks, Lake Como, Italy. 63-76.
14. KAGAL, L., FININ, T., AND JOSHI, A. 2003. A policy based approach to security to the semantic web. In 2nd International Semantic Web Conference, Sanibel Island, FL.
15. LI, N., MITCHELL, J. C., AND WINSBOROUGH, W. H. 2002. Design of a role-based trust management framework. In Proceedings of the 2002 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 114-130.
16. Liberty Alliance Project. Available at http://www.projectliberty.org 2002. http://www.projectliberty.org.
17. OGAWA, Y., MORITA, T., AND KOBAYASHI, K. 1991. A fuzzy document retrieval system using the keyword connection matrix and its learning method. Fuzzy Sets Syst 38, 17-41.
18. POSTEL, J. 1982. Simple Mail Transfer Protocol. RFC 821.
19. RESCORLA, E. 2001. SSL and TLS: Designing and Building Secure Systems. Addison-Wesley.
20. SALTON, G. AND LESK, M. 1968. Computer evaluation of indexing and text processing. J. ACM 15, 1, 8-36.
21. SANDHU, R. S., COYNE, E. J., FEINSTEIN, H. L., AND YOUMAN, C. E. 1996. Role-based access control models. IEEE Comput 29, 2 (Feb.), 38-47.
22. SEAMONS, K. E., WINSLETT, M., AND YU, T. 2001. Limiting the disclosure of access control policies during automated trust negotiation. In Network and Distributed System Security Symposium, San Diego, CA. 109-124.
23. SEAMONS, K. E., WINSLETT, M., YU, T., SMITH, B., CHILD, E., JACOBSEN, J., MILLS, H., AND YU, L. 2002. Requirements for policy languages for trust negotiation. In Proceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002). IEEE Computer Society Press, 68-79.
24. SEAMONS, K. E., WINSLETT, M., YU, T., YU, L., AND JARVIS, R. 2002. Protecting privacy during online trust negotiation. In 2nd Workshop on Privacy Enhancing Technologies. Springer-Verlag, San Francisco, CA, 129-143.
25. SHIN, D., AHN, G., AND CHO, S. 2002. Role-based EAM using X509 attribute certificate. In 16th Annual IFIP WG 11.3 Working Conference on Data and Application Security, University of Cambridge, United Kingdom.
26. TONTI, G., BRADSHAW, J. M., JEFFERS, R., MONTANARI, R., SURI, N., AND USZOK, A. 2003. Semantic web languages for policy representation and reasoning: A comparison of Kaos, Rei, and Ponder. In 2nd International Semantic Web Conference, Sanibel Island, FL.
27. USZOK, A., BRADSHAW, J., JEFFERS, R., SURI, N., HAYES, P., BREEDY, M., BUNCH, L., JOHNSON, M., KULKARNI, S., AND LOTT, J. 2003. Kaos policy and domain services: Toward a description-logic approach to policy representation, deconfliction, and enforcement. In 4th International Workshop on Policies for Distributed Systems and Networks, Lake Como, Italy, 93-98.
28. W3C, http://www.w3.org/TR/WD-P3P/Overview.html. Platform for Privacy Preferences (P3P) Specification. W3C, http://www.w3.org/TR/WD-P3P/Overview.html.
29. WINSBOROUGH, W. H. AND LI, N. 2002. Towards practical automated trust negotiation. In Proceedings of the Third International Workshop on Policies for Distributed Systems and Networks (Policy 2002). IEEE Computer Society Press, Monterey, CA, 92-103.
30. WINSBOROUGH, W. H., SEAMONS, K. E., AND JONES, V. E. 2000. Automated trust negotiation. In DARPA Information Survivability Conference and Exposition, Vol. I. IEEE Press, Hilton Head, SC, 88-102.
31. WINSLETT, M., YU, T., SEAMONS, K. E., HESS, A., JACOBSON, J., JARVIS, R., SMITH, B., AND YU, L. 2002. Negotiating trust on the web. IEEE Internet Comput. 6, 6 (Nov./Dec.), 30-37.
32. YU, T., WINSLETT, M., AND SEAMONS, K. E. 2003. Supporting structured credentials and sensitive policies through interoperable strategies in automated trust negotiation. ACM Trans. Inf. Syst. Secur. 6, 1 (Feb.), 1-42.