Changes between Version 37 and Version 38 of GEC4CFWGAgenda

Timestamp:

04/06/09 15:57:13 (15 years ago)

Author:

hmussman@bbn.com

Comment:

--

GEC4CFWGAgenda

@@ -27 +27 @@
    * Slides by Steve Schwab:  [http://groups.geni.net/geni/attachment/wiki/GEC4CFWGAgenda/GENISecurityArchitecture-GEC4-ss1.pdf]
    * Cluster B (PlanetLab) report by Larry Peterson:
+     *  Planet lab follows the SFA, which uses credentials (certificates), that include privileges.
+     *  A researcher can delegate privilege via a credential to another researcher.
+     *  Security is expilicit;  delegation is explicit;  all through credentials.
    * Cluster C (ProtoGENI) report by Robert Ricci: [http://groups.geni.net/geni/attachment/wiki/GEC4CFWGAgenda/pgeni-security-gec4.pdf]
    * Cluster D (ORCA) report by Jeff Chase:
+     *  ORCA uses actors, which have public key pairs; signed messages are passed between actors
+     *  An actor runs on behalf of a particular identity.
+     *  An actor can use shibboleth to identify an individual.
+     *  Expect attribute based access control, e.g, in ORCA, can delegate privilege, and policy module signs ticket  for particular user and a particular resource.
+     *  ORCA currently using wss4j module to sign with keys,  but has to pass certificates;  perhaps move to SAML approach
    * Cluster E (ORBIT) report by Max Ott:  [http://groups.geni.net/geni/attachment/wiki/GEC4CFWGAgenda/GEC4%20Orbit%20Security.pdf]
    * Cluster A (TIED) report by Ted Faber:  [http://groups.geni.net/geni/attachment/wiki/GEC4CFWGAgenda/Security_v2.pdf]