网络安全策略求精一致性检测和冲突消解机制的研究  

Research on Network Security Policy Refinement Consistency of Detection and Conflict Resolution Mechanisms

作　　者：倪俊[1,2] 陈晓苏[1] 刘辉宇[1] 李劲[3] 

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074 [2]恩施州电力总公司,恩施445000 [3]湖北民族学院信息工程学院,恩施445000

出　　处：《计算机科学》2011年第2期32-37,共6页Computer Science

基　　金：国家863计划项目(2007AA10Z309)资助。

摘　　要：通过对基于策略的网络安全管理的研究,分析了现有网络安全策略冲突检测和消解方法存在的不足。基于策略求精的思想和安全策略冲突分类技术,建立基于策略的网络管理安全级模型,并用扩展的XACML语言加以描述。根据策略行为间的关系,采用知识推理技术,动态分层地对相应安全级策略进行一致性自动检测和实时冲突消解,使其具有良好的可重用性和可扩展性,以利于安全策略管理效率的提高。并通过策略求精访问控制的应用实现进行了验证。最后给出了未来的研究方向。Through policy-based network security management research,this paper analyzed the existing network secu-rity policy conflict detection and resolution method shortcomings.Based on policy refinement of ideas and security policy conflicts classification technology,policy-based network management security-level model was established,with exten-ded XACML language description.According to the relationship between policy behavior,using knowledge reasoning,dynamic layered security corresponding level of policy refinement consistency automatic detection and timely conflict resolution were made,letting it has a good reusability and scalability,and is conducive to the improvement of manage-ment efficiency.Policy-based access control refinement application implementation was verified.Finally,some of the fu-ture research directions were discussed.

关 键 词：网络安全 策略求精 安全级模型 一致性自动检测 知识推理 冲突消解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]