A Policy Conflict Detection Model Based On Direct-Graph With Cover Relation

With the development of the policy based Network security management recently, to control and manage the information security of the information system is based on the security policies. The inter-connected information systems are general called multi-domains (autonomy domains) within every domains employed several kinds of security device. To ensure the security policies, as one of the core part of the management, to work consistently and to maintain its own consistency is the first thing to resolve. Thus, the detection and solution of the security policy conflict is vital for correct enforcement of management and their actions efficiency in the policy based distributed systems. Besides, security policy confliction is one of the most difficult problems in the field of the security management.The general cause of the conflict in the security policy has two aspects, one is the man-made reason; another is the inevitable result of the application surrounding. There have two steps to cope the confliction: first, conflict detection; second, conflict resolution. This paper focused on the security policy conflict detection.Firstly, this paper gave a brief description of the security description languages and two security policy frameworks based on the typically standard languages. Then the paper further discussed the category of the security policy and policy conflict. Analyses the typical method on the policy conflict and resolution, and gave each methods'...