Soutei, a Logic-Based Trust-Management System System Description

Soutei, a Logic-Based Trust-Management System System Description

Cached

Download Links

by Andrew Pimlott , Oleg Kiselyov

Citations:

2 - 0 self

Versions

Version 0

Version History

Metadata Version 0

Datum	Value	Source
TITLE	Soutei, a Logic-Based Trust-Management System System Description	SVM HeaderParse 0.2
AUTHOR NAME	Andrew Pimlott	SVM HeaderParse 0.2
AUTHOR AFFIL	1 Planning Systems, Inc., Slidell	SVM HeaderParse 0.2
AUTHOR ADDR	LA	SVM HeaderParse 0.2
AUTHOR NAME	Oleg Kiselyov	SVM HeaderParse 0.2
AUTHOR AFFIL	1 Planning Systems, Inc., Slidell	SVM HeaderParse 0.2
AUTHOR ADDR	LA	SVM HeaderParse 0.2
ABSTRACT	Abstract. We describe the design and implementation of a trust-management system Soutei, a dialect of Binder, for access control in distributed systems. Soutei policies and credentials are written in a declarative logic-based security language and thus constitute distributed logic programs. Soutei policies are modular, concise, and readable. They support policy verification, and, despite the simplicity of the language, express role- and attribute-based access control lists, and conditional delegation. We describe the real-world deployment of Soutei into a publish-subscribe web service with distributed and compartmentalized administration, emphasizing the often overlooked aspect of authorizing the creation of resources and the corresponding policies. Soutei brings Binder from a research prototype into the real world. Supporting large, truly distributed policies required non-trivial changes to Binder, in particular mode-restriction and goal-directed top-down evaluation. To improve the robustness of our evaluator, we describe a fair and terminating backtracking algorithm.	SVM HeaderParse 0.2
CITATIONS	25 found	ParsCit 1.0