OSA pattern numbers

[spinoza]

This thread is to record OSA pattern numbers.

Post to this thread when you want to reserve the next free number.

Patterns so far:
# 001 Client Module
# 002 Server Module
# 003 Privacy Mobile Device
# 004 SOA Registration and Location (Publication and Location)
# 005 SOA Internal usage
# 006 Wireless Private Network
# 007 Wireless Guest
# 008 Public Web Server

[claudio]

Could you explain the whole pattern naming scheme?

Currently there seems to be a pattern release number 08_02 or 08_04
Is this still important or does it just make it more complex?

Should we still aim for whole releases (as in Ubuntu) or is it better to renew every now and then and then call it Revision 2, 3,... (as in NIST Publications)?

[spinoza]

Original idea for the patterns was to bundle a release every 6 months so 08_02, 08_08, 09_02 etc...

I am not sure whether this makes sense at this stage given we are making moderate progress, and it is probably reasonable to adopt a revision naming scheme. However I would caution that we wait for a bit longer before making any changes. Lets finalise a few more patterns for this release and then look to see if we should change in late August, early September.

[spinoza]

# 009 Generic Pattern

Building a generic pattern that shows the overall landscape.

Should have it ready by the end of the week.

Spinoza.

[Tobias]

# 010 (Enterprise) Identity Management

Building an identity management pattern. Will be the discussion base for a panel discussion next week.
I will try to cover 2 fundamental aspects -> private user (end-customer) privacy protection and corporate interests to protect assets (data).


Tobias

[phaedrus]

#011 Cloud computing

Covering controls required for cloud scenario such as Amazon EC2/S3, Google App Engine etc..

[Tobias]

#012 Secure Software Development Lifecycle

patterns so far:
# 001 Client Module
# 002 Server Module
# 003 Privacy Mobile Device
# 004 SOA Registration and Location (Publication and Location)
# 005 SOA Internal usage
# 006 Wireless Private Network
# 007 Wireless Guest
# 008 Public Web Server
# 009 Generic Pattern
# 010 (Enterprise) Identity Management
# 011 Cloud computing
# 012 Secure Software Development Lifecycle

[spinoza]

Reserving

#013 Data Security
#014 Awareness

[spinoza]

Reserving 015 for Consumer devices on enterprise networks

[JoeV]

Congrats on inclusion in the Privacy & Cloud book.

I have a pattern concept I would like to expand and pursue it there is interest. It would be an Enterprise Architecture pattern based on the concept of segments, "Business Service Segment Security Pattern (need something more catchy)". This pattern might be similar to the awareness pattern or secure lifecycle pattern (mentioned here but not posted) which are not system-centric.

Thanks.

-A JPEG attached of basic concept

-Segments described here:
http://en.wikipedia.org/wiki/Enterprise_architecture

-Control to segment mapping concept here (Figure 9):
http://cio.gov/documents_details.cfm/ui ... chitecture

[spinoza]

Joe- sorry for slow response. I like the idea of classifying the business processes into segments. The JPEG shows finance, HR and procurement- would there be others? Can you go into a bit more detail on the purpose of the pattern, and how this would help the pattern user? Perhaps a precis of why this is a good approach, I've followed the links and am a little unsure.

[spinoza]

Updated list of patterns

Pattern_001_Client_Module
Pattern_002_Server_Module
Pattern_003_Privacy_Mobile_Device
Pattern_004_SOA_Registration
Pattern_005_SOA_Internal
Pattern_006_Wireless_Private_Network
Pattern_007_Wireless_Public_hotspot
Pattern_008_Public_Webserver
Pattern_009_Generic_Pattern
Pattern_010_Identity_Management
Pattern_011_Cloud_Computing
Pattern_012_Secure_SDLC
Pattern_013_Data_Security
Pattern_014_Awareness
Pattern_015_Consumer_Devices
Pattern_016_DMZ_Module
Pattern_017_High_security_Network_Module
Pattern_018_ISMS_Module
Pattern_019_Collaboration (Secure Ad-hoc File Transfer)
Pattern_020_Email_TLS

[JoeV]

Spinoza,

Sorry for my slow response, I didn't get a notice for some reason, maybe it went to spam. To your specific question, yes there would be other segments besides HR, procurement, I was using those for illustration. I will write up a precis.

Thanks.