基于语义相似度的静态安全策略一致性检测

Static Security Policy Consistency Detection Based on Semantic Similarity

安全策略语义是人类控制安全行为意志的表达。针对策略语义在定义和转换过程中存在的冲突等问题,提出一种基于语义相似度的静态安全策略一致性检测模型与算法。首先建立策略领域本体并提取特征因子,给出基于本体中概念特征的语义相似度计算方法;继而以防火墙安全策略为例建立实例检测模型,运用静态安全策略一致性检测算法对冲突策略进行标记处理,并保证最终的策略规则库的一致性。实验结果表明,该算法具有较好的检测效果,为解决安全策略在定义、制定和映射等阶段的冲突提供了一种可行的途径。

The security policy semanteme is the expression of human control safety behavior will. Aiming at the problem of the policy semantic conflicts existing in the definition and conversion process, a static security policy consistency detection algorithm based on the semantic similarity was proposed. Firstly, the domain ontology of the security policy is established, the characteristic factor is extracted, and then the calculation method of semantic similarity based on the ontology concept features is presented. Secondly, the firewall security policy is used as an example to establish a detection model,and the static security policy consistency detection algorithm is used to mark the confict policy, ensuring the consistency of the final policy rule base. Experimental results show that this method has better detection effect, and provides a feasible way to solve the security policy conflicts in the stage of definition,making and mapping.