Towards a Task-based Paradigm for Exible and Adaptable Access Control in Distributed Applications
نویسنده
چکیده
Historically, the access control problem has been couched within the framework of subjects, object, and rights. In this paper we argue for a newer paradigm for distributed and multi-system applications, that transcends the subject-object view of access control. This new paradigm views access control and authorization not in terms of individual subjects and object, but rather in terms of long-lived tasks that need to be authorized and managed in information systems.
منابع مشابه
An Effective Task Scheduling Framework for Cloud Computing using NSGA-II
Cloud computing is a model for convenient on-demand user’s access to changeable and configurable computing resources such as networks, servers, storage, applications, and services with minimal management of resources and service provider interaction. Task scheduling is regarded as a fundamental issue in cloud computing which aims at distributing the load on the different resources of a distribu...
متن کاملCOBEA: A CORBA-Based Event Architecture
Events are an emerging paradigm for composing applications in an open, heterogeneous distributed world. In Cambridge we have developed scalable event handling based on a publish-register-notify model with event object classes and server-side ltering based on parameter templates. After experience in using this approach in a home-built RPC system we have extended CORBA, an open standard for distr...
متن کاملDistributed Management by Delegation
This paper introduces a novel approach to distributed computing based on delegation-agents, and describes its applications to decentralize network management. Delegation agents are programs that can be dispatched to remote processes, dynamically linked and executed under local or remote control. Unlike scripted agents, delegation agent programs may be written in arbitrary languages, interpreted...
متن کاملAdaptability in Component-Based Peer-to-Peer Applications
One great challenge in the field of software engineering is to develop reusable, adaptable and scalable software systems. To address this goal, a multiplicity of approaches have been proposed. One trend one could ascertain has been the drift away from complex, monolithic applications towards to distributed systems. The predominant model for building distributed systems has been the client-serve...
متن کاملTask-Based Authorization Controls (TBAC): A Family of Models for Active and Enterprise-Oriented Autorization Management
In this paper, we develop a new paradigm for access control and authorization management, called task-based authorization controls (TBAC). TBAC models access controls from a task-oriented perspective than the traditional subject-object one. Access mediation now involves authorizations at various points during the completion of tasks in accordance with some application logic. By taking a taskori...
متن کامل