Article

A framework for enforcing application policies in database systems

Authors:

Basuki Soetarman,

William KyuAuthors Info & Claims

SIGMOD '07: Proceedings of the 2007 ACM SIGMOD international conference on Management of data

Pages 981 - 992

https://doi.org/10.1145/1247480.1247597

Published: 11 June 2007 Publication History

Abstract

As database systems have grown in terms of scale and complexity, administration tasks have become increasingly difficult and time consuming. A scarcity of skilled database professionals has meant that human costs have begun to dominate the total cost of ownership (TCO) of a database system. Database vendors are under immense pressure to provide solutions that make their products easy to administer in areas such as problem diagnostics, monitoring, query tuning, access control and system configuration.

To address this issue, we have built a framework that allows control over many administration operations via the use of policies. Users can uniformly define, manage and enforce policies to affect disparate aspects of the system.

In our framework, policies are declarative constructs that are comprised of type, scope, condition and action. Policy groups cover query monitoring and tuning, query prioritization, system configuration, access control, report generation, etc. Policy scope defines the domain over which policies apply. Policy actions are performed if certain conditions are true. This framework has been fully integrated into DB2 for z/OS V9. Using detailed system performance evaluations, we report that enforcement of policies is largely a function of data-collection granularity. Under the setting for normal monitoring with minimal report, the overhead on system performance is very low (0.1%).

References

[1]

K. Appleby, S. B. Calo, J. Giles, and K. W. Lee. Policy-based automated provisioning. IBM Systems Journal, 43(1):121--135, 2004.

Digital Library

[2]

N. Badr, A. Taleb-Bendiab, and D. Reilly. Policy-based autonomic control service. In POLICY'04: IEEE 5th International Workshop on Policies for Distributed Systems and Networks, New York, USA, 7th-9th June, 2004.

[3]

M. Beigi, S. B. Calo, and D. C. Verma. Policy Transformation Techniques in Policy-based Systems Management. In POLICY'04: Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks, pages 13--22, 2004.

[4]

H. Boughton, P. Martin, W. Powley, and R. Horman. Workload Class Importance Policy in Autonomic Database Management Systems. In POLICY '06: Proceedings of the Seventh IEEE International Workshop on Policies for Distributed Systems and Networks, pages 13--22, Washington, DC, USA, 2006.

Digital Library

[5]

B. Dageville, D. Das, K. Dias, K. Yagoub, M. Zaït, and M. Ziauddin. Automatic SQL Tuning in Oracle 10g. In VLDB'04: Proceedings of the 32nd International Conference on Very Large Data Bases, pages 1098--1109, 2004.

[6]

DB2 UDB for z/OS V8 Application Programming and SQL Guide, Feb 2006.

[7]

IBM Corp., IBM System z9 Integrated Information Processor (IBM zIIP), http://www-03.ibm.com/systems/z/ziip.

[8]

Microsoft Corp., Microsoft SQL Server 7.0 Performance Tuning Guide, MSDN Library.

[9]

Microsoft Corp., SQL Server Profiler, MSDN Library, http://msdn2.microsoft.com/en--us/library/ms173757.aspx.

[10]

Oracle Corp., The Self-Managing Database: Guided Application & SQL Tuning with Oracle Database 10g Release 2, An Oracle White Paper, June 2006.

[11]

IBM Corp. DB2 Query Monitor for z/OS: User's Guide, Dec 2005.

[12]

IBM Corp. DB2 Query Patroller Guide: Installation, Administration, and Usage, Dec 2005.

[13]

Bruni, P., et al. DB2 for z/OS and OS/390: Tools for Performance Management. IBM RedBook, Nov 2001.

[14]

S. Jajodia, P. Samarati, M. L. Sapino, and V. S. Subrahmanian. Flexible support for multiple access control policies. ACM Trans. Database Syst., 26(2):214--260, 2001.

Digital Library

[15]

M. Lakhdissi, H. Harroud, A. Karmouch, and C. Grossner. A policy management system for mobile agent-based services. In MATA'01: Proceedings of Management of Multimedia on the Internet: 4th IFIP/IEEE International Conference on Management of Multimedia Networks and Services, pages 114--123, 2001.

