摘要
安全策略语义是人类控制安全行为意志的表达。针对策略语义在定义和转换过程中存在的冲突等问题,提出一种基于语义相似度的静态安全策略一致性检测模型与算法。首先建立策略领域本体并提取特征因子,给出基于本体中概念特征的语义相似度计算方法;继而以防火墙安全策略为例建立实例检测模型,运用静态安全策略一致性检测算法对冲突策略进行标记处理,并保证最终的策略规则库的一致性。实验结果表明,该算法具有较好的检测效果,为解决安全策略在定义、制定和映射等阶段的冲突提供了一种可行的途径。
The security policy semanteme is the expression of human control safety behavior will. Aiming at the problem of the policy semantic conflicts existing in the definition and conversion process, a static security policy consistency detection algorithm based on the semantic similarity was proposed. Firstly, the domain ontology of the security policy is established, the characteristic factor is extracted, and then the calculation method of semantic similarity based on the ontology concept features is presented. Secondly, the firewall security policy is used as an example to establish a detection model,and the static security policy consistency detection algorithm is used to mark the confict policy, ensuring the consistency of the final policy rule base. Experimental results show that this method has better detection effect, and provides a feasible way to solve the security policy conflicts in the stage of definition,making and mapping.
出处
《计算机科学》
CSCD
北大核心
2015年第8期166-169,197,共5页
Computer Science
基金
国家自然科学基金(61462020
61363006
61163057)
广西自然科学基金(2014GXN SFAA118375)
广西信息科学实验中心基金(20130329)资助
关键词
安全策略
语义相似度
语义一致性
领域本体
特征因子
Security policy, Semantic similarity, Semantic consistency, Domain ontology, Characteristic factor
