Subject: [sacm] Fwd: New Version Notification for draft-ietf-sacm-terminology-05.txt

From: "Adam W. Montville" <[email-masked]>
Date: Fri, 15 Aug 2014 09:45:13 -0500

I've submitted an update to our terminology draft today, which reflects the following additions.  If these additions have been made in the wrong place, or if you have better definitions, please speak up.

Broker: An entity providing and/or connecting services on the behalf of other architectural components.  Within the SACM Architecture, for example, a broker may provide authorization services and find, upon request, entities providing requested services.

Capability: The extent of an architectural component's ability.  For example, a Posture Information Provider may only provide endpoint management data, and then only a subset of that data.

Client: An architectural component receiving services from another architectural component.

Consumer: An architectural component receiving information from another architectrual component.

Function: A behavioral aspect of a particular architectural component, which belies that component's purpose.  For example, the Management Plane can provide a brokering function to other SACM architectrual components.

Management Plane (TBD per list; was "Control Plane"): Architectural component providing common functions to all SACM participants, including authentication, authorization, capabilities mappings, and the like.

Provider: An architectural component providing information to another architectrual component.

Proxy: An architectural component providing functions, information, or services on behalf of another component, which is not directly participating in the architecture.

Repository: An architectural component intended to store information of a particular kind.  A single repository may provide the functions of more than one repository type (i.e. configuration baseline repository, assessment results repository, etc.)

Role: A label representing a collection of functions provided by a particular architectural component.

Supplicant: The entity seeking to be authenticated by the Management Plane for the purpose of participating in the SACM architecture.

Regards,

Adam

Begin forwarded message:

> From: [email-masked]
> Subject: New Version Notification for draft-ietf-sacm-terminology-05.txt
> Date: August 15, 2014 at 9:00:01 AM CDT
> To: David Waltermire <[email-masked]>, David Harrington <[email-masked]>, Adam W. Montville <[email-masked]>, "David Harrington" <[email-masked]>, "David Waltermire" <[email-masked]>, "Adam W. Montville" <[email-masked]>, "Nancy Cam-Winget" <[email-masked]>, Nancy Cam-Winget <[email-masked]>
> 
> 
> A new version of I-D, draft-ietf-sacm-terminology-05.txt
> has been successfully submitted by Adam W. Montville and posted to the
> IETF repository.
> 
> Name:		draft-ietf-sacm-terminology
> Revision:	05
> Title:		Terminology for Security Assessment
> Document date:	2014-08-15
> Group:		sacm
> Pages:		9
> URL:            http://www.ietf.org/internet-drafts/draft-ietf-sacm-terminology-05.txt
> Status:         https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/
> Htmlized:       http://tools.ietf.org/html/draft-ietf-sacm-terminology-05
> Diff:           http://www.ietf.org/rfcdiff?url2=draft-ietf-sacm-terminology-05
> 
> Abstract:
>   This memo documents terminology used in the documents produced by
>   SACM (Security Automation and Continuous Monitoring).
> 
> 
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
>