Von Welch: Bibliography

• Publications
• Standards
• Technical Reports
• Recent Presentations
• Organized Workshops and Meetings

---

Papers

• Daniel S. Katz, David Hart, Chris Jordan, Amit Majumdar, J.P. Navarro, Warren Smith, John Towns, Von Welch. Cyberinfrastructure Usage Modalities on the TeraGrid. Proceedings of 2011 IPDPS Workshops, 2011.


• Jim Basney, Terry Fleury and Von Welch. Federated Login to TeraGrid. 9th Symposium on Identity and Trust on the Internet, 2010.


• Jim Basney, Von Welch, Nancy Wilkins-Diehr. TeraGrid Science Gateway AAAA Model: Implementation and Lessons Learned. TeraGrid Conference, 2010.


• Himanshu Khurana, James Basney, Mehedi Bakht, Mike Freemon, Von Welch and Randy Butler. Palantir: A Framework for Collaborative Incident Response and Investigation. 8th Symposium on Identity and Trust on the Internet, 2009.


• Terry Fleury, Himanshu Khurana, Von Welch. Towards a Taxonomy of Attacks Against Energy Control Systems. Second Annual IFIP Working Group 11.10 International Conference on Critical Infrastructure Protection, 2008.


• Adam Lee, Marriane Winslett, James Basney and Von Welch. The Traust Authorization Service. ACM Transactions on Information and System Security (TISSEC), 2008.


• Himanshu Khurana, Maifi Khan and Von Welch. Leveraging Computational Grid Technologies for Building a Secure and Manageable Power Grid. Proceedings of the 40th Hawaii International Conference on System Sciences (HICSS), 2007.


• Tom Scavo and Von Welch. A Grid Authorization Model for Science Gateways. International Workshop on Grid Computing Environments, 2007.


• Von Welch, Ian Foster, Tom Scavo, Frank Siebenlist, Charlie Catlett, Jill Gemmill and Dane Skow. Scaling TeraGrid Access: A Testbed for Identity Management and Attribute-based Authorization. TeraGrid 2007, 2007.


• Himanshu Khurana and Jim Basney, Von Welch and Roy Campbell. Operational Security Requirements for Large Collaborative Compute Infrastructures. Trusted Collaboration Workshop (TrustCol), part of CollaborateCom, 2006.


• Von Welch, Jim Barlow, James Basney, Doru Marcusiu and Nancy Wilkins-Diehr. A AAAA Model to Support Science Gateways with Community Accounts. Concurrency and Computation: Practice and Experience, 2006.


• Randy Butler, Mark Servilla, Stuart Gage, Jim Basney, Von Welch, Bill Baker, Terry Fleury, Patrick Duda, David Gehrig, Michael Bletzinger, Jing Tao and D. Michael Freemon. CyberInfrastructure for the Analysis of Ecological Acoustic Sensor Data: A Use Case Study in Grid Deployment. Challenges of Large Applications in Distribute Environments (CLADE) Workshop, 2006.


• Terry Fleury, Jim Basney and Von Welch. Single Sign-On For Java Web Start Applications Using MyProxy. 2006 ACM Workshop on Secure Web Services (SWS), 2006.


• Jim Basney, Patrick Flanigan, Jin Heo, Himanshu Khurana, Joe Muggli, Meenal Pant, Adam Slagell and Von Welch. Mithril: Adaptable Security for Survivability in Collaborative Computing Sites. Workshop on Enterprise Network Security (WENS) at Securecomm 2006, 2006.


• Adam Lee, Marriane Winslett, James Basney and Von Welch. Traust: A Trust Negotiation-Based Authorization Service for Open Systems. Eleventh ACM Symposium on Access Control Models and Technologies (SACMAT 2006), 2006.


• Adam Lee, Marriane Winslett, James Basney and Von Welch. Traust: A Trust Negotiation Based Authorization Service. Demonstration Short Paper, The Fourth International Conference on Trust Management (iTrust 2006), 2006.


