Policy Overlap Analysis to Avoid Policy Conflict in Policy-Based Management Systems

摘要

A management policy evolves over time by addition, deletion and modifications of rules.Policies authored by different administrators may be merged to form the final systemmanagement policy. These operations cause various problems such as policy overlap. Static anddynamic conflicts are Considered as two classes of conflict which need to be understood andindependently managed. Furthermore, the distinction between these two classed is important; asdetecting and resolving of conflict can be computationally intensive, time consuming and hence,costly. However, a dynamic conflict is quite unpredictable, in that it may, or may not; proceedto a state of a realized conflict. In this paper we present static analyses to address the overlapcased when there are two or more policies are enforced simultaneously. Moreover, the paperprovides temporal specification patterns to avoid each type of conflicts, and to ensure thatpolicies are enforced correctly.