Open Source XACML Implementation from Sun Microsystems

Sun Microsystems Laboratories Contributes XACML Security Standard Implementation to Open Source Project

Language for Access Control Policies Simplifies Web Services and Improves Enterprise Security

Santa Clara, California, USA. February 18, 2003.

Today, Sun Microsystems, Inc. announced the release of its implementation of the new XACML OASIS Open Standard for security under an open source license. XACML contributes to the simplification and cost reduction of developing and deploying secure web services -- or any application that requires secure access control. Today's news demonstrates Sun's leadership role in the development of open standards and underscores Sun's continuing investment in the security space.

"Sun's XACML implementation heralds a necessary improvement in web services security and interoperability," said Larry Abrahams, Director, Identity Server and Liberty, Sun Microsystems, Inc. "We expect it to be very useful in creating an open source community around the technology and an important part in the development of future Sun products."

Sun's XACML Implementation was developed by the Internet Security Research Group (ISRG) within Sun Microsystems Laboratories and could have far-reaching impact on enterprise security as well as developer productivity. As XACML replaces the current patchwork of proprietary access control policy languages, administrators will no longer need to learn these many languages and translate policies between them. Software developers won't have to invent their own languages and write custom code to support them as they do today. Both will save time and money.

"Sun's decision to release an Open Source implementation of XACML 1.0 is both important and timely, and will certainly encourage rapid adoption of this standard," said Carlisle Adams, principal architect, advanced security, at Entrust, Inc. "Governments and businesses will benefit from the availability of this code because they will immediately be able to incorporate fully-compliant XACML 1.0 implementations into the comprehensive authorization architectures they deploy. Entrust is very pleased to have played a major role in the development of this standard."

Sun's release of this code under an open source (modified BSD) license coincides with approval of the XACML standard by OASIS, the Organization for the Advancement of Structured Information Standards, and is aimed at jump-starting the adoption of this standard throughout the open source and commercial software development communities. To download this code, go to http://sunxacml.sourceforge.net.

"We're really pleased by the approval of the XACML standard by OASIS, and by Sun's open-source release of their XACML implementation," said RL "Bob" Morgan, chair of the Internet2 Middleware Initiative (http://middleware.internet2.edu/), which provides technology and guidelines to the 200+ Internet2 member organizations in making advanced Internet applications secure, manageable, and interoperable. "Access control is one of our major areas of activity, and XACML is likely to be a key technology. Sun's XACML implementation looks very complete and robust, and we're looking forward to using it in key projects. We depend on open standards and open implementations, and applaud Sun for their commitment to both."

More on XACML

XACML, eXtensible Access Control Markup Language is a specification for expressing policies in XML for information access over the Internet. The XACML specification was developed by OASIS, which announced today that XACML has been approved as an OASIS Open Standard, the highest level of ratification. This language is expected to simplify and streamline enterprise access control. For more information about OASIS, go to http://www.oasis-open.org.

About Sun Microsystems, Inc.

Since its inception in 1982, a singular vision -- "The Network Is The Computer(TM)" -- has propelled Sun Microsystems, Inc. to its position as a leading provider of industrial-strength hardware, software and services that make the Net work. Sun can be found in more than 100 countries and on the World Wide Web at http://sun.com.

Contact

Carrie Motamedi
Sun Microsystems, Inc.
Tel: +1-650-786-0171
Email: carrie.motamedi@sun.com

Prepared by Robin Cover for The XML Cover Pages archive. Details in "Sun Microsystems Releases Open Source XACML Implementation for Access Control and Security." See also: (1) the complete news story "XACML 1.0 Specification Set Approved as an OASIS Standard"; (2) the announcement of 2003-02-18, "XACML Access Control Markup Language Ratified as OASIS Open Standard. Universal Language for Authorization Policy Enables Secure Web Services."; (3) general references in "Extensible Access Control Markup Language (XACML)."

