A model for usage control in GRID systems

Martinelli, Fabio; Mori, Paolo

doi:10.1109/seccom.2007.4550326

Cited by 9 publications

(17 citation statements)

References 22 publications

(26 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…[10] is based on Globus middleware and provides method level access with credential delegation. [9] is also specific to Globus middleware. The UCON model has been extended to provide usage control.…”

Section: Pos(isgc 2011 and Ogf 31)024mentioning

confidence: 99%

Secure Peer to Peer Message Passing using A-JUMP

Asghar¹,

Hafeez²,

Malik³

et al. 2011

Proceedings of the International Symposium on Grids and Clouds and the Open Grid Forum — PoS(ISGC 2011 &Amp; OGF 31)

View full text Add to dashboard Cite

MPI is a de facto standard for message passing for high performance parallel, as well as, for distributed computing environment. The static and homogenous model of MPI is not compatible with the dynamic and heterogeneous Grid environment. There are not many implementations which offer message passing over Internet and Grids. P2P-MPI and A-JUMP are MPI implementations, which provide both point-to-point and collective data operations over Internet using Java. However, none of these MPI implementations are categorized as a secure message passing implementation. In these MPI implementations security is overlooked to avoid performance degradation. Security becomes a fundamental concern when considering message passing over Internet, and should be accordingly addressed. Moreover, access over Internet requires authorization/authentication of resources and users along with encryption of data. In this paper, we have proposed secure message passing over Internet and Grids using A-JUMP. This paper also presents performance analysis and comparison of the proposed model with P2P-MPI and A-JUMP.

show abstract

Section: Pos(isgc 2011 and Ogf 31)024mentioning

confidence: 99%

Secure Peer to Peer Message Passing using A-JUMP

Asghar¹,

Hafeez²,

Malik³

et al. 2011

Proceedings of the International Symposium on Grids and Clouds and the Open Grid Forum — PoS(ISGC 2011 &Amp; OGF 31)

View full text Add to dashboard Cite

show abstract

“…We decided to use an operational policy language (POLPA) expressive enough to model the basic features of UCON. Due to space limitation, we refer the reader to [5,4] for more details on the POLPA and policy examples.…”

Section: Usage Control Modelmentioning

confidence: 99%

“…In [5,4] we advocated the adoption of the usage control model (UCON), proposed by Sandhu and Park [6], to the access and usage control in Grid. Main advantages of UCON with respect to other access control models are that it allows to define obligations, mutable attributes, and in particular the continuity of usage control.…”

Section: Introductionmentioning

confidence: 99%

“…At first, the coarse-grained level determines whether the user has the right to submit this job, and after the fine-grained authorization system checks that the job satisfies the finegrained policy while running. The coarse-grained and the execution of two distinct sets of actions on distinct set of objects, but they are expressed using the same POLPA policy language [5,4]. Implementation of authorization engines enforcing security policies is compliant with OGSA standard and can be easily plugged-in to enhance current Globus authorization infrastructure.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

On Usage Control for GRID Services

Colombo¹,

Martinelli²,

Mori³

et al. 2009

2009 International Joint Conference on Computational Sciences and Optimization

Self Cite

View full text Add to dashboard Cite

In recent years, usage control has been proposed as a novel authorization solution for open, heterogeneous, distributed computer environments. Grid is a such environment providing services for seamless sharing and usage of heterogeneous computational resources. Researches have shown that usage control is a viable solution for authorization in Grid. Unfortunately, the implementation of continues usage control for Grid services is not widely presented.In this paper, we present a usage control model and focus on continuous control over Grid services. If a security policy is violated during a service execution, the service should be blocked or terminated. Our approach presents different levels of granularity and enforces coarse and finegrained usage control on generic and computational Grid services. Furthermore, we present an implementation of our prototype based on POLPA policy language and its reasoning authorization engine integrated into Grid services runtime component of Globus Toolkit. Our prototype is facilitated through implementation of service interfaces compliant with OGSA standard and can be easily plugged-in to existing Globus authorization infrastructure.

show abstract

“…In [Sandhu06] they propose the adoption of UCON in collaborative computing systems, such as the Grid. A preliminary attempt to adopt this model in Grid has been made in [Martinelli05], and this is the model that we adopt in the GridTrust framework [Martinelli07].…”

Section: Current State Of the Art In Grid Securitymentioning

confidence: 99%

Fine-Grained Continuous Usage Control of Service Based Grids – The GridTrust Approach

Naqvi

Massonet

Aziz

et al. 2008

Towards a Service-Based Internet

Self Cite

View full text Add to dashboard Cite

Access control techniques designed for single domain infrastructures, where users are known by domain administrators, provide considerable liberty in the usage of resources. This paradigm is not suitable for highly scalable and decentralised systems such as Grids and service oriented architectures (SOA), where resources are shared between domains, and users come from remote domains. One approach is to provide policy-driven autonomic solutions that operate a continuous monitoring of the usage of resources by users. This paper presents the services and tools offered by the GridTrust Security Framework (GSF). GSF addresses three layers of the next generation of grid (NGG) architecture: the Grid application layer, the Grid service middleware layer, and the Grid foundation layer. The framework is composed of security and trust services and tools provided at the middleware and Grid foundation middleware layers. Various business case studies are being developed to validate the GridTrust results.

show abstract

A model for usage control in GRID systems

Cited by 9 publications

References 22 publications

Secure Peer to Peer Message Passing using A-JUMP

Secure Peer to Peer Message Passing using A-JUMP

On Usage Control for GRID Services

Fine-Grained Continuous Usage Control of Service Based Grids – The GridTrust Approach

Contact Info

Product

Resources

About