基于多维整数空间的安全策略冲突检测与消解

Security Policy Conflict Detection and Resolution Based on Multidimensional Integer Space

针对当前大部分安全策略冲突检测与消解算法缺少灵活性和扩展性等缺点,提出一种基于多维整数空间的安全策略形式化描述方法,在此基础上设计了一种可扩展的安全策略冲突检测与消解算法,并证明其正确性,设计并实现能够自动对安全策略进行冲突检测与消解的工具SPCDRT。

Due to the lack of flexibility and extendability of the security policy conflict detection and resolution algorithms, this paper proposes a security policy specification based on multidimensional integer space. An algorithm based on the specification is proposed, the correctness of the algorithm is proved and the complexity is analyzed. The automatic Security Policy Conflict Detection and Resolution Tool（SPCDRT） is designed and implemented.