The document presents GeoShield, an open source solution for managing authentication and authorization for OGC services including WMS, WFS, and SOS. It describes GeoShield's protection strategies, web interface, and a new GeoServer plugin that allows configuring access rules for different users and groups. The plugin is demonstrated as a way to centrally control and secure access to various spatial data and sensor observation services.
Marine Knowledge Meeting, 11-12 Oct 2012, Brussels: All About iMarine iMarine283644
iMarine is empowering users in the marine community and beyond by providing a highly efficient e-Infrastructure to accelerate data discovery, exchange, and analysis, tools and platforms that facilitates scientific discovery. Funded by the European Commission's 7th Framework Programme, a number of iMarine services are already available through the iMarine Gateway supplying cross disciplinary data supporting experts in the field.
Geospatial Temporal Open Standards for Big Data from Space (BiDS2014)George Percivall
Presentation to ESA Big Data From Space (BiDS2014), November 2014.
Big data from space requires processing large amounts of data in a distributed environment. For efficient, quality and cost-effective deployment, these environments must be based on open standards. The Open Geospatial Consortium (OGC) open standards for geospatial-temporal information have been tuned through implementations to meet the needs of big data.
GeoServer is the start of a great open source success story. This talk introduces the core GeoServer application and explores the ecosystem that has developed around this beloved OSGeo application.
This talks draws on the GeoServer ecosystem for use-cases and examples of how the application has been used successfully by a wide range of organizations.
Andrea Amie from GeoSolutions is on hand to share success stories highlighting GeoServer use in managing vulnerable ecosystems, agriculture information management, and marine data management.
Jody Garnett will look at how GeoServer enables Boundless products including Boundless Server and Boundless Server Enterprise.
We will look at GeoServer use at OSGeo with both GeoNetwork and GeoNode making use of the technology.
LocationTech is not ignored with the “big data” players in the form of GeoMesa and GeoWave bridging to cloud data sources of epic proportion
We use each use-case to highlights a capability of GeoServer providing an overview of the application drawn from practical examples.
Attend this talk for inspiration on what is possible with GeoServer and open source.
Marine Knowledge Meeting, 11-12 Oct 2012, Brussels: All About iMarine iMarine283644
iMarine is empowering users in the marine community and beyond by providing a highly efficient e-Infrastructure to accelerate data discovery, exchange, and analysis, tools and platforms that facilitates scientific discovery. Funded by the European Commission's 7th Framework Programme, a number of iMarine services are already available through the iMarine Gateway supplying cross disciplinary data supporting experts in the field.
Geospatial Temporal Open Standards for Big Data from Space (BiDS2014)George Percivall
Presentation to ESA Big Data From Space (BiDS2014), November 2014.
Big data from space requires processing large amounts of data in a distributed environment. For efficient, quality and cost-effective deployment, these environments must be based on open standards. The Open Geospatial Consortium (OGC) open standards for geospatial-temporal information have been tuned through implementations to meet the needs of big data.
GeoServer is the start of a great open source success story. This talk introduces the core GeoServer application and explores the ecosystem that has developed around this beloved OSGeo application.
This talks draws on the GeoServer ecosystem for use-cases and examples of how the application has been used successfully by a wide range of organizations.
Andrea Amie from GeoSolutions is on hand to share success stories highlighting GeoServer use in managing vulnerable ecosystems, agriculture information management, and marine data management.
Jody Garnett will look at how GeoServer enables Boundless products including Boundless Server and Boundless Server Enterprise.
We will look at GeoServer use at OSGeo with both GeoNetwork and GeoNode making use of the technology.
LocationTech is not ignored with the “big data” players in the form of GeoMesa and GeoWave bridging to cloud data sources of epic proportion
We use each use-case to highlights a capability of GeoServer providing an overview of the application drawn from practical examples.
Attend this talk for inspiration on what is possible with GeoServer and open source.
OGC Update for State of Geospatial Tech at T-RexGeorge Percivall
An update on OGC activities in three time horizons: Now, Next and After Next. Finishing with how to keep updated on OGC activities.
Now
Recently approved OGC standards
Implementation of approved standards
Next
Standards Program
Innovation Program
After Next
Tech Forecast
How to keep in touch
Introducing the Geomajas Open Source framework for building spatial web appli...MapWindow GIS
Geomajas is a highly secure and very performant framework for building spatial applications which are accessed through the web browser. It does not require browser plugins, making it very suitable for large enterprises and government.
The framework has a tight integration between the application back-end and front-end allow high performance and strong security. It can integrate with many data sources.
Development is in one language (Java). This makes it easier to build your team as one technology is sufficient and gives you a large pool of potential developers (Java).
