基于规则集的安全策略冲突检测与消解  

Security Policy Conflict Detection and Resolution Based on Rule Set

作　　者：鲁小杰[1] 张涛[2] 王金双[2] 赵敏[2] 

机构地区：[1]解放军理工大学指挥信息系统学院研究生2队,江苏南京210007 [2]解放军理工大学指挥信息系统学院

出　　处：《军事通信技术》2016年第1期17-22,共6页Journal of Military Communications Technology

摘　　要：安全策略是系统安全管理的基础,由于系统环境的复杂性在策略配置中不可避免产生冲突,如何有效的检测与消解策略冲突是应用安全策略的关键。文章分析现有安全策略冲突检测方法的不足,提出了一种一般性的策略描述方法,根据造成冲突的不同原因将冲突进行分类并给出冲突的形式化描述。针对不同类型的冲突,从静态和动态的角度出发,提出相应的冲突检测与消解算法,实现自动对安全策略进行冲突检测与消解,为安全策略的进一步实用提供了必要的保障。Security policy is the basis of system security management.Conflict is unavoidable in the system environment because of its complexity.How to detect and eliminate the conflicts is the key to applying security policy.The shortcomings of the existing security policy conflict detection method were analyzed,ageneral formal description of policy proposed,the conflict classified,according to the different causes of the conflict,and the formal description of each conflict given.In view of the different types of conflict,the corresponding conflict detection and resolution algorithm was put forward in the perspective of static and dynamic analysis.The automatic detection and resolution security policy conflict was implemented.It provides the necessary guarantee for the further practical security policy.

关 键 词：基于规则集 安全策略 冲突检测 冲突消解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]