Enabling the autonomic management of federated identity providers

Authors:
Christopher Bailey;David W. Chadwick;Rogério de Lemos;Kristy W. S. Siu
Affiliations:
School of Computing, University of Kent, UK;School of Computing, University of Kent, UK;School of Computing, University of Kent, UK;School of Computing, University of Kent, UK
Venue:
AIMS'13 Proceedings of the 7th IFIP WG 6.6 international conference on Autonomous Infrastructure, Management, and Security: emerging management mechanisms for the future internet - Volume 7943
Year:
2013

Citing 7
Cited 0

The Vision of Autonomic Computing

Computer
PERMIS: a modular authorization infrastructure

Concurrency and Computation: Practice & Experience - UK e-Science All Hands Meeting 2006
Engineering Self-Adaptive Systems through Feedback Loops

Software Engineering for Self-Adaptive Systems
Federated Identity Management

Foundations of Security Analysis and Design V
Runtime Behavior Monitoring and Self-Adaptation in Service-Oriented Systems

SASO '10 Proceedings of the 2010 Fourth IEEE International Conference on Self-Adaptive and Self-Organizing Systems
Self-Adaptive Authorization Framework for Policy Based RBAC/ABAC Models

DASC '11 Proceedings of the 2011 IEEE Ninth International Conference on Dependable, Autonomic and Secure Computing
Toward an Autonomic Service Management Framework: A Holistic Vision of SOA, AON, and Autonomic Computing

IEEE Communications Magazine

Quantified Score

Hi-index	0.00

Visualization

Abstract

The autonomic management of federated authorization infrastructures (federations) is seen as a means for improving the monitoring and use of a service provider's resources. However, federations are comprised of independent management domains with varying scopes of control and data ownership. The focus of this paper is on the autonomic management of federated identity providers by service providers located in other domains, when the identity providers have been diagnosed as the source of abuse. In particular, we describe how an autonomic controller, external to the domain of the identity provider, exercises control over the issuing of privilege attributes. The paper presents a conceptual design and implementation of an effector for an identity provider that is capable of enabling cross-domain autonomic management. The implementation of an effector for a SimpleSAMLphp identity provider is evaluated by demonstrating how an autonomic controller, together with the effector, is capable of responding to malicious abuse.