Curriculum Vitae - The University of Texas at Dallas

4. Adaptable Real-time Distributed Object Management for Command and Control Systems,Proceedings of the IEEE International Symposium on Autonomous De-centralized Systems(ISADS) Conference, March 1999, Tokyo, Japan (co-authors: J. Maurer, R. Ginis, R. Freedman,M. Squadrito, S. Wohlever). Lead AuthorMy Contribution: This is a MITRE Team effort. The principal members of the design teamincluded John Maurer (Principal Investigator), Peter Krupp, and myself. The others carried out theimplementation. I wrote the entire paper from the technical reports.5. Real-time CORBA, IEEE Transactions on Parallel and Distributed Systems, October 2000 (coauthors:V. Fay-Wolfe, L. DiPippo, G. Cooper, R. Johnston, P. Kortmann). Co-AuthorMy Contribution: I conceived the idea of real-time CORBA in 1994. Since then MITRE,University of Rhode Island and the Navy carried out the design together with the OMG standardsteam. The paper was a team effort. Much of the writing was carried out by the University of RI..6. Information Survivability for Real-time Command and Control Systems, IEEE Transactions onKnowledge and Data Engineering, January 1999 (co-author: J. Maurer). Lead AuthorMy Contribution: I was the main designer of the system described in this paper and wrote thepaper. John Maurer (the project leader) gave comments on this paper.7. Dependable and Secure TMO Scheme, Proceedings IEEE International Symposium on Object-Oriented Real-Time Distributed Computing (ISORC 2006) (co-author: J. Kim). Lead AuthorMy Contribution: I worked on the design of the system with my student Mr. Kim. My studentcarried out the implementation. I wrote the paper from my student’s MS Thesis.17.4 SEMANTIC WEB, WEB SERVICES AND SECURITYI began my research on XML Security in December 1998 when I visited the University of Milan researchgroup to exchange ideas. I initiated a research project with this group led by Prof. Bertino on securingXML documents. Two students worked on the project, one on access control and authentic publication ofXML documents and the other on privacy and trust for XML documents. Subsequently when I joined NSFin October 2001, I continued with my research on securing the secure semantic web by exploring alllayers of the semantic web technology stack. That same month I participated in an NSF-EU workshop atSophia Antipolis and gave a presentation on securing the semantic web technologies. This was the firstsuch presentation on the topic. A major part of my current research is in this area.XML Security: Paper #1 (IEEE Transactions on Knowledge and Data Engineering) describes myresearch with the University of Milan group on XML security. We developed an approach for controllingaccess to XML documents as well as to securely publish XML documents at the third party site. Wefocused on authenticity and completeness of the query responses. This approach has been recommendedfor secure data outsourcing. Paper #2 (ACM Transactions on Information and Systems Security) describesprivacy problems that could occur due to the specification of trust policies. In particular, we developed asecurity model, privacy-enhanced trust management algorithms and a proof of concept prototype of thealgorithms.RDF Security and Inference Control: Paper #3 (Computer Standards and Interface Journal) describesthe various security standards for semantic web. It describes XML security, RDF security and security forontologies. Then I started focusing on securing RDF. My work on RDF security was novel at that timeand I collaborated with professors at the University of Insubria and together we developed securityarchitecture for RDF documents. This research was published in Paper #4 (DEXA conference workshop).Paper #5 (IFIPTM) continues with RDF security. In this paper, together with students I jointly supervisedwith another professor at The University of Texas at Dallas, instead of explicitly coming up with accesscontrol for RDF documents, we use the Reification principle already in RDF to control access to variousparts of the document. For example, we can make reification statements of an RDF document such as“John has access to the RDF document”. This way we can use the reasoning capabilities in RDF tomanage security. Paper #6 (IFIP Data Security Conference) makes a significant contribution to the106