N ± ε: Reflecting local risk assessment in LoA

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5871 LNCS, Issue PART 2, 2009, Pages 833-847

  Sato, Hiroyuki ^a  

^a UNIVERSITY OF TOKYO   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION MECHANISMS; INFORMATION ASSETS; INFORMATION SECURITY; REFERENCE MODELS; SMALL INVESTMENTS; THREATS AND VULNERABILITIES;

ACCESS CONTROL; INTERNET; QUALITY CONTROL; RATING; RISK ANALYSIS; SECURITY SYSTEMS;

RISK ASSESSMENT;

EID: 78650695982     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-05151-7_6     Document Type: Conference Paper

References (22)

1. Alterman, P.: Interfederation Initiatives for Identity Authentication. In: Federal Demonstration Partnership, January meeting (2008)
2. Alterman, P., Keltner, J., Morgan, R.: InCommon Federation: Progress. Partnerships, Opportunities. In: Internet2 2007 Fall Meeting (2007)
3. American Institute of Certified Public Accountants and Canadian Institute of Chartered Accountants: Trust Services Principles, Criteria and Illustrations for Security, Availability, Processing Integrity, Confidentiality, and Privacy (2006)
4. Burr, W., Dodson, W., Polk, W.: Electronic Authentication Guidelines. NIST SP800-63 (2006)
5. CA/Browser Forum: Guidelines for the Issuance and Management of Extended Validation Certificates (2007)
6. Chokbani, S., Ford, W., Sabett, R., Merrill, C., Wu, S.: Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework. RFC 3647 (2003)
7. Helkala, K., Snekkenes, E.: Formalizing the ranking of authentication products. Information Management and Computer Security 17(1), 30-43 (2009)
8. InCommon Federation: Identity Assurance Profiles Bronze and Silver (2008), http://www.incommonfederation.org/docs/assurance/InC-Bronze-Silver-IAP- 1.0-Final.pdf
9. Nedanic, A., Zhang, N., Yao, L., Morrow, T.: Levels of Authentication Assurance: an Investigation. In: Proc. 3rd Int'l Symposium on Information Assurance and Security, pp. 155-158 (2007)
10. OASIS: Level of Assurance Authentication Context Profiles for SAML 2.0 (2009)
11. Office of Management and Budget (U.S.): E-Authentication Guidance for Federal Agencies. M-04-04 (2003)
12. O'Gorman: Comparing passwords, Tokens, and Biometric for User Authentication. Proceedings of IEEE 91(12), 2019-2040 (2003)
13. OpenID: OpenID Provider Authentication Policy Extension 1.0 (2008)
14. Sato, H.: A Service Framework based on Grades of IdPs and SPs. In: Proc. Securiy and Management 2009, pp. 379-385 (2009)
15. Stoneburner, G., Goguen, A., Feringa, A.: Risk Management Guide for Information Technology Systems, NIST 800-30 (2002)
16. Srivana, M., Balfe, S., Paterson, K., Rohatgi, P.: Trust Management for Secure Information Flows. In: Proc. 15th Computer and Communications Security, pp. 175-187 (2008)
17. SWITCH: Assurance Levels Definition of SWITCH pilot phase (2006), https://wiki.aai.switch.ch/bin/view/AAIHomeOrgs/AssuranceLevels
18. Yan, J., Blackwell, A., Anderson, R., Grant, A.: Password Memorability and Security: Empirical Results. IEEE Security and Privacy, 25-31 (September/October 2004) (Pubitemid 40168623)
19. http://tools.ietf.org/draft/draft-behera-ldap-password-policy/
20. http://www.nii.ac.jp/csi/sp/
21. http://www.nisc.go.jp/active/general/kijun01.html
22. http://www.pki.itc.u-tokyo.ac.jp/