September 2005 - security-area

Reminder: Leveraging Site Infrastructute for Multi-Site Grids
by Von Welch 28 Sep '05

28 Sep '05

[Please note this is Monday, not Wednesday.] Community Activity: Leveraging Site Infrastructute for Multi-Site Grids Monday, 03-October 11:00a – 7:30p http://www.ggf.org/GGF15/ggf_events_schedule_MultiSite.htm Tentative Agenda 11:00-11:45 Ken Klingstein "Overview of Campus IT" 11:45-12:30 Arnie Miles "Exposing Computational Resources Across Administrative Domains: Condor Shibboleth Integration" 12:30-2pm Lunch 2:00-2:30 Jim Basney "Integrating MyProxy with Site Authentication" 2:30-3:00 Marty Humphrey "MyProxy integration with Pubcookie" 3:00-3:30 Von Welch "GridShib: Campus/Grid RBAC Integration" 3:30-4pm Coffee Break/GridShib Demo 4:00-4:30 David Chadwick "X.509 Privilege Management Infrastructures for Dynamic Delegation of Authority between Sites" 4:30-5:00 Rana/Wuerthwein "Multi-Site VOs and Multi-VO Sites in Open Science Grid" 5:00-5:30 Tom Barton "Signet and Grouper for Distributed Attribute Administration" 5:30-6:00 Break (Signet/Grouper Demo) 6:00-6:30 Dane Skow "KCA Experiences at Fermilab" 6:30-7:30 Panel Discussion (all presenters; Von Welch moderator) 7:30 Adjourn

1 0

CFP: 5th Annual PKI R&D Workshop: Making PKI Easy to Use
by Von Welch 16 Sep '05

16 Sep '05

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CALL FOR PAPERS: ** Papers and Proposals Due: October 14, 2005 ** (see below for additional information) 5th Annual PKI R&D Workshop: Making PKI Easy to Use April 4-6, 2006 NIST -- Gaithersburg, MD Website: http://middleware.internet2.edu/pki06/ Registration Fee: $125.00 This workshop considers the full range of public key technology used for security decisions and supporting functionalities, including authentication, authorization, identity (syndication, federation, and aggregation), and trust. This year, the workshop has a particular interest in novel approaches to simplifying the use and management of X.509 digital certificates, both within and across enterprises. This workshop has three goals: 1. Explore the current state of public key technology and emerging trust mechanisms in different domains including web services; grid technologies; encryption functionality; authentication systems, et al., in academia, government and the private sector. 2. Share & discuss lessons learned and scenarios from vendors and practitioners on current deployments. 3. Provide a forum for leading security researchers to explore the issues relevant to the PKI space in areas of security management, identity, trust, policy, authentication, authorization and encryption (e.g., supporting privacy requirements). CALL FOR PAPERS: We solicit papers, case studies, panel proposals, and participation from researchers, systems architects, vendor engineers, and users. Submitted works should address one or more critical areas of inquiry. Topics include (but are not limited to): * Federated versus Non-Federated trust models * Standards related to PKI and security decision systems, such as X.509, SPKI/SDSI, PGP, XKMS, XACML, XRML, XML signatures and SAML * Cryptographic and alternative methods for supporting security decisions, including the characterization and encoding of data * Intersection of assertion-based systems and PKI * Human-Computer Interaction (HCI) advances that improve usability of PKI for users and administrators * Privacy protection and implications * Use of PKI in emerging technologies (i.e., sensor networks) * Scalability of security systems * Security of the components of PKI systems * Security infrastructures for constrained environments * Improved human factor designs for security-related interfaces including authorization and policy management, naming, use of multiple private keys, and selective disclosure * New paradigms in PKI architectures * Reports of real-world experience with the use and deployment of PKI, including the use of digital certificates with major off-the- shelf application programs, how best to integrate such usage into legacy systems, and future research directions. Deadlines for conference paper and panel submissions are: * Papers and Proposals: Due: October 14, 2005 * Authors Notified: December 2, 2005 * Final Materials Due: February 3, 2006 Submissions should be provided electronically, in PDF, for standard US letter-size paper (8.5 x 11 inches). Paper submissions must not exceed 15 pages (single space, two column format with 1" margins using a 10 pt or larger font) and have no header or footer text (e.g., no page numbers). Proposals for panels should be no longer than five pages and include possible panelists and an indication of which panelists have confirmed participation. Please submit the following information to pkichairs(a)internet2.edu: * Name, affiliation, email, phone, postal address for the primary contact author * First name, last name, and affiliation of each co-author * The finished paper in PDF format as an attachment All submissions will be acknowledged. Submissions of papers must not substantially duplicate work that any of the authors have published elsewhere or have submitted in parallel to any other conferences or journals. Accepted papers will be published in a proceedings of the workshop. REGISTRATION The registration fee of $125 per person includes workshop materials, coffee breaks, lunches, and a dinner. There will be no on-site registration. Please pre-register by March 17, 2006 at https:// rproxy.nist.gov/CRS/conf_ext.cfm?conf_id=1491 or by contacting: Teresa Vicente NIST Phone: (301) 975-3883 Fax: (301) 948-2067 email: teresa.vicente(a)nist.gov An agenda will be available in late December at http://middleware.internet2.edu/pki06/ ACCOMMODATIONS A block of rooms has been reserved at the Gaithersburg Hilton, (301) 977-8900, at a special rate of $109, single or double, plus 12% tax. Reservations must be received by March 17, 2006, in order to receive the special rate. Please mention you are attending the "NIST/PKI Workshop".

