OpenPMF SCaaS: Authorization as a service for cloud & SOA applications

Proceedings - 2nd IEEE International Conference on Cloud Computing Technology and Science, CloudCom 2010

Volumn , Issue , 2010, Pages 634-643

  Lang, Ulrich ^a,b  

^a ObjectSecurity   (United States)

^b ST JOHN S COLLEGE   (United Kingdom)

Author keywords

Agile policy management; Application security; Authorization management; Cloud; Mashup; Model driven security; Platform as a service (PaaS); Policy automation; Secure Development Life Cycle (SDCL); Service Oriented Architecture (SOA)

Indexed keywords

APPLICATION SECURITY; AUTHORIZATION MANAGEMENT; MASHUP; MODEL-DRIVEN SECURITY; PLATFORM AS A SERVICE (PAAS); POLICY AUTOMATION; POLICY MANAGEMENT; SECURE DEVELOPMENT LIFE CYCLE (SDCL);

AUTOMATION; COMPUTER SYSTEMS; INFORMATION SERVICES; LIFE CYCLE; NETWORK SECURITY; SERVICE ORIENTED ARCHITECTURE (SOA);

CLOUD COMPUTING;

EID: 79952383924     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CloudCom.2010.13     Document Type: Conference Paper

References (24)

1. Plummer, Daryl and Bittman, Thomas, et al. Cloud Computing: Defining and Describing an Emerging Phenomenon. 17 June 2008 (ID: G00156220)
2. The NIST Definition of Cloud Computing Authors: Peter Mell and Tim Grance Version 15, 10-7-09 National Institute of Standards and Technology, Information Technology Laboratory, http://www.csrc.nist.gov/groups/SNS/cloudcomputing/ index.html
3. Forrester Research, Enterprise And SMB Hardware Survey, North America And Europe, Q3 2009
4. Lang, Ulrich and Schreiner, Rudolf. Cloud Application Security, January 2010, (PDF eBook)
5. Cloud Security Alliance. Security Guidance for Critical areas of Focus in Cloud Computing V2.1, December 2009
6. Heiser, Jay and Nicolett, Mark. Assessing the Security Risks of Cloud Computing, Gartner, June 2008, (ID: G00157782)
7. Lang, Ulrich and Schreiner, Rudolf. SOA Security Concerns and Recommendations, (PDF eBook v2.0), December 2008 (based on the Secure SOA project secure-soa.info)
8. Davis, M. et al. SOA Information Assurance Concerns (presentation), ISSA / The Security Network. 2008. http://www.sdissa.org/,ISSA/SecurityNetwork Cyber Security Collaboration Summit (www.igouge.com)
9. OASIS Consortium (editor: Moses, Tim). eX-tensible Access Control Markup Language (XACML) Version 2.0. 1 Feb 2005 (ID: oasis-access-controlxacml-2.0- core-spec-os)
10. Karp, Alan H.; Haury, Harry; Davis, Michael H. From ABAC to ZBAC: The Evolution of Access Control Models. 2009. (HPL-2009-30)
11. Lang, Ulrich and Schreiner, Rudolf. Security Policy Management with Model Driven Security - A new security management approach applied to SOA (PDF eBook v2.0), November 2009
12. ObjectSecurity. Model Driven Security blog, www.modeldrivensecurity.org
13. Lang, Ulrich and Schreiner, Rudolf. Developing Secure Distributed Systems with CORBA. Artech House, 288 pages, February 2002, ISBN 1-58053-295-0
14. Watson, A., and al. Object Management Group Overview and guide to OMG's architecture, 2003. www.omg.org/mda, document omg/03-06-01 (MDA Guide V1.0.1)
15. Wagner, R. et al. (Gartner, Inc.). Cool Vendors in Application Security and Authentication, 2008" (G00156005). 2008. www.gartner.com
16. ObjectSecurity. ObjectSecurity OpenPMF website, www.openpmf.com
17. Intalio, Intalio Website, www.intalio.com, 2010
18. U. Lang, Model Driven Security blog, www.modeldrivensecurity.org, 2006-2010
19. US Department of Defense. Department of Defense Architecture Framework (DoDAF). 2007. www.architectureframework.com/dodaf
20. UK Ministry of Defence. The MOD Architecture Framework Version 1.2. 2008. www.modaf.com
21. Ritter, Tom, and Schreiner, Rudolf, and Lang, Ulrich. Integrating Security Policies via Container Portable Interceptors in IEEE Distributed Systems Online, vol. 7, no. 7, 2006, art. no. 0607-o7001 (Best Paper Award, ARM2005).
22. Lang, Ulrich and Schreiner, Rudolf. Model Driven Security Accreditation (MDSA) For Agile, Interconnected IT Landscapes. The 1st ACM Workshop on Information Security Governance, November 13, 2009, Hyatt Regency Chicago, Chicago, USA
23. Lang, Ulrich and Schreiner, Rudolf. Model Driven Security Accreditation (MDSA) For Agile, Interconnected IT Landscape (PDF eBook), June 2009
24. CCRA, Common Criteria v3., 2006. www.commoncriteriaportal.org