A policy management model of the network security interaction based on state transition

详细信息    查看全文

• 作者：Can Wang^a ; ^{wangcan1122@163.com} ; Wei Ai^b ; Hua Fang^a
• 关键词：SECURITY POLICY ; COMPLETENESS ; CONSISTENCY ; REDUNDANCY ; STATE TRANSITION
• 刊名：Energy Procedia
• 出版年：2011
• 出版时间：2011
• 年：2011
• 卷：13
• 期：Complete
• 页码：647-653
• 全文大小：382 K

文摘

According to the problems of the network security interaction system about policy conflict, low efficiency and redundancy, which caused by the gradual complexity of the security policy structure and the quantity increase of security events, we established a policy management model of the network security interaction based on state transition and carried out a formal approach to define and analyze the completeness, consistency and redundancy of the security interaction defense policy. This model, which consists of three levels about entity, state and service, analyzes the relationships of entities by the process of state transition, and ensures the stable operation of the system based on the analysis components (such as construction, detection and so on) which provides by the service layer. The full lifecycle management, which includes generation, application and invalidation of policies, is realized in the model.