谁在使用XACML？

Question

除了Sun XACML实现和XEngine之外，还有没有人写过XACML实现？

谁在他们的产品中使用它们？

哪些供应商提供PDP？我读到了一些关于WebLogic XACML的内容。还有哪些产品支持XACML？

Answer 1

我是IBM构建安全策略管理解决方案(包括用于授权策略的XACML )团队的成员；我曾经是XACML运行时组件本身的团队负责人。该产品名为Tivoli Security Policy Manager，目前正在积极开发中。

在被甲骨文收购之前，WebLogic曾由东亚银行开发。我不确定甲骨文是否还在销售它。

Axiomatics也有XACML解决方案，Jericho Systems也是如此。

Answer 2

这个问题已经在XACML列表上得到了回答：http://markmail.org/message/w7msffsbi6qzgfoj

XACML目前被广泛应用于各行各业。试着总结一下所说的话

目前有两种类型的实现：

1. 开源实现它们得到了商业组织、基金会或大学的支持。其中包括：

- (Sun-backed) SunXACML ([http://sunxacml.sourceforge.net/](http://sunxacml.sourceforge.net/)) - very much dead on its own but used in other products such as WS02's offering (see below)
- (R&D-backed) SICSACML ([http://www.sics.se/node/2465](http://www.sics.se/node/2465)) backed by SICS, the Swedish Institute for Computer Science, and now taken up by Axiomatics (www.axiomatics.com)
- (University-backed) Heras AF ([http://www.herasaf.org/heras-af-xacml.html](http://www.herasaf.org/heras-af-xacml.html)): Orange is using their product. Orange is one of the leading telecommunications providers in Europe.
- WS02 is a company that was born from the Apache Synapse project and expanded into different areas successfully including XACML by using the initial SunXACML implementation ([http://wso2.org/library/identity-server/user-management/xacml](http://wso2.org/library/identity-server/user-management/xacml)). I am not sure they have customers using XACML today.
- Enterprise XACML ([http://code.google.com/p/enterprise-java-xacml/](http://code.google.com/p/enterprise-java-xacml/)) but not updates in nearly a year
- Brad Cox also a neat approach to implementing XACML as described in his blog and paper at [http://bradjcox.blogspot.com/](http://bradjcox.blogspot.com/)

​

1. 商用产品

- Oracle OES provides a SunXACML-based XACML 2.0 implementation. It is hard to know whether OES customers are using XACML features.
- IBM Tivoli Security Policy Manager
- Axiomatics Policy Server took SICSACML and marketed it in 2006 - their product fully implements XACML 3.0. Their customers include "one of the world's largest bank", Paypal, Bell Helicopter, Swedish National Healthcare service, SOS Alarm, and DATEV eG as listed at www.axiomatics.com/customers.html

​

还有其他供应商提供XACML，比如Jericho Systems和Nextlabs。此外，Securent (后来被思科收购)也提供了XACML。

最后，我建议您访问XACML TC (http://www.oasis-open.org/committees/xacml/)，在那里您可以看到它的贡献成员。这些公司包括Oracle、Axiomatics、波音、退伍军人管理局和EMC，他们都是定期贡献者。

Answer 3

WSO2 Identity Server (http://wso2.org/)是一个基于sunxacml的开源授权引擎。包含一个很好的XACML策略编辑器，可以很容易地使用它来创建复杂的WSO2策略。有一个PIP层可以用来插入任何属性查找器模块。因此，您可以从任何数据库、LDAP用户存储、web服务等中找到您的属性。此外，还有决策缓存、策略缓存和PIP级属性缓存，以提高性能。你可以从这里参考实现的源代码1

1