TrustBuilder: negotiating trust in dynamic coalitions

Seamons, Kent E.; Chan, Tat Y.; Child, E.; Halcrow, M.; Hess, Adam; Holt, Jason E.; Jacobson, J.; Jarvis, Ryan; Patty, A.; Smith, Bryan L.; Sundelin, Tore; Yu, Lina

doi:10.1109/discex.2003.1194912

Cited by 18 publications

(9 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…8 The implementation of the negotiation functionalities specification version 1.1 is implemented by Sun. 1 Such an implementation especially provides the functionalities of a PDP for evaluating a request against an XACML policy. According to our profile, the EA are based on such XACML PDP functionalities in the sense that they evaluate XACML requests for enablement against existing assignment policies.…”

Section: Methodsmentioning

confidence: 99%

See 1 more Smart Citation

XeNA: an access negotiation framework using XACML

et al. 2008

View full text Add to dashboard Cite

XeNA is a new model for the negotiation of access within an extended eXtensible Access Control Markup Language (XACML) architecture. We bring together trust management through a negotiation process and access control management within the same architecture. The negotiation process based on resource classification methodology occurs before the access control management. A negotiation module at the core of this negotiation process is in charge of collecting resources required to establish a level of trust and to insure a successful evaluation of access. The access control management is based on an extended RoleBased Access Control (RBAC) profile of XACML. This extended profile responds to advanced access control requirements and allows the expression of several access control models within XACML.

show abstract

Section: Methodsmentioning

confidence: 99%

“…In [1][2][3], authors suggest a prototype for trust establishment called TrustBuilder. It allows negotiating trust across organizational boundaries, between entities from different security domains.…”

mentioning

confidence: 99%

XeNA: an access negotiation framework using XACML

et al. 2008

View full text Add to dashboard Cite

show abstract

“…Therefore, it has several shortcomings with respect to trust negotiation [9]. TrustBuilder [15] provides a broad class of negotiation policies, as well as a policy-and language-independent negotiation protocol that ensures the interoperability of defined policies within the TrustBuilder architecture. Each participant in a negotiation process has an associated security agent that manages the negotiation.…”

Section: Related Workmentioning

confidence: 99%

Building Automated Trust Negotiation architecture in virtual computing environment

Zou

Zheng

et al. 2009

J Supercomput

View full text Add to dashboard Cite

Automated Trust Negotiation (ATN) is an important method to establish trust relationship between two strangers by exchanging their access control policies and credentials. Unfortunately, ATN is not widely adopted because of the complexity and multiformity of negotiation policies, especially in virtual computing environment, where the situation becomes worse than in traditional computing environment, due to the fact that a host with multiple virtual machines needs to be deployed with multiple negotiation policies. Moreover, all of these policies for each virtual machine must be upgraded and checked. To ease the burden on the administrator when deploying ATN access control policies and credentials in virtual computing environment, we propose an automated trusted negotiation architecture called virtual automated trust negotiation (VATN) to centralize ATN policies and credentials for multiple virtual machines in a physical node into a privileged virtual machine. VATN puts policy compliance checker and credential verification control in each virtual machine to improve the execution efficiency of trust negotiation. We implement VATN in Xen virtualization platform. Finally, we discuss the correctness of policy consistency checking and make performance analysis of VATN implemented in Xen.

show abstract

“…It has several shortcomings with respect to trust negotiation [26]. Trust-Builder [27] provides a broad class of negotiation policies, as well as a policy-and language-independent negotiation protocol that ensures the interoperability of defined policies within the Trust-Builder architecture. Gwertzman and Seltzer [28] states that most wide-area replication schemes are client initiated.…”

Section: Related Workmentioning

confidence: 99%

File replication and consistency maintenance mechanism in a trusted distributed environment

Vardhan

Kushwaha

2012

CSIT

View full text Add to dashboard Cite

An effort has been made to propose an adaptive, trust based, on demand and reliable file replication approach for distributed environment. The work proposes an active replication mechanism for file replication; file access and performance transparency to system, thereby ensuring replication decisions such as when to replicate, where to replicate, load status of the node selected for replication and avoidance of redundant replica on that node. The proposed model introduces File Replication Server (FRS) that replicates the file, when total number of request for it reaches the threshold value, adhering to replication decision. If all replicas of file are not synchronized with each other, this drives system into inconsistent state. To keep files consistent, changes made at one replica of file should be reflected on other replicas in minimum possible time. Unlike conventional approaches viz., Write Update and Write Invalidate, in which either all or any fixed master replica is updated respectively, the proposed approach transfers the role of master replica to the last modified replica. File replica is updated on-demand by only propagating the required partial updates. The master replica immediately computes the file content modifications but propagates them only on-demand. Once a node gets itself registered, it becomes the part of elite FRS community. This paper introduces basic trust parameters and adaptive factors in computing trustworthiness of peer FRS, namely, frequency of the request for a particular file that a FRS perform, registration type of node i.e., paid or unpaid, write operation not permitted if trust value of a FRS is less than threshold, feedback that a FRS gives about other FRS and authenticity of the session key. Simulation results show that during high file request scenario for a particular file, frequently accessed files are replicated on other FRSs dynamically and file request is redirected in transparent manner, thus reducing request completion time by about 28.78-47.24 % as compared to FTP. Experimental results shows that various factors viz., file size, size of modifications and number of replicas to be updated affects the time to propagate the changes to other replicas. Percentage reduction in time for propagating these changes varies from 31.56 to 78.1 %. Similarly, the reduction in time for updating replicas simultaneously varies from 78.17 to 85.37 %. Though the percentage increase in time required for acquiring the keys to access the services with trust based security model varies from 11.94 to 17.49 %, the same is compensated by reduction in time for updating replicas. In order to ascertain stability of proposed model, Calculus of Communicating System (CCS) for proposed model is compiled on CWB-NC tool and bisimulation equivalence is proved for proposed file replication model.

show abstract

TrustBuilder: negotiating trust in dynamic coalitions

Cited by 18 publications

References 3 publications

XeNA: an access negotiation framework using XACML

XeNA: an access negotiation framework using XACML

Building Automated Trust Negotiation architecture in virtual computing environment

File replication and consistency maintenance mechanism in a trusted distributed environment

Contact Info

Product

Resources

About