基于目录服务LDAP的网格信任模型研究
摘要
网格环境中的信任问题是当前网格研究的一个热点问题,为了解决网格环境的动态性和不确定性带来的可靠性问题,就需要对实体在网格环境下的行为进行评价,反映出该实体网络行为的可信程度。本文探讨了网格环境下的安全需求,提出了网格信任的相关定义,并对现有的网格信任模型进行了归纳、分析和比较,明确了它们各自的优越性、局限性和适用范围,为提出更先进的模型奠定了基础。
本文的主要研究成果如下:
1)提出了一种域与实体自主性相结合的新型的网格信任模型。该模型充分考虑了信任域的可管理性和网格实体的自主性,并对网格环境中实体的信任度和声誉进行了分析,对域内的信任关系和域间的信任关系分别采用不同的方法来进行处理。
2)进一步研究了如何在网格计算中建立信任模型,提出了基于目录服务LDAP的网格信任模型的实现策略,用来处理网格环境中实体之间的信任关系。实验表明,该信任模型能有效地抑制协同作弊的威胁,提高了系统的可靠程度。
The trust problem in grid environment is a hot topic in current grid research. It is necessary to evaluate the network behavior of entities in grid computing in order to resolve the dependability problems due to the dynamics and uncertainty of the grid environment. Thus, evaluation of the entity's network behavior can reflect his reliability. This paper discusses the security requirements in grid environment, offers the correlative definitions of trust, compares and analyzes several existing trust models including their advantages, disadvantages and fit range, which provides the foundation for the further research work.
The contributions of this dissertation are as follows.
1) A new grid trust model combining the domain and independence of entities has been proposed. The model takes into account both the self-determination of grid entities and administrable of trust domain. It provides a method to analyze the trust degree of entities and the report in the grid environment. The two different trust relationships within and between domain are handled with different approaches.
2) This dissertation studies how to build a trust model for grid computing. A new strategy of grid trust model based on Directory Services of LDAP has been proposed. This model is used to dispose of the trust relationships between entities in the grid environment. Experiment testifies that the trust model can restrain the complicity threat and promote reliability of system.
本文的主要研究成果如下:
1)提出了一种域与实体自主性相结合的新型的网格信任模型。该模型充分考虑了信任域的可管理性和网格实体的自主性,并对网格环境中实体的信任度和声誉进行了分析,对域内的信任关系和域间的信任关系分别采用不同的方法来进行处理。
2)进一步研究了如何在网格计算中建立信任模型,提出了基于目录服务LDAP的网格信任模型的实现策略,用来处理网格环境中实体之间的信任关系。实验表明,该信任模型能有效地抑制协同作弊的威胁,提高了系统的可靠程度。
The trust problem in grid environment is a hot topic in current grid research. It is necessary to evaluate the network behavior of entities in grid computing in order to resolve the dependability problems due to the dynamics and uncertainty of the grid environment. Thus, evaluation of the entity's network behavior can reflect his reliability. This paper discusses the security requirements in grid environment, offers the correlative definitions of trust, compares and analyzes several existing trust models including their advantages, disadvantages and fit range, which provides the foundation for the further research work.
The contributions of this dissertation are as follows.
1) A new grid trust model combining the domain and independence of entities has been proposed. The model takes into account both the self-determination of grid entities and administrable of trust domain. It provides a method to analyze the trust degree of entities and the report in the grid environment. The two different trust relationships within and between domain are handled with different approaches.
2) This dissertation studies how to build a trust model for grid computing. A new strategy of grid trust model based on Directory Services of LDAP has been proposed. This model is used to dispose of the trust relationships between entities in the grid environment. Experiment testifies that the trust model can restrain the complicity threat and promote reliability of system.
引文
铩颷1]Ian Foster and Carl Kesselman(eds),The Grid:Blueprint for a NewComputing Infrastructure,1st Edition[M],Morgan Kaufmann Publishers,SanFrancisco,USA(1 November 1998),ISBN:1558604758.
[2]Ian Foster,What is the grid ? A three point checklist[J].GridToday,2002,1(6):10-12
[3]徐志伟,冯百明,李伟.网格计算技术[M].北京:电子工业出版社,2004.
[4]D.H.McKnight,N.L.Chervany,Conceptualizing Trust:A Typology andE-Commerce Customer Relationships Model,34th Annual HawaiiInternational Conference on System Sciences(HICSS-34)-Volume 7,0103-01,2001.7022-7031.
[5]Alfarez Abdul-Rahman,Stephen Hailes,Supporting Trust in VirtualCommunities,33rd Hawaii International Conference on SystemSciences-Volume 6,01 04-01,Maui,Hawaii,2000.6007-6016.
[6]Farag Azzedin and Muthucumaru Maheswaran,Evolving and Managing Trustin Grid Computing Systems,IEEE Canadian Conference on Electrical &Computer Engineering(CCECE' 02),May 2002.1424-1429.
[7]A.Abdul-Rahman and S.HaiIes.Supporting Trust in VirtualCommunities[C].Hawaii Int'l Conference on Systems Sciences,January2000.4-7
[8]胡自林,信任计算及网格资源调度[D],2005.
