Abstract:New challenges are introduced when people try to build a general-purpose mobile agent middleware in Grid environment. In this paper, an instance-oriented security mechanism is proposed to deal with possible security threats in such mobile agent systems. The current security support in Grid Security Infrastructure (GSI) requires the users to delegate their privileges to certain hosts. This host-oriented solution is insecure and inflexible towards mobile agent applications because it cannot prevent delegation abuse and control well the diffusion of damage. Our proposed solution introduces security instance, which is an encapsulation of one set of authorizations and their validity specifications with respect to the agent’s specific code segments, or even the states and requests. Applications can establish and configure their security framework flexibly on the same platform, through defining instances and operations according to their own logic. Mechanisms are provided to allow users delegating their identity to these instances instead of certain hosts. By adopting this instance-oriented security mechanism, a Grid-based general-purpose MA middleware, Everest, is developed to enhance Globus Toolkit’s security support for mobile agent applications.

A Security System Using Multiple Certifications in Grid Environments

Design and implementation of a grid service security access platform based on GSI

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Supporting secure collaborative computing in grid environments

A Pki-Based Scalable Security Infrastructure For Scalable Grid

Instance-oriented Delegation: A Solution for Providing Security to Grid-based Mobile Agent Middleware

An Instance-Oriented Security Mechanism in Grid-Based Mobile Agent System

Research of Community-based Multi-Grained Authorization in Service Grid

A Status Authentication Mechanism in Grid Environment

Secure Grid-Based Mobile Agent Platform By Instance-Oriented Delegation

A Security Architecture Using Group Authentication and Collaboration of Grid Computing

Security Scheme for Cross-Domain Grid: Integrating WS-Trust and Grid Security Mechanism

Analysis on grid security patterns based on PKI

Certification Authority Monitored Multilevel and Stateful Policy Based Authorization in Services Oriented Grids

SECURITY INFRASTRUCTURES OF OPEN GRID SERVICES ARCHITECTURE

Secure Grid Information Service System

A Low-Level Security Solving Method in Grid

Secure Access To Grid Information Service Using Shibboleth And Permis

User and Digital Certification Management in Forestry Grid

Security Architecture for a Service-Oriented Learning Assessment Grid

An Authentication Service for Collaborative Manufacturing