A Self-adaptation Policy Management Framework And The Key Technologies Research

At present, the implementation of security management and Qos based on policy has gained more and more studies and applications. The translation from 'bringing forward a policy' into 'policy enforcement' should be assured by the policy management framework. Existing policy management frameworks have only assisted managers to specify policies and deploy policies. However, when security threats and network events happen, or deployed policies make mistakes, managers must intervene manually. The framework itself can't respond to these changes in time. Furthermore, existing policy management frameworks haven't adopted unified policy language to describe policies. This results that existing frameworks are difficult to support multi-vendor security products.In order to resolve these problems, in this paper, we have deeply studied the policy management framework and some key technologies.The main work of this paper is as follows:1. On the basis of analyzing the existing policy management framework, put forward a policy driven self-adaptation policy management framework.2. Studied the grammar of Ponder Language and extended Ponder Language from Authorization Policy and Obligation Policy, then discussed the storage of Ponder which has been extended.3. Aimed at the disadvantages of existing policy distribution mode such as 'pull' and 'push', put forward event-based 3P policy distribution mode. Defined self-management policy to realize automatic policy distribution and defined self-adaptation policy which improves the ability of self-adaptation of the policy management framework to realize the self-maintenance and self-updating of the deployed policies.4. On the basis of EC formalization, developed a logical notation to represent Ponder Language, and resolved the conflicts detection between Ponder policies.