Efficient integration of fine-grained access control and resource brokering in grid

Journal of Supercomputing

Volumn 49, Issue 1, 2009, Pages 108-126

  Mazzoleni, P ^a   Crispo, B ^b   Sivasubramanian, S ^c   Bertino, E ^d  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b UNIVERSITY OF TRENTO   (Italy)

^c AMAZON   (United States)

^d Purdue University   (United States)

Author keywords

Access control; Computational grid network; Grid security; Policy organization; Resource brokering; XACML

Indexed keywords

COMPUTATIONAL GRID NETWORK; GRID SECURITY; POLICY ORGANIZATION; RESOURCE BROKERING; XACML;

DATA DESCRIPTION; GRID COMPUTING; NETWORK SECURITY; SECURITY SYSTEMS;

ACCESS CONTROL;

EID: 68149100487     PISSN: 09208542     EISSN: 15730484     Source Type: Journal    
DOI: 10.1007/s11227-008-0248-3     Document Type: Article

References (24)

1. Foster I, Kesselman C (1999) The grid: blueprint for a new computing infrastructure, vol 2150. Morgan Kaufmann, San Mateo, pp 2-48
2. Foster I, Kesselman C, Tuecke S (2001) The anatomy of the grid: enabling scalable virtual organizations. In: Lecture notes in computer science, vol 2150. Springer, Berlin
3. Foster IT, Kesselman C, Tsudik G, Tuecke S (1998) A security architecture for computational grids. In: Proceedings of the 5th ACM conference on computer and communications security. ACM Press, New York, pp 83-92
4. R Butler 2000 A national-scale authentication infrastructure IEEE Comput 33 12 60 66
5. Anderson DP (2004) Boinc: a system for public-resource computing and storage. In: In 5th IEEE/ACM international workshop on grid computing, November 2004
6. Foster I, Kesselman C, Pearlman L, Tuecke S, Welch V (2003) The community authorization service: status and future. In: 2003 conference for computing in high energy and nuclear physics, 2003
7. S Brostoff MA Sassea D Chadwick J Cunningham U Mbanaso O Otenko 2004 Rbac what? development of a role-based access control policy writing tool for e-scientists Softw Pract Exp Grid Secur 35 9 835 856
8. Lorch M, Adams D, Kafura D, Koneni M, Rathi A, Shah S (2003) The prima system for privilege management, authorization and enforcement in grid environments. In: 4th int workshop on grid computing-grid 2003, 2003
9. I Foster C Kesselman 1997 Globus: a metacomputing infrastructure toolkit Int J Supercomput Appl 11 2 115 128 (Pubitemid 127673968)
10. K Krauter R Buyya M Maheswaran 2002 A taxonomy and survey of grid resource management systems for distributed computing Softw Pract Exp 32 2 135 164 (Pubitemid 34138417)
11. Housley R, Polk W, Ford W, Solo D (2002) Internet x.509 public key infrastructure certificate and crl profile, RFC3280
12. Bertino E, Castano S, Ferrari E (2001) On specifying security policies for web documents with an xml-based language. In: SACMAT01 ACM symposium on access control models and technologies, 2001
13. XAMCL and OASIS Security Services Technical Committee (2005) eXtendible Access Control Markup Language (xacml) committee specification 2.0, February 2005
14. BEA, IBM, Microsoft and SAP (2002) Web services policy language (ws-policy), 2002
15. Tannenbaum T, Wright D, Miller K, Livny M (2001) Beowulf cluster computing with Linux. MIT Press, Cumberland
16. SUN Microsystems. Sun's xacml implementation
17. Monitoring and Discoverying Service for GT4. http://www.globus.org/ toolkit/docs/4.0/info/key-index.html
18. Tuecke S at al (2003) Open grid services infrastructure (OGSI) version 1.0
19. Alfieri R et al (2003) (EDG Security Co-ordination Group) Managing dynamic user communities in a grid of autonomous resources. In: Proceedings of computing in high energy and nuclear physics, 2003
20. Authorization framework and mechanisms GRID (AuthZ) (2003) Grid Forum Working Group. Conceptual authz framework and classification. In: Proc computing in high energy and nuclear physics, 2003
21. MR Thompson A Essiari S Mudumbai 2003 Certificate-based authorization policy in a pki environment ACM Trans Inf Syst Secur (TISSEC) 6 4 566 588
22. Azzedin F, Maheswaran M (2002) Integrating trust into grid resource management systems. In: International conference on parallel processing (ICPP'02), August 2002
23. Azzedin F, Maheswaran M (2004) Toward trust-aware resource management in grid computing systems. In: IEEE international parallel and distributed processing symposium, 2004
24. Thompson MR, Essiari A, KIeahey K, Welch V, Lang S, Liu B (2003) Fine-grained authorization for job and resource management using akenti and the globus toolkit. In: Conference for computing in high energy and nuclear physics, September 2003