摘要
针对网络安全联动系统中安全策略结构日益复杂,数量不断增多所带来的策略冲突、效率低下、冗余等问题,文章采用形式化分析的方法对安全联动防卫策略的完备性、一致性和冗余性进行了定义及分析,提出了一种基于状态迁移的网络安全联动策略模型。该模型由实体、状态、服务三层构成,通过状态迁移过程分析实体之间的关系,并由服务层提供构造、检测等分析组件确保系统稳定运行。该模型实现了策略从生成、应用到失效的全生命周期管理。
In order to avoid conflict, inefficacy and redundancy which come with the more complex policy structure in network security interaction system, a network security interaction policy model based on status transition is proposed. In the model, the integrity, coherence and redundancy are defined and analyzed in formal approach. The policy model, which consists of entity layer, status layer and service layer, analyzes the relationships of entities according to status transition, and the construction, detection modules are offered in order to ensure the system＇s stabilization. The management of policy＇s lifecycle is also described in the model.
出处
《舰船电子工程》
2009年第3期124-127,共4页
Ship Electronic Engineering
基金
国防"十一五"预研计划项目(编号:C0820061362-06
A1420080183)资助
关键词
安全策略
完备性
一致性
冗余性
状态迁移
security policy, integrity, coherence, redundancy, status transition
