Certificate-based access control for widely distributed resources

8th USENIX Security Symposium

Volumn , Issue , 1999, Pages

  Thompson, Mary ^a   Johnston, William ^a   Mudumbai, Srilekha ^a   Hoo, Gary ^a   Jackson, Keith ^a   Essiari, Abdelilah ^a  

^a LAWRENCE BERKELEY NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL MECHANISM; ACCESS POLICIES; CERTIFICATE-BASED; DISTRIBUTED RESOURCES; IDENTITY CERTIFICATES; PERFORMANCE MEASUREMENTS; POLICY ENGINE;

ACCESS CONTROL;

EID: 85084164318     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (27)

1. “The Akenti Approach”, http://www-itg.lbl.gov/Akenti/
2. “About the Apache HTTP Server Project”, http://www.apache.org/
3. “Apache-SSL”, http://www.apache-ssl.org/
4. M. Blaze, J. Feigenbaum, A.D. Keromytis, “The KeyNote Trust Management System”, work in progress Internet Draft, March1999
5. M. Blaze, J. Feigenbaum, J. Lacey, “Decentralized Trust Management System”, Proceedings of the 17th Symposium of Security and Privacy, pp. 164-175 IEEE Computer Science Press, Los Alamitos, 1996
6. J. Boyle, R. Cohen, D. Durham, S. Herzog, R. Rajan, A. Sastry, “The COPS (Common Open Policy Service) Protocol”, Internet Engineering Task Force Draft, work in progress
7. “Diesel Combustion Collaboratory Homepage”, http://www-collab.ca.sandia.gov/
8. “DOE2000 Homepage”, http://www.mcs.anl.gov/DOE2000/
9. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, T. Yloenen, “Simple Public Key Certificate”, Internet Engineering Task Force Draft, work in progress
10. “Extensible Markup Language” http://www.w3.org/XML/
11. S. Farrell, R. Housley, “An Internet AttributeCertificate Profile for Authorization”, Internet Engineering Task Force Draft, work in progress
12. W. Ford, Computer Communications Security: Principles, Standards, Protocols, and Techniques, Prentice-Hall, Englewood Cliffs, New Jersey, 07632, 1995
13. I. Foster, C. Kesselman, G. Tsudik, S. Tuecke, “A Security Architecture for Computation Grids”, Proc. 5th ACM Conference on Computer and Communications Security Conference, pg. 83-92, 1998.
14. A. Geist, N. Nachtigal, “ORNL Electronic Notebook Project”, http://www.epm.ornl.gov/~geist/java/applets/enote/
15. “The Globus Project”, http://www-fp.globus.org/
16. G. Hoo, W. Johnston, “QoS as Middleware: Bandwidth Brokering System Design”, submitted to the High Performance and Distributed Computing conference 1999.
17. R. Housely, W. Ford, W. Polk, D. Solo, “Internet X.509 Public Key Infrastructure”, Internet Engineering Task Force Draft, PKIX Working group, work in progress. Also see Ford & Baum, Secure Electronic Commerce, Prentice-Hall, pp 214-230
18. W. Johnston, S. Mudumbai, M. Thompson, “Authorization and Attribute Certificates for Widely Distributed Access Control”, IEEE 7th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises- WETICE ‘98
19. S. Mudumbai, A. Essiari, W. Johnston, “Anchor - A Secure Mobile Agent Toolkit”, - submitted to Mobile Agents ‘99
20. B.C. Neuman and T. Ts’o, “Kerberos: An Authentication Service for Computer Networks”, IEEE Communications Magazine, v.32, n.9, Sep 1994, pp. 33-38
21. P. Nikander, J. Partanen, “Distributed Policy Management for JDK 1.2”, Proceedings of Network and Distributed System Security Symposium, San Diego, CA, Feb 3-5, 1999
22. OMG-CORBA homepage” http://www.omg.org
23. T. Ryutov, C. Neuman, “Access Control Framework for Distributed Applications”, Internet Engineering Task Force Draft, work in progress
24. B. Schneier, Applied Cryptography, Second Edition, John Wiley & Sons, 1996
25. “The SSL Protocol”, http://home.netscape.com/eng/security/SSL_2.html
26. “SSLeay FAQ”, http://www.psy.uq.oz.au/~ftp/Crypto/
27. B. Tierney, W. Johnston, B. Crowley, G. Hoo, C. Brooks, D. Gunter, “The NetLogger Methodology for High Performance Distributed Systems Performance Analysis”, Proceedings of the IEEE High Performance Distributed Computing -7, ‘98