基于多域环境的安全策略冲突检测模型研究

Research on security policy collision detection module based on multi-domain environment

本文介绍了安全策略及冲突检测的基本概念,并在此基础上分析了几种安全描述语言在多域环境下的管理框架,及其它们各自在多域环境下的策略冲突检测中的优缺点,并讨论了现有存在的问题.在此基础上给出基于有向图覆盖的冲突检测模型.并以角色权限冲突的检测为实例,给出了具体的解决方案.

The article introduces basic conception of security strategy and collision detection and analyzes management framework of some kinds of language which describes security in multi-domain environment, It also analyzes these languages＇ advantages and disadvantages in policy collision detection in multi-domain environment and discusses present problems. Based on these, it gives collision detection module based on directed graph＇s cover. It also gives detailed solution with example of detection of role permision collision.