The Design And Research Of Policy Analysis System Based On Logic Programming

As the rules set for managing and controlling of network resource, security policy is the focus of information system, and its security and consistency are the necessity for the security of the whole system.The analysis of security policy gets more and more interest of researchers. Because of its large variety and amount, it's difficult to analyze security policy strictly. This thesis researches on the analysis method and the design of analysis system of security policy.The main work of this thesis is as follows.1. An analysis system of security policy based on logic programming is designed. The system is able to analyze the correctness and consistence of security policy. Compared with the existing analysis tools of security policy, it is more intellective and automatical.2. The knowledge base of system is established. We introduce knowledge and knowledge base of artificial intelligence into policy analysis, adopt Datalog as the language of knowledge description, and transfer these security related factors to logic knowledge, to provide the source of knowledge for the analyzing of security policy.3. The rule for security policy analysis system is established, including the rule for security policy correctness analysis and rule for consistence analysis. A variety of security related factors are analyzed synthetically exception for the consideration of security policy, so the analysis of security policy is more general and exact.4. In a particular network, we test the function and performance of the designed analysis system. The result shows that it can detect the violation of policy configuration, and has good performance and automatization.