Comments for Harvesting web technologies

Comment on XACML 102: XPath and XACML by David Brossard

David Brossard — Thu, 29 Sep 2011 17:20:41 +0000

SunXACML and PicketBox are going to be your best free and open source options. Axiomatics provides a commercial XACML 2.0 and XACML 3.0 implementation.

Comment on XACML 102: XPath and XACML by tina

tina — Wed, 21 Sep 2011 11:55:01 +0000

hello again,
i wanted to explain my question more:
i have searched and found these xacml implementation:
-Sun’s implementation (but it’s xacml v1 which is too old)
-SICSACML: XACML v.3 draft
-HERAS-AF XACML (XACML v2 implementation)
-PicketBox XACML (JBossXACML) (XACML v2 implementation)
-WSO2 product platform
-xEngine
-EnterpriseXACML( Enterprise-java-xacml)
-…
but i don’t know which one fit for me from your point of view and experience.
I’m confused and need your help ,thanks alot.

Comment on XACML 102: XPath and XACML by tina

tina — Wed, 21 Sep 2011 11:54:06 +0000

hi, i’m so much happy of finding you here,
my master field of study in university is information security, and i’ve defined my final project on giving an architecture for applying access control model: UCON. now i want to give a prototype for my architecture. and for policy language i choosed XACMl, i need your urgent help PLEASE, if is that possible for you give me some hints about “XACML open source implementations”, better XACML v.3 or v.2. i dont know which open source implementation is more complete and easy to use. thank you very much again for your writings.

Comment on Forum posts by tina

tina — Wed, 21 Sep 2011 08:21:27 +0000

Comment on The world’s fastest XACML engine by David Brossard

David Brossard — Fri, 19 Aug 2011 10:07:22 +0000

Asela is quite right. Decision caching is about the PEP deciding to not invoke the PDP. Decision caching is quite possibly the most performance-enhancing technique there may be. Implementation is PEP-specific rather than PDP-specific which means that independently of the PDP you are using (Axiomatics for XACML 2.0/3.0 or WS02 for XACML 2.0) you can use a PEP and its caching abilities. In the Axiomatics PEPs, you can define when to cache, for how long, and when to consider requests as similar. For instance you may decide to use a cached decision for a given request because the request came within a certain time interval of the original request which led to the caching. It could also be based on other attributes e.g. use the same cached decision for a request if the attribute that changed is a temperature and the change (delta) is less than 3 degrees. Example: can I take my sweater when it’s 65F? Yes permit. Can I take my sweater when it’s 63F? Use cached permit.

Comment on Enhancements and new features in #XACML 3.0 by XACML 3.0 is now Committee Specification Draft | The Art of Software Development

Fri, 19 Aug 2011 05:52:26 +0000

[...] Blog post by David Brossard [...]

Comment on The world’s fastest XACML engine by Axiomatics seeks serious contender – impressions of Gartner Catalyst 2011 (#CAT11) 30,000 ft up.

Thu, 18 Aug 2011 12:23:38 +0000

[...] XACML Validator « The world’s fastest XACML engine [...]

Comment on The world’s fastest XACML engine by Asela

Asela — Wed, 17 Aug 2011 11:31:37 +0000

Zedd: Hi, i heard many time about “decision caching”, but i don’t find any satisfied Information about it. Can you tell me more “how the concept Work” or share with me any resources about this topic. Thank you

Decision caching means , caching the decision against the request. Therefore for cached requests, PDP does not want to do evaluation of policies (which is time consuming).

Comment on The world’s fastest XACML engine by David Brossard

David Brossard — Sat, 13 Aug 2011 23:15:08 +0000

I will write a short post on that soon. Stay tuned!

Comment on The world’s fastest XACML engine by Zedd

Zedd — Fri, 22 Jul 2011 09:46:24 +0000

Hi,
i heard many time about “decision caching”, but i don’t find any satisfied Information about it. Can you tell me more “how the concept Work” or share with me any resources about this topic.
Thank you