DyVOSE project: experiences in applying privilege management infrastructures

Watt, J. , Koetsier, J., Sinnott, R.O. and Stell, A.J. (2006) DyVOSE project: experiences in applying privilege management infrastructures. In: Cox, S.J. (ed.) Proceedings of the UK e-Science All Hands Meeting 2006 : Nottingham, UK, 18th-21st September. National e-Science Centre: Edinburgh. ISBN 9780955398810

Abstract

Privilege Management Infrastructures (PMI) are emerging as a necessary alternative to authorization through Access Control Lists (ACL) as the need for finer grained security on the Grid increases in numerous domains. The 2-year JISC funded DyVOSE Project has investigated applying PMIs within an e-Science education context. This has involved establishing a Grid Computing module as part of Glasgow University’s Advanced MSc degree in Computing Science. A laboratory infrastructure was built for the students realising a PMI with the PERMIS software, to protect Grid Services they created. The first year of the course centered on building a static PMI at Glasgow. The second year extended this to allow dynamic attribute delegation between Glasgow and Edinburgh to support dynamic establishment of fine grained authorization based virtual organizations across multiple institutions. This dynamic delegation was implemented using the DIS (Delegation Issuing) Web Service supplied by the University of Kent. This paper describes the experiences and lessons learned from setting up and applying the advanced Grid authorization infrastructure within the Grid Computing course, focusing primarily on the second year and the dynamic virtual organisation setup between Glasgow and Edinburgh.

• Item Type: Book Sections
• Status: Published
• Refereed: Yes
• Glasgow Author(s) Enlighten ID: Stell, Mr Anthony and Watt, Dr John and Sinnott, Professor Richard
• Authors: Watt, J., Koetsier, J., Sinnott, R.O., and Stell, A.J.
• Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
• College/School: University Services > IT Services > Computing Service; University Services > IT Services > E-Science
• Publisher: National e-Science Centre
• ISBN: 9780955398810
• Copyright Holders: Copyright © 2006 The Author
• Publisher Policy: Reproduced with the permission of the author.