Technical Study: Security in Federated Naming
Copyright © 1997 The Open Group

---

Technical Study
Security in Federated Naming
X/Open Document Number: E605

• Frontmatter
  • Preface
    • The Open Group
    • The X/Open Process
    • Open Group Publications
    • Versions and Issues of Specifications
    • Corrigenda
    • Ordering Information
    • This Document
    • Strucure
  • Trade Marks
  • Referenced Documents
• Introduction
  • Scope and Purpose
  • Intended Audience
  • Document History
• Federated Naming Specification (XFN)
  • Naming Services
  • Federated Naming Specification
  • Implementation Models
  • XFN API
• Name Service Threats and Countermeasures
  • Generic Threats
  • Name Service Architecture
  • Name Service Security Policy Concerns
    • Availability
    • Integrity
    • Confidentiality
    • Accountability
  • Data Store Threats
  • Communication Service Threats
  • Analysis of Name Service Requests
  • Programming Interface Threats
  • Generic Countermeasures
  • Access Control within Name Services
    • Context Functions
    • Name Resolution Functions
    • Binding and Attribute Management Functions
• Implications of Security on XFN
  • Mapping of XFN to XDSF Concepts
  • Relevant Threats
  • Current Security Provisions within XFN API
    • Authentication
    • Access Control
  • Potential Impact on XFN API
  • Potential Impact on XFN Protocol
• Proposed Enhancements to XFN
  • Name Resolution Integrity
  • Name Re-use and Re-assignment Policies
  • Audit of Name Service Operations
• Glossary
  • access control
  • access control policy
  • accountability
  • atomic name
  • authenticated identity
  • authentication
  • authentication exchange
  • availability
  • binding
  • composite name
  • composite name resolution
  • compound name
  • confidentiality
  • context
  • credentials
  • cryptography
  • data integrity
  • data origin authentication
  • denial of service
  • digital signature
  • DNSSEC
  • encipherment
  • federated namespace
  • federated naming service
  • GSS-API
  • initial context
  • IPSEC
  • masquerade
  • namespace
  • naming service
  • naming system
  • naming system boundary
  • peer-entity authentication
  • principal
  • reference
  • repudiation
  • secure association
  • secure context
  • security attribute
  • security audit
  • security audit trail
  • security domain
  • security policy
  • security service
  • SSL
  • subcontext
  • threat
  • traffic padding
  • vulnerability
• INDEX

---

Why not acquire a nicely bound hard copy?
Click here to return to the publication details or order a copy of this publication.