Two types of tools are presented: Grid security frameworks and tools for managing security policies.

Grid Security Framework

• Akenti
  http://dsd.lbl.gov/Akenti/
  Akenti is a security model and architecture that is intended to provide scalable security services in highly distributed network environments.
  
  
• EDG Security and VOMS
  http://edg-wp2.web.cern.ch/edg-wp2/security/index.html
  The security infrastructure of the European Data Grid (http://www.eu-datagrid.org/) and the Data TAG (http://www.datatag.org/) projects.
  
  
• Globus Toolkit CAS
  http://www.globus.org/toolkit/
  An open source software toolkit used for building grids, developed by the Globus Alliance.
  
  
• GRIA
  http://www.gria.org
  GRIA is a service-oriented infrastructure designed to support B2B collaborations through service provision across organisational boundaries in a secure, interoperable and flexible manner.
  
  
• GUMS
  http://grid.racf.bnl.gov/GUMS/
  GUMS (Grid User Management Service) is an identity mapping service that can be configured to generate static gridmap files or to map users dynamically as each job is submitted.
  
  
• Liberty Alliance
  http://www.projectliberty.org/
  Industry collaboration for creating standards for single sign-on and identity federation.
  
  
• PRIMA
  http://computing.fnal.gov/docs/products/voprivilege/prima/prima.html
  PRIMA is a VO management framework that enables the creation of small and dynamic communities via a set of tools and extension modules without deploying community servers.
  
  
• Shibboleth
  http://shibboleth.internet2.edu/
  This is a project run by the Internet2 consortium in the USA, providing a Single Sign On solution to accessing web services.
  
  
• SAZ
  http://www.fnal.gov/docs/products/saz/v_vo1/SAZ.htm
  SAZ (Site AuthoriZation service) allows security authorities of a grid site to impose site-wide policy and to control access to the site.
  
  

Policies and Security

• AVISPA Tool
  http://www.avispa-project.org
  AVISPA stands for Automated Validation of Internet Security Protocols and Applications. It aims at developing a push-button, industrial-strength technology for the analysis of large-scale Internet security-sensitive protocols and applications
  
  
• Delegent
  http://www.delegent.com/page.php?id=1
  An authorization server produced by the Swedish Institute of Computer Science.
  
  
• GAS, GridLab Authorization Service
  http://www.gridlab.org/WorkPackages/wp-6/index.html
  An authorisation service developed within the framework of the GridLab project.
  
  
• PERMIS
  http://sec.isi.salford.ac.uk/permis/
  PERMIS is a privilege and role management infrastructure that implements authorisation on top of authentication systems.
  
  
• Ponder
  http://www-dse.doc.ic.ac.uk/Research/policies/ponder.shtml
  A language and tool for specifying management and security policies for distributed systems.
   
• POSITIF
  http://www.positif.org
  POSITIF is a set of tools for policy-based protection of networked systems and applications.
  
  
• VUS
  http://vus.psnc.pl/index-en.html
  VUS (Virtual User System) allows users to run jobs on a node without having a local account. Instead, a pool virtual accounts is created and users are mapped to these virtual accounts only for the time needed to process a given job.