Adaptive enforcement framework

Abstract

Das Arbeit skizziert ein System, welches aufbauend auf dem SOA Paradigma dazu konzipiert wurde die Flexibilität und Agilität moderner Unternehmen zun unterstuetzen. Die Architektur kombiniert eine Auswahl gegenwärtigen Web Services und aufstrebendend Identität Management Standards, um die in Transaktionen zwischen Geschäftspartnern involvierten Dienste und Resource mit einer anpassungsfähigen, transparenten, kontextsensitiven Sicherheit Ebenen zu unterstuetzen.

The following document sketches an architecture that builds on top of the SOA paradigm and is designed to be flexible enough to accommodate the needs of the business. The architecture combines a selection of current Web Services and emerging Identity Management standards to provide services and resources involved in transactions with an adaptable, transparent, manageable, context sensitive security layer. One of the objectives of the system is to lift the tasks of security administration off the back of a companies' IT Administrator and put the responsible people such as project managers back into to control over what assets are being exposed to specific contexts. The architecture promises to pass some of the agility from the business world onto the IT infrastructure that is in place to support it.