The Policy Obstacle Course: A Framework for Policies Embedded within Distributed Computer Systems

D. Jonscher; J.D. Moffett; J.A. McDermid

The Policy Obstacle Course: A Framework for Policies Embedded within Distributed Computer Systems

D. Jonscher, J.D. Moffett, J.A. McDermid

Computer Science

Research output: Working paper

Abstract

The paper proposes a framework for the discussion of policies which are embedded within distributed computer systems, i.e. those which are intended to influence system actions. In a distributed system both the policies and the managers who interpret them may be fragmented, and a framework is necessary on order to provide a means of describing and controlling them. The paper proposes a framework in which the functions of initiating or inhibiting actions – "imperatival" policies, and of permitting or prohibiting them – "authority" policies, are separated, into Situation Monitor and Reference Monitor respectively. It emerges that all policies, except those whose function is to propose an action to be initiated, are negative in character, and the process that an action goes through before reaching its target object may be described as an obstacle course, with negative policies being the obstacles which must be hurdled. Positive and negative policies differ from each other in both function and form. A model is proposed which throws light on scalability, conflict resolution, and distribution.

Original language	English
Publication status	Published - 1 Mar 1993

Cite this

@techreport{e40d664c3ce84782aea15287e7edd8f6,

title = "The Policy Obstacle Course: A Framework for Policies Embedded within Distributed Computer Systems",

abstract = "The paper proposes a framework for the discussion of policies which are embedded within distributed computer systems, i.e. those which are intended to influence system actions. In a distributed system both the policies and the managers who interpret them may be fragmented, and a framework is necessary on order to provide a means of describing and controlling them. The paper proposes a framework in which the functions of initiating or inhibiting actions – {"}imperatival{"} policies, and of permitting or prohibiting them – {"}authority{"} policies, are separated, into Situation Monitor and Reference Monitor respectively. It emerges that all policies, except those whose function is to propose an action to be initiated, are negative in character, and the process that an action goes through before reaching its target object may be described as an obstacle course, with negative policies being the obstacles which must be hurdled. Positive and negative policies differ from each other in both function and form. A model is proposed which throws light on scalability, conflict resolution, and distribution.",

author = "D. Jonscher and J.D. Moffett and J.A. McDermid",

year = "1993",

month = mar,

day = "1",

language = "English",

type = "WorkingPaper",

}

TY - UNPB

T1 - The Policy Obstacle Course

T2 - A Framework for Policies Embedded within Distributed Computer Systems

AU - Jonscher, D.

AU - Moffett, J.D.

AU - McDermid, J.A.

PY - 1993/3/1

Y1 - 1993/3/1

N2 - The paper proposes a framework for the discussion of policies which are embedded within distributed computer systems, i.e. those which are intended to influence system actions. In a distributed system both the policies and the managers who interpret them may be fragmented, and a framework is necessary on order to provide a means of describing and controlling them. The paper proposes a framework in which the functions of initiating or inhibiting actions – "imperatival" policies, and of permitting or prohibiting them – "authority" policies, are separated, into Situation Monitor and Reference Monitor respectively. It emerges that all policies, except those whose function is to propose an action to be initiated, are negative in character, and the process that an action goes through before reaching its target object may be described as an obstacle course, with negative policies being the obstacles which must be hurdled. Positive and negative policies differ from each other in both function and form. A model is proposed which throws light on scalability, conflict resolution, and distribution.

AB - The paper proposes a framework for the discussion of policies which are embedded within distributed computer systems, i.e. those which are intended to influence system actions. In a distributed system both the policies and the managers who interpret them may be fragmented, and a framework is necessary on order to provide a means of describing and controlling them. The paper proposes a framework in which the functions of initiating or inhibiting actions – "imperatival" policies, and of permitting or prohibiting them – "authority" policies, are separated, into Situation Monitor and Reference Monitor respectively. It emerges that all policies, except those whose function is to propose an action to be initiated, are negative in character, and the process that an action goes through before reaching its target object may be described as an obstacle course, with negative policies being the obstacles which must be hurdled. Positive and negative policies differ from each other in both function and form. A model is proposed which throws light on scalability, conflict resolution, and distribution.

M3 - Working paper

BT - The Policy Obstacle Course

ER -