The representation of policies as system objects

Abstract

This is an exploratory paper in which we describe aspects of management policy which could be modelled as objects in a distributed computer system, in order to enable them to be queried and manipulated. Policies are 'the plans of an organisation to meet its goals'. They are persistent entities which are intended to influence actions, either by motivating actions or by authorising them. This distinction reflects the observation that agents only successfully carry out actions if they are both motivated and empowered to do so. In addition to persistence, policies have other main characteristics: they are directed to subjects; they are typic ally organised in hierarchies in which the goal of a policy is achieved by creating lower-level policies until identifiable actions are completed; and policies may conflict, so they require to have a precedence ordering.There is a need to represent and manipulate policies, as objects within the computer system, so that they can be used to influence the activities of automated managers within large distributed computer systems. We describe a possible structure for policy objects and the operations which can be performed on them. Their attributes include: modality (positive or negative motivation or authorisation); policy subjects, goals, and target objects; and the constraints which may apply. The method of representation of relationships between policies is left as an open issue.Related work and concepts in the modelling of policies are referred to, including a brief discussion of security models in this context. The open issues raised by this paper are described.

PoDMan: Policy Deviation Management

“…R R Moffett & Sloman (1991) state that amongst these, only forbidding and requiring modalities are usually in force. While both deterring and permitting policies recommend certain behaviors to the user, they do not enforce a user to abide by the rules i.e.…”

Authenticate System Objects Using Access Control Policy Based Management

“…This process is often referred to policy refinement that remains one of the most ambitious goals in policy-based system management [13]. It fills the gap between policy specification and enforcement.…”

On harnessing information models and ontologies for policy conflict analysis

“…The organisational model must be able to represent roles and hierarchies of entities to reect the nature of the organisation. In fact, policies are a natural method of representing an organisational model according to Moett and Sloman (1991). There are many examples of modern management architectures that share the concepts of information models.…”