一种安全策略的冲突检测与消解方法  

Method of conflict detection and elimination for security policy

作　　者：汪靖[1] 林植[2] 李云山[2] 

机构地区：[1]武汉工业学院计算机与信息工程系,武汉430023 [2]武汉通信指挥学院一系,武汉430010

出　　处：《计算机应用》2009年第3期823-825,829,共4页journal of Computer Applications

摘　　要：安全策略是系统安全管理的基础。分布式环境的复杂性使策略配置中不可避免地存在冲突。如何有效地分析检测策略冲突并解决冲突是应用安全策略的关键。提出了一个极具一般性的安全策略形式化描述方法,并定义了安全策略描述要素间的逻辑关系;给出了安全策略间的冲突分类描述;针对不同的冲突类型给出了相应的冲突检测算法及消解方法。Security policy is the base of system security management.It is difficult to eliminate policy conflict in the distribution system because of its complexity.Therefore,conflict detection and elimination of policy is the key to realize policy-based system defense.This paper proposed a general formal description of policy,defined the logic relationship among the policy s elements,and classified the conflicts of policy,then discussed some conflict detection and elimination methods corresponding to the conflicts.

关 键 词：安全策略 冲突检测 冲突消解 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]