Authorization in trust management: Features and foundations

PC Chapin, C Skalka, XS Wang - ACM Computing Surveys (CSUR), 2008 - dl.acm.org
Trust management systems are frameworks for authorization in modern distributed systems,
allowing remotely accessible resources to be protected by providers. By allowing providers …

The PERMIS X. 509 role based privilege management infrastructure

DW Chadwick, A Otenko - Proceedings of the seventh ACM symposium …, 2002 - dl.acm.org
This paper describes the output of the PERMIS project, which has developed a role based
access control infrastructure that uses X. 509 attribute certificates (ACs) to store the users' …

Semantic web policies–a discussion of requirements and research issues

PA Bonatti, C Duma, N Fuchs, W Nejdl… - The Semantic Web …, 2006 - Springer
Policies are pervasive in web applications. They play crucial roles in enhancing security,
privacy and usability of distributed services. There has been extensive research in the area …

Shattered Chain of Trust: Understanding Security Risks in {Cross-Cloud}{IoT} Access Delegation

B Yuan, Y Jia, L **ng, D Zhao, XF Wang… - 29th USENIX security …, 2020 - usenix.org
IoT clouds facilitate the communication between IoT devices and users, and authorize users'
access to their devices. In this paradigm, an IoT device is usually managed under a …

Negotiating trust in the Web

M Winslett, T Yu, KE Seamons, A Hess… - IEEE Internet …, 2002 - ieeexplore.ieee.org
Our system, TrustBuilder, supports automated trust negotiation between strangers on the
Internet. TrustBuilder lets negotiating parties disclose relevant digital credentials and access …

Trust-/spl Xscr/;: a peer-to-peer framework for trust establishment

E Bertino, E Ferrari… - IEEE Transactions on …, 2004 - ieeexplore.ieee.org
We present Trust-/spl Xscr/;, a comprehensive XML-based framework for trust negotiations,
specifically conceived for a peer-to-peer environment. Trust negotiation is a promising …

[BUKU][B] Security for web services and service-oriented architectures

E Bertino, L Martino, F Paci, A Squicciarini - 2010 - Springer
Web services technologies are advancing fast and being extensively deployed in many di?
erent application environments. Web services based on the eXt-sible Markup Language …

{WAVE}: A decentralized authorization framework with transitive delegation

MP Andersen, S Kumar, M AbdelBaky… - 28th USENIX Security …, 2019 - usenix.org
Most deployed authorization systems rely on a central trusted service whose compromise
can lead to the breach of millions of user accounts and permissions. We present WAVE, an …

Driving and monitoring provisional trust negotiation with metapolicies

P Bonatti, D Olmedilla - … on Policies for Distributed Systems and …, 2005 - ieeexplore.ieee.org
We introduce the provisional trust negotiation framework PROTUNE, for combining
distributed trust management policies with provisional-style business rules and access …

Peertrust: Automated trust negotiation for peers on the semantic web

W Nejdl, D Olmedilla, M Winslett - … SDM 2004, Toronto, Canada, August 30 …, 2004 - Springer
Researchers have recently begun to develop and investigate policy languages to describe
trust and security requirements on the Semantic Web. Such policies will be one component …