基于策略的安全管理系统中一种基于标签的策略协作机制  

A Label-based Policy Cooperation Mechanism in Policy-based Security Management Systems

作　　者：姚前[1] 陈舜[1] 谢立[1] 

机构地区：[1]南京大学计算机软件新技术国家重点实验室,南京210093

出　　处：《计算机科学》2007年第10期19-23,共5页Computer Science

基　　金：国家"十五"科技攻关项目(金融示范工程);课题编号:2001BA102A04

摘　　要：当前,各研究组织提出的策略信息模型中,策略都是相对独立的,策略之间没有有效的协作机制,难以满足基于策略的安全管理中对策略协作的需求。本文分析了基于策略的安全管理中关于策略协作的需求,并针对策略协作的需求分析了各种研究组织提出的信息模型的不足之处;在此基础上提出了一种基于标签的策略协作机制,提出的策略协作机制是对当前的各种策略信息模型的扩展,可以满足安全管理系统对策略协作的需求。最后给出了实验结果和结论。Nowadays, policies in the policy information models proposed by various research groups are isolated and there are no mechanisms for policy cooperation, so the requirements about policy cooperation in policy based security management systems are hard to be satisfied. In this paper, requirements of policy cooperation in policy based secuirty management systems are analyzed, and then the deficiencies of policy information models proposed by different research groups are analyzed according to policy cooperation requirements. Based on these analyses, a label based policy cooper ation mechanism is proposed, which is extension to the current various policy information models and can satisfy the re quirements of policy cooperation in secuirty management systems. The experiment and conclusions are present at last.

关 键 词：安全管理 基于策略的安全管理 策略协作 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]