1 / 9

A Survey of Risk: Federated ID Management in Cloud and Grid Computing

A Survey of Risk: Federated ID Management in Cloud and Grid Computing. Presentation b y Andy Wood (P11250192). Introduction. Cloud (and Grid) computing are the new platforms today. Working with business partners is more common place in todays connected world.

paytah
Download Presentation

A Survey of Risk: Federated ID Management in Cloud and Grid Computing

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. A Survey of Risk:Federated ID Management in Cloud and Grid Computing Presentation by Andy Wood (P11250192)

  2. Introduction • Cloud (and Grid) computing are the new platforms today. • Working with business partners is more common place in todays connected world. • Managing user accounts across disparate systems is becoming more difficult and costly.

  3. Federated ID Management • Federated ID Management (FIdM) allows for simplified user management across security domains. • Based on a user authenticating to own DS and their ID used to authenticate to remote services through trust relationships. • FIdM is based on not just technology. • Many ways to implement • User centric • Business centric

  4. Federated ID Management

  5. Critical Review - Resources • Keywords: • (FIdM or Federated) and Cloud and Risk. • Resource Databases: • IEEE Xplore; ACM DL; SCOPUS; CiteSeerX and Google Scholar. • Resources: • 673 initial resources. • Reduced to final 18. • 5 Further papers added

  6. Critical Review - Criteria • Criteria: • Primary / Secondary source • Difficulty to implement • Risk type: Security; Liability; Trust; Assurance or Interoperability • Scalability • Protocols • Citation

  7. Critical Review - Findings • Most papers describe similar technologies: • SAML being key protocol for ID transfer • XACML bring key protocol for access control • Key risks: • Trust (with 3rd party); • Interoperability; and • Message security. • Scalability of solutions were good • Difficulty varied and subjective • Olden (2011) describes a typical enterprise benefit with example saving of $4.5m per year.

  8. Critical Review – Risks • Liability • Ensuring lines of responsibility • Assurance • Processes and procedures being followed: • staff vetting; • joiners/movers/leavers etc. • Trust • Fundamental, but difficult to implement • Security • ID theft • Greater exposure than via separate authentication to systems • Message security through exchange of ID information • Interoperability • Some standard based mechanisms such as SAML • Others describe extended or bespoke mechanisms • Potential for large federations to include multiple mechanisms • Higher risk profile • Higher cost for implementation and support

  9. Conclusion • Resources were harmonious in design and risk • Immature area of technology • Still room for improvement • FIdM is more than just technology • Lack of described foundation prior to tech • FIdM is a business enabler • Balance of risk v business enablement • Risk profile has to be aligned to each business

More Related