A model-driven framework for trusted computing based systems

Proceedings - IEEE International Enterprise Distributed Object Computing Workshop, EDOC

Volumn , Issue , 2007, Pages 75-86

  Alam, Masoom ^a   Seifert, Jean Pierre ^b   Zhang, Xinwen ^b  

^a UNIVERSITY OF INNSBRUCK   (Austria)

^b SAMSUNG INFORMATION SYSTEMS AMERICA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTEGRATION;

DISTRIBUTED APPLICATION DEVELOPMENTS; DISTRIBUTED APPLICATIONS; KEY FACTORS; LEVEL OF ABSTRACTIONS; PROMISING APPROACHES; QUANTUM LEAPS; SELINUX; SERVICE PROVIDERS; SERVICE REQUESTORS; SUCCESSFUL INTEGRATIONS; TRUSTED COMPUTING; TRUSTED COMPUTING GROUPS; XACML POLICIES;

SYSTEMS ANALYSIS;

EID: 47949132086     PISSN: 15417719     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/EDOC.2007.4383983     Document Type: Conference Paper

References (38)

1. Experiences Implementing a Higher-Level Policy Language for SELinux in Second Annual SELinux Symposium, 2006. Baltimore, Maryland. http://selinux- symposium.org/2006/abstracts.php.
2. Security-Enhanced Linux (SELinux). www.nsa.gov/selinux/.
3. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. W3C Recommendation 16 April 2002.
4. Trusted computing group (teg). https://www.trustedcomputinggroup.org/ specs/.
5. Uml profile for corba components, may 2003. OMG Document mars/03-05-09.
6. A. Pretschner et al. Distributed usage control. Communications of the ACM, 49(9):39-44, September 2006.
7. M. Alam, R. Breu, and M. Hafner. Model-Driven Security Engineering for Trust Management in SECTET. JOURNAL OF SOFTWARE, VOL. 2, NO. 1, FEBRUARY 2007, ACADEMY PUBLISHER.
8. M. Alam, M. Hafner, and R. Breu. Constraint based Role Based Access Control for modelling administrative constraints in the SECTET. In Proceedings of the ACM PST 2006 - International Conference on Privacy, Security and Trust, October 30th, 2006 - November 1st, 2006.
9. M. Alam, M. Hafner, and R. Breu. Modeling Authorization in a SOA based Distributed Workflow. In IASTED Software Engineering 2006, isbn 0-88986-572-8.
10. http://www.antlr.org.
11. R. Breu and G. Popp. Actor-centric modelling of access rights. In FASE 2004. Springer LNCS Vol. 2984, p. 165-179, 2004.
12. K. Czarnecki and S. Helsen. Administration Model for Or-BAC. In Classification of Model Transformation Approaches, volume 19, OOPSLA'03 Workshop on Generative Techniques in the Context of Model-Driven Architecture.
13. A. M. Devices. AMD Secure Virtual Machine Architecture Reference Manual. AMD, 2005.
14. D. Grawrock. The Intel Safer Computing Initiative Building Blocks for Trusted Computing. Intel Press, http://www.intel.com/intelpress/sum.secc. htm, 2005.
15. V Haldar, D. Chandra, and M. Franz. Semantic remote attestation - a virtual machine directed approach to trusted computing.
16. T. Jaeger, R. Sailer, and U. Shankar. PRIMA: policy-reduced integrity measurement architecture. In SACMAT '06: Proceedings of the eleventh ACM symposium on Access control models and technologies, pages 19-28, New York, NY, USA, 2006. ACM Press.
17. T. Jaeger, R. Sailer, and X. Zhang. Resolving constraint conflicts. In SACMAT '04: Proceedings of the ninth ACM symposium on Access control models and technologies, pages 105-114, New York, NY, USA, 2004. ACM Press.
18. M. Alam. Model-Driven Security Engineering for the realization of Dynamic Security Requirements in Collaborative Systems. Appeared in PhD Symposium of IEEE/ACM Models 2006 LNCS 4364.
19. M. Alam et al. Model Driven Security for Web Services (MDS4WS). In INMIC 2004,Digi Obj Id 10.1109/IN-MIC.2004.1492930.
20. M. Alam et al. Modeling Permissions in a (U/X)ML World. In IEEEARES, 2006.
21. M. Hafner et al. Modeling Inter-organizational Workflow Security in a Peer-to-Peer Environment. In IEEE ICWS 2005,ISBN: 0-7695-2409-5.
22. M. Hafner, M. Alam, R. Breu. A MOF/QVT-based Domain Architecture for Model Driven Security . In IEEE/ACM Models 2006 LNCS 4199.
23. M. Hafner., R. Breu, and M. Breu. A Security Architecture For Inter-organizational Workflows-Putting WS Security Standards Together. In ICEIS 2005,ISBN: 972-8865-19-8.
24. M. Hilty et al. Usage control requirements in mobile and ubiquitous computing applications. In Proc. of Intl. Conf. on Systems and Networks Communications, 2006.
25. F. Mayer, K. MacMillan, and D. Caplan. SELinux by example: using Security Enhanced Linux. 2006.
26. UML 2.0 OCL Specification. http://www.omg.org/docs/ptc/03-10-14.pdf.
27. S. Pearson. Trusted Computing Platforms: TCPA Technology in Context. Prentice Hall PTR, Upper Saddle River, NJ, USA, 2002.
28. R. Breu et al. Model Driven Security for InterOrganizational Workflows in e-Government. In TCGOV 2005,Proceedings. ISBN 3-540-25016-6.
29. R. Breu et al. Web service engineering - advancing a new software engineering discipline. In ICWE 2005, LNCS 3579 Springer 2005.
30. Role Based Access Control avialable at. csrc.nist.gov/rbac/.
31. R. Sailer, T. Jaeger, X. Zhang, and L. van Doom. Attestation-based policy enforcement for remote access. In CCS '04: Proceedings of the 11th ACM conference on Computer and communications security, pages 308-317, New York, NY, USA, 2004. ACM Press.
32. R. Sailer, X. Zhang, T. Jaeger, and L. van Doom. Design and implementation of a tcg-based integrity measurement architecture. In USENIX Security Symp., 2004.
33. R. Sandhu, K. Ranganathan, and X. Zhang. Secure information sharing enabled by trusted computing and pei models. In ASIACCS '06: Proceedings of the 2006 ACM Symposium on Information, computer and communications security, pages 2-12, New York, NY, USA, 2006. ACM Press.
34. R. Sandhu, X. Zhang, K. Ranganathan, and M. J. Covington. Client-side access control enforcement using trusted computing and pei models. In Journal of High Speed Network, Special issue on Managing Security Polices: Modeling, Verification and Configuration, pages 15(3): 229 - 245, 2006.
35. Shiboleth protocols and profiles: August 2005. http://shibboleth. internet2.edu/shib-intro.html.
36. Z. Song, S. Lee, and R. Masuoka. Trusted web service. In The Second Workshop on Advances in Trusted Computing (WATC '06 Fall), 2006.
37. Trusted Computing Software Specification implementation, available at. http://trousers.sourceforge.net/.
38. S. Yoshihama, T. Ebringer, M. Nakamura, S. Munetoh, and H. Maruyama. Ws-attestation: Efficient and fine-grained remote attestation on web services. In ICWS '05: Proceedings of the IEEE International Conference on Web Services (ICWS'05), pages 743-750, Washington, DC, USA, 2005. IEEE Computer Society.