Partitioning Trust in Network Testbeds

Wong, Gary; Ricci, Robert; Duerig, Jonathon; Stoller, Leigh; Chikkulapelly, Srikanth; Seok, Woojin

doi:10.1109/hicss.2012.466

Cited by 4 publications

(6 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, a user obtains authorisation credentials from his home SA, and these credentials are passed by the user to AMs when requesting tickets. As described in [31], the AM receiving this material can verify its authenticity without contacting the issuer.…”

Section: Behavior In the Face Of Failuresmentioning

confidence: 99%

“…ProtoGENI's sole centralized service, the Clearinghouse (CH), is used to make this process more convenient: it allows federates to publish the certificates that are used to establish trust, and to discover the certificates of other federates. It is important to note that this does not mandate specific trust relationships: as described in [31], a federate may choose not to trust some certificates stored at the clearinghouse, or may choose to trust additional certificates that are not registered there.…”

Section: Protogeni Architecturementioning

confidence: 99%

“…Most importantly, all of these operations may be performed by different principals, who need no direct knowledge of each other. ProtoGENI's authentication and authorisation system are detailed elsewhere [31].…”

Section: Protogeni Architecturementioning

confidence: 99%

“…The URN scheme that we use [26] is hierarchical-each authority is given its own namespace, which it can further subdivide if it chooses. To maintain partitioned trust, each authority is prohibited, through mechanisms described in [31], from creating URNs outside of its namespace. An example of a GENI URN is:…”

Section: Genimentioning

confidence: 99%

See 3 more Smart Citations

Designing a Federated Testbed as a Distributed System

Ricci

Duerig

Stoller

et al. 2012

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

Abstract. Traditionally, testbeds for networking and systems research have been stand-alone facilities: each is owned and operated by a single administrative entity, and is intended to be used independently of other testbeds. However, this isolated facility model is at odds with researchers' ever-increasing needs for experiments at larger scale and with a broader diversity of network technologies. The research community will be much better served by a federated model. In this model, each federated testbed maintains its own autonomy and unique strengths, but all federates work together to make their resources available under a common framework. Our challenge, then, is to design a federated testbed framework that balances competing needs: We must establish trust, but at the same time maintain the autonomy of each federated facility. While providing a unified interface to a broad set of resources, we need to expose the diversity that makes them valuable. Finally, our federation should work smoothly in a coordinated fashion, but avoid central points of failure and inter-facility dependencies. We argue that treating testbed design as a federated distributed systems problem is an effective approach to achieving this balance. The technique is illustrated through the example of ProtoGENI, a system we have designed, built, and operated according to the federated model.

show abstract

Section: Behavior In the Face Of Failuresmentioning

confidence: 99%

Section: Protogeni Architecturementioning

confidence: 99%

Section: Protogeni Architecturementioning

confidence: 99%

Section: Genimentioning

confidence: 99%

See 2 more Smart Citations

Designing a Federated Testbed as a Distributed System

Ricci

Duerig

Stoller

et al. 2012

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

Self Cite

View full text Add to dashboard Cite

show abstract

“…ProtoGENI's sole centralized service, the Clearinghouse (CH), is used to make this process more convenient: it allows federates to publish the certificates that are used to establish trust, and to discover the certificates of other federates. It is important to note that this does not mandate specific trust relationships: as described in [10], a federate may choose not to trust some certificates stored at the clearinghouse, or may choose to trust additional certificates that are not registered there.…”

Section: Enabling Independent Operationmentioning

confidence: 99%

An Architecture for International Federation of Network Testbeds

Ricci

Wong

Stoller

et al. 2013

IEICE Trans. Commun.

Self Cite

View full text Add to dashboard Cite

SUMMARYTestbeds play a key role in the advancement of network science and the exploration of new network architectures. Because the scale and scope of any individual testbed is necessarily limited, federation is a useful technique for constructing testbeds that serve a wide range of experimenter needs. In a federated testbed, individual facilities maintain local autonomy while cooperating to provide a unified set of abstractions and interfaces to users. Forming an international federation is particularly challenging, because issues of trust, user access policy, and local laws and regulations are of greater concern that they are for federations within a single country. In this paper, we describe an architecture, based on the US National Science Foundation's GENI project, that is capable of supporting the needs of an international federation.

show abstract

Resource specification and intelligent user interaction for federated testbeds using Semantic Web technologies

Tošić

Seskar

2014

Computer Networks

View full text Add to dashboard Cite

Partitioning Trust in Network Testbeds

Cited by 4 publications

References 12 publications

Designing a Federated Testbed as a Distributed System

Designing a Federated Testbed as a Distributed System

An Architecture for International Federation of Network Testbeds

Resource specification and intelligent user interaction for federated testbeds using Semantic Web technologies

Contact Info

Product

Resources

About