• Tom Barton, Jim Basney, Tim Freeman, Tom Scavo, Frank Siebenlist, Von Welch, Rachana Ananthakrishnan, Bill Baker, Monte Goode and Kate Keahey. Identity Federation and Attribute-based Authorization through the Globus Toolkit, Shibboleth, GridShib, and MyProxy. 5th Annual PKI R&D Workshop, 2006.


• Bruce Beckles, James Basney and Von Welch. Mechanisms for Increasing the Usability of Grid Security. International Journal of Human Computer Studies, Special Issue on HCI Research in Privacy and Security, 2005.


• James Basney, Marty Humphrey and Von Welch. The MyProxy Online Credential Repository. Software: Practice and Experience, 2005.


• Patrick Flanigan and Von Welch. Dynamic Policy Enforcement for Software Defined Radio. Proceedings of the 2005 Software Defined Radio Technical Conference, 2005.


• Von Welch, Tom Barton, Kate Keahey and Frank Siebenlist. Attributes, Anonymity, and Access: Shibboleth and Globus Integration to Facilitate Grid Collaboration. 4th Annual PKI R&D Workshop, 2005.


• David Chadwick, Sassa Otenko and Von Welch. Using SAML to Link the GLOBUS Toolkit to the PERMIS Authorisation Infrastructure. Proceedings of Eighth Annual IFIP TC-6 TC-11 Conference on Communications and Multimedia Security, 2004.


• James Basney, Wolfgang Nejdl, Daniel Olmedilla, Von Welch and Marrianne Winslett. Negotiating Trust on the Grid. Proceedings of the 2nd Workshop on Semantics in P2P and Grid Computing at the Thirteenth International World Wide Web Conference, 2004.


• Alex Betts, Matt Hall, Volodymyr Kindratenko, Meenal Pant, David Pointer, Von Welch and Paul Zawada. The GNU Software Radio Transceiver Platform. Proceedings of the 2004 Software Defined Radio Technical Conference, 2004.


• Von Welch, Ian Foster, Carl Kesselman, Olle Mulmo, Laura Pearlman, Steven Tuecke, Jarek Gawor, Sam Meder and Frank Siebenlist. X.509 Proxy Certificates for Dynamic Delegation. Proceedings of the 3rd Annual PKI R&D Workshop, 2004.


• Von Welch, Frank Siebenlist, Ian Foster, John Bresnahan, Karl Czajkowski, Jarek Gawor, Carl Kesselman, Sam Meder, Laura Pearlman and Steven Tuecke. Security for Grid Services. Twelfth International Symposium on High Performance Distributed Computing (HPDC-12), 2003.


• Kate Keahey, Von Welch, Sam Lang, Bo Liu and Sam Meder. Fine-Grain Authorization Policies in the Grid: Design and Implementation. 1st International Workshop on Middleware for Grid Computing, 2003.


• Mary Thompson, A. Essiari, Kate Keahey, Von Welch, Sam Lang and Bo Liu. Fine-Grained Authorization for Job and Resource Management Using Akenti and the Globus Toolkit. Proceedings of Computing in High Energy Physics (CHEP '03), 2003.


• Ian Foster, Carl Kesselman, Laura Pearlman, Steven Tuecke and Von Welch. The Community Authorization Service: Status and future. Proceedings of Computing in High Energy Physics (CHEP '03), 2003.


• Shane Canon, Steve Chan, Doug Olson, Craig Tull and Von Welch. Using CAS to Manage Role-Based VO Sub-Groups. Computing in High Energy Physics 03, 2003.


• Kate Keahey and Von Welch. Fine-Grain Authorization for Resource Management in the Grid Environment. Proceedings of Grid2002 Workshop, 2002.


• Laura Pearlman, Von Welch, Ian Foster, Carl Kesselman and Steven Tuecke. A Community Authorization Service for Group Collaboration. Proceedings of the IEEE 3rd International Workshop on Policies for Distributed Systems and Networks, 2002.


• Lavanya Ramakrishnan, Helen Rehn, Jay Alameda, Rachana Ananthakrishnan, Madhusudhan Govindaraju, Aleksander Slominski, Kay Connelly, Von Welch, Dennis Gannon, Randall Bramley, Shawn Hampton. An Authorization Framework for a Grid Based Component Architecture. GRID'2002, 2002.


