Abstract:
Multi-domain application environments where distributed domains interoperate with each other is a reality in Web services based infrastructures. Collaboration enables domains to effectively share resources; however it also introduces several security and privacy challenges. In this talk, we will define secure collaboration then we will present our framework for secure collaboration in mediator-free environments which is based on discovering and accumulating access control paths. We will also present our multihop SOAP messaging protocol that enables domains to discover secure access paths to roles across domain boundaries. Using the SOAP-DISG standard we will present our path authentication mechanism. We will also present a service discovery protocol that will enable domains to discover service descriptions stored in private UDDI registries. Furthermore, we will present our Role Routing Protocol (RRP), which is a proactive access path discovery protocol that enables domains to discover secure minimal length access paths.

Biography:
Mohamed Shehab is a PhD Candidate in the School of Electrical and Computer Engineering at Purdue University. His PhD advisors are Professor Arif Ghafoor and Professor Elisa Bertino. Shehab?s research is in the broad areas of network and information security. In particular, his thesis focuses on advancing the state of the art in the design and implementation of distributed access control protocols to cope with the requirements of emerging distributed and peer to peer environments. In the summer of 2006, Shehab was a research intern at IBM T.J. Watson Research Labs, Yorktown Heights, NY, where he worked on secure collaboration mechanisms for web services environments.

More information is available at http://cobweb.ecn.purdue.edu/~shehab/.