No abstract

No abstract

ABSTRACT

A management policy evolves over time by addition, deletion and modifications of rules. Policies authored by different administrators may be merged to form the final system management policy. Since policies are used to govern the system behavior, conflicts may arise in the set of policies and also may arise during the refinement process, between the high-level goals and the implementable policies. Moreover, policy conflict can result from propagation, action composition and other constraint policies, which cannot be detected by simply comparing authorization policies. Static and dynamic conflicts are considered as two classes of conflict which need to be understood and independently managed. Furthermore, the distinction between these two classed is important; as detecting and resolving of conflict can be computationally intensive, time consuming and hence, costly. However, a dynamic conflict is quite unpredictable, in that it may, or may not; proceed to a state of a realized conflict. In this paper we present static analyses to address the overlap cased when there are two or more policies are enforced simultaneously. Moreover, the paper provides temporal specification patterns to avoid each type of conflicts, and to ensure that policies are enforced correctly.