IPSec/VPN security policy: Correctness, conflict detection, and resolution

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 1995, Issue , 2001, Pages 39-56

  Fu, Zhi ^a   Wu, S Felix ^a   Huang, He ^b   Loh, Kung ^b   Gong, Fengmin ^c   Baldine, Ilia ^c   Xu, Chong ^c  

^a North Carolina State University   (United States)

^b NORTEL NETWORKS   (Canada)

^c MCNC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SECURITY SYSTEMS;

CONFLICT DETECTION; END-TO-END COMMUNICATION; END-TO-END SECURITY; INTERNET SECURITY; POLICY CONFIGURATIONS; POLICY MANAGEMENT SYSTEMS; POLICY SPECIFICATION; SECURITY REQUIREMENTS;

NETWORK SECURITY;

EID: 84944041936     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-44569-2_3     Document Type: Conference Paper

References (15)

1. Kent, S., Atkinson, R.: Security Architecture for the Internet Protocol. RFC-2401, IETF, Nov. 1998.
2. Moffett, J. D., Sloman, M. S.: Policy Hierarchies for Distributed Systems Management. IEEE Journal on Selected Areas in Communication, vol. 11, pp. 1404-1414, 1993
3. Condell, M., Lynn, C., Zao, J.: Security Policy Specification Language. Internet Draft, , March, 2000
4. Jason, J.: IPsec Configuration Policy Model. Internet Draft , March, 2000
5. Pereira, R., Bhattacharya, P., IPSec Policy Data Model. Internet Draft , Feb. 1998
6. Moffett, J. D.: Requirements and Policies. Position paper for Policy Workshop 1999
7. Horowitz, E., Sahni, S.: Fundamentals of Computer Algorithms. Computer Science Press Inc.,1978.
8. Gen, M., Cheng, R.: Genetic Algorithms & Engineering Optimization. Wiley-Interscience, 2000
9. Xu, C., Gong, F., Baldine, I., Sargor, C., Jou, F., Wu, S. F., Fu, Z., Huang, H.: Celestial Security Management System. DARPA Information Survivability Conference and Exposition, 2000. DISCEX’00. Proceedings, Volume: 1, 1999, Page(s): 162-172 vol.1
10. Fu, Z., Huang, H., Wu, T., Wu, S.F., Gong, F., Xu, C., Baldine, I: ISCP: Design and Implementation of An Inter-Domain Security Management Agent (SMA) Coordination Protocol. Proceedings, NOMS 2000, Pages 565-578.
11. Sanchez, L.A., Condell, M.N: Security Policy System. Internet Draft, , Nov. 1998
12. Zao, J., Sanchez, L., Condell, M., Lyn, C., Fredette, M., Helinek, P., Krishnan, P., Jackson, A., Mankins, D., Shepard, M., Kent, S.: Domain Based Internet Security Policy Management. DARPA Information Survivability Conference and Exposition, 2000. DISCEX’00. Proceedings,1999, Pages: 41-53 vol.1
13. Lupu, E.C., Sloman, M: Conflict Analysis for Management Polcies. Proc. 5th IFIP/IEEE International Symposium on Integrated Network Management, pages 430-443, 1997
14. Lupu E.C., Sloman, M: Conflicts in Policy-Based Distributed Systems Management. IEEE Transaction on Software Engineering. Vol. 25, No. 6, pages 852-869, Nov./Dec. 1999
15. Cholvy L. and Cuppens, F.: Analyzing Consistency of Security Policies. IEEE Symposium on Security and Privacy, 1997, Proceedings