Christophe Bidan & Valérie Issarny
نویسنده
چکیده
From the security point of view, one challenge for today's distributed ar-chitectures is to support interoperation between applications relying on diierent possibly inconsistent security policies. This paper proposes a practical approach for dealing with the coexistence of diierent security policies in distributed architectures. We introduce a model for specifying security policies in terms of security domains and access control rules. Then, we identify the set of operators for combining the speciications of sub-policies and we address the validity of the resulting policy according to the security properties of the sub-policies. Gestion de multiples politiques de s ecurit e dans un syst eme distribu e ouvert R esum e : Du point de vue de la s ecurit e informatique, les architectures distribu ees actuelles doivent pouvoir supporter l'interop eration entre applications relevant de politiques de s ecurit e dii erentes, eventuellement contradictoires. Ce papier propose une approche pratique pour traiter la coexistence de dii erentes poli-tiques de s ecurit e dans une architecture distribu ee. Nous introduisons un mod ele permettant de sp eciier les politiques de s ecurit e en termes de domaines de s ecurit e et de r egles de contr^ ole d'acc es. Nous identiions alors un ensemble d'op erateurs pour combiner les sp eciications des sous-politiques, et nous nous int eressons a la validit e de la politique r esultante visa -vis des propri et es de s ecurit e des sous-politiques.
منابع مشابه
Aster: A Framework for Sound Customization of Distributed Runtime Systems
This paper introduces the Aster distributed con guration-based programming system that is aimed at easing the development of emerging distributed applications having quality of service requirements. Our approach is based on high-level customization: given the speci cation of application requirements using the Aster interconnection language, a distributed runtime system, customized for meeting t...
متن کاملAster: a CORBA-based software interconnection system supporting distributed system customization
This paper introduces the Aster distributed composition-based programming system that is aimed at easing the development of distributed runtime systems, customized to the application needs, in a Corba-based environment. Our approach is based on high-level customization: given the speci cation of application requirements using the Aster composition language, a distributed runtime system, customi...
متن کاملDealing with Multi-policy Security in Large Open Distributed Systems
From the security point of view, one challenge for today's distributed architectures is to support interoperation between applications relying on di erent possibly inconsistent security policies. This paper proposes a practical solution for dealing with the coexistence of di erent security policies in distributed architectures. We introduce a model for specifying security policies in terms of s...
متن کاملAchieving middleware customization in a configuration-based development environment: experience with the Aster prototype
Middleware configurations provide a means to make accessible a wide range of applications on a (possibly large) distributed heterogeneous platform. However, as new application areas appear, middlewareconfigurations will have to evolve to accommodate those new applications’ needs. This paper discusses the implementation of the Aster development environment that realizes automatic configuration o...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 1997