000000136 001__ 136
000000136 005__ 20130522141950.0
000000136 037__ $$aLERSSE-PRESENTATION-2007-063
000000136 041__ $$aeng
000000136 100__ $$aQiang Wei
000000136 100__ $$aMatei Ripeanu
000000136 100__ $$aKonstantin Beznosov
000000136 245__ $$aCooperative Secondary Authorization Recycling
000000136 260__ $$c2007-07-02
000000136 300__ $$a24p
000000136 520__ $$aAs distributed applications such as Grid and enterprise systems scale up and become increasingly complex, their authorization infrastructures—based predominantly on the request-response paradigm—are facing challenges in terms of fragility and poor scalability. We propose an approach where each application server caches previously received authorizations at its secondary decision point and shares them with other application servers to mask authorization server failures and network delays.  This talk presents the design of our cooperative secondary authorization recycling system and its evaluation using simulation and prototype implementation. The results demonstrate that our approach improves the availability of authorization infrastructures while preserving their performance characteristics. Specifically, by sharing authorizations, the cache hit rate—an indirect metric of availability—can reach 70%, even when only 10% of authorizations are cached. Depending on the deployment scenario, the performance in terms of the average time for authorizing an application request can be reduced by up to 30%. 
000000136 6531_ $$aCSAR
000000136 6531_ $$aSAAM
000000136 6531_ $$aJAMES
000000136 6531_ $$aauthorization recycling
000000136 6531_ $$acooperation
000000136 6531_ $$aEngineering Security Mechanisms
000000136 8560_ $$fqiangw@ece.ubc.ca
000000136 8564_ $$uhttp://lersse-dl.ece.ubc.ca/record/136/files/136.pdf$$yTransfer from CDS 0.99.7
000000136 909C4 $$pQiang Wei, Matei Ripeanu, and Konstantin Beznosov, "Cooperative Secondary Authorization Recycling," presented at the 16th Symposium on High Performance Distributed Computing (HPDC'07), June 27, 2007, Monterey, California, USA. pp.24. 
000000136 980__ $$aPRESENTATION