# # # This files defines PIPs that will be used by XACML Guard Policies. One PIP per time window (5 min, 10min,...,1 month). # # # # # Default XACML Properties File # Standard API Factories # xacml.dataTypeFactory=com.att.research.xacml.std.StdDataTypeFactory xacml.pdpEngineFactory=com.att.research.xacmlatt.pdp.ATTPDPEngineFactory xacml.pepEngineFactory=com.att.research.xacml.std.pep.StdEngineFactory xacml.pipFinderFactory=com.att.research.xacml.std.pip.StdPIPFinderFactory xacml.traceEngineFactory=com.att.research.xacml.std.trace.LoggingTraceEngineFactory # # AT&T PDP Implementation Factories # xacml.att.evaluationContextFactory=com.att.research.xacmlatt.pdp.std.StdEvaluationContextFactory xacml.att.combiningAlgorithmFactory=com.att.research.xacmlatt.pdp.std.StdCombiningAlgorithmFactory xacml.att.functionDefinitionFactory=com.att.research.xacmlatt.pdp.std.StdFunctionDefinitionFactory xacml.att.policyFinderFactory=com.att.research.xacmlatt.pdp.std.StdPolicyFinderFactory # # NOTE: If you are testing against a RESTful PDP, then the PDP must be configured with the # policies and PIP configuration as defined below. Otherwise, this is the configuration that # the embedded PDP uses. # # In case we have multiple applicable Guard policies, we will deny if any of them denies. #xacml.att.policyFinderFactory.combineRootPolicies=urn:com:att:xacml:3.0:policy-combining-algorithm:combined-deny-overrides xacml.att.policyFinderFactory.combineRootPolicies=urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-unless-deny # Policies to load # xacml.rootPolicies=p1,p2,p3,p4 p1.file=src/test/resources/xacml/autogenerated_frequency_limiter_restart.xml p2.file=src/test/resources/xacml/autogenerated_frequency_limiter_rebuild.xml p3.file=src/test/resources/xacml/autogenerated_frequency_limiter_migrate.xml p4.file=src/test/resources/xacml/autogenerated_frequency_limiter_rebuild_1.xml #p5.file=src/test/resources/xacml/autogenerated_blacklist.xml #p6.file=src/test/resources/xacml/new_restart1.xml #p7.file=src/test/resources/xacml/new_restart2.xml #p8.file=src/test/resources/xacml/new_rebuild1.xml #p9.file=src/test/resources/xacml/new_rebuild2.xml #p10.file=src/test/resources/xacml/new_migrate1.xml #p11.file=src/test/resources/xacml/new_migrate2.xml # PIP Engine Definition # xacml.pip.engines=sql1,test1 test1.classname=com.att.ecomp.policy.guard.PIPEngineGetHistory test1.issuer=com:att:research:xacml:guard:historydb sql1.classname=com.att.research.xacml.std.pip.engines.jdbc.JDBCEngine sql1.name=OperationsHistory sql1.description=Database of operations performed via closed loop. sql1.issuer=com:att:research:xacml:test:sql123 sql1.type=jdbc sql1.jdbc.driver=org.mariadb.jdbc.Driver #sql1.jdbc.url=jdbc:mariadb://localhost:7779/policy sql1.jdbc.url=jdbc:mariadb://localhost:3306/policy sql1.jdbc.conn.user=root sql1.jdbc.conn.password=lmpg #Each of the following resolvers corresponds to a specific time window. The only difference between them is the "interval" in the "select" SQL query and the "issuer". sql1.resolvers=tw5min,tw10min,tw30min,tw1h,tw12h,tw1d,tw5d,tw1w,tw1mon ############################################## sql1.resolver.tw5min.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 5 minute) and now() sql1.resolver.tw5min.field.count.issuer=com:att:research:xacml:test:sql:tw5min sql1.resolver.tw5min.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw5min.name=OperationsCount sql1.resolver.tw5min.description=This returns the number of previous operations within the given time window sql1.resolver.tw5min.fields=count sql1.resolver.tw5min.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw5min.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw5min.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw5min.parameters=actor,operation,target sql1.resolver.tw5min.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw5min.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5min.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw5min.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw5min.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5min.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw5min.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw5min.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5min.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################################## sql1.resolver.tw10min.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 10 minute) and now() sql1.resolver.tw10min.field.count.issuer=com:att:research:xacml:test:sql:tw10min sql1.resolver.tw10min.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw10min.name=OperationsCount sql1.resolver.tw10min.description=This returns the number of previous operations within the given time window sql1.resolver.tw10min.fields=count sql1.resolver.tw10min.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw10min.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw10min.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw10min.parameters=actor,operation,target sql1.resolver.tw10min.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw10min.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw10min.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw10min.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw10min.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw10min.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw10min.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw10min.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw10min.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################################## sql1.resolver.tw30min.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 30 minute) and now() sql1.resolver.tw30min.field.count.issuer=com:att:research:xacml:test:sql:tw30min sql1.resolver.tw30min.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw30min.name=OperationsCount sql1.resolver.tw30min.description=This returns the number of previous operations within the given time window sql1.resolver.tw30min.fields=count sql1.resolver.tw30min.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw30min.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw30min.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw30min.parameters=actor,operation,target sql1.resolver.tw30min.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw30min.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw30min.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw30min.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw30min.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw30min.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw30min.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw30min.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw30min.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################################## sql1.resolver.tw1h.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 1 hour) and now() sql1.resolver.tw1h.field.count.issuer=com:att:research:xacml:test:sql:tw1h sql1.resolver.tw1h.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw1h.name=OperationsCount sql1.resolver.tw1h.description=This returns the number of previous operations within the given time window sql1.resolver.tw1h.fields=count sql1.resolver.tw1h.