Drew Dean, Deconstructing Trust Management (September 05, 2001)
From the CISR video library (http://www.cisr.us)
Drew Dean, SRI International
The Compelling Business Case for Information Security
September 05, 2001
at the
Naval Postgraduate School
(http://www.nps.edu)
ABSTRACT
Trust management is a buzzword that means many different things to different people. However, everyone agrees that the term encompasses distributed naming and authorization systems. The SDSI work (later combined with SPKI) has been one main thrust of trust management research. Unfortunately, formalizing SDSI/SPKI has not proven easy. In this work, we describe an alternative design, based on very simple formal semantics. In particular, we show that naming and authorization can be considered separately, and compose nicely.
About Drew Dean
Drew Dean is a Computer Scientist at SRI International. He is best known for his work on Java security and the SDMI Challenge. He received his Ph.D from Princeton University, and was previously at Xerox PARC.