多域网络安全的异构策略语义形态与验证机制

项目名称： 多域网络安全的异构策略语义形态与验证机制

项目编号： No.61462020

项目类型： 地区科学基金项目

立项/批准年度： 2015

项目学科： 自动化技术、计算机技术

项目作者： 唐成华

作者单位： 桂林电子科技大学

项目金额： 45万元

中文摘要： 策略语义是安全策略表示与推理中的重要研究课题，是网络安全策略研究的热点和难点。针对策略语义方法中存在的描述与判定缺陷，本项目将本体和描述逻辑引入策略语义形态过程，结合多域网络和异构策略特征，建立具有适用性和实用性的多域网络安全的异构策略语义形态与验证理论。首先，从异构策略特征分析出发，研究异构策略语义多层概念和属性表达形式，以实现异构策略本体语义的完备逻辑描述；在此基础上，建立异构策略语义形态转换模型并研究语义层映射与推理算法，以提升形态转换性能并方便语义级理解和协作；同时，提出扩展的异构策略语义推演方法，结合异构策略的语义保持和判定算法，以提高策略语义协作质量并克服语义理论中的断层问题；最后，以规则引擎和中间件技术为基础，构建基于语义引擎的多域网络安全的异构策略语义应用平台，以实现高效的异构策略语义的演化调控过程。项目成果将为复杂网络中安全策略语义理论与技术提供发展新途径。

中文关键词： 计算机网络安全；异构策略；策略语义；语义形态；语义引擎

英文摘要： Policy semantic is an important research subject in the security policy representation and reasoning, and a hot and difficult research of network security policy. In view of the description and judgment faults existing in the policy semantic methods, this project will introduce ontology and description logic into the policy semantic pattern, combining with the characteristics of multi-domain network and heterogeneous policy, build a suitable and practical heterogeneous policy semantic pattern and verify theory in multi-domain network security. Firstly, from the analysis of heterogeneous policy characteristics, study the multilayer concept and attributer expressions of the policy semantic, in order to achieve the complete logical description of the heterogeneous policy ontology semantic. Secondly, establish the policy semantic conversion model, with the research of semantic mapping and inference algorithm, to ascend the pattern conversion performance and convenient semantic level understanding and cooperation. At the same time, extend the heterogeneous policy semantic deduction method, combined with the algorithm of semantic preservation and judgment，to improve the quality of semantic collaboration and overcome the faults in semantic theory. Finally, on basis of rule engine and middleware technology, build heterogeneous policy semantic application platform based on semantic engine for multi-domain network security, to achieve the evolution and regulation process of the heterogeneous policy. Results of this project will provide new ways for the development of security policy semantic theory and technology in complex network.

英文关键词： Computer Network Security;Heterogeneous Policy;Policy Semantic;Semantic Pattern;Semantic Engine