Mary R. Thompson

Staff Scientist
Group Lead: Distributed Secure Grid Infrastructure Group
Distributed Systems Department
Lawrence Berkeley Laboratory

Curriculum vitae, Feb. 2006

Education

• M.S. in Computer Science, University of California at Santa Barbara (1976)
• B.S. in Physics, Stanford University (1963)

Interests

Interested in new approaches such as PKI for authentication, and inovative methods of authorization and authorization policy languages. Member of Global Grid Forum and an active participant of the Security area working groups: AuthZ, OGSA-Authz and CAOps.

Professional Experience

Staff Scientist/Group Lead, Distributed Secure Grid Infrastructure, Distributed Systems Dept, LBNL

Developing and deploying infrasture to support secure distributed applications. (2004-present)

Computer Engineer/Group Lead, Secure Grid Technologies Group, Distributed Systems, LBNL

Developing secure Grid middleware, including work on the Akenti certificate-based authorization system and applications of it. Investigating ways to provide support for using a variety of credentials for authentication providing more user flexibility and a means to incrementally build trust. (2000-2004)

Computer Engineer, Imaging and Distributed Computing, Lawrence Berkeley Laboratory

Currently working on the Akenti policy-based access control system for distributed resources. Akenti is researching ways for multiple stakeholders of resources to express their use constraints as distibuted signed certificates. We have developed and deployed software to define access policy and to find and check all the policy information when the resource is accessed.
Previously worked with the Distributed-Parallel Server System (DPSS) group integrating Web interfaces with the Server API.
Was responsible for developing an Image Library system which provides tools for indexing, searching and retriving collections of high resolution images through a Web interface. This software supports the Berkeley Lab's Photo Archive and several collections of scientific images. It is the prototype for the Wide-area Large Data Object architecure (WALDO) which provides a Web interface very large data objects.
(1995-2000)

Senior research programmer, Computer Science Department,Carnegie Mellon University.

Worked in OS development for Mach, a micro-kernel based, Unix compatible OS. Responsibilities included integrating and releasing Mach OS components; improving release and build tools; and setting up systems to support external releases of Mach information and software. Developed user level servers for Mach.(1985-1994)
Implemented a distributed file system for the Accent operating system as part the Spice project, an operating system and programming environment for a network of workstations.(1979-1985)
Worked with C.mmp, an capability based operating system for a tightly coupled multi-processor machines. (1977-1979)

Research Programmer, Computer Laboratory, Cambridge University, Cambridge, England.

Implemented a Modula-2 compiler for the ICL Perq. (Sept `82 - June `83)

Applications programmer at Rockwell Air Monitoring Center, Newbury Park, California.

Did scientific data reduction programming. (1977)

Staff member of Project MAC, M.I.T., Cambridge, Mass.

Worked as a system programmer developing the Multics multi-processor, time sharing OS. areas of responsibility were file management, virtual memory management and information protection. (1965-1970)

Programmer, Aerospace Division of the Boeing Company, Seattle, Wash.

Worked as a scientific applications programmer in a flight simulation group (1963- 1965)

