Security policy reconciliation in distributed computing environments

Hao Wang; Somesh Jha; Miron Livny; Patrick D. McDaniel

doi:10.1016/j.aquaculture.2004.09.014

Security policy reconciliation in distributed computing environments

Hao Wang, Somesh Jha, Miron Livny, Patrick D. McDaniel

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

39 Scopus citations

Abstract

A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an intractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed high-throughput system called Condor.

Original language	English (US)
Title of host publication	Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004
Publisher	IEEE Computer Society
Pages	137-146
Number of pages	10
ISBN (Print)	076952141X, 9780769521411
DOIs	https://doi.org/10.1016/j.aquaculture.2004.09.014
State	Published - 2004
Event	Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004 - Yorktown Heights, NY, United States Duration: Jun 7 2004 → Jun 9 2004

Publication series

Name	Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

Other

Other	Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004
Country/Territory	United States
City	Yorktown Heights, NY
Period	6/7/04 → 6/9/04

All Science Journal Classification (ASJC) codes

General Engineering

Access to Document

10.1016/j.aquaculture.2004.09.014

Cite this

Wang, H., Jha, S., Livny, M., & McDaniel, P. D. (2004). Security policy reconciliation in distributed computing environments. In Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004 (pp. 137-146). (Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004). IEEE Computer Society. https://doi.org/10.1016/j.aquaculture.2004.09.014

Wang, Hao ; Jha, Somesh ; Livny, Miron et al. / Security policy reconciliation in distributed computing environments. Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004. IEEE Computer Society, 2004. pp. 137-146 (Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004).

@inproceedings{7c044528f4e54cbabfbdae829583307f,

title = "Security policy reconciliation in distributed computing environments",

abstract = "A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an intractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed high-throughput system called Condor.",

author = "Hao Wang and Somesh Jha and Miron Livny and McDaniel, {Patrick D.}",

note = "Copyright: Copyright 2021 Elsevier B.V., All rights reserved.; Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004 ; Conference date: 07-06-2004 Through 09-06-2004",

year = "2004",

doi = "10.1016/j.aquaculture.2004.09.014",

language = "English (US)",

isbn = "076952141X",

series = "Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004",

publisher = "IEEE Computer Society",

pages = "137--146",

booktitle = "Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004",

address = "United States",

}

Wang, H, Jha, S, Livny, M & McDaniel, PD 2004, Security policy reconciliation in distributed computing environments. in Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004. Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004, IEEE Computer Society, pp. 137-146, Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004, Yorktown Heights, NY, United States, 6/7/04. https://doi.org/10.1016/j.aquaculture.2004.09.014

Security policy reconciliation in distributed computing environments. / Wang, Hao; Jha, Somesh; Livny, Miron et al.
Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004. IEEE Computer Society, 2004. p. 137-146 (Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Security policy reconciliation in distributed computing environments

AU - Wang, Hao

AU - Jha, Somesh

AU - Livny, Miron

AU - McDaniel, Patrick D.

PY - 2004

Y1 - 2004

N2 - A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an intractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed high-throughput system called Condor.

AB - A major hurdle in sharing resources between organizations is heterogeneity. Therefore, in order for two organizations to collaborate their policies have to be resolved. The process of resolving different policies is known as policy reconciliation, which in general is an intractable problem. This paper addresses policy reconciliation in the context of security. We present a formal framework and hierarchical representation for security policies. Our hierarchical representation exposes the structure of the policies and leads to an efficient reconciliation algorithm. We also demonstrate that agent preferences for security mechanisms can be readily incorporated into our framework. We have implemented our reconciliation algorithm in a library called the Policy Reconciliation Engine or PRE. In order to test the implementation and measure the overhead of our reconciliation algorithm, we have integrated PRE into a distributed high-throughput system called Condor.

UR - http://www.scopus.com/inward/record.url?scp=11244319622&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=11244319622&partnerID=8YFLogxK

U2 - 10.1016/j.aquaculture.2004.09.014

DO - 10.1016/j.aquaculture.2004.09.014

M3 - Conference contribution

AN - SCOPUS:11244319622

SN - 076952141X

SN - 9780769521411

T3 - Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

SP - 137

EP - 146

BT - Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

PB - IEEE Computer Society

T2 - Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004

Y2 - 7 June 2004 through 9 June 2004

ER -

Wang H, Jha S, Livny M, McDaniel PD. Security policy reconciliation in distributed computing environments. In Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004. IEEE Computer Society. 2004. p. 137-146. (Proceedings - Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, POLICY 2004). doi: 10.1016/j.aquaculture.2004.09.014

Security policy reconciliation in distributed computing environments

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this