End-to-End Authorization (2000)  (Make Corrections)  (19 citations) Jon Howell, David Kotz   Home/Search   Context   Related

View or download: dartmouth.edu/~jonh/research/...osdi.ps dartmouth.edu/~dfk...l:endtoend.ps.gz Cached:  PS.gz  PS  PDF This document uses CoBlitz to cache paper downloads. If your firewall is blocking outgoing connections to port 3125, you can use these links to download local copies.   PS.gz  PS  PDF   Image  Update  Help From:  dartmouth.edu/~jonh/research/ (more) (Enter author homepages)

Rate this article: (best)   Comment on this article

@inproceedings{ howell:end-to-end,
  author =   "Jon Howell and David Kotz",
  title =    "End-to-end authorization",
  booktitle =    osdi2000,
  pages =    "151--164",
  month =    oct,
  year =     2000,
  publisher =    usenix,
  URL =  "citeseer.ist.psu.edu/howell00endtoend.html",
  URL =  "http://www.usenix.org/publications/library/proceedings/osdi2000/howell.
html",
  keyword =  "security, access control, naming, distributed
                  operating system, authorization, dfk",
  group =    "dfk, CMC",
  category =     "security",
  vitatype =     refConference,
  acceptpercent = 22,
  comment =  "Based on the theory in howell:spki.",
  abstract =     { Many boundaries impede the flow of authorization
                  information, forcing applications that span those
                  boundaries into hop-by-hop approaches to
                  authorization. We present a unified approach to
                  authorization. Our approach allows applications that
                  span administrative, network, abstraction, and
                  protocol boundaries to understand the end-to-end
                  authority that justifies any given request. The
                  resulting distributed systems are more secure and
                  easier to audit. \par We describe boundaries that
                  can interfere with end-to-end authorization, and
                  outline our unified approach. We describe the system
                  we built and the applications we adapted to use our
                  unified authorization system, and measure its
                  costs. We conclude that our system is a practical
                  approach to the desirable goal of end-to-end
                  authorization. } }