A survey on policy languages in network and security management

Computer Networks

Volumn 56, Issue 1, 2012, Pages 477-489

  Han, Weili ^a   Lei, Chang ^a  

^a FUDAN UNIVERSITY   (China)

Author keywords

Network management; Policy language; Policy driven management; Security management

Indexed keywords

INDUSTRIAL MANAGEMENT; NETWORK MANAGEMENT;

IN NETWORKS; KEY ISSUES; NETWORKED SYSTEMS; POLICY DRIVEN; POLICY LANGUAGE; POLICY-DRIVEN MANAGEMENTS; SECURITY MANAGEMENT; SYSTEM MANAGEMENT;

NETWORK SECURITY;

EID: 84655168082     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2011.09.014     Document Type: Short Survey

References (79)

1. M. Armbrust, A. Fox, R. Griffith, A.D. Joseph, R.H. Katz, A. Konwinski, G. Lee, D.A. Patterson, A. Rabkin, M. Zaharia, Above the clouds: A berkeley view of cloud computing, Tech. Rep., 2009.
2. J. Dean, Desins and Advice from Building Large Distributed Systems, 2009.
3. D.C. Verma Simplifying network administration using policy-based management IEEE Network 2002 20 26 (Pubitemid 34504553)
4. P. Goyal, R. Mikkilineni, Policy-based event-driven services-oriented architecture for cloud services operation and management, in: 2009 IEEE International Conference on Cloud Computing, New York, USA, 2009, pp. 135-138.
5. B. Moore, E. Ellesson, J. Strassner, A. Westerinen, Policy core information model - version 1 specification, RFC 3060, IETF, Febrary 2001. .
6. D. Durham, J. Boyle, R. Cohen, S. Herzog, R. Rajan, A. Sastry, The COPS (Common Open Policy Service) Protocol, RFC 2748, IETF, January 2000. .
7. J. Case, M. Fedor, M. Schoffstall, J. Davin, A Simple Network Management Protocol (SNMP), RFC 1157, IETF, May 1990. .
8. K. Zeilenga, Lightweight Directory Access Protocol (LDAP): Technical Specification Road Map, RFC 4510, IETF, June 2006. .
9. J.O. Kephart, W.E. Walsh, An artificial intelligence perspective on autonomic computing policies, in: Proceedings 5th IEEE Workshop on Policies for Distributed Systems and Networks (Policy 2004), New York, USA, 2004, pp. 3-12. (Pubitemid 40061178)
10. Delivering end-to-end security in policy-based systems, Tech. Rep., Cisco, 1998.
11. H. Tao, A XACML-based access control model for web service, in: Proceedings of International Conference on Wireless Communications, Networking and Mobile Computing, 2005, pp. 1140-1144. (Pubitemid 43791348)
12. OASIS, OASIS Extensible Access Control Markup Language (XACML) version 2.0, 2005.
13. W3C, The Platform for Privacy Preferences 1.1 (p3p1.1) Specification, 2006. .
14. W3C, A p3p Preference Exchange Language 1.0 (appel1.0), 2002. .
15. IETF, Geopriv Requirements, 2004. .
16. K.J. Turner, and L. Blair Policies and conflicts in call control Computer Networks 51 2007 496 514 (Pubitemid 44780850)
17. K. Turner, E. Magill, S. Reiff-Marganiec, L. Blair, J. Pang, Accent (Advanced Component Control Enhancing Network Technologies) Project, 2001-2005. .
18. Information technology-open distributed processing-reference model-enterprise language, International Standard ISO/IEC 15414, ISO/IEC, 2004.
19. IBM, 2011. .
20. IBM Tivoli Security Policy Manager, Tech. Rep., IBM, 2009.
21. WS-securitypolicy1.3, Tech. Rep., IETF, Febrary 2009. .
22. Sun, Sun's XACML Open Source Implementation, 2011. .
23. G. Karjoth Access control with IBM tivoli access manager ACM Transactions on Information and System Security (TISSEC) 6 2003 232 257
24. G. Karjoth, A. Schade, E.V. Herreweghen, Implementing acl-based policies in XACML, in: 2008 Annual Computer Security Applications Conference, 2009.
25. HP openview policyxpert2.1 product brief, Tech. Rep., HP, 2001.
26. Openview policy-based network management, Tech. Rep., HP, 1999.
27. Axiomatics, Axiomatics Products, 2011. .
28. U. Dayal, E.N. Hanson, and J. Widom Active database systems Modern Database Systems 1994 ACM Press 434 456
