enable collaborative work, with common security tools that address:

• Enable collaborative work, with common security tools that address: • Large and geographically distributed membership • Membership with diverse expertise, comprising different roles • Community resources with associated community policies • Develop novel tools and approaches for: • Management of collaboration membership and resources • Online CA & Credential Repository (CR), local security integration • Management of roles and privileges • Community Authorization Service (CAS), restricted delegation • Integration in collaborative tools and environments Security and Policy for Group Collaboration MICS/SciDAC Network Research Security Solutions to Enable Dynamic, Distributed Collaborations • Membership management • Ease credential management • Group administration • Resource participation • Low cost of participation • Integration w/ local security • Rights assignment • Community based authorization • Restricted delegation • Application support • Feature-rich software • Standards based Principal Investigators: Steve Tuecke, Argonne National Laboratory Carl Kesselman, University of Southern California, Information Sciences Institute Miron Livny, University of Wisconsin, Madison MICS Program Manager: Thomas Ndousse Grid Security Infrastructure – The Novel Ideas Impact and Connections • IMPACT : • New PKI-based approaches to credential management, restricted delegation, policy management • Development of security tools and services for collaboration • Widespread deployment and adoption of approaches and tools • CONNECTIONS : • This work is responsible for development of the Globus Toolkit’s widely used Grid Security Infrastructure (GSI) • Used by numerous SciDAC collaboratories, including DOE Science Grid, Particle Physics Data Grid, Earth Systems Grid, and Fusion Collaboratory. • Also used by many non-DOE projects worldwide, including NSF TeraGrid, NASA IPG, NEESGrid, European Data Grid. Accomplishments and Plans • Community Authorization Service • Demo with ESG DODS system Nov 2001 Done • Deliver w/ simple policies May 2002 Done • Gather feedback and deliver 2 nd version Sep 2002 Done • Deliver integrated with GT3/Web Services Sep 2003 Done • Standards • X.509 & GSS drafts Feb 2002 Done • Final X.509 & GSS standards Feb 2003 Done • Other Software • Draft conformant GSS Apr 2002 Done • Integration of Online CA (KCA) and GSI Sep 2002 Done • Demo online CA Mar 2003 Done • Authorization Callouts for site integration Apr 2003 Done • Security support for GT3/Web Services May 2003 Done CAS Collaboration policy U S E R Resource Capability CAS Request Response Rights LocalPolicy Capability Resource Request w/capability Future Plan Highlights (Pending Funding) • Integration with attribute authorities (e.g. VOMS) • Better site security integration – e.g. with Kerberos • Integration with policy decision services (e.g. PERMIS, Akenti) • Increased removal of security concerns from applications

Upload: burian

Post on 06-Jan-2016

28 views

Category:

Documents

1 download

Report

Download

Embed Size (px):

DESCRIPTION

Security and Policy for Group Collaboration. MICS/SciDAC Network Research. Security Solutions to Enable Dynamic, Distributed Collaborations. Membership management Ease credential management Group administration Resource participation Low cost of participation - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Enable collaborative work, with common security tools that address:

• Develop novel tools and approaches for:• Management of collaboration membership and resources

• Online CA & Credential Repository (CR), local security integration• Management of roles and privileges

• Community Authorization Service (CAS), restricted delegation• Integration in collaborative tools and environments

Security and Policy for Group Collaboration

MICS/SciDAC Network Research

Security Solutions to Enable Dynamic, Distributed Collaborations• Membership management

• Ease credential management• Group administration

• Resource participation• Low cost of participation• Integration w/ local security

• Rights assignment• Community based authorization• Restricted delegation

• Application support• Feature-rich software• Standards based

Principal Investigators:Steve Tuecke, Argonne National LaboratoryCarl Kesselman, University of Southern California, Information Sciences InstituteMiron Livny, University of Wisconsin, Madison MICS Program Manager: Thomas Ndousse

Grid Security Infrastructure – The Novel Ideas

Impact and Connections• IMPACT:

