Changes between Version 4 and Version 5 of FeddToDo
- Timestamp:
- Sep 21, 2011 3:42:47 PM (13 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
FeddToDo
v4 v5 5 5 == Research Goals == 6 6 7 More sophisticated attribute-based authorization system::8 The current authorization system is attribute-based, but very simple. There is no facility for delegation or for auditing the authorization decisions that have been made. Furthermore, federated systems need to be able to model and influence the amount of data that partners share in making authorization decisions and to constrain the interactions necessary to authorize.9 10 We plan to address these issues by developing an authorization system based on attributes and reasoning based on the [http://www.isso.sparta.com/research_projects/security_infrastructure/abac.html ABAC] system developed at [http://www.sparta.com SPARTA]. In addition to the direct use in DETER, we plan to demonstrate the power of that system to address the needs of larger scale systems like [http://www.geni.net GENI].11 7 12 8 Federation-aware experiment design tools:: 13 9 [http://seer.isi.deterlab.net SEER] currently supports the creation and manipulation of federated experiments. This makes it possible for experimenters to access the power of federation, but to get the best use out of the capability, we believe that more sophisticated tools are essential. Such tools would either give users more detailed hints about how to break up experiments for federation or make those decisions for them (perhaps with an override). We are continuing to encourage the creation of such tools. 10 11 Supporting these emerging tools by providing richer interfaces to control federated resources is an ongoing goal of the federation research. 14 12 15 13 Advertisements and testbed information:: … … 27 25 == Release Plans == 28 26 29 Release 3.1::30 [http://www.isso.sparta.com/research_projects/security_infrastructure/abac.html ABAC-enabled] release. Planned for October 201031 32 27 Release 4.0:: 33 Enhanced testbed service descriptions . Planned for Feb 2011.28 Enhanced testbed service descriptions, operational hardening, better control and status interfaces. Planned for Feb 2011.