Application domain independent policy conflict analysis using information models

NOMS 2008 - IEEE/IFIP Network Operations and Management Symposium: Pervasive Management for Ubiquitous Networks and Services

Volumn , Issue , 2008, Pages 17-24

  Davy, Steven ^a   Jennings, Brendan ^a   Strassner, John ^b  

^a Ireland   (Ireland)

^b MOTOROLA INC   (United States)

Author keywords

Conflict detection; Information model; Policy based management

Indexed keywords

ACCESS CONTROL; COMPUTER SYSTEM FIREWALLS; MODAL ANALYSIS; PUBLIC POLICY; UBIQUITOUS COMPUTING;

APPLICATION DOMAINS; APPLICATION-SPECIFIC; AUTHORING PROCESSES; CONFLICT DETECTION; INFORMATION MODEL; INFORMATION MODELLING; NETWORK OPERATIONS; POLICY BASED MANAGEMENT; POLICY CONFLICT ANALYSIS; POLICY MODELING; POTENTIAL CONFLICTS; TWO PHASE ALGORITHMS; UBIQUITOUS NETWORKS;

NETWORK MANAGEMENT;

EID: 51849134182     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2008.4575112     Document Type: Conference Paper

References (16)

1. th IEEE Workshop on Engineering of Autonomic and Autonomous Systems (EASe 2008), Belfast, UK, April 2008
2. J. Strassner, J. N. de Souza, D. Raymer, S. Samudrala, S. Davy, and K. Barrett, "The design of a new policy model to support ontology-driven reasoning for autonomic networking," in Proc. 5th Latin American Network Operations and Management Symposium, LANOMS, Brazil, pp 114-125, 2007.
3. K. Barrett, S. Davy, B. Jennings, S. van der Meer, and J. Strassner, "A model based approach for policy tool generation and policy analysis," in Proc. IEEE Global Information Infrastructure Symposium, Morocco, pp 99-106, 2007.
4. N. Damianou, N. Dulay, E. Lupu, and M. Sloman, "The ponder policy specification language," in Proc. of the International Workshop on Policies for Distributed Systems and Networks,Bristol, UK, pp. 18-38, 2001.
5. L. Kagal, T. Finin, and A. Joshi, "A policy language for a pervasive computing environment," in Proc. of the 4th International Workshop on Policies for Distributed Systems and Networks, Como, Italy pp. 63-74, 2003.
6. A. Uszok, J. M. Bradshaw, R. Jeffers, N. Suri, P. Hayes, M. R. Breedy, L. Bunch, M. Johnson, S. Kulkarni, and J. Lot, "Kaos policy and domain services: Toward a description-logic approach to policy representation, deconfliction, and enforcement," in Proc. of the 4th International Workshop on Policies for Distributed Systems and Networks, Como, Italy., 2003.
7. S. Godik, T. Moses et al., "eXtensible Access Control Markup Language (XACML) Version 1.0," OASIS Standard, February, 2003.
8. E. Lupu and M. Sloman, "Conflicts in policy-based distributed systems management," IEEE Transactions on Software Engineering, pp 852-869, 1999.
9. A. K. Bandara, E. C. Lupu, and A. Russo, "Using event calculus to formalize policy specification and analysis," in Proc. of the 4th International Workshop on Policies for Distributed Systems and Networks, Como, Italy, 2003.
10. S. Jajodia, P. Samarati, M. Sapino, and V. Subrahmanian. Flexible support for multiple access control policies. ACM Transactions on Database Systems (TODS), 26(2) pp 214-260, 2001.
11. D. Wijesekera and S. Jajodia. A propositional policy algebra for access control. ACM Transactions on Information and System Security, 6(2) pp286-325, 2003.
12. D. Agrawal, J. Giles, K.-W. Lee, and J. Lobo. "Policy ratification".in Proc. of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks, pages 223-232, 2005.
13. E. Al-Shaer, H. Hamed, R. Boutaba, and M. Hasan, "Conflict classification and analysis of distributed firewall policies," Selected Areas in Communications, IEEE Journal on, vol. 23, no. 10, pp. 2069-2084, 2005.
14. C. Lin, C. Xue, and L. Zhitang, "Analysis and classification of ipsec security policy conflicts," in Proc. FCST '06. Japan-China Joint Workshop on Frontier of Computer Science and Technology,, pp. 83-88, 2006.
15. H. Hamed and E. Al-Shaer, "Taxonomy of conflicts in network security policies," Communications Magazine, IEEE, vol. 44, no. 3, pp. 134-141, 2006.
16. K. Golnabi, R. Min, L. Khan, and E. Al-Shaer, "Analysis of firewall policy rules using data mining techniques," in Proc of the 10th IEEE/IFIP Network Operations and Management Symposium, (NOMS 2006). pp. 305-315, 2006