The framework is modular. There are more than 20 plug-ins offering various enhancements to the core. There are also some additional libraries which can easily be reused in other environments.
The presentation will introduce all aspects of the framework.
"Future Internet enablers for VGI applications" presentation from ENVIROINFO 2013, Sept. 02-04 2013
Shows the ENVIROFI results relevant to crowdsourcing and crowdtasking.
The Navy’s GeoReadiness Repository builds on a Web services, using ArcObjects 9 and open
standards, and provides the Navy with the following:
• Authoritative source of geospatial data for Navy Real Property in support of Critical
Infrastructure and Force Protection, Shore Installation Management, and
Environmental Protection
• Baseline architecture for a network of Regional Repositories
• Portal that integrates functional applications and databases
• Security controls limiting access to specific data layers
• Quality control by automating the SDSFIE Standards and IVT Quality Assurance
Plan compliance check function, and
• Access between authoritative geospatial databases
Intergraph’s Server Offering_Richard Goodman - Intergraph Geospatial World To...IMGS
Intergraph organise and prepare a geospatial enterprise foundation that will support much more efficient, effective and wide-reaching exploitation of enterprise geospatial resources (data, processes and workflow).
These slides were presented at the first osgeo.wageningen event by several participants in a 5 minute pitch on current work using opensource geospatial software
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
More Related Content
Similar to GeoShield Project @ Swiss Geoscience Meeting 2011
OGC Update for State of Geospatial Tech at T-RexGeorge Percivall
An update on OGC activities in three time horizons: Now, Next and After Next. Finishing with how to keep updated on OGC activities.
Now
Recently approved OGC standards
Implementation of approved standards
Next
Standards Program
Innovation Program
After Next
Tech Forecast
How to keep in touch
Introducing the Geomajas Open Source framework for building spatial web appli...MapWindow GIS
Geomajas is a highly secure and very performant framework for building spatial applications which are accessed through the web browser. It does not require browser plugins, making it very suitable for large enterprises and government.
The framework has a tight integration between the application back-end and front-end allow high performance and strong security. It can integrate with many data sources.
Development is in one language (Java). This makes it easier to build your team as one technology is sufficient and gives you a large pool of potential developers (Java).
The framework is modular. There are more than 20 plug-ins offering various enhancements to the core. There are also some additional libraries which can easily be reused in other environments.
The presentation will introduce all aspects of the framework.
"Future Internet enablers for VGI applications" presentation from ENVIROINFO 2013, Sept. 02-04 2013
Shows the ENVIROFI results relevant to crowdsourcing and crowdtasking.
The Navy’s GeoReadiness Repository builds on a Web services, using ArcObjects 9 and open
standards, and provides the Navy with the following:
• Authoritative source of geospatial data for Navy Real Property in support of Critical
Infrastructure and Force Protection, Shore Installation Management, and
Environmental Protection
• Baseline architecture for a network of Regional Repositories
• Portal that integrates functional applications and databases
• Security controls limiting access to specific data layers
• Quality control by automating the SDSFIE Standards and IVT Quality Assurance
Plan compliance check function, and
• Access between authoritative geospatial databases
Intergraph’s Server Offering_Richard Goodman - Intergraph Geospatial World To...IMGS
Intergraph organise and prepare a geospatial enterprise foundation that will support much more efficient, effective and wide-reaching exploitation of enterprise geospatial resources (data, processes and workflow).
These slides were presented at the first osgeo.wageningen event by several participants in a 5 minute pitch on current work using opensource geospatial software
Similar to GeoShield Project @ Swiss Geoscience Meeting 2011 (20)
Dev Dives: Train smarter, not harder – active learning and UiPath LLMs for do...UiPathCommunity
💥 Speed, accuracy, and scaling – discover the superpowers of GenAI in action with UiPath Document Understanding and Communications Mining™:
See how to accelerate model training and optimize model performance with active learning
Learn about the latest enhancements to out-of-the-box document processing – with little to no training required
Get an exclusive demo of the new family of UiPath LLMs – GenAI models specialized for processing different types of documents and messages
This is a hands-on session specifically designed for automation developers and AI enthusiasts seeking to enhance their knowledge in leveraging the latest intelligent document processing capabilities offered by UiPath.
Speakers:
👨🏫 Andras Palfi, Senior Product Manager, UiPath
👩🏫 Lenka Dulovicova, Product Program Manager, UiPath
Kubernetes & AI - Beauty and the Beast !?! @KCD Istanbul 2024Tobias Schneck
As AI technology is pushing into IT I was wondering myself, as an “infrastructure container kubernetes guy”, how get this fancy AI technology get managed from an infrastructure operational view? Is it possible to apply our lovely cloud native principals as well? What benefit’s both technologies could bring to each other?
