Smart-m3 Security Demo (k. yudenok)
0 likes•269 views
The document discusses security mechanisms for the Smart Space Smart-M3 platform when using the Host Identity Protocol (HIP). It describes how HIP allows the platform to work with IPv4/IPv6 applications and maps IP addresses to Host Identity Tags for security. It also discusses mapping the Smart Space RDF graph triples to a virtual file system to inherit basic file system security mechanisms like access control lists and roles.
![Smart-M3 over HIP
HIP allows working with IPv4/IPv6
applications;
using HIPL realization of HIP;
mapping IP HIT [LSI – IPv4 addresses
of HIP], change SIB IP to HIP LSI and
connect as usual.](https://image.slidesharecdn.com/15smart-m3securitydemok-yudenoketuosll-121112072558-phpapp02/85/Smart-m3-Security-Demo-k-yudenok-4-320.jpg)
Smart-m3 Security Demo (k. yudenok)
- 1. The basic elements of the security mechanisms for the Smart Space Smart-M3 platform Kirill Yudenok, ETU OSLL
- 2. Smart-M3 over HIP working of the Smart Space Smart-M3 platform over the Host Identity Protocol (HIP); supporting of some base security mechanisms that are inherited from the protocol.
- 3. Host Identity Protocol hosts mobility and multihoming; security and privacy over IPv4 and IPv6 networks; NAT traversal and Name Lookup.
- 4. Smart-M3 over HIP HIP allows working with IPv4/IPv6 applications; using HIPL realization of HIP; mapping IP HIT [LSI – IPv4 addresses of HIP], change SIB IP to HIP LSI and connect as usual.
- 5. Smart-M3 – HIP scheme
- 6. RDF-graph mapping to the VFS mapping of Smart Space (SS) RDF-graph triples to the virtual file system (VSF), which will use basic FS security mechanisms, as ACL, roles; mapping model is similar to the discretionary security model and can be easily extended to the role.
- 7. RDF-graph mapping to the VFS RDF-graph mapping to the VFS allows us to set permissions rights in a Linux-usual way; this implementation can be realized with the FUSE technology (fusekit);
- 8. VFS directory structure mapping RDF-graph to the special VFS directory structure for a more accurate setting of access rights to the SS triples (information);
- 9. The place of RDF-graph mapping
- 10. Future steps HIP-agent development; implementation of mapping model to the Smart-M3 platform; set permissions tool development for mapping FS;