29. J. Lobo, R. Bhatia, S. Naqvi, A policy description language, in: Proceedings 16th National Conference on Artificial Intelligence (AAAI-99), Orlando, USA, 1999, pp. 291-298.
30. N. Damianou, N. Dulay, E. Lupu, M. Sloman, The ponder policy specification language, in: Proceedings of Policy 2001: Workshop on Policies for Distributed Systems and Networks, Bristol, UK, 2001, pp. 18-39.
31. CIM Policy Model White Paper (CIM version 2.7), Standard, DMTF, 2003. .
32. D. Agrawal, S. Calo, K.-W. Lee, J. Lobo, Issues in designing a policy language for distributed management of IT infrastructures, in: 10th IFIP/IEEE International Symposium on Integrated Network Management (IM '07), 2007, pp. 30-39. (Pubitemid 47485156)
33. S. Bleikertz, T. Gross, VALID: a virtualization assurance language for isolation and deployment, in: Proceedings of IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY 2011), 2011.
34. L. Kagal, Rei: a policy language for the me-centric project, Tech. Rep., HP Labs.
35. R.S. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman Role-based access control models IEEE Computer 29 2 1996 38 47
36. J. Nicklisch, A rule language for network policies, Position Paper, 1999. .
37. J. Strassner, S. Schleimer, Policy framework definition language, Internet Draft, IETF, November 1998. .
38. R. Bhatia, J. Lobo, M. Kohli, Policy evaluation for network management, in: Proceedings of 19th Annual Joint Conference of the IEEE Computer and Communications Societies, Tel Aviv, Israel, 2000, pp. 1107-1116. (Pubitemid 30584601)
39. J. Chomicki, J. Lobo, S. Naqvi, A logic programming approach to conflict resolution in policy management, in: Proceedings 7th International Conference on Principles of Knowledge Representation and Reasoning (KR 2000), Colorado, USA, 2000, pp. 121-132.
40. N. Dulay, E. Lupu, M. Sloman, N. Damianou, A policy deployment model for the ponder language, in: Proceedings IEEE/IFIP International Symposium on Integrated Network Management (IM 2001), 2001, pp. 14-18.
41. CIM simplified policy language (CIM-SPL), International Standard DSP0231, DMTF, 2009.
42. CIM event model white paper, Preliminary DSP107, DMTF, 2003.
43. L. Pan, J. Lobo, S. Calo, Extending the CIM-SPL policy language with RBAC for distributed management systems in the WBEM infrastructure, in: Proceedings of the 11th IFIP/IEEE International Conference on Integrated Network Management (IM'09), 2009, pp. 145-148.
44. T.O. Group, Openpegasus Open Source Project. .
45. A. Dardennen, A. van Lamsweerde, and S. Fickas Goal-directed requirements acquisition Science of Computer Programming 20 1993 3 50 (Pubitemid 23672084)
46. N. Li, Q. Wang, W. Qardaji, E. Bertino, P. Rao, J. Lobo, and D. Lin Access control policy combining: theory meets practice SACMATa̧ŕ09 2009 ACM Press 135 144
47. R. Laborden, T. Desprats, Dealing with stable environmental conditions in XACML systems, in: Second International Conference on Systems and Networks Communications (ICSNC 2007), 2007, pp. 63-63.
48. Q. Ni, E. Bertino, xfacl: An extensible functional language for access control, in: The ACM Symposium on Access Control Models and Technologies (SACMAT 2011), 2011.
49. L. Kagal, T. Finin, A. Joshi, A policy language for a pervasive computing environment, in: In IEEE 4th International Workshop on Policies for Distributed Systems and Networks, 2003, pp. 63-74.
50. A. Patwardhan, V. Korolev, L. Kagal, A. Joshi, Enforcing policies in pervasive environments, in: Proceedings of the First Annual International Conference on Mobile and Ubiquitous Systems: Networking and Services (MobiQuitousa̧ŕ04), 2004, pp. 299-308. (Pubitemid 40184605)
51. R. Agrawal, J. Kiernan, R. Srikant, and Y. Xu Xpref: a preference language for p3p Computer Networks 48 2005 809 827 (Pubitemid 40684163)
52. XML Path Language (xpath) version 1.0, Standard, W3C, 1999. .
53. W3C, P3P 1.0 Implementations. .
54. AT&T, Privacy Bird. .
