Abstract:In grid environments, the dynamic and multi-institutional nature introduces challenging security issues. In this paper, we propose subtask-based authorization service (SAS) architecture to fully secure a type of application oriented to engineering and scientific computing. We minimize privileges for task by decomposing the parallel task and re-allotting the privileges required for each subtask. Community authorization module describes and applies community policies of resource permission and privilege for resource usage or task management. It separates proxy credentials from identity credentials. We adopt a relevant policy and task management delegation to describe rules for task management. The ultimate privileges are formed by the combination of relevant proxy credential, subtask-level privilege certificate and community policy for this user, as well as they conform to resource policy. To enforce the architecture, we extend the RSL specification and the proxy certificate, modify Globus' gatekeeper, jobmanager and the GASS library to allow authorization callouts, and evaluate the user's job management requests and job's resource request in the context of policies.

Analysis of grid security authorization police based on knowledge mining

Analysis of Grid Security Metadata Based on Knowledge Mining

Analysis and Research of Grid Security Based on Knowledge Base

Overview of the Research on Grid Security Technologies

Semantic Grid Security Solutions Based on Knowledge Base

Design and implementation of a grid service security access platform based on GSI

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Research of Community-based Multi-Grained Authorization in Service Grid

Semantic-Aware Access Control for Grid Application

Supporting secure collaborative computing in grid environments

Analysis on grid security patterns based on PKI

Service Provenance Based Abstraction of Grid Application Knowledge

Ensuring secure and robust grid applications – from a formal method point of view

Study On Problem-Solving-Oriented Scale-Free Knowledge Grid

A kind of hiberarchy status authentication mechanism in information grid

An Identity-Based Model for Grid Security Infrastructure

Research of PKI Technology Based on Grid Security

A Security Based Data Mining Approach in Data Grid

A Status Authentication Mechanism in Grid Environment

A Pki-Based Scalable Security Infrastructure For Scalable Grid

A Grid Security Infrastructure Based On Behaviors And Trusts