Improving multi-tier security using redundant authentication

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2007, Pages 54-62

  Boyer, Jodie P ^a   Hasan, Ragib ^a   Olson, Lars E ^a   Borisov, Nikita ^b   Gunter, Carl A ^a   Raila, David ^a  

^a Digital Computer Laboratory   (United States)

^b University of Illinois at Urbana Champaign   (United States)

Author keywords

Authentication; Building Automation Systems

Indexed keywords

AUTOMATION; ENTERPRISE RESOURCE PLANNING; INTELLIGENT BUILDINGS;

AUTHENTICATION SERVICES; BUILDING AUTOMATION SYSTEMS; LEAST PRIVILEGE; MULTI-TIER; OVERCURRENTS; SYSTEM APPLICATIONS; WEB SERVER SYSTEM;

AUTHENTICATION;

EID: 79955989207     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1314466.1314475     Document Type: Conference Paper

References (18)

1. A. Acharya and M. Raje. MAPbox: Using parameterized behavior classes to confine untrusted applications. In USENIX Security Symposium, 2000.
2. D. Brumley and D. Song. Privtrans: Automatically partitioning programs for privilege separation. In USENIX Security Sympoisum, Aug. 2004.
3. P. Efstathopoulos, M. Krohn, S. VanDeBogart, C. Frey, D. Ziegler, E. Kohler, D. Mazieres, F. Kaashoek, and R. Morris. Labels and event processes in the Asbestos operating system. In Symposium on Operating Systems Principles, 2005.
4. P. Ehrlich and T. Considine (Chairs). Open Building Information Exchange (oBIX) version 1.0. OASIS Committee Specification, December 2006. http://www.oasis-open.org/committees/tc-home.php?wg-abbrev=obix.
5. T. Garfinkel, B. Pfaff, and M. Rosenblum. Ostia: A delegating architecture for secure system call interposition. In Network and Distributed System Security Symposium, 2004.
6. I. Goldberg, D. Wagner, R. Thomas, and E. Brewer. A secure environment for untrusted helper applications. In USENIX Security Symposium, July 1996.
7. P. P. Griffiths and B. W. Wade. An authorization mechanism for a relational database system. ACM Transactions on Database Systems (TODS), 1(3):242-255, September 1976.
8. Java. http://java.sun.com/.
9. E. Kubaitis. Bluestem overview. Web Page, August 2000. https://www-s4.uiuc.edu/bluestem-notes/.
10. K. Lawrence and C. Kaler (Chairs). Web Services Security (WS-Security) X.509 Certificate Token profile 1.1. OASIS Standard Specification, February 2006. http://docs.oasis-open.org/wss/v1.1/wss-v1.1-spec-os-x509TokenProfile.pdf.
11. Microsoft. Active directory overview. Web Page, Janurary 2005. http://technet2.microsoft.com/windowsserver/en/library/7c981583-cf41-4e6c-b1f6- 5b8863475ede1033.mspx?mfr=true.
12. OPC Task Force. OPC overview. OPC White Paper, October 1998. http://www.opcfoundation.org/DownloadFile.aspx/General/OPC\%20Overview\%201.00. pdf?RI=1.
13. D. S. Peterson, M. Bishop, and R. Pandey. A flexible containment mechanism for executing untrusted code. In USENIX Security Symposium, Aug. 2002.
14. N. Provos. Improving host security with system call policies. In USENIX Security Symposium, Aug. 2003.
15. N. Provos, M. Friedl, and P. Honeyman. Preventing privilege escalation. In USENIX Security Symposium, Washington, DC, Aug. 2003.
16. RSA Laboratories. Public-key cryptography standards (PKCS) #7: Cryptographic message syntax standard version 1.6. RSA Laboratories Technical Note, May 1997. http://www.rsa.com/rsalabs/node.asp?id=2129.
17. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: A fast capability system. In Symposium on Operating Systems Principles, 1999.
18. T. Wason, S. Cantor, J. Hodges, J. Kemp, and P. Thompson. Liberty ID-FF architecture overview, 2005.