Annotated publications list for Mary Thompson

• "Intra and Interdomain Circuit Provisioning Using the OSCARS Reservation System", Chin Guok_, David Robertson, Mary Thompson, Jason Lee, Brian Tierney and William Johnston - accepted for GridNETS 2006 conference. LBNL-60373

  Describes the ESNet On-Demand Secure Circuits and Advance Reservation System (OSCARS) system for dynamically provisioning quality of service enabled virtual circuits.

• Security on the US Fusion Grid, J. R. Burruss, T.W. Fredian, M.R. Thompson, Fifth International Atomic Energy Agency (IAEA) Technical Meeting onControl, Data Acquisition, and Remote Participation for Fusion Research, July 2005 Budapest, Hungary; Fusion Engineering and Design, Elesevier, to appear Fall 2006, LBNL-58693

  Describes the use of a credential manager and MyProxy to handle X.509 certificates for the FusionGrid and the ROAM central authorization service to provide access control for all the FusionGrid resources.

• Attributes Used in OGSI Authorization, M. Thompson, V. Welch, M. Lorch, R. Lepro, D. Chadwick, V. Ciaschini, "Attributes Used in OGSI Authorization", Global Grid Forum, GFD-E.057, Dec. 2005

  A Global Grid Forum Experimental document that describes how attributes are used in OGSI..

• "Securing Resources in Collaborative Environments: A Peer-to-Peer Approach", Karlo Berket, Abdelilah Essiari, Mary R. Thompson, IASTED International Conference on Parallel and Distributed Computing and Systems (PDCS 2005), November 14 -16, 2005, in Phoenix, USA. LBNL-58867

  Describes a security model that facilitates control of resources by autonomous peers who act on behalf of collaborating users.

• Simplifying FusionGrid Security J. R. Burruss, T. W. Fredian, M. R. Thompson, Challenges of Large Applications in Distributed Environments (CLADE) workshop at HPDC14, July 2005, Research Triangle Park, NC; LBNL-58691

  Describes recent improvements to grid security that have streamlined the usage and adminstration of FusionGrid resources.

• Security for Grids, Marty Humphrey, Mary Thompson, Keith Jackson, Proceedings of the IEEE, March 2005 pp 644-652; LBNL-54853

  A survey of security issues in Grid computing

• Internet X.509 Public Key Infrastructure Proxy Certificate Profile, S.Tueke, V. Welch, D.Engert, L.Pearlman, M.Thompson IETF RFC3820

  This paper defines an extension to X.509 certificates to specify restricted rights in delegated X.509 certificates

• The National Fusion Collaboratory Project: Applying Grid Technology For Magnetic Fusion Research, D.P. Schissel, K. Keahey, T. Araki, J.R. Burruss, E. Feibush, S.M. Flanagan, I. Foster, T.W. Fredian, M.J. Greenwald, S.A. Klasky, T. Leggett, K. Li, D.C. McCune, P. Lane, M.E. Papka, Q. Peng, L. Randerson, A. Sanderson, J. Stillerman, M.R. Thompson, and G. Wallace, Workshop on Case Studies on Grid Applications (Berlin, Germany, March 13, 2004)

  Presents the accomplishments and future plans of the National Fusion Collaboratory Project which unites fusion and computer science researchers to develop and deploy a national Fusion Energy Sciences Grid (FusionGrid) that is a system for secure sharing of computation, visualization, and data resources over the Internet.

• Certificate-based Authorization Policy in a PKI Environment M.Thompson, A. Essiari, S. Mudumbai ACM Transactions on Infomation and System Security (TISSEC), Volume 6, Issue 4 (November 2003) pp: 566-588, LBNL-49512.

  An expanded version of the NIST workshop paper that includes performance measurements of the Akenti code.

• Remote Computing Using the National Fusion Grid J. Burress, S. Flanagan, K. Keahey, C. Ludescher, D.C. McCune, Q. Peng, L. Randerson, D.P. Schissel, M. Thompson, 4th IAEA Technical Meeting on Control, Data Acquisition, and Remote Participation for Fusion Research (San Diego, CA, July 21-23, 2003)

  Describes the National Fusion Collaboratory's successful demonstration of remote access as a grid service to the TRANSP transport analysis code for tokamak exeriments.

• A New Security Model for Collaborative Environments, Deb Agarwal, M.Lorch, M.Thompson and M.Perry Proceedings of Workshop on Advanced Collaborative Environments, Seattle, WA, June 22, 2003. LBNL-52894

  An introduction to a model for building incremental trust based on supporting a variety of credentials and levels logins.

• Fine-grained Authorization for Job and Resource Management using Akenti and Globus, M.R. Thompson, A. Essiari, K. Keahey, V. Welch, S.Lang and B.Lui, CHEP03 Mar 24-26 2003 LBNL-52976

  A presentation of the integration of the Globus Job Manager integration with the Akenti Authorization server done as part of the National Fusion Collaboratory.

• Security issues of grid management, M.R. Thompson, K.R. Jackson; chapter in Resource Management for Grid Computing, ed. Jennifer Schopf and Jarek Nabrzyski, Kluwer Academic Press, 2003

  A summary of the security requirements of a grid computing environments and the tools that an be used to meet these requirements, including basic cryptograhic techniques, authentication systems and authorization standards and systems.

• CA-based Trust Model for Grid Authentication and Identity Delegation Mary R.Thompson, Doug Olson, Robert Cowles, Shawn Mullen, Mike Helm, Global Grid Forum CA Operations WG Community Practices Document, Oct 2002

  This paper examines the basis for the trust a relying party places in an X.509 identity certificate signed by a CA. It is intended to be an informational document and is the result of extensive discussion on the security WG mailing list about the current and best PKI authentication practice.

