Subterfuge-safe trust management for delegation of permissions in open environments

Open environments involve distributed entities interacting with each other in an open manner. Many distributed entities are unknown to each other but need to collaborate and share resources in a secure fashion. Usually resource owners alone decide who is trusted to access their resources. Since resource owners in open environments do not have a complete picture of all trusted entities, trust management frameworks are used to ensure that only authorized entities will access requested resources. Every trust management system has limitations, and the limitations can be exploited by malicious entities. One vulnerability is due to the lack of globally unique interpretation for permission specifications. This limitation means that a malicious entity which receives a permission in one domain may misuse the permission in another domain via some deceptive but apparently authorized route; this malicious behaviour is called subterfuge. This thesis develops a secure approach, Subterfuge Safe Trust Management (SSTM), that prevents subterfuge by malicious entities. SSTM employs the Subterfuge Safe Authorization Language (SSAL) which uses the idea of a local permission with a globally unique interpretation (localPermission) to resolve the misinterpretation of permissions. We model and implement SSAL with an ontology-based approach, SSALO, which provides a generic representation for knowledge related to the SSAL-based security policy. SSALO enables integration of heterogeneous security policies which is useful for secure cooperation among principals in open environments where each principal may have a different security policy with different implementation. The other advantage of an ontology-based approach is the Open World Assumption, whereby reasoning over an existing security policy is easily extended to include further security policies that might be discovered in an open distributed environment. We add two extra SSAL rules to support dynamic coalition formation and secure cooperation among coalitions. Secure federation of cloud computing platforms and secure federation of XMPP servers are presented as case studies of SSTM. The results show that SSTM provides robust accountability for the use of permissions in federation. It is also shown that SSAL is a suitable policy language to express the subterfuge-safe policy statements due to its well-defined semantics, ease of use, and integrability.

Leadership in the community sector: promoting collaboration and social change in Belfast

Community development is centrally concerned with people in communities working together to achieve a common goal, that is, to collaborate, whether within local geographical communities, in communities of shared interests or among groups sharing a common identity. Its overarching goal is one of progressive transformational social change. As Belfast transitions from a conflict to a post-conflict society, there is a need for greater, more effective work at local community level in order to address a range of ongoing social and economic issues facing communities, including high levels of disadvantage and division. Given the significance of leadership in building effective collaboration and the centrality of collaboration for community development, it is important to understand how leadership is currently enacted and what kinds of leadership are required to support communities to collaborate effectively to bring about social change. This thesis thus centers on the kind of leadership practised and required to support collaboration for social change within the community sector in Belfast, a city that contains an estimated 28% of the total number of community and voluntary sector (CVS) organisations in Northern Ireland (Northern Ireland Council for Voluntary Action, 2012). Through a series of qualitative, in-depth interviews with people playing leadership roles in local communities, the study critically explores and analyses their experiences and perceptions in relation to leadership and collaboration. Community development in Belfast today is practised within a wider context of neoliberal policies, characterised by austerity and public spending cuts. Whilst not the only influencing factor, this context has had a particular and profound impact on the nature and role of community development practised, and on the kind of leadership enacted within it. The space for reflection and transformative action appears to be shrinking as the contraction of resources to support community development in local communities continues unabated. Those playing leadership roles increasingly find themselves compelled to spend time seeking resources and managing complex funding arrangements rather than focusing on the social change dimensions of their work. Collaboration as promoted by the state seems to have become an instrumental tactic used to implement its austerity measures and curtail the potential of the community sector. Despite this, local leaders are driving initiatives that attempt to push back, helping the sector refocus on its transformational goals of social change. To do this requires support. Those playing leadership roles require resources, including time, to encourage and enable communities to reconnect with the purpose and underpinning values of community development. Leaders also need support to develop and promote new, progressive narratives and visions and pursue these through building collaboration and solidarity.