USING LOGIC PROGRAMMING FOR FORMAL VERIFICATION OF NETWORK SECURITY POLICY
Pla Information · Computer Applications and Software · 2010
We treat high-level policy as security requirement and low-level policy as the implementation of the high-level policy,a proper low-level policy configuration must meet the security requirement.Network Security depends on the correctness of low-level policy configuration,but for the sake of extreme complexity in policy configuration as well as lacking the means of accurate description of the security requirement,the validity analysis of the policies is posed a terrible challenge.We use logic programming to perform policy analysis on network security.By translating low-level policy configuration,high-level policy and vulnerability database into logic program and contrasting all kinds of possible accesses with security requirements,the policy configuration can be determined of whether or not to have met the security requirement,together with a list of all those policy configurations unsatisfying the security requirement.