Recent Publications

• "Intra and Interdomain Circuit Provisioning Using the OSCARS Reservation System", Chin Guok_, David Robertson, Mary Thompson, Jason Lee, Brian Tierney and William Johnston - accepted for GridNETS 2006 conference. LBNL-60373
• Security on the US Fusion Grid, J. R. Burruss, T.W. Fredian, M.R. Thompson, Fifth International Atomic Energy Agency (IAEA) Technical Meeting onControl, Data Acquisition, and Remote Participation for Fusion Research, July 2005 Budapest, Hungary: Fusion Engineering and Design, Elesevier, to appear Fall 2006, LBNL-58693
• Attributes Used in OGSI Authorization, M. Thompson, V. Welch, M. Lorch, R. Lepro, D. Chadwick, V. Ciaschini, "Attributes Used in OGSI Authorization", Global Grid Forum, GFD-E.057, Dec. 2005
• "Securing Resources in Collaborative Environments: A Peer-to-Peer Approach", Karlo Berket, Abdelilah Essiari, Mary R. Thompson, IASTED International Conference on Parallel and Distributed Computing and Systems (PDCS 2005), November 14 -16, 2005, in Phoenix, USA. LBNL-58867
• Simplifying FusionGrid Security J. R. Burruss, T. W. Fredian, M. R. Thompson, Challenges of Large Applications in Distributed Environments (CLADE) workshop at HPDC14, July 2005, Research Triangle Park, NC; LBNL-58691
• Security for Grids, Marty Humphrey, Mary Thompson, Keith Jackson, Proceedings of the IEEE, March 2005 pp 644-652; LBNL-54853
• Internet X.509 Public Key Infrastructure Proxy Certificate Profile, S.Tueke, V. Welch, D.Engert, L.Pearlman, M.Thompson IETF RFC3820, June 2004
• The National Fusion Collaboratory Project: Applying Grid Technology For Magnetic Fusion Research, D.P. Schissel, K. Keahey, T. Araki, J.R. Burruss, E. Feibush, S.M. Flanagan, I. Foster, T.W. Fredian, M.J. Greenwald, S.A. Klasky, T. Leggett, K. Li, D.C. McCune, P. Lane, M.E. Papka, Q. Peng, L. Randerson, A. Sanderson, J. Stillerman, M.R. Thompson, and G. Wallace, Workshop on Case Studies on Grid Applications (Berlin, Germany, March 13, 2004)
• Certificate-based Authorization Policy in a PKI Environment M.Thompson, A. Essiari, S. Mudumbai, ACM Transactions on Infomation and System Security, Nov. 2003, pp: 566-588 LBNL-49512.
• Remote Computing Using the National Fusion Grid J. Burress, S. Flanagan, K. Keahey, C. Ludescher, D.C. McCune, Q. Peng, L. Randerson, D.P. Schissel, M. Thompson, 4th IAEA Technical Meeting on Control, Data Acquisition, and Remote Participation for Fusion Research (San Diego, CA, July 21-23, 2003)
• A New Security Model for Collaborative Environments, Deb Agarwal, M.Lorch, M.Thompson and M.Perry Proceedings of Workshop on Advanced Collaborative Environments, Seattle, WA, June 22, 2003. LBNL-52894
• Fine-grained Authorization for Job and Resource Management using Akenti and Globus, M.R. Thompson, A. Essiari, K. Keahey, V. Welch, S.Lang and B.Lui, CHEP03 Mar 24-26 2003 LBNL-52976
• Security issues of grid management, M.R. Thompson, K.R. Jackson; chapter in Resource Management for Grid Computing, ed. Jennifer Schopf and Jarek Nabrzyski, Kluwer Academic Press, 2003
• CA-based Trust Issues for Grid Authentication and Identity Delegation Mary R.Thompson, Doug Olson, Robert Cowles, Shawn Mullen, Mike Helm, Global Grid Forum CA Operations WG Community Practices Document, Oct 2002
• Securing Collaborative Environments," D. Agarwal, K. Jackson, and M. Thompson, Proceedings of the Workshop on Advanced Collaborative Environments, Edinburgh, Scotland, July 26, 2002. LBNL-50427.
• Authorization Policy in a PKI Environment M.Thompson, S.Mudumbai, A.Essiari, W Chin Proceedings of the 1st Annual NIST workshop on PKI, Apr 2002.
• Security Implications of Typical Grid Computing Usage Scenarios M. Humphrey, M. Thompson, Proceedings of the Tenth IEEE International Symposium on High Performance Distributed Computing pp 95-103, Aug 2001
• An Integrated Solution for Secure Group Communication in WAN O. Chevassut, D. Agarwal, M. R. Thompson, G. Tsudik, Proceedings of the 6th IEEE Symposium on Computers and Communications, Jul 2001, Hammamet, Tunisia
• Computational Grids in Action: The National Fusion Collaboratory K. Keahey, T. Fredian, Q. Peng, D.P. Schissel, M. Thompson, I. Foster, M. Greenwald, D. McCune, Future Generation Computer System, 2001.
• A Monitoring Sensor Magagement System for Grid Environments" Brian Tierney, Brian Crowley, Dan Gunter, Jason Lee and Mary Thompson, Custer Computing, pp 19-28, Vol 4 (Mar 2001), Kluwer Academic Publishers
• A Data Intensive Distributed Computing Architecture for "Grid" Applications, Brian Tierney, William Johnston, Jason Lee, Mary Thompson,Future Generation Computer Systems, pp 473-481, Vol 16, 2000, Elsevier
• Certificate-based Access Control for Widely Distributed Resources Mary Thompson, William Johnston, Srilekha Mudumbai, Gary Hoo, Keith Jackson, Proceeding of the Usenix SecuritySymposium '99
• Real-Time Digital Libraries based on Widely Distributed, High Performance Management of Large-Data-Objects William Johnston, Jin Guojun, Case Larsen, Jason Lee, Gary Hoo, Mary Thompson, Brian Tierney, Joseph Terdiman, M.D. Invited paper, InternationalJournal of Digital Libraries - Special Issue on "Digital Libraries in Medicine. May, 1998.
• Authorization and Attribute Certificates for Widely Distributed Access Control William Johnston, Srilekha Mudumbai, and Mary Thompson, Proceedings of the IEEE 7th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises - WETICE '98
• Distributed Large Data-Object Management Architecture William Johnston, Jin Guojun, Jason Lee, Mary Thompson, Brian Tierney. Presented at Storage and Retrieval for Image and Video Databases V, Electronic Imaging `97, Feb 13, 1997, SPIE Proceedings Vol. 3022
• An Interface for Viewing and Searching Sets of Digital Images Mary Thompson, Jacob Bastacky, William Johnston. Presented at Microscopy and Microanalysis 96, Aug. 13, 1996, 2 page abstract published in Proceedings Micros copy and Microanalysis '96