Scidac Security and Policy for Group Collaborations

Executive Summary

Contents of this page:

• Latest News
• Researchers on this project
• Reports
• Future Research Directions
• Related Work
• Related Publications

Other documents at this site:

• Executive Summary
• SciDAC Security Middleware Proposal (Microsoft Word Format)
• Task list and progress

Latest News

• 6/2003 The Community Authorization Service: Status and Future CHEP 03 paper completed and available.

• 4/2003 Security for Grid Services accepted to HPDC-12. This paper documents the security design in GT3.

• 9/13/02 CAS AlphaR2, which significant changes bases on feedback from other SciDAC collaborations is available.

• 7/19/02 OGSA Security Architecture and Roadmap published jointly with IBM for Global Grid Form 5. A BOF was held at GGF5 and a OGSA Security WG will meet at GGF6. 

• 3/24/02 CAS AlphaR1 made available to collaborators. This includes initial implementation of restricted proxies.

• 2/8/02 CAS paper accepted to IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, 2001.

Researchers on this project

Distributed Systems Laboratory (Argonne National Laboratory/University of Chicago):

• Steven Tuecke
• Ian Foster
• Von Welch
• Doug Engert
• Sam Meder
• Frank Siebenlist

Information Sciences Institute (University of Southern Californa):

• Carl Kesselman
• Laura Pearlman

University of Wisconsin-Madison:

• Miron Livny

Reports

• Quarterly Report (October 2003)
• Summary for Review (August 2003)
• Annual Report (June 2003)
• Mid-Year report (April 2003)
• Quarterly report (November 2002)
• Quarterly report (April 2002)
• Mid-Year report (February 2002)
• Quarterly report (December 2001)

Future Research Directions

• Implementation of Proxy Certificates as defined in Internet Draft (ongoing)
• Integration of CAS with Data, Computer and Bandwidth-brokering resources
• Multiple credentials drafts in Global Grid Forum

Presentations

• The Community Authorization Service: Status and Future May 2003
• CAS Overview at PPDG meeting (Microsoft Powerpoint) February 2002
• Presentation at SciDAC PI Meeting Security Panel. January 2002
• GSI Futures. Globus Retreat Aug, 2001.
• An Online Credential Repository for the Grid: MyProxy (Microsoft Powerpoint). HPDC-10, Aug. 2001.

Related Work

• Globus: Grid Security Infrastructure Web Site
• Globus: Community Authorization Service Web Site
• Global Grid Forum GSI Working Group

Related Publications

• The Community Authorization Service: Status and future. Ian Foster Carl Kesselman Laura Pearlman Steven Tuecke Von Welch. CHEP 03.CHEP 03, March 2003.

• Security for Grid Services
  V. Welch, F. Siebenlist, I. Foster, J. Bresnahan, K. Cajkowski, J. Gawor, C. Kesselman, S. Meder, L. Pearlman, S. Tuecke. To appear HPDC 2003.
  This paper documents the security design in GT3.

• Fine-Grain Authorization for Resource Management in the Grid Environment.
  K. Keahey, V. Welch. Proceedings of Grid2002 Workshop, 2002.

• A Community Authorization Service for Group Collaboration
   L. Pearlman, V. Welch, I. Foster, C. Kesselman, S. Tuecke, Accepted by IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, 2001.

• An Online Credential Repository for the Grid: MyProxy.
  J. Novotny, S. Tuecke, V. Welch, Proceedings of the Tenth International Symposium on High Performance Distributed Computing (HPDC-10), IEEE Press, August 2001.

• A National-Scale Authentication Infrastructure.
  R. Butler, D. Engert, I. Foster, C. Kesselman, S. Tuecke, J. Volmer, V. Welch. IEEE Computer, 33(12):60-66, 2000.
  Describes our experience designing, developing, and deploying the Grid Security Infrastructure.

• A Security Architecture for Computational Grids.
  I. Foster, C. Kesselman, G. Tsudik, S. Tuecke, Proc. 5th ACM Conference on Computer and Communications Security Conference, pg. 83-92, 1998.
  Describes techniques for authentication in wide area computing
  environments.