基于语义相似度的静态安全策略一致性检测  

Static Security Policy Consistency Detection Based on Semantic Similarity

作　　者：唐成华[1,2] 王丽娜[1,2] 强保华[2] 汤申生[3] 张鑫[2] 

机构地区：[1]桂林电子科技大学广西信息科学实验中心,桂林541004 [2]桂林电子科技大学广西可信软件重点实验室,桂林541004 [3]西密苏里州立大学电子工程学院,圣约瑟夫64507

出　　处：《计算机科学》2015年第8期166-169,197,共5页Computer Science

基　　金：国家自然科学基金(61462020;61363006;61163057);广西自然科学基金(2014GXN SFAA118375);广西信息科学实验中心基金(20130329)资助

摘　　要：安全策略语义是人类控制安全行为意志的表达。针对策略语义在定义和转换过程中存在的冲突等问题,提出一种基于语义相似度的静态安全策略一致性检测模型与算法。首先建立策略领域本体并提取特征因子,给出基于本体中概念特征的语义相似度计算方法;继而以防火墙安全策略为例建立实例检测模型,运用静态安全策略一致性检测算法对冲突策略进行标记处理,并保证最终的策略规则库的一致性。实验结果表明,该算法具有较好的检测效果,为解决安全策略在定义、制定和映射等阶段的冲突提供了一种可行的途径。The security policy semanteme is the expression of human control safety behavior will. Aiming at the problem of the policy semantic conflicts existing in the definition and conversion process, a static security policy consistency detection algorithm based on the semantic similarity was proposed. Firstly, the domain ontology of the security policy is established, the characteristic factor is extracted, and then the calculation method of semantic similarity based on the ontology concept features is presented. Secondly, the firewall security policy is used as an example to establish a detection model,and the static security policy consistency detection algorithm is used to mark the confict policy, ensuring the consistency of the final policy rule base. Experimental results show that this method has better detection effect, and provides a feasible way to solve the security policy conflicts in the stage of definition,making and mapping.

关 键 词：安全策略 语义相似度 语义一致性 领域本体 特征因子 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]