Changes between Version 7 and Version 8 of GeniAuthorization
- Timestamp:
- 11/11/11 16:14:51 (12 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
GeniAuthorization
v7 v8 34 34 * Java Web Start: http://abac.deterlab.net/java/crudge.jnlp 35 35 36 '''Jeff Chase''' gave an overview of ORCA from the practical standpoint of an implementer. He went on to describe two unique facets of ORCA's use of ABAC: policy templates and RT1-lite. ORCA uses policy templates to instantiate policies about specific objects, like slices, on demand. RT1-lite is a technique to handle single parameters to ABAC assertions in RT0, a parameter-less version of ABAC as currently implemented in the ABAC library. Jeff also described the trust structure used in ORCA to inform the discussion about GENI trust structure. Jeff's [attachment:wiki:GEC11Authorization:chase-abac-gec11.ppt slides] are available on the [wiki:GEC11Authorization session wiki page]. Also see the working paper: [http:// www.cs.duke.edu/~chase/geni-abac.pdf Authorization and Trust Structure in GENI: A Perspective on the Role of ABAC].36 '''Jeff Chase''' gave an overview of ORCA from the practical standpoint of an implementer. He went on to describe two unique facets of ORCA's use of ABAC: policy templates and RT1-lite. ORCA uses policy templates to instantiate policies about specific objects, like slices, on demand. RT1-lite is a technique to handle single parameters to ABAC assertions in RT0, a parameter-less version of ABAC as currently implemented in the ABAC library. Jeff also described the trust structure used in ORCA to inform the discussion about GENI trust structure. Jeff's [attachment:wiki:GEC11Authorization:chase-abac-gec11.ppt slides] are available on the [wiki:GEC11Authorization session wiki page]. Also see the working paper: [http://groups.geni.net/geni/attachment/wiki/GEC11Authorization/geni-abac.pdf Authorization and Trust Structure in GENI: A Perspective on the Role of ABAC]. 37 37 38 38 '''Steve Schwab''' discussed next steps for the Authorization effort with respect to control framework integration, tools, and vocabulary (see below). Steve's [attachment:wiki:GEC11Authorization:GEC11-authorization-wrapup-schwab.pdf slides] are available on the [wiki:GEC11Authorization session wiki page].