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw1h.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw1h.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw1h.parameters=actor,operation,target sql1.resolver.tw1h.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw1h.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1h.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw1h.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw1h.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1h.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw1h.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw1h.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1h.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################################## sql1.resolver.tw12h.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 12 hour) and now() sql1.resolver.tw12h.field.count.issuer=com:att:research:xacml:test:sql:tw12h sql1.resolver.tw12h.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw12h.name=OperationsCount sql1.resolver.tw12h.description=This returns the number of previous operations within the given time window sql1.resolver.tw12h.fields=count sql1.resolver.tw12h.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw12h.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw12h.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw12h.parameters=actor,operation,target sql1.resolver.tw12h.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw12h.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw12h.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw12h.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw12h.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw12h.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw12h.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw12h.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw12h.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################# sql1.resolver.tw1d.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 1 day) and now() sql1.resolver.tw1d.field.count.issuer=com:att:research:xacml:test:sql:tw1d sql1.resolver.tw1d.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw1d.name=OperationsCount sql1.resolver.tw1d.description=This returns the number of previous operations within the given time window sql1.resolver.tw1d.fields=count sql1.resolver.tw1d.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw1d.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw1d.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw1d.parameters=actor,operation,target sql1.resolver.tw1d.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw1d.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1d.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw1d.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw1d.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1d.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw1d.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw1d.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1d.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################# sql1.resolver.tw5d.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 5 day) and now() sql1.resolver.tw5d.field.count.issuer=com:att:research:xacml:test:sql:tw5d sql1.resolver.tw5d.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw5d.name=OperationsCount sql1.resolver.tw5d.description=This returns the number of previous operations within the given time window sql1.resolver.tw5d.fields=count sql1.resolver.tw5d.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw5d.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw5d.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw5d.parameters=actor,operation,target sql1.resolver.tw5d.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw5d.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5d.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw5d.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw5d.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5d.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw5d.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw5d.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw5d.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################# sql1.resolver.tw1w.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 1 week) and now() sql1.resolver.tw1w.field.count.issuer=com:att:research:xacml:test:sql:tw1w sql1.resolver.tw1w.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw1w.name=OperationsCount sql1.resolver.tw1w.description=This returns the number of previous operations within the given time window sql1.resolver.tw1w.fields=count sql1.resolver.tw1w.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw1w.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw1w.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw1w.parameters=actor,operation,target sql1.resolver.tw1w.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw1w.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1w.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw1w.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw1w.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1w.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw1w.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw1w.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1w.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource ############################# sql1.resolver.tw1mon.select=select count(*) as count from operationshistory10 where outcome<>'Failure_Guard' and actor=? and operation=? and target=? and endtime between date_sub(now(),interval 1 month) and now() sql1.resolver.tw1mon.field.count.issuer=com:att:research:xacml:test:sql:tw1mon sql1.resolver.tw1mon.classname=com.att.research.xacml.std.pip.engines.jdbc.ConfigurableJDBCResolver sql1.resolver.tw1mon.name=OperationsCount sql1.resolver.tw1mon.description=This returns the number of previous operations within the given time window sql1.resolver.tw1mon.fields=count sql1.resolver.tw1mon.field.count.id=com:att:research:xacml:test:sql:resource:operations:count sql1.resolver.tw1mon.field.count.datatype=http://www.w3.org/2001/XMLSchema#integer sql1.resolver.tw1mon.field.count.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource sql1.resolver.tw1mon.parameters=actor,operation,target sql1.resolver.tw1mon.parameter.actor.id=urn:oasis:names:tc:xacml:1.0:actor:actor-id sql1.resolver.tw1mon.parameter.actor.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1mon.parameter.actor.category=urn:oasis:names:tc:xacml:1.0:subject-category:access-subject sql1.resolver.tw1mon.parameter.operation.id=urn:oasis:names:tc:xacml:1.0:operation:operation-id sql1.resolver.tw1mon.parameter.operation.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1mon.parameter.operation.category=urn:oasis:names:tc:xacml:3.0:attribute-category:action sql1.resolver.tw1mon.parameter.target.id=urn:oasis:names:tc:xacml:1.0:target:target-id sql1.resolver.tw1mon.parameter.target.datatype=http://www.w3.org/2001/XMLSchema#string sql1.resolver.tw1mon.parameter.target.category=urn:oasis:names:tc:xacml:3.0:attribute-category:resource