February 18, 2003
Access control scalability
Jiri Ludvik (via Scott Loftesness, because Jiri wrote "Groove rocks!" a couple of days ago) has some interesting observations around access control. He quotes Daniel Geer:
If you look at the access control problem, it is a matrix. The rows are requestors and the columns are objects of their desire. Linear growth in either or both means geometric growth in the number of table entries in that matrix... beyond a certain size no one can get their head around it anymore... An awful lot of legacy systems' durability is explicitly derived from this combination of "essential" and "cannot be understood."Lovely. Yet, decentralisation of the security can help here too. Decentralization makes things personal and immediate. In the context of security, is it possible to decentralize - make individuals at the edge partially responsible for who they can share information with, by putting some of that directly in their field of view - but keep a sensible amount of stringency, planning and oversight? I think, actually, it is.
vcard
| January 2005 | ||||||
| S | M | T | W | T | F | S |
| 1 | ||||||
| 2 | 3 | 4 | 5 | 6 | 7 | 8 |
| 9 | 10 | 11 | 12 | 13 | 14 | 15 |
| 16 | 17 | 18 | 19 | 20 | 21 | 22 |
| 23 | 24 | 25 | 26 | 27 | 28 | 29 |
| 30 | 31 | |||||
archives:
January 2005
December 2004
November 2004
October 2004
September 2004
August 2004
July 2004
June 2004
May 2004
April 2004
March 2004
February 2004
January 2004
December 2003
November 2003
October 2003
September 2003
August 2003
July 2003
June 2003
May 2003
April 2003
March 2003
February 2003
January 2003
December 2002
November 2002
October 2002
September 2002
August 2002
July 2002
June 2002
May 2002
April 2002
March 2002
February 2002
January 2002
December 2001
November 2001
October 2001
September 2001
August 2001
July 2001
June 2001
see also:
{groove:
[ ray,
matt,
paresh,
mike,
jeff,
john ],
other:
[ /* more blogroll to follow */ ]
}
The views expressed on this weblog are mine alone and do not necessarily reflect the views of my employer.
RSS 2.0
RSS 1.0