1 0

Fwd: CFP: GGF-15 Workshop on Site Infrastructure for Multi-Site Grids
by Von Welch 01 Sep '05

01 Sep '05

[Wrong address on first sending - Von] Hello, this is to announce a workshop GGF15 on leveraging site infrastructure for multi-site grids. This results from a number of us wanted to follow up on previous workshops and discussions and an I2 workshop on how Grids could be taking better advantage of existing site infrastructure with a workshop to discussion issues more. Note that we currently have time on the agenda for more speakers if anyone has something to present (see end of announcement for details). Please forward to others who would be interested. Thanks - Von Announcement and Call for Participation GGF15 Workshop: Leveraging Site Infrastructure for Multi-Site Grids Tuesday, October 3rd @ GGF 15 in Boston (11am - 7:30pm) Virtual organizations (VOs) need a variety of information services to provide their structure. For example, it is typical for a Grid to have a certificate authority to provide identity information, an attribute authority to provide information regarding the roles of their users and a resource directory that provides an enumeration of the resources available to the VO. When a VO spans a number of underlying organizations (as opposed to a Grid deployed at a single campus), the best practice today is for the VO to establish their own services to enable its day-to-day functioning. Deploying and operating these services in a security, reliable manner is non- trivial, especially for small to medium virtual organizations, particularly when one considers that these services have a number of security implications in terms of being consulted as part of authorization decisions by end resources. However, there have been some steps in the Grid community to allow for these services to be provided by leveraging and federation the services already provided by the sites on which the VO is based. For example, Fermilab provides a Kerberos CA allowing other sites in a VO to base their Grid authentication on the Kerberos authentication infrastructure already deployed at Fermilab. And campus infrastructures are increasingly deploying outward-facing infrastructure such as Shibboleth, which has several initial efforts focusing on interoperability with existing Grid technologies (Condor and the Globus Toolkit). In this workshop we will explore the how VOs spanning multiple sites can benefit from increased leveraging of the infrastructure of those sites. We will consider both traditional high-performance computing sites as well as other types of institutions such as academic campuses. We will also explore some of the challenges involved in this model, for example: There are no ubiquitous standards for site authentication, attribute, directory, etc. infrastructure. This implies that we need translation mechanisms to achieve interoperability. What translation mechanisms exist today and how well to they work? While some information that sites can provide, such as identifiers for authentication, is generic and can be easily consumed by a VO, the VO may need to define other structure, such as roles for its users, which is not something sites possess today. How can a VO define this information, while still using the site infrastructures to propagate it? Many sites have privacy concerns regarding information about their users. How can sites share information with VOs while addressing these concerns? The workshop plans to produce an informational document capturing the following: List of current success stories for leveraging site infrastructure to form multi-site VOs; Enumeration of existing tools, APIs, standards and technologies for leveraging site infrastructure; Current barriers to leveraging of multiple site infrastructures by VOs. Call for Participation: There is still time on the agenda for several speakers. If you would like to make a presentation related to the above, please send a brief (1-2 paragraph) abstract to Von Welch vwelch(a)ncsa.uiuc.edu by September 9th. If accepted, full slides would be due by September 23rd. Confirmed Speakers: Ken Klingensten (Internet2) – Campus IT Von Welch (NCSA) – Shibboleth and Globus Jim Basney (NCSA) – MyProxy Integration with local Authentication Tom Barton (U. Chicago)– Signet and Grouper for Distributed Attribute Management Arnie Miles (Georgetown U.) – Shibboleth and Condor Workshop organizers: Tom Barton, Jim Basney, Steven Carmody, Ken Klingensten, Arnie Miles, Frank Siebenlist, Von Welch. For the latest agenda, please see: http://www.ggf.org/GGF15/ggf_events_schedule_MultiSite.htm

1 0