A Hybrid Enforcement Model for Group-Centric Secure Information Sharing

Free registration required

Executive Summary

Group-centric Secure Information Sharing (g-SIS) is motivated by the need to dynamically share information amongst a set of authorized users for a specific purpose. Authorized group users may read and contribute new objects to the group. An important usability objective in g-SIS is to allow users to access group objects offline without having to contact a server every time an access is requested. Thus, a fundamental requirement for g-SIS is that protection needs to extend to clients. Henceforth the authors assume that a Trusted Reference Monitor (TRM) is present on the client platforms that can enforce the group policies in a trustworthy manner. In this paper, they discuss three different approaches for realizing a scalable and high-assurance g-SIS.

  • Format: PDF
  • Size: 411.4 KB