David,
I'd definitely be interested. Sounds like lots of good function.
To me, the big question is: are you aware of any downside?
David,
David
Wood/Watson/[EMAIL PROTECTED]
BMUS To
[email protected]
10/14/2008 04:05 cc
PM
Subject
Framework above existing Imperius
Please respond to
[EMAIL PROTECTED]
bator.apache.org
All,
Our group has designed and developed a layer of functionality on top of
Imperius, including the following:
Extended Policy object that includes metadata such as name, attributes and
the ability to get instances information
Policy repository - persistent or in memory storage of Policy objects an
the ability to activate and deactivate policies. Policies can be queried
by activation and/or attributes.
PEP - a policy evaluation point, which defines the set of instances to be
provided at evaluation time, and an optional set of attributes for
matching with policies.
PDP - a policy decision point, which allows PEP to register and acquire
evaluations. It also holds policies in a policy repository.
PolicyManager - connects to a PDP for policy management and discovery of
registered PEP.
Simulation - provides the ability to define PEP via instance providers and
to run the PEP over policies deployed through a policy manager.
Some of this overlaps with existing Imperius components such as DataStore,
PolicyRepository and PolicyManager, but I think you will find the above
are a superset of the functionality there (that is the intent anyway).
We'd like to propose including some or all of this framework in Imperius.
Is there interest? If so, I can provide a set of javadoc for the
library.
David Wood
Network Server System Software Group
IBM TJ Watson Research Center
[EMAIL PROTECTED]
914-784-5123 (office), 914-396-6515 (mobile)
