course DECENTRALIZED TRUST MANAGEMENT

			     TRENTO, 2007

	     References used in the student presentation.

Machon Gregory and Peter Losocco
Using the Flask Security Architecture to Facilitate Risk Adaptable
Access Controls.
http://selinux-symposium.org/2007/agenda.php

Landwehr
Formal models for computer security
http://portal.acm.org/citation.cfm?coll=GUIDE&dl=GUIDE&id=356852.

- "Authentication, Access Control, and Intrusion Detection", 1997,
Ravi S. Sandhu, Pierangela Samarati, The Computer Science and
Engineering Handbook
http://citeseer.ist.psu.edu/cache/papers/cs/20175/http:zSzzSzwww.list.gmu.eduzSzarticleszSzcrczSzc96acid.pdf/sandhu97authentication.pdf
	
- "Privacy and Confidentiality in an e-Commerce World: Data Mining,
Data Warehousing, Matching and Disclosure Limitation", Stephen
E. Fienberg, Statistical Science 2006, Vol. 21, No. 2, 143–154
http://stat.cmu.edu/~fienberg/Ecommerce-StatSci-2006.pdf

- "Presentation at the DATA ARCHIVING AND ACCESS REQUIREMENTS WORKING
GROUP (DAARWG) MEETING", Washington, DC, 7-8 December 2006 "NOAA
Science Advisory Board Data Archiving and Access Security
Considerations", Domi Sanchez, CISSP, NOAA OCIO/ITSec Office, December
7, 2006
http://www.joss.ucar.edu/joss_psg/meetings/Meetings_2006/daarwg/presentations/sanchez.pdf

- "On Five Defitions of Data Integrity", Ravi S. Sandhu, Proc. of the
IFIP WG11.3 Workshop on Database Security, Lake Guntersville, Alabama,
Sep 12-15 1993.
http://citeseer.ist.psu.edu/cache/papers/cs/14807/http:zSzzSzwww.list.gmu.eduzSzconfrnczSzifipzSzpdf_verzSzi93int.pdf/sandhu93five.pdf

- "Data Warehouse Control and Security", Slemo Warigon, CISA, MBA,
Association of College and University Auditors LEDGER, Vol. 41, No. 2,
April 1997; pp. 3-7. http://www.all.net/books/audit/kits/dw.html

- "Policy for Web Security Services", Konstantina Stoupa, Athena
Vakali, 2005 http://oswinds.csd.auth.gr/papers/idea2005.pdf

- Information about ChoicePoint from Wikipedia
http://en.wikipedia.org/wiki/ChoicePoint

Ravi S. Sandhu.  Lattice-Based Access Control Models. Computer. IEEE
press. 1993.
http://www.winlab.rutgers.edu/~trappe/Courses/AdvSec05/access_control_lattice.pdf


		       Used by Artiom Evtiukhin

Resnick, P.; Kuwabara, K.; Zeckhauser, R. & Friedman, E. Reputation
systems. Communications of the ACM, ACM Press, 2000 , 43 , 45-48

Kamvar, S.D.; Schlosser, M.T. & Garcia-Molina,
H. The Eigentrust algorithm for reputation management in P2P
networks. Proceedings of the 12th international conference on World
Wide Web. ACM Press, 2003 , 640-651

		     Used by Aleksandar Milosevic

Carl E. Landwehr, "Formal models for Computer Security"
(http://wwwhome.cs.utwente.nl/~etalle/dtm/landwehr_survey.pdf) , Code
7593 Naval Research Laboratory

Boris Dragovic , "Access control" slides (presentation for course
"Computer Security"), UNITN 2007

			Used by Sheak R. Noori

Daniel Olmedilla, Ruben Lara, Axel Polleres, Holger Lausen "Trust
Negotiation for Semantic Web Services" 1st International Workshop on
Semantic Web Services and Web Process Composition, San Diego,
California, USA (6th - 9th July 2004), Organization: ICWS

			 used by Ida Siahaan

N. Li and W. H. Winsborough. Beyond proof-of-compliance: safety and
availability analysis in trust management. Proc IEEE symp on Security
and Privacy. 2003. 


