A Security Policy Description Language for Distributed Policy Self-management

Abstract

The existing security policy description languages can't support distributed policy self-management and have some problems in the aspect of describing capability, extensibility, portability and other issues. Against these problems, this paper proposes a security policy description language SPDL for distributed policy self-management. SPDL uses XML Schema to define basic elements and grammatical structure of the policy. And it uses XML to complete the policy configuration. It uses meta policy to realize distributed policy self-management. Finally, this paper gives an analysis of the characteristics and advantages of SPDL comparing with other policy languages.