분산 환경에서 이종의 보안시스템 관리를 위한 정책 충돌 모델링 = Modeling on Policy Conflict for Managing Heterogeneous Security Systems in Distributed Network Environment

다국어 초록 (Multilingual Abstract)

Enterprise security management system proposed to properly manage heterogeneous security products is the security management infrastructure designed to avoid needless duplications of management tasks and inter-operate those security products effectively. In this paper, we defined the security policies using Z-Notation and the detection algorithm of policy conflict for managing heterogeneous firewall systems. It is designed to help security management build invulnerable security policies that can unify various existing management infrastructures of security policies. Its goal is not only to improve security strength and increase the management efficiency and convenience but also to make it possible to include different security management infrastructures while building security policies. With the process of the detection and resolution for policy conflict, it is possible to integrate heterogeneous security policies and guarantee the integrity of them by avoiding conflicts or duplications among security policies. And further, it provides convenience to manage many security products existing in large networks.

참고문헌 (Reference)

1 이동영, "이종의 보안시스템 관리를 위한 정책 기반의 통합보안관리시스템의 계층적 정책모델에 관한 연구" 8-C (8-C): 2001

2 Jim Woodcock, "Using Z : Specification, Refinement, and Proof" Prentice-Hall 1996

3 Spivey, J. M., "The Z Notation - A Reference Manual" Prentice-Hall 1992

4 J. Moffett, "Policy Conflict Analysis in Distributed System Management" Ablex Publishing 4 (4): 1-22, 1994

5 R. Barruffi, "Planning for security management" 16 (16): 74-80, 2001

6 Gary N.Stone, "Network Policy Languages: A Survey and a New Approach" 10-21, 2001

7 G. Patz, "Multidimensional security policy management for dynamic coalitions" 2 : 41-54, 2001

8 G. Patz, "Multidimensional security policy management for dynamic coalitions" 2 : 41-54, 2001

9 L.Lewis, "Implementing policy in enterprise networks" 34 (34): 50-55, 1996

10 Nicole Dunlop, "Dynamic Conflict Detection in Policy-Based Management Systems" 2002

11 J. Zao, "Domain based Internet security policy management" 1 : 41-53, 1999

12 D. Schnackengerg, "Cooperative Intrusion Traceback and Response Architecture (CITRA)" 1 : 56-68, 2001

13 Dong-Young Lee, "A Study on the Centralized Databas of the Multi-agents Based Integrated Security Management System for Managing Heterogeneous Firewalls" Springer- Verlag 1036-1042, 2005

14 D. Y. Lee, "A Design of Scalable SNMP Agent for Managing Heterogeneous Security Systems" 293-294, 2000