Policy Conflict Detection And Resolution In Network Security Management

With the development of network technology, it becomes one very important research problem how to effectively, safely manage network. Network management technology based on policy, different from traditional network management technology, it detach management from enforcement in network management, policies, defined by network administrators, are explained to network command automatically by each device, all described above make management network more intellectualized. But it badly blocks technology about network management base on policy development because policy conflict occurs. How to detect policy conflict and effectually eliminate policy conflict become second study problem. We can convenience to find conflict between policies by conflict database.There are many factors of policy conflict arosed.by systemic study in this paper, find theirs main factors, and give two classifies in the light of policy's status when conflict existing and relation between object which policy effect on .these two classifies resolve "when to resolve conflict"and"how to resolve conflict". In order to being easy to distinguish from policy conflict's type, thesis enumerates all possibly conflict by policy class's TemproalClassfier properties which indicate policy's performing characteristic to make up of conflict database. By conflict database,conflict can be detected out conveniencly.At the last, paper gives design and realizes about theoretic described in front part of thesis. By design, one architecture chart about policy conflict detection and resolve is provided and conflict database is designed; at realization part by embedding conflict detection and resolve module to platform, some conflict existed in platform are settled.