Abstract
As computer and network systems are vulnerable to attacks, abandoning the existing huge infrastructure of possibly-insecure computer and network systems is impossible, as well as replacing them with totally secure systems may not be feasible or cost effective. A common element in many attacks is that a single user will often attempt to intrude upon multiple resources throughout the network. Detecting the attack can become significantly easier by compiling and integrating evidence of such intrusion attempts across the network rather than attempting to assess the situation from the vantage point of only a single host. This thesis proposes a system to provide security for the grid infrastructure where authorization and authentication will be made scalable by setting up an authorization framework at the resource provider’s end. This intends to relieve the grid infrastructure from having to take responsibility of authorization, and also improves the resource provider’s trust in the request from the data portal as the authorization information will be from its own organizational authorization server. We will demonstrate that this architecture is secure, scalable, and robust, by improving the existing authorization mechanism.