enforcing strongenterprisestrong-wide policies over standard client-server.pdfVIP

Enforcing Enterprise-wide Policies Over Standard Client-Server Interactions Zhijun He, Tuan Phan, Thu D. Nguyen {zhijun, tphan, tdnguyen }@ Department of Computer Science, Rutgers University, NJ 08854 Appears in Proceedings of the 24th Symposium on Reliable Distributed Systems (SRDS), 2005 Abstract. We propose and evaluate a novel framework for Needless to say, these systems are unreliable, insecure, and enforcing global coordination and control policies over in- difficult to use and maintain [8, 14, 18]. teracting software components in enterprise computing en- A number of research efforts have sought to address the vironments. This framework combines a per-node reference above problem by introducing mechanisms to enforce ex- monitor with two existing coordination and control systems plicit policies that coordinate and control the activities of to enforce policies that, among other properties, are stateful the disparate components within such environments, e.g., and communal. Each reference monitor filters messages ex- [4, 7, 11, 15]. Unfortunately, many of these mechanisms changed between the interacting software components sim- require the modification of existing software, which lim- ilar to a firewall, passing only messages that are allowed its their applicability and slows their adoption. In this pa- by the policies in effect. This filtering approach decouples per, we propose a novel approach for applying these mech- coordination and control from application implementation, anisms to software components that interact using stan- allowing the coordination and control mechanism and ap- dardized message passing protocols without requiring any plication implementations to evolve independently of each chang