A Method of Conflict Detection And Resolution for Security Policy Based on Matrix Description

摘要

The method of security management based on policy is now commonly used in distributed system. It is inevitable to form strategic conflict between the complex strategies because of the complex and massive strategies in distributed system. It's important for distributed system to detect and solve conflict. This paper analyzes the shortcomings of existing security policy conflict detection methods and presents a description and quantification method of strategy in distributed distributed. The complex strategies are expressed as a linear combination of simple strategies and then converted to a matrix form. Conflict detection and digestion of security policy is completed by consistency checking of policy.