CAREER: A Trust-based Access Control Management Framework for Secure Information Sharing and Multimedia Workflows in Heterogeneous Environments

Grant

NSF-CAREER Award IIS-0545912

 

Project Duration

Jan 1, 2006 -  Dec 31, 2010

 

Project Total Amount

$416,419

 

Principal Investigator

James B. D Joshi

Assistant Professor

School of Information Sciences, University of Pittsburgh

 

Project Abstract

The goal of this research is to address the complex security, privacy and digital rights management issues related to the emerging multidomain application (EMA) environments, which are characterized by the convergence of emerging grid, P2P and mobile environments with multimedia and workflow technologies. Such EMA environments show huge potential for efficiently automating workflow processes across heterogeneous administrative domains, and for facilitating unprecedented levels of system interactions and information and resource sharing. In particular, the project takes a holistic approach to synthesizing a solution that combines (i) a comprehensive trust-based, adaptive, content and context based access control and secure interoperation framework to facilitate the interaction of constituent domains in an EMA environment, and (ii) a comprehensive framework for addressing the privacy and digital rights management issues related to sharing of multimedia data and workflows. The research will produce required theory, efficient algorithms, specification languages, negotiation protocols, and analysis and administration tools founded on sound design principles and usability considerations which will be validated in a prototype EMA environment. The results are expected to have direct and long-term impact on developing secure data and resource intensive heterogeneous application environments, and will contribute significantly to current efforts related to the protection of complex systems and infrastructures such as the national and global information grid. The research results will be incorporated into the security curriculum of the University of Pittsburgh, which has been designated a national center of academic excellence in information assurance education, and disseminated through publication venues and the project website (http://www.sis.pitt.edu/~jjoshi/nsfcareer/).

Go to Joshi's Homepage

Acknowledgement: All the publications listed here are based upon work supported by the National Science Foundation under this grant (Grant No.  IIS-0545912).

Disclaimer: Any opinions, findings, and conclusions or recommendations expressed in the materials listed here are those of the author(s) and do not necessarily reflect the views of the National Science Foundation.

 

People Involved

PhD Students

My Advisees

Program

Publications 

 Area

Yue Zhang

PhD, IS/CS

3 Book Chapters + 5 Journals + 5 Conference

Multidomain Security

Amirreza Masoumzadeh

PhD, IS

1 Journal + 1 Conference

Security/Privacy

Saubhagya Ram Joshi

PhD, IS

3 Chapters

Workflow Security

 

Others (did/doing research with me)

 

 

Siginq Du

PhD, IS

1 Conference + 1 Chapter

Multidomain Security

Korporn Panyim

PhD, TEL

1 Paper

Trust Management

Carlos E. C. Bastidas

PhD, TEL

1 Journal Article/ I Paper

Access Control/Trust in IPv6/mobile IPv6 Security

Masters Students
(Current)      

Craig Schenkler

MS-IS

In Preparation

Prototype Implementation for Lot-RBAC

Summit Tuladhar

MS-TEL

(Thesis)

Interdomain Authentication/Access in Mobile Env
 (Past)      

Raymond Murthi

MS, IS

Working on them !

GTRBAC Extension (Implementation)

Suronapee Phoomvuthisarn

MS, IS

1 Conference

Trust Management (Implementation)

Summt R. Tuladhar

MS, TEL

Working on them !

Access Control/Trust in IPv6/mobile IPv6 Security

Publications

Book Chapters
2006

  1. James B. D. Joshi, Siqing Du, Saubhagya R. Joshi, “A Trust Based Access Control Management Framework for a Secure Grid  Environment” in Book titled "Security in Distributed, Grid, and Pervasive Computing", Edited by  Prof. Yang Xiao, to be published by Auerbach Publications, CRC Press 2006.

  2. James B. D. Joshi, S. R. Joshi, and S. M. Chandran, "Information Security Issues and Challenges," in Encyclopedia of Digital Government, (Editors Ari-Veikko Anttiroiko, Matti Malkia), 2006.

  3. James B. D. Joshi, S. R. Joshi, and S. M. Chandran, "Identity Management and Privacy Issues," in Encyclopedia of Digital Government, (Editors Ari-Veikko Anttiroiko, Matti Malkia), 2006.

  4. James B. D. Joshi, S. M. Chandran, A. Ghafoor, and W. G. Aref, "Survivability Issues and Challenges," in Encyclopedia of Digital Government, (Editors Ari-Veikko Anttiroiko, Matti Malkia), 2006.

2007

  1. James B D Joshi, Yue Zhang “Access Control and Trust Management for Emerging Multidomain Environments,” in Annals of Emerging Research in Information Assurance, Security and Privacy Services, Editors: S. Upadhyaya, R. O. Rao (in progress; invited)

  2. James B D Joshi, Yue Zhang, “Temporal Access Control,” Encyclopedia of Database Systems, Editors-in-Chief: Ling Liu, M. Tamer Özsu, Springer – in progress, (Invited).

