Authorization

Schedule

Tuesday, 3:30pm - 5:00 pm

Session Leaders

Steve Schwab and Ted Faber, USC/ISI
Tom Mitchell, GENI Project Office

Description

GENI aggregates currently use signed XML credentials to make authorization decisions. At GEC10 we began a one year effort to evaluate ABAC assertions as a more flexible basis for GENI authorization. At this session, that one year is up. We will compare ABAC against the current credentials, and adopt a path forward for GENI. Then we will discuss implementing that decision. We will also review the status of integrating ABAC in existing control frameworks and aggregates.

Agenda

• Overview (Ted Faber/Steve Schwab)
• Lightning Talks in favor of or opposed to ABAC:
  • Jeff Chase, ORCA
  • Tom Mitchell, BBN
  • Andy Bavier, PlanetLab
  • Ted Faber, ISI
• Open Discussion (All)
• Vote
• Further steps based on outcome

Related Reading

• Overview of the GENI Authorization discussion and past meeting summaries
• Authorization Storyboard by Jeff Chase
  A series of PowerPoint "twitters" about GENI authorization in general, and a possible ABAC implementation.