• Willian Allcock, Ann Chervenak, Ian Foster, Leara Pearlman, Von Welch and Mike Wilde. Globus Toolkit Support for Distributed Data-Intensive Science. Proceedings of Computing in High Energy Physics (CHEP '01), 2002.


• Jason Novotny, Steven Tuecke, Von Welch. An Online Credential Repository for the Grid: MyProxy. Proceedings of the Tenth International Symposium on High Performance Distributed Computing (HPDC-10), 2001.


• Randy Butler, Doug Engert, Ian Foster, Carl Kesselman, Steven Tuecke, John Volmer and Von Welch. National-Scale Authentication Infrastructure. IEEE Computer, Volume 33, Issue 12, 2000.

---

Standards

• Jeffrey Hutzelman, Jospeh Salowey, Joseph Galbraith and Von Welch. Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol. RFC4462, 2006.


• Von Welch, Rachana Ananthakrishnan, Frank Siebenlist, David Chadwick, Sam Meder, and Laura Pearlman. Use of SAML for OGSI Authorization. GFD 66, 2006.


• Steven Tuecke, Von Welch, Doug Engert, Laura Perlman and Mary Thompson. Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile. RFC3820, 2004.

---

Organized Workshops

• Scientific Software Security Innovation Institute Workshop (2/2). Chicago, IL, October 2011.


• Scientific Software Security Innovation Institute Workshop (1/2). Arlington, VA, August 2010.


• Campus Bridging Software and Software Service Issues. Denver, CO, August 2010.


• Federated Identity for CI. 2010 Internet2 Fall Member Meeting, November 2010.


• CILogon Fall 2009 Workshop. Urbana, IL, September 2009.


• Shibboleth-Grid Developers BOF. GGF-16, February 2006.


• Community Activity: Leveraging Site Infrastructute for Multi-Site Grids. GGF-15, October 2005.


• GlobusWORLD 2004 Grid Security Workshop. GlobusWORLD, January 2004.


• Workshop on Operational Security for the Grid. GGF-12, September 2004.

---

Technical Reports

• James Basney, Mine Altunay, Von Welch. Options and Recommandation for Replacement of the DOE Grids CA in the OSG PKI. OSG-doc-1077, 2011.


• James Basney, Scott Koranda, Von Welch. An Analysis of the Benefits and Risks to LIGO When Participating in Identity Federations. LIGO document number LIGO­G1100964­v2, 2011.


• Craig A. Stewart, Guy T. Almes, Von Welch, and Malinda Lingwall (eds.). NSF Advisory Committee for Cyberinfrastructure Task Force on Campus Bridging. Final Report.. NSF ACCI, 2011.


• Von Welch, Ray Sheppard, Melinda J. Lingwall and Craig A. Stewart. Current structure and past history of US cyberinfrastructure (data set and figures). Indiana University ScholarWORKS Repository, 2011.


• John McGee, Von Welch, and Guy Almes (Eds). Campus Bridging Software and Software Service Issues Workshop Report. 2011.


• William Barnett, Von Welch, Alan Walsh, and Craig A. Stewart. A Roadmap for Using NSF Cyberinfrastructure with InCommon. 2011.


• Von Welch. Open Source Software Vulnerability Response: A Guide. 2010.


• Craig A. Stewart and Guy T. Almes and Bradley C. Wheeler (eds.). Cyberinfrastructure Software Sustainability and Reusability: Report from an NSF-funded workshop. Indiana University, March 2010.


• Charlie Catlett et al.. TeraGrid: Analysis of Organization, System Architecture, and Middleware Enabling New Types of Applications. IOS Press Advances in Parallel Computing series, 2008.


• Jim Basney and Roy Campbell and Himanshu Khurana and Von Welch. Towards Operational Security for GENI. GENI Design Document 06-10, July 2006, July 2006.


