Rhm2ktmi's List: Cloud - Lighthouse

• IF-MAP, the interface for a Metadata Access Point, is a standard client/server protocol for accessing a Metadata Access Point (MAP).
• it acts as a central clearinghouse for information that infrastructure devices can act on
• publish/subscribe/search
• MAP clients can publish metadata and/or consume metadata published by other clients.
• The primary new feature of IF-MAP 2.1 is the introduction of extended identifiers, which add extensibility to the IF-MAP identifier space to correspond to existing extensibility of the IF-MAP metadata space

3 more annotations...

• What make this all possible is an emerging standard called IF-MAP (Interface for Metadata Access Protocol). Scott discussed IF-MAP in some detail in a blog article last spring but what is important to know is that IF-MAP acts like a clearing house for real-time event data from any device that cares to publish to it.
• The number of IF-MAP compatible devices at the NSA conference was exciting. In a booth across the aisle, an open source Snort intrusion detection system (IDS) was monitoring for network scans and password cracking attempts and reporting that to the MAP server.

• A Standards-based Solution for Aggregating and Distributing Metadata
• The Infoblox Orchestration Server is a dedicated appliance that automatically aggregates, correlates and distributes data to and from different IP connected systems in real time

• IF-MAP standardizes the way devices and applications share information with one another in real-time. IF-MAP defines a protocol and associated database used by applications and systems to

   
   
  • publish information
   
  • subscribe to changes in information of interest
   
  • search for relevant data within a company and between and among different organizations
• • Are there any implementations of IF-MAP servers that are NOT hw appliances?  Why?
• Dedicated hardware appliance
• MAP Federation
• Share data across Infoblox MAP servers selectively; Real-time updates on MAP servers
• Built on the hardened Infoblox NIOS™ operating system

6 more annotations...

• The IF-MAP open standard makes it possible for any authorized device or system to publish information to an IF-MAP server, to search that server for relevant information, and to subscribe to any updates to that information.

• F-MAP provides a common interface between the Metadata Access Point (MAP), a database server acting as a clearinghouse for information about security events and objects, and other elements of the TNC architecture.[1]
• publish/subscribe/search
• Originally, the IF-MAP specification was developed to support data sharing across various vendor’s devices and applications for network security.[2] The standard has also been adopted for additional use cases of data-sharing including physical security.[3]
• Version 2.0 of the IF-MAP spec was published on September 13, 2010
• The goal in separating the base protocol from the metadata definitions within the standard was to allow the standard to be adopted across other technologies, such cloud computing,[4] Industrial Control Systems,[5] smart grid, to leverage their existing data models within the MAP framework.[6]

3 more annotations...