OpenXACML Status

[David Chadwick]

Our PDP is also much faster than XACML and can make a million decisions 
a second. It also has an XACML interface if you want one

regards

David

On 18/05/2012 18:23, Leif Johansson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/18/2012 07:11 PM, Chad La Joie wrote:
>> First of all, a good implementation of a PDP (or really any rules
>> engine that handles arbitrarily complex rules) is *not* a simple
>> thing.  Or perhaps I should say, it's not easy to develop one that
>> isn't glacially slow.
>>
>> I would therefore, *strongly* encourage you to participate in the
>> HERAS[1] project and work on their codebase.  I used it years ago
>> and performance was decent as they had already been through a
>> couple evaluation optimization phases.  That said, there is still a
>> lot more that could be done both to increase performance and to
>> improve flexibility/extensibility.
>>
>> [1] http://herasaf.org/
>>
>
> I know this is slightly off-topic but I think SPOCP had something
> like a SAML PDP frontend once (but I may be miss-remembering) and
> SPOCP could do 20k+ rule evaluations per second over 10 years ago.
>
> IF performance is a real issue (and perhaps more so than XACML)
> then talk to Roland about resurrecting SPOCP...
>
> 	Cheers Leif
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk+2hZUACgkQ8Jx8FtbMZncD3ACgjUs2ooJ/faG5Vm0zSpS5Gmja
> KcIAn0CwHqV/xa4M1hu1Sthlq1CdHl0I
> =0Luf
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>

-- 

*****************************************************************
David W. Chadwick, BSc PhD
Professor of Information Systems Security
School of Computing, University of Kent, Canterbury, CT2 7NF
Skype Name: davidwchadwick
Tel: +44 1227 82 3221
Fax +44 1227 762 811
Mobile: +44 77 96 44 7184
Email: D.W.Chadwick at kent.ac.uk
Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html
Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html
Entrust key validation string: MLJ9-DU5T-HV8J
PGP Key ID is 0xBC238DE5

*****************************************************************