• Securing Collaborative Environments," D. Agarwal, K. Jackson, and M. Thompson, Proceedings of the Workshop on Advanced Collaborative Environments, Edinburgh, Scotland, July 26, 2002. LBNL-50427.

  A summary of the security requirements for collaborative environments, the available solutions and our view of the current shortcomings of these tools.

• Authorization Policy in a PKI Environment M.Thompson, S.Mudumbai, A.Essiari, W Chin Proceedings of the 1st Annual NIST workshop on PKI, Apr 2002.

  This paper explores the issues of doing authorization in an environment where X.509 certificates are used to identity users.It describes the Akenti cerficate-based authorization in which auhorization policy is stored in digitally signed certificates, and all the particpating entites are authenticated by X.509 certificates.

• Internet X.509 Public Key Infrastructure Proxy Certificate Profile, S.Tueke, D.Engert, I.Foster, V Welch, M.Thompson, L.Pearlman, C.Kesselman Grid Forum Draft Presented at Global Grid Forum 4, Feb, 2002

  This paper was a proposed extension to X.509 certificates to specify restricted rights in delegated X.509 certificates

• Security Implications of Typical Grid Computing Usage Scenarios M. Humphrey, M. Thompson, Proceedings of the Tenth IEEE International Symposium on High Performance Distributed Computing pp 95-103, Aug 2001

  A comprehensive set of Grid usage scenarios are presented and analysed with regard to secuirty requirements such as authentication, authorization, integrity and confidentiality. The main value of these scenarios and the associated security discussions are to provide a library of situations against which an application designer can match, thereby facilitating security-aware application use and development.

• An Integrated Solution for Secure Group Communication in WAN O. Chevassut, D. Agarwal, M. R. Thompson, G. Tsudik, Proceedings of the 6th IEEE Symposium on Computers and Communications, Jul 2001, Hammamet, Tunisia

  This paper describes a secure group layer (SGL) which bundles a reliable group communication system, a group authorization and access control mechanism, and a group key agreement protocol to provide a comprehensive and practical secure group communication platform.

• Computational Grids in Action: The National Fusion Collaboratory K. Keahey, T. Fredian, Q. Peng, D.P. Schissel, M. Thompson, I. Foster, M. Greenwald, D. McCune, Future Generation Computer System, 2001.

  This is a description of the goals and plans for a National Fusion Collaboratory, the infrastructure enabling virtual organizations provided by the Globus Toolkit, and the Akenti project's authorization and use policies which will be used to fulfill resource management goals of the collaboratory.

• A Monitoring Sensor Magagement System for Grid Environments" Brian Tierney, Brian Crowley, Dan Gunter, Jason Lee and Mary Thompson, Custer Computing,pp 19-28, Vol 4 (Mar 2001), Kluwer Academic Publishers

  We describe an agent-based system that we have developed to automate the execution of monitoring sensors and the collection of event data in large distributed systems such a Computational Grids.

• A Data Intensive Distributed Computing Architecture for "Grid" Applications, Brian Tierney, William Johnston, Jason Lee, Mary Thompson,Future Generation Computer Systems, pp 473-481, Vol 16, 2000, Elsevier

  This paper explores some of the history and future directions of modern scientific data intensive computing, and describes some specific application examples.

• Certificate-based Access Control for Widely Distributed Resources Mary Thompson, William Johnston, Srilekha Mudumbai, Gary Hoo, Keith Jackson, Proceeding of the Usenix SecuritySymposium '99

  A 12-page paper on the design and implemention of Akenti, a policy-base authorization system, including performance measurements of the system.

• Real-Time Digital Libraries based on Widely Distributed, High Performance Management of Large-Data-Objects William Johnston, Jin Guojun, Case Larsen, Jason Lee, Gary Hoo, Mary Thompson, Brian Tierney, Joseph Terdiman, M.D.Invited paper, InternationalJournal of Digital Libraries - Special Issue on "Digital Libraries in Medicine. May, 1998.

  This paper describes real-time Generation and cataloguing of large data-objects in widely distributed environments, i.e., a distributed, wide area network based approach to collecting, cataloguing, storing, and providing Web access for large-data-objects that originate as high-speed data streams

• Authorization and Attribute Certificates for Widely Distributed Access Control William Johnston, Srilekha Mudumbai, and Mary Thompson, Proceedings of the IEEE 7th International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises - WETICE '98

  A six-page paper on the goals and design of the Akenti Distributed Access Control system

• Distributed Large Data-Object Management Architecture William Johnston, Jin Guojun, Jason Lee, Mary Thompson, Brian Tierney. Presented at Storage and Retrieval for Image and Video Databases V, Electronic Imaging `97, Feb 13, 1997, SPIE Proceedings Vol. 3022

  We describe a distributed, wide area network based approach to collecting, cataloguing, storing, and providing Web access for large-data-objects that originate as high-speed data streams.

• An Interface for Viewing and Searching Sets of Digital Images Mary Thompson, Jacob Bastacky, William Johnston. Presented at Microscopy and Microanalysis 96, Aug. 13, 1996, 2 page abstract published in Proceedings Micros copy and Microanalysis '96

  Describes the LBNL Image Library which was designed and implemented to provide a system to help researchers organize, browse and search through digital image collections, especially collections where the original images are stored off-line in a mass storage system.