Changes between Version 6 and Version 7 of GeniAuthorization


Ignore:
Timestamp:
11/11/11 16:13:15 (12 years ago)
Author:
chase@cs.duke.edu
Comment:

Added a link to geni-abac doc referenced in GEC-11 slides

Legend:

Unmodified
Added
Removed
Modified
  • GeniAuthorization

    v6 v7  
    3434   * Java Web Start: http://abac.deterlab.net/java/crudge.jnlp
    3535
    36 '''Jeff Chase''' gave an overview of ORCA from the practical standpoint of an implementer. He went on to describe two unique facets of ORCA's use of ABAC: policy templates and RT1-lite. ORCA uses policy templates to instantiate policies about specific objects, like slices, on demand. RT1-lite is a technique to handle single parameters to ABAC assertions in RT0, a parameter-less version of ABAC as currently implemented in the ABAC library. Jeff also described the trust structure used in ORCA to inform the discussion about GENI trust structure. Jeff's [attachment:wiki:GEC11Authorization:chase-abac-gec11.ppt slides] are available on the [wiki:GEC11Authorization session wiki page].
     36'''Jeff Chase''' gave an overview of ORCA from the practical standpoint of an implementer. He went on to describe two unique facets of ORCA's use of ABAC: policy templates and RT1-lite. ORCA uses policy templates to instantiate policies about specific objects, like slices, on demand. RT1-lite is a technique to handle single parameters to ABAC assertions in RT0, a parameter-less version of ABAC as currently implemented in the ABAC library. Jeff also described the trust structure used in ORCA to inform the discussion about GENI trust structure. Jeff's [attachment:wiki:GEC11Authorization:chase-abac-gec11.ppt slides] are available on the [wiki:GEC11Authorization session wiki page].   Also see the working paper: [http://www.cs.duke.edu/~chase/geni-abac.pdf Authorization and Trust Structure in GENI: A Perspective on the Role of ABAC].
    3737
    3838'''Steve Schwab''' discussed next steps for the Authorization effort with respect to control framework integration, tools, and vocabulary (see below). Steve's [attachment:wiki:GEC11Authorization:GEC11-authorization-wrapup-schwab.pdf slides] are available on the [wiki:GEC11Authorization session wiki page].