节点文献

基于角色的分布式策略管理规范的设计与实现

Design and Implementation of Specification for Role-Based Policy Management of Distributed System

  • 推荐 CAJ下载
  • PDF下载
  • 不支持迅雷等下载工具,请取消加速工具后下载。

【作者】 李庆海张德运段中兴孙朝晖

【Author】 Li Qinghai, Zhang Deyun, Duan Zhongxing,Sun Zhaohui (School of Electronics and Information Engineering,  Xi′an Jiaotong University, Xi′an  710049, China)

【机构】 西安交通大学电子与信息工程学院西安交通大学电子与信息工程学院 710049西安710049西安710049西安

【摘要】 在IETF策略框架的基础上,提出了基于角色的分布式策略管理规范(RBPMS),使用域的方式来表达角色,用主体集、目标集、动作集和约束集4元组表达策略,简化了策略规范.引入参数化的策略类,并在策略类之间引入继承机制,提高策略的抽象层次和可重用性.最后,提出了基于角色的策略自动发放模型,将策略编译成策略对象,在域服务的配合下自动发放到执行组件.试验表明,引用RBPMS可提高管理的抽象层次和效率,增强被管设备的智能性和独立性,实现网络的动态和自动化管理,可以满足大型网络管理的需要.

【Abstract】 A role-based distributed policy management specifications (RBPMS) based on IETF policy framework is proposed, which used the concept of domain to represent a role. This method simplifies the policy specification by representing it as a quad-tuple (set of subject, target, action, and constraint).In order to promote the abstract level and reusability of policies, a parameterized policy class and an inheritance mechanism between policy classes are introduced. Moreover, a role-based policy distribution model is also proposed in which policies are compiled as policy objects which are deployed automatically by the domain server if necessary. Experiments demonstrate that the abstract level and efficiency of management are improved, and that the intelligence and independence of managed devices are improved by introducing RBPMS. Such a model realizes the dynamic and automatic management and facilitates the large-scale network management.

【关键词】 策略管理角色策略规范
【Key words】 policy-based managementrolepolicy specification
【基金】 国家“八六三”网络安全管理与测评技术基金资助项目 (863 - 3 0 1 - 0 5- 0 3 )
  • 【文献出处】 西安交通大学学报 ,Journal of Xi’an Jiaotong University , 编辑部邮箱 ,2004年06期
  • 【分类号】TP393
  • 【被引频次】12
  • 【下载频次】93
节点文献中: 

本文链接的文献网络图示:

本文的引文网络