SECURITY-CONNECTED FRAMEWORK

摘要

In an example, a security-connected platform is provided on a data exchange layer (DXL), which provides messaging on a publish-subscribe model. The DXL provides a plurality of DXL endpoints connected via DXL brokers. In one case, DXL endpoints designated as producers are authorized to produce certain types of messages, including security-related messages such as object reputations. Other DXL endpoints are designated as consumers of those messages. A domain master may also be provided, and may be configured to provide physical and logical location services via an asset management engine.

主权项

1. A security controller apparatus for providing messaging services on a data exchange layer (DXL), comprising:
a network interface; a DXL services engine operable for providing an application programming interface (API) for connecting to a DXL enterprise service bus (ESB) via the network interface; and a domain security engine operable for:
subscribing to a DXL security topic;detecting a security event via the DXL ESB; andpublishing a DXL security message via the DXL ESB configured for acting on the security event.