Let me take this questions and provide you a short journey through existing deployment models and use cases for AI software. On practical examples, we discuss what cloud/on-premise strategy we may need for applying it to our own infrastructure to get it to work from an enterprise perspective. I want to give an overview about infrastructure requirements and technologies, what could be beneficial or limiting your AI use cases in an enterprise environment. An interactive Demo will give you some insides, what approaches I got already working for real.
GraphRAG is All You need? LLM & Knowledge GraphGuy Korland
Guy Korland, CEO and Co-founder of FalkorDB, will review two articles on the integration of language models with knowledge graphs.
1. Unifying Large Language Models and Knowledge Graphs: A Roadmap.
https://arxiv.org/abs/2306.08302
2. Microsoft Research's GraphRAG paper and a review paper on various uses of knowledge graphs:
https://www.microsoft.com/en-us/research/blog/graphrag-unlocking-llm-discovery-on-narrative-private-data/
Smart TV Buyer Insights Survey 2024 by 91mobiles.pdf91mobiles
91mobiles recently conducted a Smart TV Buyer Insights Survey in which we asked over 3,000 respondents about the TV they own, aspects they look at on a new TV, and their TV buying preferences.
State of ICS and IoT Cyber Threat Landscape Report 2024 previewPrayukth K V
The IoT and OT threat landscape report has been prepared by the Threat Research Team at Sectrio using data from Sectrio, cyber threat intelligence farming facilities spread across over 85 cities around the world. In addition, Sectrio also runs AI-based advanced threat and payload engagement facilities that serve as sinks to attract and engage sophisticated threat actors, and newer malware including new variants and latent threats that are at an earlier stage of development.
The latest edition of the OT/ICS and IoT security Threat Landscape Report 2024 also covers:
State of global ICS asset and network exposure
Sectoral targets and attacks as well as the cost of ransom
Global APT activity, AI usage, actor and tactic profiles, and implications
Rise in volumes of AI-powered cyberattacks
Major cyber events in 2024
Malware and malicious payload trends
Cyberattack types and targets
Vulnerability exploit attempts on CVEs
Attacks on counties – USA
Expansion of bot farms – how, where, and why
In-depth analysis of the cyber threat landscape across North America, South America, Europe, APAC, and the Middle East
Why are attacks on smart factories rising?
Cyber risk predictions
Axis of attacks – Europe
Systemic attacks in the Middle East
Download the full report from here:
https://sectrio.com/resources/ot-threat-landscape-reports/sectrio-releases-ot-ics-and-iot-security-threat-landscape-report-2024/
Elevating Tactical DDD Patterns Through Object CalisthenicsDorra BARTAGUIZ
After immersing yourself in the blue book and its red counterpart, attending DDD-focused conferences, and applying tactical patterns, you're left with a crucial question: How do I ensure my design is effective? Tactical patterns within Domain-Driven Design (DDD) serve as guiding principles for creating clear and manageable domain models. However, achieving success with these patterns requires additional guidance. Interestingly, we've observed that a set of constraints initially designed for training purposes remarkably aligns with effective pattern implementation, offering a more ‘mechanical’ approach. Let's explore together how Object Calisthenics can elevate the design of your tactical DDD patterns, offering concrete help for those venturing into DDD for the first time!
DevOps and Testing slides at DASA ConnectKari Kakkonen
My and Rik Marselis slides at 30.5.2024 DASA Connect conference. We discuss about what is testing, then what is agile testing and finally what is Testing in DevOps. Finally we had lovely workshop with the participants trying to find out different ways to think about quality and testing in different parts of the DevOps infinity loop.
Connector Corner: Automate dynamic content and events by pushing a buttonDianaGray10
Here is something new! In our next Connector Corner webinar, we will demonstrate how you can use a single workflow to:
Create a campaign using Mailchimp with merge tags/fields
Send an interactive Slack channel message (using buttons)
Have the message received by managers and peers along with a test email for review
But there’s more:
In a second workflow supporting the same use case, you’ll see:
Your campaign sent to target colleagues for approval
If the “Approve” button is clicked, a Jira/Zendesk ticket is created for the marketing design team
But—if the “Reject” button is pushed, colleagues will be alerted via Slack message
Join us to learn more about this new, human-in-the-loop capability, brought to you by Integration Service connectors.
And...
Speakers:
Akshay Agnihotri, Product Manager
Charlie Greenberg, Host
UiPath Test Automation using UiPath Test Suite series, part 3DianaGray10
Welcome to UiPath Test Automation using UiPath Test Suite series part 3. In this session, we will cover desktop automation along with UI automation.