• New PKI-based approaches to credential management, restricted delegation, policy management• Development of security tools and services for collaboration• Widespread deployment and adoption of approaches and tools

• CONNECTIONS:• This work is responsible for development of the Globus Toolkit’s widely used Grid Security Infrastructure (GSI)• Used by numerous SciDAC collaboratories, including DOE Science Grid, Particle Physics Data Grid, Earth Systems Grid, and Fusion Collaboratory.• Also used by many non-DOE projects worldwide, including NSF TeraGrid, NASA IPG, NEESGrid, European Data Grid.

Accomplishments and Plans• Community Authorization Service

• Demo with ESG DODS system Nov 2001 Done• Deliver w/ simple policies May 2002 Done• Gather feedback and deliver 2nd version Sep 2002 Done• Deliver integrated with GT3/Web Services Sep 2003 Done

• Standards• X.509 & GSS drafts Feb 2002 Done• Final X.509 & GSS standards Feb 2003 Done

• Other Software• Draft conformant GSS Apr 2002 Done• Integration of Online CA (KCA) and GSI Sep 2002 Done• Demo online CA Mar 2003 Done• Authorization Callouts for site integration Apr 2003 Done• Security support for GT3/Web Services May 2003 Done

CAS

Collaborationpolicy

USER Resource

Capability

CASRequest

Response

Rights

Local Policy

Capability

ResourceRequest

w/capability Future Plan Highlights (Pending Funding)• Integration with attribute authorities (e.g. VOMS)• Better site security integration – e.g. with Kerberos• Integration with policy decision services (e.g. PERMIS, Akenti)• Increased removal of security concerns from applications

Collaborative Innovation · Collaborative Innovation Collaboration between research & industry to address societal challenges Stakeholders' Forum, Brussels, 22nd November 2017 Norwegian

RALPH L. KEENEY Position Mailing Address: …curriculum vitae 7 Ralph L. Keeney "The Foundations of Collaborative Group Decisions", International Journal of Collaborative Engineering,

Modeling Collaborative Team Building to Address …...Modeling Collaborative Team Building to Address Wicked Problems: Navigating and Negotiating Dispositional Distance Dave Gosselin,

Collaborative Innovation: The Only way to Address … Cudre-Maurou… · Collaborative Innovation: The Only way to Address Critical World’s Challenges Nicolas Cudré-Mauroux, PhD

MB81EDS516545 - Fujitsu...CK, CK Input Clock CKE Input Clock Enable CS Input Chip Select RAS Input Row Address Strobe CAS Input Column Address Strobe WE Input Write Enable BA[1:0]

Collaborative Innovation to Address Social Determinants of Health: The Medical-Legal Partnership Model

Center for Shared Solutions...Managed In DHS Data Warehouse DCH uses address as criteria ... Difference in SAP and Local data point. What Address Mastering will Enable 12 Master Address

Applied Metamodelling to Collaborative Document Authoringrepository.uwl.ac.uk/id/eprint/711/1/Applied... · 2017. 3. 1. · collaborative processes and address the complexity of the

Cybersecurity Credentials Collaborative (C3) cybersecuritycccybersecuritycc.org/C3_Value_of_IT_Certification_2015.pdf · cybersecurity industry with a collaborative forum to address

Keynote Address - Smart Energy Consumer Collaborative€¦ · Keynote Address Tracie Boutte Vice President Customer Experience Entergy. Customer Engagement In A Disrupted Utilities

IS62C25616EL, IS65C25616EL A0 Y · 2018. 8. 29. · A0-A17 Address Inputs I/O0-I/O15 Data Inputs/Outputs CS# Chip Enable Input OE# Output Enable Input WE# Write Enable Input LB# Lower-byte

Watertown Catholic Collaborative - The Pilot...Watertown Catholic Collaborative Collaborative Business Office and Mailing Address 26R Chestnut Street, Watertown, MA 02472 (617) 926-9680