Dynamic policy enforcement in JBI information management services with the KAoS policy and domain services

Justin Donnelly; Jacob Madden; Alden Roberts; Matthew Greenberg; Jeffrey Bradshaw; Andrzej Uszok

doi:10.1117/12.720702

30 April 2007 Dynamic policy enforcement in JBI information management services with the KAoS policy and domain services

Justin Donnelly, Jacob Madden, Alden Roberts, Matthew Greenberg, Jeffrey Bradshaw, Andrzej Uszok

Author Affiliations +

Proceedings Volume 6578, Defense Transformation and Net-Centric Systems 2007; 65780B (2007) https://doi.org/10.1117/12.720702
Event: Defense and Security Symposium, 2007, Orlando, Florida, United States

Abstract

English-language policies about the desired behavior of computer systems often suffer from translation errors when implemented with a proliferation of low-level rules governing access control, resource allocation and configuration. To solve this, Dynamic Policy Enforcement systems replace these low-level rules with a relatively small number of semantically grounded, machine-understandable policy statements. These statements use domain terms defined in an ontology that are formally defined so that they can be enforced by the system but also meaningful to human administrators to ensure that they accurately represent organizational policies. In this paper, we describe the application of one such Dynamic Policy Enforcement system, KAoS, to the control of distributed, information-management services defined by the Air Force Research Laboratory's Joint Battlespace Infosphere (JBI) program. Our research allows administrators to define the desired behavior of the participants in the system, both human and software, with one collection of well defined policies. As a result, a single set of tools for the definition, analysis, control, and monitoring of policy can be used to implement access control, service configuration, and service delivery prioritization.

Citation Download Citation

Justin Donnelly, Jacob Madden, Alden Roberts, Matthew Greenberg, Jeffrey Bradshaw, and Andrzej Uszok "Dynamic policy enforcement in JBI information management services with the KAoS policy and domain services", Proc. SPIE 6578, Defense Transformation and Net-Centric Systems 2007, 65780B (30 April 2007); https://doi.org/10.1117/12.720702

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available