An Intent-Driven Network Security Policy Generation Method
Xinlu Liu, Dexian Chang, Dawei Zhang, Heng Meng · 2024
Aiming at the problems of existing network security policy generation relying on subjective judgment, inefficient generation and not being able to update in time, an Intent-Driven Network Security Policy Generation (IDSPG) method is proposed. Firstly, alert information is generated based on the attribute attack graph (AAG) and mapped to the security intent with the security intent template; Secondly, combined with the network information knowledge graph, the intent is further translated into the RDF format as a transitional strategy; The dynamic generation of transitional policies to the underlying network security policies is completed through the RDF analysis. The experiments show that the method proposed in this paper can correctly generate the security policies corresponding to the security intents, and has greater improvement in the generation efficiency and correctness.