Tools for domain-based policy management of distributed systems
Tools for domain-based policy management of distributed systems
复制标题
用于分布式系统基于域的策略管理的工具
DOI：
10.1109/noms.2002.1015565
复制
发表时间：
2002
期刊：
影响因子：
--
通讯作者：
T. Tonouchi
中科院分区：
文献类型：
--
作者：
N. Damianou;Naranker Dulay;Emil C. Lupu;M. Sloman;T. Tonouchi
大型系统中的策略管理是复杂的，因为可能存在大量的策略和管理员，以及需要管理的各种类型的信息。适当的工具支持对于使管理切实可行至关重要。在本文中，我们提出了一个集成的工具包的规范，部署和管理的PONDER语言中指定的政策的实施。PONDER策略为管理分布式系统提供了一个强大的框架，其中包括明确的基于域的主题和目标规范以及灵活的生命周期和部署模型。使用LDAP目录实现的域用于存储策略和对实现策略的资源、人员和实体进行分组，从而促进策略信息的自动传播。本文提出的工具包包括：一个策略编译器，用于生成异构管理和安全平台的实现代码，一个双曲树查看器的域结构的有效操作和有效的跨域导航，和各种工具的部署和管理的策略生命周期。
The management of policies in large-scale systems is complex because of the potentially large number of policies and administrators, as well as the diverse types of information that need to be managed. Appropriate tool support is essential to make management practical and feasible. In this paper we present the implementation of an integrated toolkit for the specification, deployment and management of policies specified in the PONDER language. PONDER policies provide a powerful framework for managing distributed systems which includes explicit domain-based subject and target specifications as well as a flexible life-cycle and deployment model. Domains, implemented using LDAP directories, are used for storing policies and grouping resources, people, and the entities which implement policy, thus facilitating the automated dissemination of policy information. The toolkit presented in this paper comprises: a policy compiler, used to generate implementation code for heterogeneous management and security platforms, a hyperbolic tree viewer for efficient manipulation of the domain structure and effective navigation across the domains, and various tools for deploying and managing the policy life-cycle.