dc.contributor.author	Bhandari, Pushpendra Singh
dc.date.accessioned	2023-11-20T04:47:21Z
dc.date.available	2023-11-20T04:47:21Z
dc.date.issued	2011
dc.description.abstract	As more resources are being made available over the internet and intranet, it is important to ensure that appropriate resources are accessed by appropriate users. In a large scale service oriented computing environment where thousands of computers, storage systems, networks, scientific instruments and other devices distributed over wide area networks presents unique security problems that are not addressed by traditional client-server/distributed computing environments. Thus, a need for authorization is required. Authorization implementation enables users and organizations to have secure, protected, and private access to remote services. It has been found that early design of authentication and authorization eliminates a high percentage of application vulnerabilities. This thesis report focuses on need for an authorization, its requirements and how access of the protected resources from unauthenticated users in a distributed, web-based system is controlled by using the several controls and mechanisms provided by various authorization techniques and tools. This thesis focuses on Shibboleth, the most widely used automated authentication and authorization tool. It is a system designed to exchange information across realms for authentication and authorization. Finally, an implementation is shown demonstrating how an authorization can be used in an organization to ensure a secure access to the protected resources based on different access controls.	en_US
dc.identifier.uri	https://hdl.handle.net/20.500.14540/20596
dc.language.iso	en_US	en_US
dc.publisher	Department of Computer Science and Information Technology	en_US
dc.subject	Authentication agents	en_US
dc.subject	Security service	en_US
dc.title	Analysis of authorization framework and its implementation	en_US
dc.type	Thesis	en_US
local.academic.level	Masters	en_US
local.institute.title	Central Department of Computer Science and Information Technology	en_US

Analysis of authorization framework and its implementation

Files

Original bundle

License bundle

Collections