Dynamic Authorization Support in Large Distributed Systems

Traditionally, a system can only be trusted after it has been formally proven trustworthy. However, due to the inherent complexity of distributed systems and the limitation of formal methods, trust based on factors other than formal logic verification has to be included in designing and developing security services for these systems. Motivated by several on-going research efforts in studying the distributed trust management problem, this thesis proposes a new simple certification scheme that supports distributed name-spaces, dynamic trust management and the specification of application specific security attributes. An object oriented certificate framework has been designed and developed to implement this new scheme. This framework also incorporates an innovative usage of mobile code to specify fine grained delegation conditions flexibly and efficiently. Experiments with a prototype implementation show that the increased flexibility and expressibility adds little performance overhead to the certification system.

Name thesis:degree_name

Ph.D.

Level thesis:degree_level

Dissertation

Discipline thesis:degree_discipline

Computer Science

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2015

Author dc:creator

• Qian, Tin

Contributors dc:contributor

• Campbell, Roy H.

• Computer Science

Language dc:language

eng

Identifier

(MiAaPQ)AAI9955658

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/81971