摘要
联动系统安全设备下的访问控制策略确保了防火墙、VPN、防病毒系统和漏洞扫描器等安全设备协同工作,有效地保证了网络信息系统的安全性。文章首先定义了访问控制策略及策略冲突,根据实际环境对策略类型及冲突进行分类。其次,针对不同的策略数据类型进行简单的预处理,根据冲突特点对策略进行归并,利用策略冲突检测算法对策略进行冲突检测。最后,通过算法的复杂度分析和实验结果,说明此策略检测方法具有理想的执行效率。
The access control of linkage system safety device can ensure that the firewall policy, VPN, anti-virus system, vulnerability scanner and other security equipment work cooperatively. Thus, the security of network information system＇s safety is achieved effectively. Firstly, this paper defines access control policies and policy conflicts, and categorizes them according to the actual environment. Secondly, a simple pretreatment is used for different data type of strategies and a merge is performed for strategies considering the characteristics of conflict, also some policy conflict detection algorithms are used for conflict detection in strategies. Finally, the algorithm complexity analysis and experimental results illustrate the proposed detection method has a desirable execution efficiency.
出处
《电力信息与通信技术》
2016年第8期33-37,共5页
Electric Power Information and Communication Technology
关键词
网络安全
访问控制策略
策略冲突
冲突检测
cyber security
access control policy
policy conflict
conflict detection
