Re: Comment on the paper by Rotondi, et al.

Have you asked the publisher for permission? They often grant permission
for not-for-profit distribution by the author.


On Tue, Feb 4, 2014 at 2:13 AM, Domenico Rotondi <[email protected]>wrote:

>  I'm afraid I think no.
> I think the copyright form we signed doesn't allow me to distribute the
> paper on DLs; isn't it?
> Ciao
>    DOmenico
>
>  ------------------------------
>
>  On 3 Feb 2014 at 19:30, charlie robert wrote:
>
>  Was there a free download link ever found for this paper?
>
>  thank you,
> Robert
>
>  On Jan 31, 2014, at 10:11 AM, Mark S. Miller < *[email protected]*<[email protected]> >
> wrote:
>
>  Is there a non-paywalled link from which we can download a copy of the
> paper that we can read?
>
>
>  On Fri, Jan 31, 2014 at 7:13 AM, Domenico Rotondi <
> *[email protected]* <[email protected]>> wrote:
>  ------------------------------
> On 31 Jan 2014 at 8:13, David Barbour wrote:
>
>  Could you link to this paper?
>
>  Hi David,
>  are you asking a reference to the mentioned paper? If so this is it:
>
>    - D. Rotondi, S. Gusmeroli, S. Piccione, “A capability-based security
>    approach to manage access control in the Internet of Things”, Mathematical
>    and Computer Modelling Journal, ISSN 0895-7177, 10.1016/j.mcm.2013.02.006
>
>  Otherwise, plese clarify the question.
>  Thanks, ciao
>     Domenico
>
>
>  On Fri, Jan 31, 2014 at 12:50 AM, Karp, Alan H < *[email protected]*<[email protected]>
> > wrote:
>
> I’m reading the paper section by section as time permits, and I just
> finished the piece on revocation.  Here I want to comment on the feature
> that allows revocation of just the capability and not those delegated from
> it.  I believe that feature has a serious flaw, but Marc Stiegler has come
> up with the correct variant.
>
>
>
> As described in the paper, a revocation request can be for the capability
> itself or the capability and all capabilities delegated from it.  The
> problem with the former is that it is too easy to bypass the revocation.
> Say that Alice delegates a capability that expires in a year to Bob, a
> manager in her department.  Bob re-delegates capabilities with subsets of
> the permissions to people reporting to him.  Three months later, Bob leaves
> the company under suspicion of stealing company secrets.  Alice clearly
> wants to revoke Bob’s capability, but she doesn’t want to disrupt the work
> of people in his former department.  As a result, she revokes Bob’s
> capability but not the capabilities delegated from it.  Unfortunately, one
> of those delegated capabilities was one Bob delegated to himself with a key
> not controlled by the company.  The result is that Bob retains access even
> after being fired.
>
>
>
> Marc Stiegler’s solution to Alice’s dilemma uses the distinction between
> vetted and unvetted identities.  Say that the enterprise provides a
> mechanism by which Bob denotes the target of the delegation by specifying
> someone in the company directory.  That’s a vetted identity.  If Bob
> delegates to someone not known to the enterprise, that’s an unvetted
> identity.  When Bob’s capability is revoked, the rule is to revoke all
> capabilities delegated to unvetted identities but leave the others.
>
>
>
> ________________________
>
> Alan Karp
>
> Principal Scientist
>
> Enterprise Services, Office of the CTO
>
> Hewlett-Packard Company
>
> 1501 Page Mill Road
>
> Palo Alto, CA 94304
>
> *(650) 857-3967* <%28650%29%20857-3967> , fax *(650) 857-7029*<%28650%29%20857-7029>
>
> *http://www.hpl.hp.com/personal/Alan_Karp*<http://www.hpl.hp.com/personal/Alan_Karp>
>
> _______________________________________________
> cap-talk mailing list
>  *[email protected]* <[email protected]>
>  *http://www.eros-os.org/mailman/listinfo/cap-talk*<http://www.eros-os.org/mailman/listinfo/cap-talk>
>
>
> _______________________________________________
> cap-talk mailing list
>  *[email protected]* <[email protected]>
>  *http://www.eros-os.org/mailman/listinfo/cap-talk*<http://www.eros-os.org/mailman/listinfo/cap-talk>
>
>
>  --
>     Cheers,
>     --MarkM
>
> _______________________________________________
> cap-talk mailing list
>  *[email protected]* <[email protected]>
> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>  - charlie
>
>
>  //
>
> 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
>
>
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>


-- 
    Cheers,
    --MarkM

_______________________________________________
cap-talk mailing list
[email protected]
http://www.eros-os.org/mailman/listinfo/cap-talk