Return to parent thread
Security
Security is a critical aspect for providing trust in DfR and encouraging adoption. It is not one feature but a set of features spread across all components, services and clients. The public cloud present special problem because the even we (the provider of the DfR SAAS) cannot audit and managing the infrastructure upon which the service runs so that exploits from "behind the scenes" cannot be completely prevented. Also, there is a strong trend (of which DfR is an example) towards a network of distributed data and service. This thread covers issues affect security from any source.
Implementation
Issues
Accounts
Authentication
Authorization
Shibboleth is an implementation of SAML in use by many higher education institutions and is required by Internet2. This thread discusses the investigation of Shibboleth for use in DfR and how it could fit in the implementation.and service.
Encryption is potentially on of the best security mechanisms to protect data in the cloud. It is also particularly appealing for handling distributed data and providing the user with a direct degree of control. However, encryption makes a number of steps in the research information life-cycle more difficult particularly pre-processing and archival.
http://shiro.apache.org/
Return to parent thread
