BrightCloud Software Development Kit Overview

The BrightCloud SDK enables rapid integration with BrightCloud Services.

The BrightCloud SDK is the definitive source for software vendors interested in incorporating the value propositions of web filtering across the internet's Long Tail into their broader security solution.

The SDK includes the following elements:

• BCAP Interface Specification
• Operating System Reference Clients for: Red Hat Linux (v4.2 kernel), Microsoft Windows Server 2003, Microsoft Windows XP operating systems
• Application reference clients for: Checkpoint NGX, Microsoft Internet Security and Acceleration Server, and Squid
• BrightCloud Licensing System interface Specification
• Pre-defined Local Cache Specification
• BrightCloud Certification Labs Requirements

Each of these is reviewed in the sections below. A software developer can have a prototype up and running typically within an hour or two, and a production quality version completed and tested within 4-6 weeks.

BCAP Interface Specification

The BrightCloud hosted system is queried through an ICAP like protocol known as the BrightCloud Application Protocol, or BCAP. BCAP has eight function calls, which perform functions ranging from querying the BrightCloud Service to interacting with the BrightCloud licensing system. The BCAP protocol supports both encrypted and non-encrypted modes, however encryption is required for production implementations.

Reference Clients

The reference clients are designed to provide third party developers with guidance on how to interact properly with the various components of the BrightCloud system. Core to the reference client is a BrightCloud Agent, which integrates with the vendor's product and resides locally. The BrightCloud Agent manages interactions with the BrightCloud Services. The reference client source code is licensed under the BrightCloud License Agreement, whereby third party developers may distribute the code in their products which interact with the BrightCloud Service.

BrightCloud Licensing System Interface Specification

The BrightCloud hosted web filtering services are licensed on a subscription basis. To effectively manage end customer subscriptions, a licensing system is required. The licensing system is managed by the vendor, and subscription terms are defined via secure remote access to the BrightCloud Subscription Service. Each BrightCloud Agent has a unique identifier that enables a policy to be assigned to it.

Pre-defined Local Cache Specification

A BrightCloud Agent has the option to have a local cache. While the reference clients provide a sample implementation of a cache, the production version can be of the vendor's proprietary design. The BrightCloud Service supports the concept of pre-populating a cache with a set of URLs and their associated categories and confidence values. This enables the end customer to initiate service with an operational cache. The local cache can be updated, and supports "Real Time Updates" which are used when a possible cached value needs to be changed (eg, from a benign category to a malicious category).

BrightCloud Certification Labs

The BrightCloud Certification Labs (BCL) is tasked with validating that a vendor's BrightCloud Agent implementation interacts correctly with all parts of the BrightCloud Services. A BrightCloud Agent will not be licensed for distribution without completing BCL certification.