The existing security policy description languages can't support distributed policy self-management and have some problems in the aspect of describing capability, extensibility, portability and other issues. Against these problems, this paper proposes a security policy description language SPDL for distributed policy self-management. SPDL uses XML Schema to define basic elements and grammatical structure of the policy. And it uses XML to complete the policy configuration. It uses meta policy to realize distributed policy self-management. Finally, this paper gives an analysis of the characteristics and advantages of SPDL comparing with other policy languages.

Today, Advanced Persistent Threats have become typical network security threats. However, traditional methods of defense such as rule matching, virus database and vulnerabilities database can only reflect the characteristics of the known attacks. For the unknown APT attacks hidden inside the system, traditional methods can't find them. Since the final results of APT attacks will cause abnormal changes of certain states within the system, based on this method, we studied on the APT attacks Awareness technology based on "Condensed matter" in deep. This technology can depict the security risks which the system faced from the internal states and aware the abnormal changes caused by APT attacks. A new defense method against APT attacks is proposed in this paper.