Holistic Enterprise-Ready Application Security Architecture Framework
Currently we are encountering some problems with our homepage. If you, unfortunately, should get a "page not found", please try with ctrl+f5. Sorry for all circumstances.
News
We are very proud to officially announce that Orange (TM) is using HERAS-AF.
Orange has developed a privacy management service (see below) based on XACML 2.0. Orange decided to use the HERAS-AF XACML Implementation as XACML evaluation engine.
Now that their service has been published we are happy to list them on our who-is-using page.
About the Orange privacy management service:
HERAS-AF is built into the core of a beta version of an Orange (http://www.orange.com) privacy management service, enabling Orange users to manage access permissions to their personal data and APIs services shared with third party services. More precisely, the "user privacy" service checks if a third party service is authorized to access to Orange users' personal data (like profile or geolocation)/applications (calendar, address book...). A web interface available to Orange users offers a central point to manage access control policies and access history of their personal data (http://privacy.orange.fr).
According to our release 1.0.0-M1 of our new HERASAF XACML solution we also launched our new homepage.
HERASAF released the first milestone of the HERASAF XACML Core component version 1.0.0-M1.
This is a new / improved implementation of the XACML Evaluation Engine.
The target of the new implementation is a much easier usage and less configuration overhead.
We changed the architecture (based on the feedback from our users) to have a much better modularization and extensability by having clear, component oriented, stable interfaces.
We also improved diagnostics with increased logging capabilities and better exception handling.
We reduced the footprint of our implementation by reducing dependencies and we removed Springframework completly from the new HERASAF XACML Core. So that the XACML Evaluation Engine can be used completely standalone.
Existing users don't need to worry. We will still support older versions. But we advice to try the newest release - it's worth it.