Repositório Institucional da UFSC

Frank Siqueira

Tese (doutorado) - Universidade Federal de Santa Catarina, Centro de Tecnológico. Programa de Pós-Graduação em Engenharia Elétric

Santin, Altair Olivo

LAReferencia - Red Federada de Repositorios Institucionales de Publicaciones Científicas Latinoamericanas

Portuguese

A Calculus for Access Control in Distributed Systems.

A Comparison of Commercial and Military computer Security Policies.

A Framework for Distributed Authorization,

A Framework for Distributed Authorization. Extended Abstract,

A Functional Method for Assessing Protocol Implementation Security. In:

A Java implementation of Simple Distributed Security Infrastructure.

A Lattice Model of Secure Information Flow.

A security Model for Military Message Systems.

A simple Distributed Security Infrastructure.

A Trusted Execution Platform for Multiparty Computation, master thesis,

Access Control, and Audit.

An Architecture for Practical Delegation in a Distributed System.

An Introduction to Graph Algorithms.

Authentication for distributed System.

Authentication in Distributed System:Theory and Pratice,

Authorization for Metacomputing applications,

Authorization in Distributed Systems: A Formal Approch,

Authorization in Distributed Systems: A Formal Approch.

Best available technologies for computer security.

Biblioteca parserSxxS. Relatório interno DAS/cadeias de confiança.

Building Trust Chains Between CORBA Objects In:

Certicate discovery using SPKI/SDSI 2.0 certicates. master dissertation,

Common Vulnerabilities and Exposures. [online] Disponível em http://cve.mitre.org/. Acesso em junho de

Compliance-Checking in the PolicyMaker Trust-Management System.

Computer Security Technology Planning Study. Report ESD-TR-73-51.Electronic Systems Division.

Configuring Role-Based Access Control to Enforce Mandatory and Discretionary Access Control Policies.

CORBA: Integrating Diverse Applications Within Distributed Heterogeneous Environments,

COTS Software Integration Cost Modeling Study.

Criptography and data security.

Debugger, JProbe Memory. [online] Disponível em http://java.quest.com/jprobe/debugger.shtml. Acesso em junho de

Decentralized Trust Management,

Delta-4 Overall System Specification. An publication:

Designing a distributed authorization service,

Developers Guide 0.7.1.

Document Object Model Level 1 Specification version 1.0 - W3C recommendation,

Engineering Task Force. Kerberos Network Authentication Service (Versão 5). [online] http://www.ietf.org/rfc/rfc1510.txt.

Enterprise Security with EJB and CORBA.

Entity Authentication Using Public Key Cryptography.

Evasion, and Denial of Service: Eluding Network Intrusion Detection.

Extending the SDSI/SPKI model through federation webs. In:

Extensible Markup Language (XML) 1.0 - W3C recommendation.

Fast Access Control Decisions from Delegation Certificate Databases.

Fault Injection Spot-checks Computer System Dependability.

Federation Web: A Scheme to Compound Authorization Chains. In:

Group (OMG). Resource access decision facility specification.

Group (OMG). Security Service Specification: Appendix D.2 -Protecting Against Threats,

Handbook of Applied Cryptography. CRC Press. Disponível em http://www.cacr.uwaterloo.ca/hac/.

http://www.counterpane.com/pki-risks.html. Acesso em junho de

Implementation Board (ISO). Common Criteria for Information Security Evaluation. ISO IS 15408.

Inc. Orbacus User Guide. Version 3.3.4.

Institute of Standards and Technology, Minimum Interoperability Specifications for PKI Components, Version 1. http://csrc.ncsl.nist.gov/pki/ documents/mispcv1.ps,

International Telecommunication Union. Telecommunication Standardization Sector -Publications. Recommendation

Internet Security Glossary.

iSaSiLk 3 - Reference Manual. Institute for Applied Information Processing and Communications (IAIK).

La Sécurité des Donnés par la Tolérance aux Instrusions.

Local Names in SPKI/SDSI. In:

Management Group.

Managing Vulnerabilities in Networked Systems.

of Standards and Technology. Minimum Interoperability Specifications for PKI Components, Version 1. [online] http://csrc.ncsl.nist.gov/pki/ documents/mispcv1.ps.

omputer security. IJIS

On SDSI's Linked Local Name Spaces.

On the structure of delegation networks,

ORBAsec SL2 User Guide. Version 2.1.4.

PGP:Pretty Good Privacy.

Practical Authentication For Distributed Computing.

RBAC in UNIX Administration.

Redes de Confiança em Sistemas de Objetos CORBA. Universidade Federal de Santa Catarina – Departamento de Automação e Sistemas, dissertação de mestrado, [online] disponível em: http://www.das.ufsc.br/~emerson/files/mello2003-dissertacao.pdf.

Report of Federal Bridge Certification Authority Initiative and Demonstration. [online] Disponível em Referências bibliográficas http://csrc.nist.gov/pki/documents/emareport_20001015.pdf. Acesso em junho de

Representation and Evaluation of Security Policies for Distributed System Services.

Risk Management Guide for Information Technology Systems,

Security Policies And Security Models.

SPKI-XML Certificate Structure.

SPKI/SDSI HTTP Server Certificate Chain Discovery

Storing anda Retrieving Internet Certificates.

Technology, and Trust: Formal Verification, Computer Security, and the U.S.

Telecommunication Union, Telecommunication Standardization Sector - Publications. Recommendation

Ten Risks of PKI: What You're Not Being Told About Public Key Infrastructure.

The chinese Wall Security Policy.

The Internet Engineering Task Force - CAT Working Group, Access Control Framework for Distributed Applications.

The Internet Engineering Task Force, Kerberos Network Authentication Service

The Internet Engineering Task Force, Public-Key Infrastructure (X.509) (pkix). http://www.ietf.org/html.charters/pkix-charter.html,

The Internet Engineering Task Force.

The Internet Engineering Task Force. SPKI Requirements.

The Internet Engineering Task Force. The KeyNote Trust-Management System.

The NIST Model for Role-Based Access Control: Towards A Unified Standard.

The Simple API for XML.

The Simple Public-Key

The Specification and Modeling of Computer Security.

Threadalyzer, JProbe. [online] Disponível em http://java.quest.com/jprobe/threadalyzer.shtml. Acesso em junho de

Type-based race detection for java.

Um esquema de autorização para a segurança em sistemas distribuídos de larga escala. Programa de Pós-Graduação em Engenharia Elétrica da Universidade Federal de Santa Catarina, Tese de doutorado,

Understanding Memory Allocation of Scheme Programs.

Uniform Resource Identifiers (URI): Generic Syntax,

Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme.

Using Encyiption for Authentication in

Using SPKI certificates for authorization in CORBA based distributed object-oriented systems.

Visualizing Reference Patterns for Solving Memory Leaks in Java. In:

XML Path Language (XPath) Version 1.0 - W3C recommendation.

Teias de federações: uma abordagem baseada em cadeias de confiança para autenticação , autorização e navegação em sistemas de larga escala