Scalable Authorization in Distributed Systems

点击翻译按钮获取中文摘要

Proposal Number: CCR-9901700PI: Ravi SandhuProject-summary-paragraphAuthorization must be a cornerstone of effective security indistributed computing. Moreover, in large-scale systems authorizationmust itself be scalable. This project will conduct a holisticinvestigation by looking concurrently and synergistically atarchitecture, mechanisms, and models for scalable authorization.These three aspects are intertwined and mutually dependent, sodecisions made in one impact the choices in others. Yet they can beprofitably separated for scientific study. The project will developand refine a set of architectures for enforcement and administration,and analyze their relative advantages and disadvantages. It willdevelop a systematic analysis of techniques for binding identity andauthorization information, and the pros and cons of mechanisms basedon different binding means. The third prong of the project willdevelop decentralized models for management of authorizations. Thisproject will undertake theoretical and conceptual basic researchaugmented by selected proof-of-concept experiments to validate thetheory.