  3. James B D Joshi, Yue Zhang, “Role based Access Control”, Encyclopedia of Database Systems, Editors-in-Chief: Ling Liu, M. Tamer Özsu Springer – in progress, (Invited).

Journals

  1. James B. D. Joshi, Elisa Bertino, Arif Ghafoor, "Formal Foundations for Hybrid Role Hierarchy", ACM Transaction in Information and Systems Security. (In Print).

Submitted/Being Submitted

  1. James. B.D. Joshi, Elisa Bertino, and Yue Zhang, “Constraints in the Generalized Temporal RBAC Model”, (IEEE TDSC)

  2. Yue Zhang, Amirreza Masoumzadeh and James B.D.Joshi, “LoT-RBAC: A Temporal Location Role Based Access Control Model”, (Journal of Location Based Services)

  3. Yue Zhang and James B.D.Joshi, “SARBAC07: A scoped administration model for RBAC with hybrid hierarchy”, (Journal of Information Assurance and Security).

  4. Yue Zhang and James B.D. Joshi, “A Time-based Secure Interoperation and Authorization Model in Loosely-Coupled Multi-domain environment employing GTRBAC”, being submitted (venue TBD)
     

Conference/Workshops

2006

  1. Michael Chuang; Suronapee Phoomvuthisarn; James B. D. Joshi, "An Integrated Framework for Trust-Based Access Control in Open Environments," The Second International Conference on Collaborative Computing: Networking, Applications and Worksharing (CollaborateCom-2006), Nov 16-19, 2006.

  2. Siqing Du, James B. D. Joshi, “Supporting Authorization Query and Inter-domain Role Mapping in Presence of Hybrid Role Hierarchy,” The 11th ACM Symposium on Access Control Models and Technologies, USA, June 2006.

  3. James B. D. Joshi, Elisa Bertino, “Fine-grained Role-based Delegation in Presence of Hybrid Role Hierarchy,” The 11th ACM Symposium on Access Control Models and Technologies, USA, June 2006.

  4. Suroop M Chandran, Korporn Panyim, James B. D. Joshi, “A Requirements-Driven Trust Framework for Secure Interoperation in Open Environments", The Fourth International Conference on Trust Management, (iTrust-06), May 16-19, Italy, 2006.

2007

  1. Yue Zhang and James, B.D. Joshi, “A Request-Driven Secure Interoperation Framework in Loosely-Coupled Multi-domain Environment Employing RBAC Policies”, TrustCol’ 2007, White Plains, New York
  2. Yue Zhang and James, B.D. Joshi, “SARBAC07: A Scoped Administration Model for RBAC with Hybrid Hierarchy”, IAS’ 2007, Manchester, UK
  3. Yue Zhang and James, B.D. Joshi, “ARBAC07: A Role-Based Administration Model for RBAC with Hybrid Hierarchy”, IRI’ 2007, Las Vegas, NV

(Submitted)

  1. Yue Zhang and James B.D. Joshi, “Centralized vs. Decentralized: A Formal Analysis of the Secure Interoperation Approaches in Multi-domain Environments”, Submitted to S&P’08.

  2. Yue Zhang and James B.D. Joshi, “A User Authorization Query Model for Web-Based RBAC Systems”, Submitted to WWW’08.

(In Progress - to be submitted to SACMAT08)

  • Paper on Time-based Hybrid Hierarchy Management

  • Paper on SoDs in Multidomain Integration

  • Paper on Privacy-Aware Extension to GTRBAC

 

Implementation Activities (Software + Testbed)

  1. Testbed for Grid + Mobile environment is being finalized.

  2. Prototype implementation of LoT-RBAC and its XML specification language is being finalized.
Activities related to Integration with Education/Training

Year 1: (2006)

  1. Implementation work (GTRBAC + Trust) for MS students

  2. Integrated in Security Management course 2006 (Trust Negotiation + GTRBAC and area related papers)

  3. Doctoral Seminar in Information Assurance (2005-2006)

Year 2: (2007)

  1. Project on prototype development for a secure mobile application to test LoTRBAC - in Developing Secure Systems course.

  2. Wider coverage of RBAC and Access Control models in Introduction to Security Course (Fall 2007)

  3. Mobile Testbed Set up and project on Interdomain Mobility
Activities related to Dissemination of Results

Year 1: (2006)

  1. Organized TrustCol-2006

Year 2: (2007)

  1. Organized TrustCol-2007

  2. Invited Lecture/Presentation in University of Florida, Gainesville

  3. Invited Lecture/Presentation in Florida International University, Miami

  4. Invited Lecture/Presentation in University of North Carolina, Charlotte