NDLI: Enforcing enterprise-wide policies over standard client-server interactions

Content Provider	IEEE Xplore Digital Library
Author	He, Z. Phan, T. Nguyen, T.D.
Copyright Year	2005
Description	Author affiliation: Dept. of Comput. Sci., Rutgers Univ., NJ, USA (He, Z.; Phan, T.; Nguyen, T.D.)
Abstract	We propose and evaluate a novel framework for enforcing global coordination and control policies over interacting software components in enterprise computing environments. This framework combines a per-node reference monitor with two existing coordination and control systems to enforce policies that, among other properties, are stateful and communal. Each reference monitor filters messages exchanged between the interacting software components similar to a firewall, passing only messages that are allowed by the policies in effect. This filtering approach decouples coordination and control from application implementation, allowing the coordination and control mechanism and application implementations to evolve independently of each other. We demonstrate the power of our framework by using it to specify and enforce an RBAC policy with delegation, revocation, and separation-of-duty over accesses to a cluster of NFS and SMB file servers without changing any client or server implementations. Measurements show that our framework imposes acceptable overheads when enforcing this policy.
Sponsorship	IEEE Comput. Soc. TC-MARCH ACM SIGMICRO
Starting Page	119
Ending Page	130
File Size	400686
Page Count	12
File Format	PDF
ISBN	076952463X
DOI	10.1109/RELDIS.2005.17
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2005-10-26
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Application software Control systems File servers Protocols Access control Helium Computer science Computerized monitoring Filters Filtering
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Libarray of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Enforcing enterprise-wide policies over standard client-server interactions (2005)

Using Firewalls to Enforce Enterprise-wide Policies over Standard Client-Server Interactions

Using firewalls to enforce enterprise-wide policies over standard client-server interactions.

Using Firewalls to Enforce Enterprise-wide Policies over Standard Client-Server Interactions

Data Sandboxing: A Technique for Enforcing Confidentiality Policies

FRAC: Implementing Role-Based Access Control for Network File Systems

Distributed coordination models for client/server computing

A Client-Side-Only Approach to Disconnected File Access

An XML model for use across heterogeneous client-server applications

Enforcing enterprise-wide policies over standard client-server interactions

Similar Documents

Enforcing enterprise-wide policies over standard client-server interactions (2005)

Using Firewalls to Enforce Enterprise-wide Policies over Standard Client-Server Interactions

Using firewalls to enforce enterprise-wide policies over standard client-server interactions.

Using Firewalls to Enforce Enterprise-wide Policies over Standard Client-Server Interactions

Data Sandboxing: A Technique for Enforcing Confidentiality Policies

FRAC: Implementing Role-Based Access Control for Network File Systems

Distributed coordination models for client/server computing

A Client-Side-Only Approach to Disconnected File Access

An XML model for use across heterogeneous client-server applications

Enforcing enterprise-wide policies over standard client-server interactions