security and trust issues in semantic grids

《security and trust issues in semantic grids》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、SecurityandTrustIssuesinSemanticGridsDanielOlmedilla1,OmerF.Rana2,BrianMatthews3,andWolfgangNejdl11L3SResearchCenterandUniversityofHanover,Germany{olmedilla,nejdl}@l3s.de2SchoolofComputerScienceandWelsheScienceCenter,CardiffUniversity,UKo.f.rana@cs.cardiff.ac.uk3CCLRC,UKB.M.Matthews@rl.ac.ukAb

2、stract.Gridcomputingallowssharingofservicesandresourcesac-crossinstitutions.However,currentGridsecuritymechanismsforau-thenticationandauthorizationaretoorigidandtheylacktheabilitytodeterminehow“trustworthy”theresultobtainedfromaspecificproviderislikelytobe.Thispaperdescribesthedifferentfacetsas

3、sociatedtoTrustandidentifiestheneedforTrustManagementapproachesinthecontextofVirtualOrganizationslifecycleandresourceaccesscontrolintheGrid.1IntroductionAkeythemeinGridcomputingisthecapabilitytoshareservices(representingdifferentkindsofexpertise)distributedacrossmultipleinstitutions,andgen-eral

4、lyreferredtoasa“VirtualOrganisation”(VO).WhenintegratingservicesacrossmultiplepartnersthatformaVO,bothsecurityandtrustissuesbecomesignificant.Thefollowingquestionsmaybeusedtodescribethekeyrequirementsthatarise:–CaseI:DoIallowuserXtousemyresources?Ifso,whatrequirementsmustbesatisfiedbysuchauser?

5、–CaseII:DoIbelievewhatProviderAsaysistrueandfactual?–CaseIII:DoIagreewiththeanswerthatisprovidedbyaProviderorGroup?–CaseIV:DoIbelievethataProviderorGroupgoalsand/orprioritiesmatchmine?Fromtheserequirements,wecanseethatCaseIrelatestotheissueofsecuritycredentialsandpolicyprotection–i.e.whethera

6、particularserviceproviderallowsanexternalusertomakeuseofitsresources.SignificantworkhasalreadybeenundertakenwithintheGridcommunityinthisarea–generallythroughtheuseofX509-baseddigitalcertificatestoverifyidentity.CasesII,IIIandIVrefertoissuesthatarenotdirectlyrelatedtosecurity–astheyinvolveamored

7、eeperunderstandingoftheinteractionstakingplacebetweenaprovideranduser.DagstuhlSeminarProceedings05271SemanticGrid:TheConvergenceofTechnologieshttp://drops.dagstuhl.de/opus/volltexte/2006/408CurrenttrendinGridSecurityInfrastructure(GSI)istoena