一种基于策略的网络管理系统研究与实现  

New Study and Implementation of Policy Based Network Management System

作　　者：曾旷怡[1] 杨家海[1] 

机构地区：[1]清华大学信息网络工程研究中心,北京100084

出　　处：《小型微型计算机系统》2007年第2期218-223,共6页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(60473083)资助;国家"八六三"计划项目(2003AA103110)资助.

摘　　要：策略提炼和策略冲突是解决基于策略的网络管理系统实现中两个最主要的难点问题.本文通过对基于策略的网络管理理论和访问控制技术的研究,利用访问控制列表(ACL),提出了一个基于策略的网络管理系统实现方案.主要介绍和描述了系统的整体框架及其实现机制;重点讨论了实现过程中的关键技术问题及解决方法,包括策略表示、策略提炼和策略冲突等问题;对策略冲突的解决方案进行了形式化描述,并通过模拟实验验证了本方案的可行性和有效性.Policy refinement and policy conflict resolution are two of the toughest issues in implementing a policy-based network management （PBNM） system. Based on a brief review of general PBNM theories and specific access control technologies, the paper proposed a novel policy-based network management model, which adopts XML as the high level policy description language, and uses the generalized access control list （ACL） as an intermediate refining mechanism, focusing on network security and QoS management. Some critical issues and their solutions, including policy representation, policy refinement, and policy conflict ＆ policy detection, are discussed. A formula representation of the policy conflict issue is given with several important inferences. The effectiveness and efficiency of the model is verified by the implemented prototype.

关 键 词：基于策略的网络管理 网络安全 访问控制 管理信息模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]