• C. A. Gunter and W. H. Sanders and D. E. Bakken and A. Bose and R. Campbell and G. Gross and C. H. Hauser and H. Khurana and R. K. Iyer and Z. T. Kalbarczyk and K. Nahrstedt and D. M. Nicol and T. J. Overbye and P. W. Sauer and S. W. Smith and R. J. Thomas and V. Welch and M. Winslett. Trustworthy Cyber-Infrastructure for Power. 2006.


• Jim Basney and Von Welch and Frank Siebenlist. A Roadmap for Integration of Grid Security with One-Time Passwords. April 2004.


• Von Welch and Olle Mulmo. Using the Globus Toolkit with Firewalls. March 2004.


• Von Welch. A User's Guide to TCP Windows. June 1996.

---

Presentations

• Von Welch. A Roadmap for Using NSF Cyberinfrastructure with InCommon. InCommon IAM Online Webinar, January 2012.


• Craig A. Stewart and Von Welch. Overview of NSF ACCI Task Force on Campus Bridging Report. Internet2 Building Identity Trust Federations Conference Call, September 2011.


• Von Welch. CyberSecurity Challenges. RPI CSCI 6970 Guest Lecture, April 2011.


• Von Welch. Some thoughts on Identity Management for Distributed Science. NITRD Large Scale Network (LSN) Middleware And Grid Infrastructure Coordination (MAGIC) Team Teleconference, October 2011.


• Von Welch. Security in Distributed Computing. Open Science Grid Summer School, June 2011.


• William Barnett, Von Welch, Alan Walsh and Craig A. Stewart. A Roadmap for using NSF Cyberinfrastructure with InCommon. TeraGrid 2011, July 2011.


• Craig A. Stewart and Von Welch. Overview of NSF ACCI Task Force on Campus Bridging Report. Coalition for Academic Scientific Computation (www.casc.org) Meeting, March 2011.


• Craig A. Stewart and Von Welch. Campus Bridging Taskforce 0th Draft of Recommendations. SURA Information Technology Committee Meeting, October 2010.


• Von Welch. What does a VO need and want from a campus?. Fall I2 Member Meeting, November 2010.


• Jim Basney, Michael Grady, Matt Kolb, Rob Stanfield, Keith Wessel and Von Welch. Federated Incident Response. Fall I2 Member Meeting, November 2010.


• Von Welch. Existing Security Efforts: A Quick Drive-by. S3I2 Workshop, August 2010.


• Von Welch. Cybersecurity for Distributed Computational Science. Indiana University CACR Security Series, October 2010.


• Tom Scavo, Jim Basney, Terry Fleury and Von Welch. A Grid Authorization Model for Science Gateways. A digital poster presented at TeraGrid 08 (Las Vegas), July 2008.


• Tom Scavo, Jim Basney, Terry Fleury and Von Welch. Attribute-based Auditing and Authorization for Science Gateways. Birds-of-a-feather session organized at TeraGrid 08 (Las Vegas), July 2008.


• Tom Scavo, Jim Basney, Terry Fleury and Von Welch. Science Gateway Attribute-based Authorization and Auditing Tutorial. Contributed slides to Building Science Gateways tutorial, TeraGrid 08 (Las Vegas), July 2008.


• Aaron Shelmire, Jim Basney, Jim Marsteller, Von Welch, Tom Scavo, Terry Fleury, and Nancy Wilkins-Diehr. TeraGrid Science Gateways: Scaling TeraGrid Access. UK e-Science All Hands Meeting, September 2008.


• Von Welch. Identity Federation: Some Challenges and Thoughts. Open Grid Forum 19, January 2007.


• Von Welch. GridShib: Grid/Shibboleth Interoperability. Open Grid Forum 19, January 2007.


• Tom Scavo and Von Welch. A Grid Authorization Model for Science Gateways. Grid Computing Environments Workshop, Supercomputing 07, November 2007.


• Von Welch. Responding to Cyberincidents. NCSA Private Sector Partner Meeting, June 2006.


• Jim Basney and Patrick Flanigan and Himanshu Khurana and Joe Muggli and Meenal Pant and Adam Slagell and Von Welch. Mithril: Adaptable Security for Survivability in Collaborative Computing Sites. Network Security 2006, April 2006.


