DisCo: middleware for securely deploying decomposable services in partly trusted environments

Freudenthal, Eric; Karamcheti, Vijay

doi:10.1109/icdcs.2004.1281616

Cited by 3 publications

(5 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…DisCo [20] middleware infrastructure facilitates the construction and deployment of decomposable services in environments without a stable trust relationship across multiple security domains. It does not deal with how to protect sensitive credential information and access control policies.…”

Section: Related Workmentioning

confidence: 99%

ROST: Remote and hot service deployment with trustworthiness in CROWN Grid

Huai

Sun

et al. 2007

Future Generation Computer Systems

View full text Add to dashboard Cite

Section: Related Workmentioning

confidence: 99%

ROST: Remote and hot service deployment with trustworthiness in CROWN Grid

Huai

Sun

et al. 2007

Future Generation Computer Systems

View full text Add to dashboard Cite

“…DisCo also includes a novel abstraction called the Switchboard, which provides applications with the ability to create credentialed, secure connections with the same programming effort as might be required in a completely secure environment. The overall DisCo architecture and the Switchboard abstraction are described in additional detail elsewhere [9,10].…”

Section: Sponsoring/monitoring Agency Name(s) and Address(es) 10 Spomentioning

confidence: 99%

“…dRBAC is being developed as a trust management component of a larger system called the Distributed Coalitions Infrastructure (DisCo) [9] that presents a simple unified interface for trust-monitored distributed application deployment. We have implemented a centralized dRBAC system that responds to trust-relationship queries generated by our DisCo infrastructure.…”

Section: Implementation Statusmentioning

confidence: 99%

“…dRBAC is one component of a larger architecture called the Distributed Coalitions Infrastructure (DisCo) [9]. DisCo presents a simple, unified interface for distributed application deployment in environments that contain systems and services administered by multiple authorities with changing trust relationships.…”

Section: Drbac In a Larger Security Context: Case Studymentioning

confidence: 99%

See 1 more Smart Citation

dRBAC: distributed role-based access control for dynamic coalition environments

Freudenthal

Pesin

Port

et al.

Proceedings 22nd International Conference on Distributed Computing Systems

Self Cite

131

View full text Add to dashboard Cite

Distributed Role-Based Access Control (dRBAC) is a scalable, decentralized trust-management and access-control mechanism for systems that span multiple administrative domains. dRBAC represents controlled actions in terms of roles, which are defined within the trust domain of one entity and can be transitively delegated to other roles within a different trust domain. dRBAC utilizes PKI to identify all entities engaged in trust-sensitive operations and to validate delegation certificates. The mapping of roles to authorized name spaces obviates the need to identify additional policy roots. dRBAC distinguishes itself from previous trust management and role-based access control approaches in its support for three features: (1) third-party delegations, which improve expressiveness by allowing an entity to delegate roles outside its namespace when authorized by an explicit delegation of assignment; (2) valued attributes, which modulate transferred access rights via mechanisms that assign and manipulate numerical values associated with roles; and (3) credential subscriptions, which enable continuous monitoring of established trust relationships using a pub/sub infrastructure to track the status of revocable credentials. This paper describes the dRBAC model, its scalable implementation using a graph-based model of credential discovery and validation, and its application in a larger security context.

show abstract

“…DisCo [3] addresses secure deployment of distributed applications across administrative domains. It provides a pluggable interface for component authorization that can support different access control models.…”

Section: Related Workmentioning

confidence: 99%