Design of a LDAP Schema Based on Network Security Policy Information Model for Storing Security Policy

摘要

As the Internet has recently been activated and the technique of attack has been sophisticated, the frequency of attacks for network-based system has been increased. Especially, attacks that one system can not predict or detect have been increased. So, the policy-based network security system is being developed as the method responding to those. For this policy-based networking system, a policy framework that represent, manage, share, and reuse policies and policy information in a vendor-independent, interoperable, and scalable manner has been researched in the Policy Framework Working Group of the IETF. We construct the Network Security Policy Information Model(NSPIM) extended on the basis of PCIM and PCIMe of the IETF for representing several policies used in the policy-based network security system. The policy repository storing policies has the structure of directory and is accessed with LDAP. This paper describes the classes of the NSPIM and the method of mapping them to the classes of the LDAP schema, and an example of the policy data stored with LDIF in the policy repository.