Topics covered:
UI automation Introduction,
UI automation Sample
Desktop automation flow
Pradeep Chinnala, Senior Consultant Automation Developer @WonderBotz and UiPath MVP
Deepak Rai, Automation Practice Lead, Boundaryless Group and UiPath MVP
GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...James Anderson
Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM
The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management.
The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM).
Speakers:
Bob Boule
Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle.
Gopinath Rebala
Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered QualityInflectra
In this insightful webinar, Inflectra explores how artificial intelligence (AI) is transforming software development and testing. Discover how AI-powered tools are revolutionizing every stage of the software development lifecycle (SDLC), from design and prototyping to testing, deployment, and monitoring.
Learn about:
• The Future of Testing: How AI is shifting testing towards verification, analysis, and higher-level skills, while reducing repetitive tasks.
• Test Automation: How AI-powered test case generation, optimization, and self-healing tests are making testing more efficient and effective.
• Visual Testing: Explore the emerging capabilities of AI in visual testing and how it's set to revolutionize UI verification.
• Inflectra's AI Solutions: See demonstrations of Inflectra's cutting-edge AI tools like the ChatGPT plugin and Azure Open AI platform, designed to streamline your testing process.
Whether you're a developer, tester, or QA professional, this webinar will give you valuable insights into how AI is shaping the future of software delivery.
Software Delivery At the Speed of AI: Inflectra Invests In AI-Powered Quality
GeoShield Project @ Swiss Geoscience Meeting 2011
1. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 1
GeoShield project
Managing authentication and permissions to OGC services
Presenting the new GeoServer Resource Access Manager plug-in and the
Sensor Observation Service protection
Milan P. Antonovic, Institute of Earth science - SUPSI
Massimiliano Cannata , Institute of Earth science - SUPSI
12 November 2011
2. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 2
Presentation outline
• Introduction to the Institute of earth science – SUPSI
– OGC implementations used
– The need of data protection
• Presenting GeoShield
– GeoShield’s protection strategies
– Web administration interface
– OGC Services covered by GeoShield
– The Sensor Observation Service protection
– The GeoServer Resource Access Manager plug-in
• Access rule application process
• Data access rule application
– GeoServer Resource Access Manager plug-in demo
– Next improvements
12 November 2011
3. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 3
Introduction to the Institute of earth science – SUPSI
Fields of activity: Focused on:
• Land Planning • Government mandates
• Hydrogeology – Geo databases maintenance
• Hydrology – Web applications for decision making
• Geology • Natural hazard
• Geomatics • Water protection
• Wells / Springs / Boreholes
• Hydrological monitoring network
• Interregional projects (EU, World Bank)
• Training courses
• Research projects
12 November 2011
4. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 4
OGC implementations used
Geografical
data serving
Monitoring data
Data processing service
12 November 2011
5. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 5
The need of data protection
How to protect
in a centralized way
all the services?? Web application
WMS
Web
Sensible data SOS
Mixed data
Public data WFS
WPS
12 November 2011
6. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 6
Presenting GeoShield
• GeoShield is an Open Source solution for • Web administration interface
authentication and authorization • Desktop like user interface
management to OGC services • Sencha - Ext JS
• Written in Java • OGC standards protected
• WMS
• Relies on: • WFS
• Apache Commons • SOS
• GeoTools
• EclipseLink [Persistence API] • GeoServer plug-in:
• PostgreSQL • Resource Access Manager
• Flexjson (JSON parser)
12 November 2011
7. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 7
GeoShield’s protection strategy
HTTP basic
authentication
HTTPS Web
GeoShield
Security Proxy
Compatibility with:
• Web browsers
• Desktop applications
• Udig, QGIS, ArcGIS
12 November 2011 Web administration interface
8. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 8
GeoShield’s PRE-processing protection strategy
User GeoShield WFS service
GetFeature
Loading CQL for
each layer
GetFeature + OGC Filter
The data Forwarding the data
9. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 9
GeoShield’s POST-processing protection strategy
User GeoShield OGC service
GetCapabilities GetCapabilities
Capabilities document
1. Parsing response
2. Adapt response
according to user
Capabilities document filter
10. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 10
Web graphical user interface
• Password protected