55. L. Code Infusion, P3pedit. .
56. P3PWriter, P3pwriter. .
57. IBM, Enterprise Privacy Authorization Language. .
58. M. Backes, B. Pfitzmann, and M. Schunter A toolkit for managing enterprise privacy policies Proceedings of ESORICSa̧ŕ03 LNCS vol. 2808 2003 Springer 162 180 (Pubitemid 37311869)
59. S. Jajodia, P. Samarati, V.S. Subrahmanian, A logical language for expressing authorizations, in: IEEE Symposium on Security and Privacy, 1997, pp. 31-42.
60. S. Jajodia, P. Samarati, M. Sapino, and V. Subrahmanian Flexible support for multiple access control policies ACM Transactions on Database Systems 26 2 2001 214 260 (Pubitemid 33661632)
61. AVISPA, The intermediate format, Automated Validation of Internet Security Protocols and Applications Deliverable D2.3, AVISPA, 2003. .
62. A.K. Bandara, E.C. Lupu, J. Moffett, A. Russo, A goal-based approach to policy refinement, in: Proceedings of the Fifth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'04), 2004, pp. 229-239. (Pubitemid 40061208)
63. N. Li, Z. Mao, Administration in role-based access control, in: Proceedings of the 2nd ACM Symposium on Information, Computer and Communications Security (AsiaCCS'07), 2007.
64. R.S. Sandhu, V. Bhamidipati, and Q. Munawer The ARBAC97 model for role-based aministration ACM Transactions on Information and Systems Security 2 1999 105 135
65. N. Li, and M.V. Tripunitara Security analysis in role-based access control ACM Transactions on Information and Systems Security 9 2006 391 420 (Pubitemid 44927156)
66. S. Jha, N. Li, M. Tripunitara, Q. Wang, and W. Winsborough Towards formal verification of role-based access control policies IEEE Transactions on Dependable and Secure Computing (TDSC) 5 2008 242 255
67. Q. Wang, N. Li, H. Chen, On the security of delegation in access control systems, in: Proceedings of the 13th European Symposium on Research in Computer Security (ESORICS), 2008, pp. 317-332.
68. W. Han, Q. Ni, H. Chen, Apply measurable risk to strengthen security of a role-based delegation supporting workflow system, in: IEEE International Symposium on Policies for Distributed Systems and Networks (POLICY 2009), IEEE, London, UK, 2009.
69. OASIS, XACML v3.0 Administration and Delegation Profile version 1.0, August 2010.
70. P.A. Bonatti, S.D.C. di Vimercati, and P. Samarati An algebra for composing access control policies ACM Transactions on Information and System Security 5 1 2002 1 35
71. P. Rao, D. Lin, E. Bertino, N. Li, J. Lobo, An algebra for fine-grained integration of XACML policies, in: SACMAT, 2009, pp. 63-72.
72. K. Borders, X. Zhao, and A. Prakash CPOL: high-performance policy evaluation Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS) 2005 ACM Press 147 157 (Pubitemid 44021999)
73. A.X. Liu, F. Chen, J. Hwang, T. Xie, Xengine: a fast and scalable XACML policy evaluation engine, in: Proceedings of the SIGMETRICS'08, 2008.
74. P. Gama, P. Ferreira, Obligation policies: an enforcement platform, in: Proceedings of the Sixth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY' 05), 2005.
75. J.O. Kephart, and R. Das Achieving self-management via utility functions IEEE Internet Computing 2007 40 48 (Pubitemid 46332142)
76. R. Das, J.O. Kephart, J. Lenchner, H. Hamann, Utility-function-driven energy-efficient cooling in data center, in: ICAC 2010, 2010, pp. 61-70.
77. C. Gates, Access control requirements for web 2.0 security and privacy, in: Web 2.0 Security and Provacy (W2SP 2007), 2007.
78. P.W.L. Fong, Relationship-based access control: protection model and policy language, in: Proceedings of the First ACM Conference on Data and Application Security and Privacy (CODASPY'11), 2011.
79. P. Fong, I. Siahaan, Relationship-based access control policies and their policy languages, in: Proceedings of The ACM Symposium on Access Control Models and Technologies (SACMAT 2011), 2011.