[9]S.D.Kamvar,M.T.Schlosser,and H.Garcia-Molina.The Eigen TrustAlgorithm for Reputation Management in P2P Networks.ln TwelfthInternational World Wide Web Conference.May 2003.
[10]T.Beth,M.Borcherding,and B.Klein.Valuation of Trust in Open Network.In:Proc.European Symposium on Research in Security(ESORICS).Brighton:Springer-Verlag,1994.
[11]徐锋,吕建.Web安全中的信任管理研究与进展[J].软件学报,2002, Vol.13,No.11.
铩颷12]李文娟,王晓东,傅仰耿,傅志祥.几种网格信任模型的研究[J].福州大学学报(自然科学版),2006,34(2),190-193
[13]Timothy A,Howes Ph D Mark C Smith,et al.Understanding and DeployingLDAP Directory Services,Second Edition[M].USA:Addison-Wesley PubCo,2003.1-260.
[14]Gerald Carter.LDAP System Administration[M].USA:O' Reilly,2003.12-85.
[15]刘晓韬.目录服务LDAP的基本模型[EB/OL].中国计算机用户,http://industry.ccidnet.com/art/35/20031028/68839_1.html 2005-04-2310:48:57
[16]王莉苹,杨寿保.网格环境中的一种信任模型[J].计算机工程与应用,2004,40(23):50-53.
[17]干志勤,曾国荪.网格环境下的基于行为的信任评估模型[J].计算机应用与软件,2005,22(2):62-64.
[18]汪进,杨新,刘晓松.一种新型的网格行为信任模型[J].计算机工程与应用,2003,21:62-64.
[19]朱峻茂,杨寿保,樊建平,等.Grid与P2P混合环境下基于推荐证据的推理的信任模型[J].计算机研究与发展,2005,42(5):797-803.
[20]王东安,徐浩,南凯,等.基于推荐的网格计算的信任模型计算机应用研究[J].计算机应用研究,2006,2:96-98
[2]Ian Foster,What is the grid ? A three point checklist[J].GridToday,2002,1(6):10-12
[3]徐志伟,冯百明,李伟.网格计算技术[M].北京:电子工业出版社,2004.
[4]D.H.McKnight,N.L.Chervany,Conceptualizing Trust:A Typology andE-Commerce Customer Relationships Model,34th Annual HawaiiInternational Conference on System Sciences(HICSS-34)-Volume 7,0103-01,2001.7022-7031.
[5]Alfarez Abdul-Rahman,Stephen Hailes,Supporting Trust in VirtualCommunities,33rd Hawaii International Conference on SystemSciences-Volume 6,01 04-01,Maui,Hawaii,2000.6007-6016.
[6]Farag Azzedin and Muthucumaru Maheswaran,Evolving and Managing Trustin Grid Computing Systems,IEEE Canadian Conference on Electrical &Computer Engineering(CCECE' 02),May 2002.1424-1429.
[7]A.Abdul-Rahman and S.HaiIes.Supporting Trust in VirtualCommunities[C].Hawaii Int'l Conference on Systems Sciences,January2000.4-7
[8]胡自林,信任计算及网格资源调度[D],2005.
[9]S.D.Kamvar,M.T.Schlosser,and H.Garcia-Molina.The Eigen TrustAlgorithm for Reputation Management in P2P Networks.ln TwelfthInternational World Wide Web Conference.May 2003.
[10]T.Beth,M.Borcherding,and B.Klein.Valuation of Trust in Open Network.In:Proc.European Symposium on Research in Security(ESORICS).Brighton:Springer-Verlag,1994.
[11]徐锋,吕建.Web安全中的信任管理研究与进展[J].软件学报,2002, Vol.13,No.11.
铩颷12]李文娟,王晓东,傅仰耿,傅志祥.几种网格信任模型的研究[J].福州大学学报(自然科学版),2006,34(2),190-193
[13]Timothy A,Howes Ph D Mark C Smith,et al.Understanding and DeployingLDAP Directory Services,Second Edition[M].USA:Addison-Wesley PubCo,2003.1-260.
[14]Gerald Carter.LDAP System Administration[M].USA:O' Reilly,2003.12-85.
[15]刘晓韬.目录服务LDAP的基本模型[EB/OL].中国计算机用户,http://industry.ccidnet.com/art/35/20031028/68839_1.html 2005-04-2310:48:57
[16]王莉苹,杨寿保.网格环境中的一种信任模型[J].计算机工程与应用,2004,40(23):50-53.
[17]干志勤,曾国荪.网格环境下的基于行为的信任评估模型[J].计算机应用与软件,2005,22(2):62-64.
[18]汪进,杨新,刘晓松.一种新型的网格行为信任模型[J].计算机工程与应用,2003,21:62-64.
[19]朱峻茂,杨寿保,樊建平,等.Grid与P2P混合环境下基于推荐证据的推理的信任模型[J].计算机研究与发展,2005,42(5):797-803.
[20]王东安,徐浩,南凯,等.基于推荐的网格计算的信任模型计算机应用研究[J].计算机应用研究,2006,2:96-98