SEARCH Advanced Search ABOUT Site Map CP RSS Channel Contact Us Sponsoring CP About Our Sponsors NEWS Cover Stories Articles & Papers Press Releases CORE STANDARDS XML SGML Schemas XSL/XSLT/XPath XLink XML Query CSS SVG TECHNOLOGY REPORTS XML Applications General Apps Government Apps Academic Apps EVENTS LIBRARY Introductions FAQs Bibliography Technology and Society Semantics Tech Topics Software Related Standards Historic	Open Source XACML Implementation from Sun Microsystems Sun Microsystems Laboratories Contributes XACML Security Standard Implementation to Open Source Project Language for Access Control Policies Simplifies Web Services and Improves Enterprise Security Santa Clara, California, USA. February 18, 2003. Today, Sun Microsystems, Inc. announced the release of its implementation of the new XACML OASIS Open Standard for security under an open source license. XACML contributes to the simplification and cost reduction of developing and deploying secure web services -- or any application that requires secure access control. Today's news demonstrates Sun's leadership role in the development of open standards and underscores Sun's continuing investment in the security space. "Sun's XACML implementation heralds a necessary improvement in web services security and interoperability," said Larry Abrahams, Director, Identity Server and Liberty, Sun Microsystems, Inc. "We expect it to be very useful in creating an open source community around the technology and an important part in the development of future Sun products." Sun's XACML Implementation was developed by the Internet Security Research Group (ISRG) within Sun Microsystems Laboratories and could have far-reaching impact on enterprise security as well as developer productivity. As XACML replaces the current patchwork of proprietary access control policy languages, administrators will no longer need to learn these many languages and translate policies between them. Software developers won't have to invent their own languages and write custom code to support them as they do today. Both will save time and money. "Sun's decision to release an Open Source implementation of XACML 1.0 is both important and timely, and will certainly encourage rapid adoption of this standard," said Carlisle Adams, principal architect, advanced security, at Entrust, Inc. "Governments and businesses will benefit from the availability of this code because they will immediately be able to incorporate fully-compliant XACML 1.0 implementations into the comprehensive authorization architectures they deploy. Entrust is very pleased to have played a major role in the development of this standard." Sun's release of this code under an open source (modified BSD) license coincides with approval of the XACML standard by OASIS, the Organization for the Advancement of Structured Information Standards, and is aimed at jump-starting the adoption of this standard throughout the open source and commercial software development communities. To download this code, go to http://sunxacml.sourceforge.net. "We're really pleased by the approval of the XACML standard by OASIS, and by Sun's open-source release of their XACML implementation," said RL "Bob" Morgan, chair of the Internet2 Middleware Initiative (http://middleware.internet2.edu/), which provides technology and guidelines to the 200+ Internet2 member organizations in making advanced Internet applications secure, manageable, and interoperable. "Access control is one of our major areas of activity, and XACML is likely to be a key technology. Sun's XACML implementation looks very complete and robust, and we're looking forward to using it in key projects. We depend on open standards and open implementations, and applaud Sun for their commitment to both." More on XACML XACML, eXtensible Access Control Markup Language is a specification for expressing policies in XML for information access over the Internet. The XACML specification was developed by OASIS, which announced today that XACML has been approved as an OASIS Open Standard, the highest level of ratification. This language is expected to simplify and streamline enterprise access control. For more information about OASIS, go to http://www.oasis-open.org. About Sun Microsystems, Inc. Since its inception in 1982, a singular vision -- "The Network Is The Computer(TM)" -- has propelled Sun Microsystems, Inc. to its position as a leading provider of industrial-strength hardware, software and services that make the Net work. Sun can be found in more than 100 countries and on the World Wide Web at http://sun.com. Contact Carrie Motamedi Sun Microsystems, Inc. Tel: +1-650-786-0171 Email: carrie.motamedi@sun.com Prepared by Robin Cover for The XML Cover Pages archive. Details in "Sun Microsystems Releases Open Source XACML Implementation for Access Control and Security." See also: (1) the complete news story "XACML 1.0 Specification Set Approved as an OASIS Standard"; (2) the announcement of 2003-02-18, "XACML Access Control Markup Language Ratified as OASIS Open Standard. Universal Language for Authorization Policy Enables Secure Web Services."; (3) general references in "Extensible Access Control Markup Language (XACML)."