An Analysis Method for the Improvement of Reliability and Performance in Policy-Based Management Systems

  • Naoto Maeda
  • Toshio Tonouchi
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 3278)


Policy-based management shows good promise for application to semi-automated distributed systems management. It is extremely difficult, however, to create policies for controlling the behavior of managed distributed systems that are sufficiently accurate to ensure good reliability. Further, when policy-based management technology is to be applied to actual systems, performance, in addition to reliability, also becomes an important consideration. In this paper, we propose a static analysis method for improving both the reliability and the performance of policy-based management systems. With this method, all sets of policies whose actions might possibly access the same target entity simultaneously are detected. Such sets of policies could cause unexpected trouble in managed systems if their policies were to be executed concurrently. Additionally the results of the static analysis can be used in the optimization of policy processing, and we have developed an experimental system for such optimization. The results of experimental use of this system show that an optimized system is as much as 1.47 times faster than a non-optimized system.


Policy Processing Policy Enforcer Policy Decision Point Concurrent Execution Policy Enforcement Point 
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.


  1. 1.
    Arnold, K., Gosling, J.: The Java Programming Language, 2nd edn. Addison-Wesley, Reading (1998)zbMATHGoogle Scholar
  2. 2.
    Chomicki, J., Lobo, J., Naqvi, S.: Conflict resolusion using logic programming. IEEE Trans. on Knowledge and Data Engineering 15, 245–250 (2003)CrossRefGoogle Scholar
  3. 3.
    Damianou, N.: A Policy Framework for Management of Distributed Systems, PhD Thesis, Imperial College, London (February 2002)Google Scholar
  4. 4.
    Damianou, N., Dulay, N., Lupu, E., Sloman, M.: The Ponder Policy Specification Language. In: Sloman, M., Lobo, J., Lupu, E.C. (eds.) POLICY 2001. LNCS, vol. 1995, p. 18. Springer, Heidelberg (2001)CrossRefGoogle Scholar
  5. 5.
    DMTF: Common Information Model Spec.v2.2 (June 1999)Google Scholar
  6. 6.
    Dunlop, N., Indulska, J., Raymond, K.: Methods for Conflict Resolution in Policy-Based Management Systems. In: Proc. of EDOC 2003 (September 2003)Google Scholar
  7. 7.
    Hassen, B.S., Athanasiu, I., Bal, H.E.: A Flexible Operation Execution Model for Shared Distributed Objects. In: Proc. of OOPSLA 1996, pp. 30–50 (1996)Google Scholar
  8. 8.
    Fu, Z., Wu, S.F., Huang, H., Loh, K., Gong, F.: IPSec/VPN Security Policy: Correctness, Conflict Detection and Resolution. In: Sloman, M., Lobo, J., Lupu, E.C. (eds.) POLICY 2001. LNCS, vol. 1995, p. 39. Springer, Heidelberg (2001)CrossRefGoogle Scholar
  9. 9.
    Lupu, E., Sloman, M.: Conflicts in Policy-Based Distributed System Management. IEEE Trans. on SE 25(6) (November 1999)Google Scholar
  10. 10.
    Lymberopoulos, L., Lupu, E., Sloman, M.: Using CIM to Realize PolicyValidation within the Ponder Framework. In: DMTF 2003 Global Management Conference (June 2003)Google Scholar
  11. 11.
    Moffett, J., Sloman, M.: Policy Conflict Analysis in Distributed System Management. Journal of Organizational Computing 4(1) (1994)Google Scholar
  12. 12.
    Moore, B., Ellesson, E., Strassner, J., Westerinen, A.: Policy Core Information Model - Version 1 Specification, IETF, RFC 3060 (February 2001)Google Scholar
  13. 13.
    Sun Microsystems Inc.: Java Management Extensions Instrumentation and Agent Spec.v1.2 (October 2002)Google Scholar
  14. 14.
    Sun Microsystems Inc.: Java2 Platform, Enterprise Edition Specification, v1.4 Final Release (November 2003)Google Scholar
  15. 15.
    Sun Microsystems Inc.: Java2 Platform, Enterprise Edition Management Specification, Final Release v1.0 (June 2002)Google Scholar

Copyright information

© IFIP International Federation for Information Processing 2004

Authors and Affiliations

  • Naoto Maeda
    • 1
  • Toshio Tonouchi
    • 1
  1. 1.NEC CorporationKawasakiJapan

Personalised recommendations