关键词: 安全策略, 一致性, 逻辑, 辩论

Abstract: Conflict detection and resolution are the two main research directions on consistency of security policy. Existing consistency detection methods take a high time complexity and are lack of flexibility and expansibility. Changing policy conditions and priority-based conflict resolution may generate new conflicts, and assignments of policy priority are within subjective factors and difficult to implement. Based on the above consideration, this paper formalizes and analyzes policy and policy conflict by logic, and proposes a polynomial time algorithm for consistency detection based on logic unify concept. Then it classifies the policy conflicts into inclusive conflict, intersectant conflict and complementary conflict, proposes an automatic solution for inclusive and intersectant conflicts, and demonstrates the feasibility and completeness of the method. Furthermore, it uses the mechanism and theory of debate to analyze the semantic of policy conflict which provides a theoretical basis for priority-based solution, proposes a consistency policy subset computational algorithm and analyzes its complexity.

Key words: security policy, consistency, logic, argument