• User friendly (Desktop-like Graphical User Iinterface)
• Managing authorization for:
– Users
– Groups
– Services
– Permissions
– Permitted requests
12 November 2011
11. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 11
OGC Services covered by GeoShield
Web Map Service 1.1.1:
Standard protocol for serving georeferenced map images over the Internet
• GeoServer (tested):
– Filtering capability CQL (Common Query Language)
• Others (not tested)
– INCLUDE/EXCLUDE filters only
• Requests:
– GetCapabilities
– GetMap
– GetFeatureInfo
– GetLegendGraphic
12 November 2011
12. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 12
OGC Services covered by GeoShield
Web Feature Service 1.1.0:
Standard protocol allowing requests for geographical raw data over the Internet
• Permissions definition:
– Filtering capability CQL (Common Query Language)
• Requests (Basic profile):
– GetCapabilities
– DescribeFeatureType
– GetFeature
• OutPutFormat: GML
12 November 2011
13. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 13
OGC Services covered by GeoShield
Sensor Observation Service 1.0.0:
Standard protocol allowing requests for retrieving sensor observation data
• Permissions definition:
– Excluding / Including Offerings
• Requests (Basic profile):
– GetCapabilities
– GetObservation
– DescribeSensor
• Response format:
– text/xml;subtype='sensorML/1.0.0'
12 November 2011
14. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 14
The Sensor Observation Service protection
• This is the latest part of GeoShield improvement
• Handle the basic implementation (core profile)
• Permissions are based on the sos:ObservationOffering grouping of the
sos:Capabilities document, GeoShield can exclude the access to:
• Features
• Procedures
• ObservedProperties
• Caching permissions in memory for better performance
12 November 2011
16. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 16
GeoShield’s Sensor Observation Service protection strategy
ObservationOffering 1:
• Sensor 1 S1
• Sensor 2 S2
ObservationOffering 2:
Group 1 S5
• Sensor 3
S4
• Sensor 4 (private)
• Sensor 5 S3
ObservationOffering 3:
S6
• Sensor 1
• Sensor 2
Group 2
• Sensor 5
• Sensor 6
17. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 17
GeoServer Resource Access Manager plug-in
• This year, GeoServer 2.1 version has introduced support for data filtering with
an improved security framework:
– The main feature is the availability to extend the internal Resource Access
Manager with a plug-in
• Benefits:
– No more limited permission (yes/no definition) for each layer
– Extended capabilities to implement granular data access rules
• Filters based on geographical functions (BBOX, INTERSETC…)
• Filters based on attributes
• Include / Exclude filters
• Workspace permissions
– Integration with external users database
– More reliable and stronger protection at data abstraction level
12 November 2011
18. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 18
Access rule application process
User GeoServer GeoShield
1. GetMap
2. Authentication
3. Authorization object
5. Error 401 - Unauthorized 4. User is
authorized?
User: foo.bar 5. Caching
Password: xxxxxxx 6. Get Access Rule
Ok Cancel
7. Rule Object
9. Map 8. Apply rule / Caching rule
19. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 19
Benchmarking WMS GetMap
• Tests are going to be run using JMeter on my Workstation:
– Ubuntu 10.04, Intel Core Duo 2.4 GHz E4600, 4Gb RAM
• Using a progression of 1, 2, 4, 8, 16 and 32 threads, each thread group doing
100, 200, 200, 400, 400, 800 requests respectively
• Layer: topp:tasmania_water_bodies
threads/requests 1/100 2/200 4/200 8/400 16/400
GeoServer* 79 71 79 102 316
GeoShield
291 315 653 3346 7837
(PROXY)
GeoServer
134 151 190 332 1320
(PLUGIN)
* without authentication
12 November 2011
20. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 20
Installing the plug-in
When GeoServer and GeoShield are installed, adding the Resource Access
Manager plug-in is quite simple:
1. Copy the geoshield-1.0.jar file into the GeoServer’s WEB-INF/lib directory
2. Modify the web.xml file adding a Filter definition
3. Create the GEOSHIELD_USER
4. Configure the permissions on GeoShield
12 November 2011
21. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 21
GeoServer Resource Access Manager plug-in
Demo
12 November 2011
22. DACD / IST / Managing authentication and permissions to OGC services with GeoShield 22
Next improvements
• Extending security:
– Web Processing Service
– Web Applications
• Web administration interface
– Integration with GeoServer Web Interface
– OpenLayers integration (Real Time Permission definition and test)
• Release of the GeoShield stable version 1.0 (end of 2011)
– Code refactoring
– Better performance
12 November 2011
23. DACD / IST / Managing authentication and permissions to OGC services with GeoShield
Thank you
Institute of Earth science
http://www.ist.supsi.ch
GeoShield project
http://sites.google.com/site/geoshieldproject
Milan P. Antonovic, Institute of Earth science - SUPSI
Massimiliano Cannata, Institute of Earth science - SUPSI
12 November 2011