Results 1 - 10 of 131

Responding to policies at runtime in TrustBuilder

by Bryan Smith, Kent E. Seamons, Michael D. Jones , 2004
"... Automated trust negotiation is the process of establishing trust between entities with no prior relationship through the iterative disclosure of digital credentials. One approach to negotiating trust is for the participants to exchange access control policies to inform each other of the requirements ..."
Abstract - Cited by 13 (0 self) - Add to MetaCart
that generates only one set. The ability to generate all of the combinations provides greater flexibility in how the system or user establishes trust. For example, the least sensitive credential combination could be disclosed first. These ideas have been implemented in TrustBuilder, our prototype system

Supporting Structured Credentials and Sensitive Policies through Interoperable Strategies for Automated Trust Negotiation

by Ting Yu, Marianne Winslett, Kent E. Seamons - ACM TRANSACTIONS ON INFORMATION AND SYSTEM SECURITY , 2003
"... ... this paper we provide the formal underpinnings for that goal, by formalizing the concepts of negotiation protocols, strategies, and interoperation. We show how to model the information flow of a negotiation, for use in analyzing strategy interoperation. We also present two large sets of strategi ..."
Abstract - Cited by 156 (22 self) - Add to MetaCart
also discuss how these results fit into TrustBuilder, our prototype system for trust negotiation

Content-Triggered Trust Negotiation

by Brigham Young University, Date Parris Egbert, David W. Embley, G. Rex Bryce, Adam Timothy Hess, Adam Timothy Hess, Adam Timothy Hess , 2003
"... CONTENT-TRIGGERED TRUST NEGOTIATION Adam Timothy Hess Department of Computer Science Master of Science Traditionally, the focus of access control in client/server environments is on protecting sensitive server resources by determining whether or not a client is authorized to access those resourc ..."
Abstract - Add to MetaCart
such content to an access control policy, and establishes the trustworthiness of the server before the content is disclosed to the server. The model targets open systems, where clients and servers do not have preexisting trust x xi relationships. I have implemented the model within TrustBuilder

Trust Negotiation: Authorization for Virtual Organizations

by M. Winslett, Adam J. Lee, Kenneth J. Perano
"... Trust negotiation is an authorization approach for open distributed systems, such as dynamic coalitions and other types of virtual organizations. Under the trust negotiation approach to authorization, every resource that might be shared within the coalition is protected by an access policy that desc ..."
Abstract - Cited by 1 (0 self) - Add to MetaCart
Trust negotiation is an authorization approach for open distributed systems, such as dynamic coalitions and other types of virtual organizations. Under the trust negotiation approach to authorization, every resource that might be shared within the coalition is protected by an access policy

Adaptive Trust Negotiation and Access Control

by Tatyana Ryutov , Li Zhou, Clifford Neuman, et al. - IN 10TH ACM SYMPOSIUM ON ACCESS CONTROL MODELS AND TECHNOLOGIES , 2005
"... Electronic transactions regularly occur between business partners in separate security domains. Trust negotiation is an approach that provides an open authentication and access-control environment for such transactions, but it is vulnerable to malicious attacks leading to denial of service or leakag ..."
Abstract - Cited by 36 (4 self) - Add to MetaCart
or leakage of sensitive information. This paper introduces an Adaptive Trust Negotiation and Access Control (ATNAC) framework to solve these problems. The framework combines two existing systems, TrustBuilder and GAA-API, to create a system with more flexibility and responsiveness to attack than either

Adaptive trust negotiation and access control for grids

by Tatyana Ryutov, Li Zhou, Clifford Neuman, Noria Foukia - In 6th IEEE/ACM International Workshop on Grid Computing , 2005
"... Abstract — Access control in computational grids is typically provided by a combination of identity certificates and local accounts. This approach does not scale as the number of users and resources increase. Moreover, identity-based access control is not sufficient because users and resources may r ..."
Abstract - Cited by 8 (2 self) - Add to MetaCart
-API utilizes TrustBuilder to establish a sufficient level of trust between the negotiating participants, based on the sensitivity of the access request and a suspicion level associated with the requester. A federated security context allows Grid participants to communicate their security appraisal and make

Trust Negotiation in Electronic Markets

by Todd Barlow, Todd Barlow, Adam Hess, Adam Hess, Kent E. Seamons, Kent E. Seamons , 2001
"... As business transactions migrate into electronic marketplaces, most interactions will occur between strangers. In order for strangers to conduct secure transactions, a sufficient level of mutual trust must be established. A new approach to gradually establishing trust between strangers is through ..."
Abstract - Cited by 6 (1 self) - Add to MetaCart
is through the iterative exchange of digital credentials, known as trust negotiation. This paper briefly describes TrustBuilder, an architecture for automated trust negotiation that we are designing and developing. It also introduces client-initiated trust establishment, a new context for trust

Negotiating Trust on the Grid

by J. Basney, W. Nejdl, D. Olmedilla, V. Welch, M. Winslett - In 2nd WWW Workshop on Semantics in P2P and Grid Computing , 2004
"... Grids support dynamically evolving collections of resources and users, usually spanning multiple administrative domains. The dynamic and crossorganizational aspects of Grids introduce challenging management and policy issues for controlling access to Grid resources. In this paper we show how to exte ..."
Abstract - Cited by 32 (14 self) - Add to MetaCart
to extend the Grid Security Infrastructure to provide better support for the dynamic and cross-organizational aspects of Grid activities, by adding facilities for dynamic establishment of trust between parties. We present the PeerTrust language for access control policies, which is based on guarded

Trust Negotiation for Semantic Web Services

by Daniel Olmedilla, Rubén Lara, Axel Polleres, Holger Lausen - 1ST INTERNATIONAL WORKSHOP ON SEMANTIC WEB SERVICES AND WEB PROCESS COMPOSITION IN CONJUNCTION WITH THE 2004 IEEE INTERNATIONAL CONFERENCE ON WEB SERVICES , 2004
"... Semantic Web Services enable the dynamic discovery of services based on a formal, explicit specification of the requester needs. The actual Web Services that will be used to satisfy the requester's goal are selected at run-time and, therefore, they are not known beforehand. As a consequence, de ..."
Abstract - Cited by 28 (6 self) - Add to MetaCart
Semantic Web Services enable the dynamic discovery of services based on a formal, explicit specification of the requester needs. The actual Web Services that will be used to satisfy the requester's goal are selected at run-time and, therefore, they are not known beforehand. As a consequence

Trust Building in E-Negotiation

by Noam Ebner
"... AbstrAct As the global market expands and business and personal relationships are increasingly taking place online, it is common to conduct negotiation processes in the online venue. This chapter focuses on the challenges to inter-party trust in e-negotiation, and on means for overcoming these chal ..."
Abstract - Add to MetaCart
these challenges. It explains the critical role trust plays in negotiation and portrays the ways in which the communication medium through which a negotiation is conducted affects the dynamics of trust-building and trust-breaking. The author lists eight major obstacles to trust formation in e-negotiation
Results 1 - 10 of 131