Administering access control in dynamic coalitions

LISA 2005 - 19th Large Installation System Administration Conference

Volumn , Issue , 2005, Pages 249-261

  Bobba, Rakesh ^a   Gavrila, Serban ^b   Gligor, Virgil ^c   Khurana, Himanshu ^a   Koleva, Radostina ^c  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b VDG Inc   (United States)

^c UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS POLICIES; AUTONOMOUS DOMAINS; DYNAMIC COALITIONS; POLICY DECISIONS; RESOURCE SHARING; SELECTIVE DISTRIBUTION; SHARING RESOURCES;

ACCESS CONTROL;

EID: 48049098067     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. ANSI INCITS 359-2004, Information technology: Role based access control, 2004
2. Ahn, Gail-Joon and Ravi Sandhu, "Role-based authorization constraints specification," ACM Transactions of Information System Security, Vol. 3, Num. 4, pp. 207-226, 2000
3. Bharadwaj, Vijay G., and John S. Baras, "Towards automated negotiation of access control policies," POLICY ?03: Proceedings of the 4th IEEE International Workshop on Policies for Distributed Systems and Networks, p. 111, IEEE Computer Society, Washington, DC, 2003
4. Blaze, Matt, Joan Feigenbaum, and Angelos D. Keromytis, "Keynote: Trust management for public-key infrastructures (position paper)," Proceedings of the 6th International Workshop on Security Protocols, pp. 59-63, Springer-Verlag, London, 1999
5. Boneh, Dan, and Matthew Franklin, "Efficient generation of shared RSA keys," Lecture Notes in Computer Science, Vol. 1294, 1997
6. Ferraiolo, David, Janet Cugini, and Richard Kuhn, "Role-based access control (rbac): Features and motivations," Proceedings of 11th Annual Computer Security Application Conference, pp. 241-248, Springer-Verlag, New Orleans, LA, 1995
7. Freudenthal, Eric, Tracy Pesin, Lawrence Port, Edward Keenan, and Vijay Karamcheti, "drbac: Distributed role-based access control for dynamic coalition environments," Proceedings of International Conference on Distributed Computing Systems, pp. 411-420, Vienna, Austria, 2002
8. Gligor, Virgil, Serban Gavrila, and David Ferraiolo, "On the formal definition of separationof-duty policies and their composition," RSP: 19th IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, CA, 1998
9. Gligor, Virgil D. and Serban I. Gavrila, "Application-oriented security policies and their composition (position paper)," Proceedings of the 6th International Workshop on Security Protocols, pp. 67-74, Springer-Verlag, London, UK, 1999
10. Gligor, Virgil D., Himanshu Khurana, Radostina K. Koleva, Vijay G. Bharadwaj, and John S. Baras, "On the negotiation of access control policies," Revised Papers from the 9th International Workshop on Security Protocols, pp. 188-201, Springer-Verlag, London, UK, 2002
11. Herzberg, Amir, Yosi Mass, Joris Michaeli, Yiftach Ravid, and Dalit Naor, "Access control meets public key infrastructure, or: Assigning roles to strangers," SP ?00: Proceedings of the 2000 IEEE Symposium on Security and Privacy, p. 2, IEEE Computer Society, Washington, DC, 2000
12. https://www.cwid.js.mil/public/cwid05fr/START-HERE.html
13. http://www.bouncycastle.org/
14. http://www.cnds.jhu.edu/research/group/secure-spread/
15. Khurana, Himanshu, Serban Gavrila, Rakesh Bobba, Radostina Koleva, Anuja Sonalker, Emilian Dinu, Virgil Gligor, and John Baras, "Integrated security services for dynamic coalitions," An extended exposition abstract in Proceedings of the 3rd DARPA Information Survivability Conference and Exposition (DISCEX III), 2003
16. Khurana, Himanshu, Virgil Gligor, and John Linn, "Reasoning about joint administration of access policies for coalition resources," ICDCS ?02: Proceedings of the 22nd International Conference on Distributed Computing Systems (ICDCS?02), p. 429, IEEE Computer Society, Washington, DC, 2002
17. Khurana, Himanshu and Virgil D. Gligor, "A model for access negotiations in dynamic coalitions," WETICE ?04: Proceedings of the 13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE?04), pp. 205-210, IEEE Computer Society, Washington, DC, 2004
18. Khurana, Himanshu, Adam Slagell, and Rafael Bonilla, "Sels: A secure e-mail list service," SAC ?05: Proceedings of the 2005 ACM symposium on Applied computing, p. 306-313, ACM Press, New York, NY, 2005
19. Li, Ninghui, John C. Mitchell, and William H. Winsborough, "Design of a role-based trustmanagement framework," SP ?02: Proceedings of the 2002 IEEE Symposium on Security and Privacy, p. 114, IEEE Computer Society, Washington, DC, 2002
20. Moses, Tim, "Core specification: extensible access control markup language (xacml) version 2.0," OASIS Specification Document, http://docs. oasis-open.org/xacml/access-control-xacml-2-0-core-spec-cd-04.pdf , 2004
21. Phillips, Charles E., Steven A. Demurjian, and T. C. Ting, "Information sharing and security in dynamic coalitions," Proceedings of IEEE Information Assurance Workshop, 2002
22. Phillips, Charles E., T. C. Ting, and Steven A. Demurjian, "Information sharing and security in dynamic coalitions," SACMAT ?02: Proceedings of the seventh ACM symposium on Access control models and technologies, p. 87-96, ACM Press, New York, NY, 2002
23. Shands, Deborah, Richard Yee, Jay Jacobs, and E. John Sebes, "Secure virtual enclaves: Supporting coalition use of distributed application technologies," Proceedings of the Network and Distributed System Security Symposium (NDSS), 2000
24. Smith, T. J., G. T. Byrd, W. Xiaoyong, X. Hongjie, K. Thangavelu, R. Wang, and A. Shah, "Yalta: A dynamic pki and secure tuplespaces for distributed coalitions," Proceedings of 3rd DARPA Information Survivability Conference and Exposition, Washington, DC, 2003
25. Winslett, Marianne, Ting Yu, Kent E. Seamons, Adam Hess, Jared Jacobson, Ryan Jarvis, Bryan Smith, and Lina Yu, "Negotiating trust on the web," IEEE Internet Computing, Vol. 6, Num. 6, pp. 30-37, 2002
26. Wu, Thomas, Michael Malkin, and Dan Boneh, "Building intrusion tolerant applications," Proceedings of the 8th USENIX Security Symposium, pp. 79-91, Washington, DC, 1999