Implementation of a formal security policy refinement process in WBEM architecture

Abstract

Policy based network management (PBNM) is now a recognized standard approach for network management. Its particularity comes from the separation of the rules that govern the system and the functionalities provided. Even so, policy refinement - i.e. translating high level policies into concrete ones - remains a key problem in the policy based network management. In previous papers [3,4], we have proposed a formal framework that focuses on network security information management refinement. It allows the expression of network security goals and abstract tactics. An associated evaluation method guarantees the consistency and the correctness of specified network security tactics. However the tactics are expressed using data flow-based language that is independent from the technologies. Therefore, tactics cannot be directly enforced by technologies. In this paper, we complete the previous framework. We consider the enforcement of the tactics and we implement this refinement process in WBEM architecture.