Skip to content

Commit

Permalink
Add Anubis and Mintaka
Browse files Browse the repository at this point in the history
  • Loading branch information
jason-fox committed Aug 4, 2023
1 parent 2d96356 commit da06c5b
Show file tree
Hide file tree
Showing 5 changed files with 47 additions and 3 deletions.
6 changes: 6 additions & 0 deletions .gitmodules
Original file line number Diff line number Diff line change
Expand Up @@ -236,3 +236,9 @@
[submodule "security/trusted-issuers-registry"]
path = security/trusted-issuers-registry
url = https://github.com/FIWARE/trusted-issuers-registry
[submodule "security/anubis"]
path = security/anubis
url = https://github.com/orchestracities/anubis
[submodule "core/mintaka"]
path = core/mintaka
url = https://github.com/FIWARE/mintaka
4 changes: 4 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -162,6 +162,8 @@ Accompanying a Context Broker component as part of Core Context Management, a nu

The following is a list of Generic Enablers under incubation within the area of Core Data Connectors systems:

- [Mintaka](https://github.com/FIWARE/mintakas) is an add-on to the [Orion-LD Context Broker](https://github.com/FIWARE/context.Orion-LD) providing an
implementation of the NGSI-LD temporal retrieval API.
- The [Canis Major](https://github.com/fiware/CanisMajor) Generic Enabler is a blockchain adaptor that supports
various DLTs, the adaptor aims to submit the data to DLT using FIWARE Technologies
- The [NGSI.js Library](https://github.com/ficodes/ngsijs) provides a series of JavaScript functions allowing
Expand Down Expand Up @@ -323,6 +325,8 @@ The following is a list of Generic Enablers under incubation within the area of
[SCIM v1.1](https://developer.okta.com/docs/reference/scim/scim-11/) standard
- [Keystone SPASSWORD](https://github.com/telefonicaid/fiware-keystone-spassword) is an OpenStack Keystone extension
that enables extra security checks over user passwords
- [Anubis](https://github.com/orchestracities/anubis) is an RBAC Policy Execution Point that makes easier to reuse security
policies across different services
- [Trusted Issuers List Service](https://github.com/FIWARE/trusted-issuers-list) provides an EBSI Trusted Issuers Registry
implementation to act as the Trusted-List-Service in the DSBA Trust and IAM Framework.
- [DSBA PDP](https://github.com/FIWARE/dsba-pdp) is a Policy-Desicion Point, evaluating Json-Web-Tokens
Expand Down
1 change: 1 addition & 0 deletions core/mintaka
Submodule mintaka added at b74c31
38 changes: 35 additions & 3 deletions security/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -164,7 +164,7 @@ these federated networks, or data spaces.
![](https://img.shields.io/github/release-date/telefonicaid/fiware-pep-steelskin.svg)
![](https://img.shields.io/github/commits-since/telefonicaid/fiware-pep-steelskin/latest.svg)

| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-pep-steelskin) | :whale: [Docker Hub](https://hub.docker.com/r/telefonicaiot/fiware-pep-steelskin) | :books: [Documentation](https://github.com/telefonicaid/fiware-pep-steelskin#README.md) |
| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-pep-steelskin) | <img style="height:1em" src="https://quay.io/static/img/quay_favicon.png"/> [quay.io](https://quay.io/repository/fiware/pep-steelskin) | :books: [Documentation](https://github.com/telefonicaid/fiware-pep-steelskin#README.md) |
| -------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- |


Expand Down Expand Up @@ -197,7 +197,7 @@ secured resource itself.
![](https://img.shields.io/github/release-date/telefonicaid/fiware-keypass.svg)
![](https://img.shields.io/github/commits-since/telefonicaid/fiware-keypass/latest.svg)

| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-keypass) | :whale: [Docker Hub](https://hub.docker.com/r/telefonicaiot/fiware-keypass) | :books: [Documentation](telefonicaid/fiware-keypass#readme.md) |
| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-keypass) | <img style="height:1em" src="https://quay.io/static/img/quay_favicon.png"/> [quay.io](https://quay.io/repository/fiware/keypass) | :books: [Documentation](telefonicaid/fiware-keypass#readme.md) |
| -------------------------------------------------------------------------- | --------------------------------------------------------------------------- | -------------------------------------------------------------- |


Expand Down Expand Up @@ -247,7 +247,7 @@ running Keystone installation and enhance the functionality of it.
![](https://img.shields.io/github/last-commit/telefonicaid/fiware-keystone-spassword)
![](https://img.shields.io/github/tag/telefonicaid/fiware-keystone-spassword.svg)

| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-keystone-spassword) | :whale: [Docker Hub](https://hub.docker.com/r/telefonicaiot/fiware-keystone-spassword) | :books: [Documentation](https://github.com/telefonicaid/fiware-keystone-spassword/README.md) |
| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-keystone-spassword) | <img style="height:1em" src="https://quay.io/static/img/quay_favicon.png"/> [quay.io](https://quay.io/repository/fiware/keystone-spassword) | :books: [Documentation](https://github.com/telefonicaid/fiware-keystone-spassword/README.md) |
| ------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- |


Expand All @@ -262,6 +262,38 @@ account became temporarily blocked, a recover procedure password, a second facto
Additional security checks and features improve the security and usability of a system, SPASSWORD helps to reduce
development time by avoiding the need to implement and test bespoke secure system functions.

<a name="anubis"/>

## :seedling: Anubis (Incubated)

[![](https://nexus.lab.fiware.org/repository/raw/public/badges/chapters/security.svg)](./README.md)
![License](https://img.shields.io/github/license/telefonicaid/fiware-keypass.svg)
![](https://img.shields.io/github/release-date/telefonicaid/fiware-keypass.svg)
![](https://img.shields.io/github/commits-since/telefonicaid/fiware-keypass/latest.svg)

| :octocat: [Git Repository](https://github.com/telefonicaid/fiware-keypass) | <img style="height:1em" src="https://quay.io/static/img/quay_favicon.png"/> [quay.io](https://quay.io/repository/fiware/anubis)| :books: [Documentation](telefonicaid/fiware-keypass#readme.md) |
| -------------------------------------------------------------------------- | --------------------------------------------------------------------------- | -------------------------------------------------------------- |


### What is Anubis?

Anubis is a flexible Policy Enforcement solution that makes easier to reuse security policies across different services, assuming the policies entail the same resource. In short we are dealing with policy portability.

### Why use Anubis?

Data portability often focuses on the mechanisms to exchange data and the formalisation of data representation: the emphasis is rarely put on the portability of security & privacy data policies. Enabling security and privacy data policy portability is clearly a step forward in enabling data sovereignty across different services.

This project aims at enabling data sovereignty by introducing data privacy and security policy portability and prototyping distributed data privacy and security policy management, thus contributing to increase trust toward data sharing APIs and platforms.

Approaches as the one proposed, increasing control by owners over their data and portability of data assets, are key to boost the establishment of trusted data spaces.

The project is looking into

- Open standardized security & privacy data policies vocabulary.
Linking an existing user profiling vocabulary to the security & privacy data policies vocabulary as a way to increase portability of policies and their compatibility to existing standards.
- A middleware supporting decentralised control and audit of security & privacy data policies by data owners (in the context of RESTful APIs).
- Translation from the security & privacy data policies vocabulary to other policy languages or APIs that are actually used for PEP.

<a name="trusted-issuers-list-service"/>

## :seedling: Trusted Issuers List Service (Incubated)
Expand Down
1 change: 1 addition & 0 deletions security/anubis
Submodule anubis added at a0c0a5

0 comments on commit da06c5b

Please sign in to comment.