• Tom Barton, Tim Freeman, Kate Keahey, Raj Kettimuthu, Tom Scavo, Frank Siebenlist and Von Welch. GridShib: Grid/Shibboleth Integration. Global Grid Forum 18 Grid-Shibboleth Developers BOF, September 2006.


• Von Welch, Jim Basney, Tom Scavo. An X.509 Binding for SAML. Poster presented at the Midwest Security Workshop, September 2006.


• John-Paul Robinson, Jill Gemmill, Tom Scavo and Von Welch. Building Systems with Shibboleth: Integrated VO Management with myVocs and GridShib. TERENA, May 2006.


• Tom Barton, Tim Freeman, Kate Keahey, Raj Kettimuthu, Tom Scavo, Frank Siebenlist and Von Welch. GridShib: Grid/Shibboleth Interoperability. Presentation to Naregi Visitors, November 2006.


• Tom Barton, Tim Freeman, Kate Keahey, Raj Kettimuthu, Tom Scavo, Frank Siebenlist and Von Welch. GridShib Project Update. Internet2 Fall Member Meeting, December 2006.


• Von Welch. Scaling TeraGrid Access: A Roadmap (Testbed) for Federated Identity Management for a Large Cyberinfrastructure. SuperComputing '06 TeraGrid Booth Presentation, November 2006.


• Dane Skow and Von Welch. TeraGrid Plans for Authentication and Authorization Testbed. TeraGrid Science Gateway telecon, October 2006.


• Tom Barton, Tim Freeman, Kate Keahey, Raj Kettimuthu, Tom Scavo, Frank Siebenlist and Von Welch. GridShib: Grid/Shibboleth Interoperability. GlobusWorld 2006, September 2006.


• Jill Gemmill, John-Paul Robinson, Tom Scavo and Von Welch. myVocs and GridShib: Integrated VO Management. Internet2 Spring Member Meeting, April 2006.


• Tom Barton, Jim Basney, Tim Freeman, Tom Scavo, Frank Siebenlist, Von Welch, Rachana Ananthakrishnan, Bill Baker, Monte Goode and Kate Keahey. Identity Federation and Attribute-based Authorization through the Globus Toolkit, Shibboleth, GridShib, and MyProxy. 5th Annual PKI R&D Workshop, April 2006.


• Von Welch. Advances in Middleware Security - A Globus Perspective. JISCCore Middleware Workshop, October 2005.


• Von Welch. Science Gateways on the TeraGrid. Internet2 Advanced CAMP, July 2005.


• Tom Scavo and Von Welch. GridShib. CIP Seminar, December 2005.


• Von Welch. Authentication for Virtual Organizations: From Passwords to X509, Identity Federation and GridShib. BRIITE Meeting, November 2005.


• Von Welch. GridShib: Campus/Grid RBAC Integration. GGF 15 Workshop: Leveraging Site Infrastructure for Multi-Site Grids, October 2005.


• Von Welch. Tools for Grid/Campus Integration: GridShib and MyProxy. Internet2 Advanced CAMP, July 2005.


• Von Welch. GridShib: Grid-Shibboleth Integration. GlobusWORLD 2005, February 2005.


• Von Welch. GridShib: Grid-Shibboleth Integration. caBIG Telecon, March 2005.


• Von Welch. Attributes, Anonymity, and Access: Shibboleth and Globus Integration to Facilitate Grid Collaboration. 4th Annual PKI R&D Workshop, April 2005.


• Von Welch. GridShib: Grid-Shibboleth Integration (Identity Federation and Grids). UK eScience Security Workshop, April 2005.


• Von Welch. Emerging NCSASecurity R&D. NSFCyberSecurity Summit, September 2004.


• Von Welch. Grid Security Overview. GRIDSCenter, July 2004.


• Von Welch. Grid Security: Status and Futures. ClusterWorld Expo, April 2004.


• Von Welch. X.509 Proxy Certificates for Dynamic Delegation. 3rd Annual PKI R&D Workshop, NIST, March 2004.


• Von Welch. GridShib: Grid-Shibboleth Integration Overview. NMI Management Call, November 2004.