Dynamic, context-aware, least-privilege grid delegation

Mehran Ahsant, James Alan Basney, Lennart Johnsson

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

Performing delegation in large scale, dynamic and distributed environments with large numbers of shared resources is more challenging than inside local administrative domains. In dynamic environments like Grids, on one hand, delegating a restricted set of rights reduces exposure to attack but also limits the flexibility and dynamism of the application; on the other hand, delegating all rights provides maximum flexibility but increases exposure. This issue has not yet been adequately addressed by current Grid security mechanisms and is becoming a very challenging and crucial issue for future Grid development. Therefore, providing an effective delegation mechanism which meets the requirements of the least privilege principle is becoming an essential need. Furthermore, we are witnessing a phenomenal increase in the automation of organizational tasks and decision making, as well as the computerization of information related services, requiring automated delegation mechanisms. In order to meet these requirements we introduce an Active Delegation Framework which extends our previous work on on-demand delegation, making it context-aware. The framework provides a just-in-time, restricted and dynamic delegation mechanism for Grids. In this paper we describe the development of this framework and its implementation and integration with the Globus Toolkit.

Original languageEnglish (US)
Title of host publicationProceedings - 8th IEEE/ACM International Conference on Grid Computing, GRID 2007
Pages209-216
Number of pages8
DOIs
StatePublished - Dec 1 2007
Event8th IEEE/ACM International Conference on Grid Computing, GRID 2007 - Austin, TX, United States
Duration: Sep 19 2007Sep 21 2007

Publication series

NameProceedings - IEEE/ACM International Workshop on Grid Computing
ISSN (Print)1550-5510

Other

Other8th IEEE/ACM International Conference on Grid Computing, GRID 2007
CountryUnited States
CityAustin, TX
Period9/19/079/21/07

ASJC Scopus subject areas

  • Engineering(all)

Fingerprint Dive into the research topics of 'Dynamic, context-aware, least-privilege grid delegation'. Together they form a unique fingerprint.

  • Cite this

    Ahsant, M., Basney, J. A., & Johnsson, L. (2007). Dynamic, context-aware, least-privilege grid delegation. In Proceedings - 8th IEEE/ACM International Conference on Grid Computing, GRID 2007 (pp. 209-216). [4354135] (Proceedings - IEEE/ACM International Workshop on Grid Computing). https://doi.org/10.1109/GRID.2007.4354135