MINDS @ UW-Madison

Security Policy Reconciliation in Distributed Computing Environments

Show full item record

File(s):

Author(s)
Wang, Hao; Jha, Somesh; Livny, Miron; McDaniel, Patrick
Publisher
University of Wisconsin-Madison Department of Computer Sciences
Citation
TR1499
Date
2004
Abstract
A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an infractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed, high-throughput system called Condor. Keywords: Security policy, reconciliation, and high-throughput distributed system.
Permanent link
http://digital.library.wisc.edu/1793/60386 
Export
Export to RefWorks 
‚Äč

Part of

Show full item record

Search and browse




About MINDS@UW

Deposit materials

  1. Register to deposit in MINDS@UW
  2. Need deposit privileges? Contact us.
  3. Already registered? Have deposit privileges? Deposit materials.