资源描述:
《antigone implementing policy in secure group communicationnew》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、Antigone:ImplementingPolicyinSecureGroupCommunicationPatrickMcDanielyandAtulPrakashElectricalEngineeringandComputerScienceDepartmentUniversityofMichigan,AnnArborpdmcdanaprakash@eecs.umich.eduAbstractSignificantstrideshavebeenmadeinachievingstrongsemanticsandsecurityguaranteeswithingroup
2、communicationandmulticastsystems.However,thescopeofavailablesecuritypoliciesinthesesystemsisoftenlimited.Incontrast,theapplicationsthatrequiretheservicesprovidedbythesesys-temscandiffersignificantlyintheirsecuritypolicyneeds.Oftenapplicationdesignershavetoeithermakesignificantcompromisesi
3、nusingagivengroupcommunicationsystemorbuildtheirowncus-tomizedsolutions,anerror-pronetask.ThispaperpresentsAntigone,aframeworkthatprovidesasuiteofmechanismsfromwhichflexibleapplicationsecuritypoliciesmaybeimplemented.WithAntigone,developersmaychooseapolicythatbestaddressestheirsecurityan
4、dperformancerequirementsofanapplicationrequiringgroupcommunication.WedescribetheAntigone'smechanisms,consistingofasetofmicro-protocols,andshowhowdifferentsecuritypoliciescanbeimplementedusingthosemech-anisms.Wealsopresentaperformancestudyillustratingthesecurity/performancetradeoffsthatc
5、anbemadeusingAntigone.Throughanexampleconferencingapplication,wedemonstratetheuseoftheAntigoneapplicationsprogramminginterfaceandconsidertheuseofpolicyinseveraldistinctsessionenvironments.1IntroductionIncreasesinthepowerofdigitalcommunicationhasleadtotheemergenceofusefulbusiness,commerc
6、ial,andpersonalinformationmanagementsystems.However,thesecuritymodelsunderwhichtheseappli-cationsandservicesoperateareoftenlimited.Manyexistingsystemsdefineasinglethreatmodelduringdevelopment.Thusdevelopers,ratherthanusersandadministrators,largelydefinethesecurityservicesavailabletothepar
7、ticipantsanddata.Asaresult,issuessuchasperformance,availability,andtrustareweighedduringsoftwaredesign,andnotwithinthecontextofaspecificapplicationsession.Thelackofsupportforuser-definedrequirementsinexistingapplicationshighlightstheneedforgreatercontroloverthetypesanduseofsoftwa