From imperius-dev-return-236-apmail-incubator-imperius-dev-archive=incubator.apache.org@incubator.apache.org Tue Sep 02 17:28:18 2008 Return-Path: Delivered-To: apmail-incubator-imperius-dev-archive@locus.apache.org Received: (qmail 2581 invoked from network); 2 Sep 2008 17:28:17 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 2 Sep 2008 17:28:17 -0000 Received: (qmail 35056 invoked by uid 500); 2 Sep 2008 17:28:16 -0000 Delivered-To: apmail-incubator-imperius-dev-archive@incubator.apache.org Received: (qmail 35040 invoked by uid 500); 2 Sep 2008 17:28:16 -0000 Mailing-List: contact imperius-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: imperius-dev@incubator.apache.org Delivered-To: mailing list imperius-dev@incubator.apache.org Received: (qmail 35029 invoked by uid 99); 2 Sep 2008 17:28:15 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Sep 2008 10:28:15 -0700 X-ASF-Spam-Status: No, hits=-2.0 required=10.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_MED,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of jneeraj@us.ibm.com designates 32.97.110.152 as permitted sender) Received: from [32.97.110.152] (HELO e34.co.us.ibm.com) (32.97.110.152) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 02 Sep 2008 17:27:16 +0000 Received: from d03relay02.boulder.ibm.com (d03relay02.boulder.ibm.com [9.17.195.227]) by e34.co.us.ibm.com (8.13.8/8.13.8) with ESMTP id m82HRk3P015790 for ; Tue, 2 Sep 2008 13:27:46 -0400 Received: from d03av01.boulder.ibm.com (d03av01.boulder.ibm.com [9.17.195.167]) by d03relay02.boulder.ibm.com (8.13.8/8.13.8/NCO v9.0) with ESMTP id m82HRhHG059964 for ; Tue, 2 Sep 2008 11:27:44 -0600 Received: from d03av01.boulder.ibm.com (loopback [127.0.0.1]) by d03av01.boulder.ibm.com (8.12.11.20060308/8.13.3) with ESMTP id m82HRgVW018920 for ; Tue, 2 Sep 2008 11:27:43 -0600 Received: from d03nm118.boulder.ibm.com (d03nm118.boulder.ibm.com [9.17.195.144]) by d03av01.boulder.ibm.com (8.12.11.20060308/8.12.11) with ESMTP id m82HRf03018788 for ; Tue, 2 Sep 2008 11:27:42 -0600 In-Reply-To: To: imperius-dev@incubator.apache.org MIME-Version: 1.0 Subject: Re: policy analysis support X-Mailer: Lotus Notes Release 7.0 HF277 June 21, 2006 From: Neeraj Joshi Message-ID: Date: Tue, 2 Sep 2008 13:27:40 -0400 X-MIMETrack: Serialize by Router on D03NM118/03/M/IBM(Build V85_07222008NPHF42 | August 5, 2008) at 09/02/2008 11:27:42, Serialize complete at 09/02/2008 11:27:42 Content-Type: multipart/alternative; boundary="=_alternative 005FEB35852574B8_=" X-Virus-Checked: Checked by ClamAV on apache.org --=_alternative 005FEB35852574B8_= Content-Type: text/plain; charset="US-ASCII" I agree this is can be a great addition to Imperius ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "The light at the end of the tunnel...may be you" Neeraj Joshi WebSphere XD - Compute Grid AIM, IBM Apache Imperius - http://incubator.apache.org/imperius ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Xiping Wang/Watson/IBM@IBMUS 09/02/2008 11:04 AM Please respond to imperius-dev@incubator.apache.org To imperius-dev@incubator.apache.org cc Subject Re: policy analysis support "Mark A. Carlson" "Mark A. Carlson" Sent by: Mark.Carlson@Sun.COM 09/02/2008 10:52 AM Please respond to imperius-dev@incubator.apache.org To imperius-dev@incubator.apache.org cc Subject Re: policy analysis support Xiping, I think this would be a great addition. Xiping Wang wrote: > All, > > We, at IBM T.J.Watson Research Center, have been developing a policy > analysis module on top of Imperius that allows a policy writer perform the > following tasks automatically. > 1) Dominance check: finding if a policy is dominated by other policies, > thus removing redundancy among policies. > 2) Simultaneous applicability check: finding if two policies are > simultaneously applicable, thus preventing potential conflicts at > specification time. > Can you define what you mean by applicability? It means that a policy will be applied if it's condition is evaluated true. > 3) Coverage check: finding if a set of policies covers all the sensor > spaces required, thus ensuring policies specified adequately. > 4) Meta policy based conflict detection/resolution: detecting/resolving > conflicts at runtime. > As in the same conditions elicit conflicting actions? Two policies can be applied simultenously, but with conflicting actions. > 4) Rule-based policy transformation: allowing transformation of abstract > policy into concrete policies or vice versa. > Abstract in the OO sense? Abstract means high level goals that can not be enforced. > The package implements advanced algorithms for policy analysis and requires > certain changes to be made to the current Imperius implementation for > integration. > Any IP regarding this new work? I believe this needs to be worked out with IBM management and lawyers. -- mark --=_alternative 005FEB35852574B8_=--