Differences between revisions 78 and 86 (spanning 8 versions)
Revision 78 as of 2006-05-24 14:29:28
Size: 23143
Editor: AlunEdwards
Comment:
Revision 86 as of 2006-05-24 17:39:19
Size: 26784
Editor: AlunEdwards
Comment: VO definition and Policy Management references added
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
xxxx Final edits needed on (and just off) this page
 * the pages of project notes in particular need to be "moth-balled" properly
  * AE will attend to this after Evaluation pages are signed off.
 * '''At least one action for Mark''' included – e.g. recording where n. '''MUST''' be in the report etc.
xxxx Final edits needed on (and just off) this page only involve:
Line 8: Line 5:
= Citations for all the articles used: = Citations for all the articles used:

= Security
=
Line 49: Line 48:
  * For project notes about this see DefinitionsKalra
Line 147: Line 147:
 * '''Use of SAML for OGSA Authorization'''. Von Welch, NCSA Rachana Ananthakrishnan, Argonne National Laboratory Frank Siebenlist, Argonne National Laboratory David Chadwick, University of Salford Sam Meder, University of Chicago Laura Pearlman, Information Sciences Institute. February 15, 2003.
http://www.cs.virginia.edu/~humphrey/ogsa-sec-wg/OGSA%20SAML%20Authorization%20Assertions-Feb15.pdf
 * '''Use of SAML for OGSA Authorization'''. Von Welch, NCSA Rachana Ananthakrishnan, Argonne National Laboratory Frank Siebenlist, Argonne National Laboratory David Chadwick, University of Salford Sam Meder, University of Chicago Laura Pearlman, Information Sciences Institute. February 15, 2003. http://www.cs.virginia.edu/~humphrey/ogsa-sec-wg/OGSA%20SAML%20Authorization%20Assertions-Feb15.pdf
Line 152: Line 151:
 * '''OCSP Requirements for Grids''' GFD-C Category: Community Practice Documents CA Operations WG http://www-unix.gridforum.org/mail_archive/caops-wg/2004/09/pdf00000.pdf Ivo:  * '''OCSP Requirements for Grids''' GFD-C Category: Community Practice Documents CA Operations WG http://www-unix.gridforum.org/mail_archive/caops-wg/2004/09/pdf00000.pdf
Line 178: Line 177:

----

= Policy Management and Exchange =
 * '''Service-Oriented Science: Scaling eScience Application and Impact''' Ian Foster, Argonne National Laboratory. Talk given in Melbourne on 13 December 2005, and repeated in Jan and Feb of 2006. http://www-fp.mcs.anl.gov/~foster/Talks/051206%20SOS%20Melbourne.ppt

 * '''Open Science Grid''', USA. http://www.opensciencegrid.org/

 * '''Enabling Grids for E-sciencE grid/project''', USA. http://www.eu-egee.org/

 * '''Virtual Organization Membership Service (VOMS)''', USA. http://grid-auth.infn.it/docs/voms-FGCS.pdf

 * '''Meta Access Management System (MAMS)''', Australia. https://mams.melcoe.mq.edu.au/

 * '''Shibboleth Attribute Release Policy Editor (ShARPE)''', USA. http://mams.melcoe.mq.edu.au/wiki/display/MAMS/Shibboleth+Attribute+Release+Policy+Editor+(ShARPE)

 * '''SIGNET''', USA. http://middleware.internet2.edu/signet/

 * '''Grouper Working Group''', USA. http://middleware.internet2.edu/dir/groups/grouper/

 * '''Authentication and Authorization Infrastructure (SWITCHaai)''', Switzerland. http://www.switch.ch/aai/

 * '''Community Authorization Service (CAS)''', USA. http://www.globus.org/grid_software/security/cas.php

 * '''Overview of the Grid Security Infrastructure (GSI)''', GLOBUS, USA. http://www.globus.org/security/overview.html

 * '''GT4 CAS User's Guide''', GLOBUS, USA. http://www.globus.org/security/overview.html

 * '''Grid Policy Box (G-PBox)''', Italy. http://infnforge.cnaf.infn.it/gpbox/

 * '''eXtensible Access Control Markup Language (XACML)''', OASIS. http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=xacml

 * '''GridShib project''', GLOBUS, USA. http://gridshib.globus.org/

 * '''Globus Toolkit''', GLOBUS, USA. http://www.globus.org/toolkit/

 * '''GridShib and PERMIS Integration: Adding Policy-driven RBAC to Attribute-based Authorisation in Grids''', David Chadwick, GridShibPERMIS project. Presented at TERENA TNC 2006, Catania. http://www.terena.nl/events/tnc2006/programme/presentations/show.php?pres_id=200

 * '''BRIDGES: Biomedical Research Informatics Delivered by Grid Enabled Services''', NeSC, UK. http://www.brc.dcs.gla.ac.uk/projects/bridges/

 * '''DyVOSE Project (Dynamic Virtual Organisations in e-Science Education)''', NeSC, UK. http://labserv.nesc.gla.ac.uk/projects/dyvose/

 * '''SHEBANGS (Shibboleth Enabled Bridge to Access the National Grid Service)''', University of Manchester, UK. http://www.sve.man.ac.uk/Research/AtoZ/SHEBANGS

 * '''EGEE (Enabling Grids for E-sciencE)'''. http://www.eu-egee.org/

 * '''Introduction to myVocs''', Tom Scavo, on GridShib TWiki, 2006. https://authdev.it.ohio-state.edu/twiki/bin/view/GridShib/MyVocs

  * '''myVocs and GridShib: Integrated VO Management''', Jill Gemmill, John-Paul Robinson University of Alabama at Birmingham. Tom Scavo, Von Welch, National Center for Supercomputing Applications, USA. http://grid.ncsa.uiuc.edu/presentations/i2mm-myvocs-gridshib-april06.ppt

 * '''PERMIS'''. http://www.permis.org/en/index.html

----

= VODefinition =

 * '''The Anatomy of the Grid'''. I. Foster, C. Kesselman and S. Tuecke, International Journal of High performance Computing Applications, 15, 3, 2001

 * '''From gridmap-file to VOMS: managing Authorization in a Grid environment, Future Generation Computer Systems'''. R. Alfieri, R. Cecchini, V. Ciaschini, F. Spataro, L. dell'Agnello, A. Frohner and K. Lörentey, 2005. http://grid-auth.infn.it/docs/voms-FGCS.pdf

 * '''Virtual Organizations'''. Nate Klingenstein on TWiki. https://authdev.it.ohio-state.edu/twiki/bin/view/Main/VirtualOrganizations

 * '''VO definition''' thread in the Shib-Grid BOF (birds of a feather) reading list, March 2006. http://www.federation.org.au/pipermail/shibgrid-bof/2006-March/thread.html

xxxx Final edits needed on (and just off) this page only involve:

Citations for all the articles used:

Security


Security – grid use-cases


Security - definitions – e.g. what is a grid?


Security – grids


Policy Management and Exchange


VODefinition