Digital Library

[16]

S. Lamparter, A. Ankolekar, R. Studer, D. Oberle, and C. Weinhardt. A policy framework for trading configurable goods and services in open electronic markets. In ICEC '06: Proceedings of the 8th international conference on Electronic commerce, pages 162--173, 2006.

Digital Library

[17]

V. Markl, G. M. Lohman, and V. Raman. LEO: An autonomic query optimizer for DB2. IBM Syst. J., 42(1):98--106, 2003.

Digital Library

[18]

N. H. Minsky and V. Ungureanu. A mechanism for establishing policies for electronic commerce. In International Conference on Distributed Computing Systems, pages 322--331, 1998.

Digital Library

[19]

M. Sloman. Policy driven management for distributed systems. Journal of Network and Systems Management, 2:333--360, 1994.

Cited By

Tahir HBrezillon P(2011)Procedure contextualization based on collaborative database administrationProceedings of the 2011 15th International Conference on Computer Supported Cooperative Work in Design (CSCWD)10.1109/CSCWD.2011.5960052(34-41)Online publication date: Jun-2011
https://doi.org/10.1109/CSCWD.2011.5960052
Ziauddin MDas DSu HZhu YYagoub K(2008)Optimizer plan change managementProceedings of the VLDB Endowment10.14778/1454159.14541751:2(1346-1355)Online publication date: 1-Aug-2008
https://dl.acm.org/doi/10.14778/1454159.1454175

Index Terms

A framework for enforcing application policies in database systems
1. Information systems
  1. Data management systems

Recommendations

Policies and conflicts in call control

Policy-based management is introduced and related to the specific needs of call control. It is explained how policies differ in important ways from features. Related work on policy-based management is reviewed, leading to the conclusion that a different ...
Enforcing "sticky" security policies throughout a distributed application
MidSec '08: Proceedings of the 2008 workshop on Middleware security

Existing policy enforcement points (PEPs) typically call a local policy decision point (PDP) running at the local site, either embedded in the application, or running as a local stand alone service. In distributed applications, the PDPs at each site do ...
Enforcing Privacy Policies with Meta-Code
APSys '15: Proceedings of the 6th Asia-Pacific Workshop on Systems

This paper proposes a mechanism for expressing and enforcing security policies for shared data. Security policies are expressed as stateful meta-code operations; meta-code can express a broad class of policies, including access-based policies, use-based ...

Comments

Information & Contributors

Information

Published In

cover image ACM Conferences

SIGMOD '07: Proceedings of the 2007 ACM SIGMOD international conference on Management of data

June 2007

1210 pages

ISBN:9781595936868

DOI:10.1145/1247480

General Chairs:
Lizhu Zhou
Tsinghua University, China
,
Tok Wang Ling
National University of Singapore, Singapore
,
Program Chair:
Beng Chin Ooi
National University of Singapore, Singapore

Copyright © 2007 ACM.

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

Sponsors

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 11 June 2007

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Article

Conference

SIGMOD/PODS07

Sponsor:

SIGMOD/PODS07: International Conference on Management of Data

June 11 - 14, 2007

Beijing, China

Acceptance Rates

Overall Acceptance Rate 785 of 4,003 submissions, 20%

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

2
Total Citations
View Citations
25
Total Downloads

Downloads (Last 12 months)3
Downloads (Last 6 weeks)0

Reflects downloads up to 27 Feb 2025

Other Metrics

View Author Metrics

Citations

Cited By

Tahir HBrezillon P(2011)Procedure contextualization based on collaborative database administrationProceedings of the 2011 15th International Conference on Computer Supported Cooperative Work in Design (CSCWD)10.1109/CSCWD.2011.5960052(34-41)Online publication date: Jun-2011
https://doi.org/10.1109/CSCWD.2011.5960052
Ziauddin MDas DSu HZhu YYagoub K(2008)Optimizer plan change managementProceedings of the VLDB Endowment10.14778/1454159.14541751:2(1346-1355)Online publication date: 1-Aug-2008
https://dl.acm.org/doi/10.14778/1454159.1454175

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

eReader

View online with eReader.

Figures

Tables

Media

View Table of Conten