Home
Resource
Advances in decentralized and stateful access control
PDF
PDF format is widely accepted and good for printing.
Plug-in required
PDF-1(652.32 kb)
Citation & Export
View Usage Statistics
Staff View

Citation & Export
Hide

Simple citation

Serban, Constantin. Advances in decentralized and stateful access control. Retrieved from https://doi.org/doi:10.7282/T3FF3SQP

Export

Click here for information about Citation Management Tools at Rutgers.

Statistics
Hide

Description

Uniform TitleAdvances in decentralized and stateful access control
NameSerban, Constantin (author); Minsky, Naftaly (chair); Iftode, Liviu (internal member); Bianchini, Ricardo (internal member); Keromytis, Angelos (outside member); Rutgers University; Graduate School - New Brunswick
Date Created2008
Other Date2008-01 (degree)
SubjectComputer Science, Computer networks--Access control, Computer security
Extentxii, 116 pages
DescriptionThe economy and security of modern society relies on increasingly distributed infrastructures and institutions, such as the banking system, government agencies, and commercial enterprises. This trend raises both the importance of access control technology and its
complexity. Law-Governed Interaction (LGI) represents an advanced access control mechanism that satisfies many of the challenges posed by modern computing. LGI, however, has been defined for asynchronous,
message passing, communication, leaving unsupported the wide range of applications that employ synchronous communication. Furthermore, no formal mechanism had been designed for adapting its policies in the presence of ever-changing security requirements.
My dissertation addresses these issues as follows. It introduces Regulated Synchronous Communication, a novel access control model for synchronous, request-reply communication; it proposes Hot Updates, a mechanism for changing the policy of a distributed system while the system continues to operate.
Regulated Synchronous Communication extends the LGI mechanism to synchronous communication, thus providing advanced control over this important and popular mode of communication. Among the novel characteristics of this model are: the control of both the request and the reply; regulated timeout capability provided to clients, in a manner that takes into account the concerns of their server; and enforcement on both the client and server sides.
Hot Updates addresses the issue of changing the access control policy of a large distributed system, in the context of LGI. Hot Policy Updates undertakes a number of challenges such as a) how to propagate the policy updates throughout the system, b) when to update the policy
with respect to an individual component, and c) how to avoid, minimize or compensate possible inconsistencies that appear during the update
process.
Both Regulated Synchronous Communication and Hot Updates had been implemented using Java Laws, a novel Java-based language for
expressing access control policies for LGI. Java Laws provides a common platform for applying fine-grained access control particularly
suitable for distributed applications written in Java. Among other advantages, Java Laws enables an efficient enforcement of access
control, as well as good scalability and portability across various operating systems.
NotePh.D.
NoteIncludes bibliographical references (p. 111-115).
Genretheses, ETD doctoral
Persistent URLhttps://doi.org/doi:10.7282/T3FF3SQP
LanguageEnglish
CollectionGraduate School - New Brunswick Electronic Theses and Dissertations
Organization NameRutgers, The State University of New Jersey
RightsThe author owns the copyright to this work.
Version 8.5.5
Rutgers University Libraries - Copyright ©2024