loading...
Security Policy Reconciliation in Distributed Computing Environments
Yorktown Heights, New York June 07-June 09
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/POLICY.2004.1309160Fifth IEEE International Workshop on ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Hao Wang, University of Wisconsin, Madison, WI
Somesh Jha, University of Wisconsin, Madison, WI
Miron Livny, University of Wisconsin, Madison, WI
Patrick D. McDaniel, AT&T Labs-Research, Florham Park, NJ
A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an intractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed high-throughput system called Condor.
Citation:
Hao Wang, Somesh Jha, Miron Livny, Patrick D. McDaniel, "Security Policy Reconciliation in Distributed Computing Environments," policy, pp.137, Fifth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.