Towards Continuous Usage Control on Grid Computational Services

Martinelli, Fabio; Mori, Paolo; Vaccarelli, Anna

doi:10.1109/icas-icns.2005.93

Cited by 29 publications

(35 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This extension requires analysing bytecode instead of source code when extracting usage policies and when constructing the CFG. Martinelli et al [2,29,30] model security policies as process algebras. They implement a custom JVM, with an execution monitor that traps system calls and fires them concurrently to the policy.…”

Section: Static Analysis and Optimizationsmentioning

confidence: 99%

Securing Java with Local Policies.

Bartoletti¹,

Costa²,

Degano³

et al. 2009

JOT

View full text Add to dashboard Cite

Abstract. We propose an extension to the security model of Java. It allows for specifying, analysing and enforcing history-based policies. Policies are defined by finite state automata recognizing the permitted execution histories. Programmers can sandbox an untrusted piece of code with a policy, which is enforced at run-time through its local scope. A static analysis allows for optimizing the execution monitor, that will only check the program points where some security violation may actually occur.

show abstract

Section: Static Analysis and Optimizationsmentioning

confidence: 99%

Securing Java with Local Policies.

Bartoletti¹,

Costa²,

Degano³

et al. 2009

JOT

View full text Add to dashboard Cite

show abstract

“…It focuses on the integration of the reputation management system with the Grid computational resource monitoring system of [7]. We use the Java language, suitable for developing Grid applications, for the platform independence addressing the Grid interoperability problem.…”

Section: Methodsmentioning

confidence: 99%

“…The system architecture resembles the one in [7], and it is shown in Figure 1. It is designed to monitor the behaviour of Java applications executed on behalf of Grid users on Grid computational services.…”

Section: Architecturementioning

confidence: 99%

“…In the original framework, the security behavioral policy, describes the permitted behaviour, i.e., the sequences of security relevant actions that the Grid applications are allowed to execute on the Grid computational service. The exploited language is described in [7].…”

Section: Policy Languagesmentioning

confidence: 99%

“…In [1,7], we started a fine grained run-time access control framework for Grid services. It was based on a behavioral policy language that describes the correct sequence of actions that the applications are allowed to perform on the computational resource.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Fine Grained Access Control with Trust and Reputation Management for Globus

Colombo

Martinelli

Mori

et al.

On the Move to Meaningful Internet Systems 2007: CoopIS, DOA, ODBASE, GADA, and IS

Self Cite

View full text Add to dashboard Cite

show abstract

A Fine-Grained and X.509-Based Access Control System for Globus

Koshutanski

Martinelli

Mori

et al. 2006

On the Move to Meaningful Internet Systems 2006: CoopIS, DOA, GADA, and ODBASE

View full text Add to dashboard Cite

The rapid advancement of technologies such as Grid computing, peer-to-peer networking, Web Services to name a few, offer for companies and organizations an open and decentralized environment for dynamic resource sharing and integration. Globus toolkit emerged as the main resource sharing tool used in the Grid community. Access control and access rights management become one of the main bottleneck when using Globus because in such an environment there are potentially unbounded number of users and resource providers without a priori established trust relationships. Thus, Grid computational resources could be executed by unknown applications running on behalf of distrusted users and therefore the integrity of those resources must be guaranteed. To address this problem, the paper proposes an access control system that enhances the Globus toolkit with a number of features: (i) finegrained behavioral control; (ii) application-level management of user's credentials for access control; (iii) full-fledged integration with X.509 certificate standard; (iv) access control feedback when users do not have enough permissions.

show abstract

Towards Continuous Usage Control on Grid Computational Services

Cited by 29 publications

References 16 publications

Securing Java with Local Policies.

Securing Java with Local Policies.

Fine Grained Access Control with Trust and Reputation Management for Globus

A Fine-Grained and X.509-Based Access Control System for Globus

Contact Info

Product

Resources

About