Hierarchical Algorithm of Policy Refinement for Network Security Based on Layered-policy Model
Feng Xiang-dong · Journal of Chinese Computer Systems · 2007
The policy-based security defense technology is the key of current network security research. However, the policy refinement hasnt been implemented to satisfaction for the time being, and the policies of application in network security are still configured manually. Integrated with goal refinement method and entity refinement method, an algorithm of policy refinement is proposed in this paper on the basis of layered-policy model for security policy. Using goal refinement method, this algorithm transforms abstract policies into rules of security actions and then works out the executing conditions of security actions with an entity refinement method. All of these convert abstract policy into system-understandable and system-enforceable rules, and hence the solution of policy refinement implementation.