L. Eschenauer, V. Gligor, J. Baras On Trust Establishment in Mobile
Ad-Hoc Networks. Technical report, University of Maryland. 2002.
citeseer.ist.psu.edu/eschenauer02trust.html

		      Used by Aliaksandr Autayeu

1) http://theory.lcs.mit.edu/~cis/sdsi.html

2) http://islab.oregonstate.edu/koc/ece575/97Project/Landry/

3) http://jsdsi.sourceforge.net/

4) (outdated) http://www.pmg.lcs.mit.edu/~ajmani/sdsi/

5) Access Control for Semantic Web Services; Sudhir Agarwal, Barbara
Sprick
(http://scholar.google.com/scholar?cluster=10919133038576545574)

6) Certificate chain discovery in SPKI/SDSI; Dwain Clarke, Jean-Emile
Elien, Carl Ellison, Matt Fredette, Alexandr Morcos, Ronald L. Rivest
(http://scholar.google.com/scholar?cluster=4337535195990539496)

7) Web-Based User Interface for a Simple Distributed Security
Infrastructure; Gillian D. Elcock (master thesis)
(http://scholar.google.com/scholar?cluster=1889701741594816599)

8) An Implementation of SDSI - The Simple Distributed Security
Infrastructure; Matthew H. Fredette (master thesis)
(http://scholar.google.com/scholar?cluster=17682806474952968080)

9) Operating System vs. Network Security; Butler Lampson (powerpoint)
(http://www.usenix.com/publications/library/proceedings/usenix-nt97/presentations/lampson.ppt)

10) A Java Implementation of Simple Distributed Security Infrastructure;   Alexander Morcos (master thesis)
(http://scholar.google.com/scholar?cluster=8164004074129389150)

11) On SDSI’s Linked Local Name Spaces; Martin Abadi
(http://scholar.google.com/scholar?cluster=123586886074106565)

12) 4 highly overlapping in content presentations available from 1)

13) Using SPKI/SDSI for Distributed Maintenance of Attribute Release
Policies in Shibboleth; Sidharth Nazareth, Sean W. Smith
(http://scholar.google.com/scholar?cluster=9039627447922659956)

14) SPKI/SDSI; Jonathan Ledlie (presentation)

15) How to Resolve SDSI Names Without Closure; Sameer Ajmani
(http://scholar.google.com/scholar?cluster=8354614688173154840)

16) Local Names In SPKI/SDSI; Ninghui Li
(http://scholar.google.com/scholar?cluster=11324018973626168187)

17) Understanding SPKI/SDSI Using First-Order Logic; Ninghui Li, John
C.  Mitchell
(http://scholar.google.com/scholar?cluster=15680168547705794658)

			Used by Fatih TURKMEN

1. D.F. Ferraiolo and D.R. Kuhn, "Role Based Access Control", 15th
National Computer Security Conference, 1992

2. Sandhu R.S., Coyne E.J., Feinstein H.L., Youman C.E., "Role-Based
Access Control Models", IEEE Computer 29(2): 38-47, IEEE Press, 1996

3. Ferraiolo D.F., Sandhu R., Gavrila S., Kuhn D.R., Chandramouli
R.,"Proposed NIST standard for role-based access control", ACM
Transactions on Information and System Security (TISSEC), 2001

4. Covington M. J., Moyer M. J., Ahamad M., "Generalized Role-Based
Access Control for Securing Future Applications", 23rd National
Information Systems Security Conference, 2000


			  Used by	Juwel Rana


- WS-Trust Specification V1.3

- http://www.oasis-open.org/home/index.php

- Steve Graham, D. Davis, S. Simeonov, G. Daniels, B Peter, N Yuichi,
F Paul, D Konig, Z. Claudia, "Web Services with JAVA" Second Edition,
Sams Publishing.

- James Snell, t. Doug, K. Pavel“Programming Web Services with SOAP”,
1st edition, O’REILLY.