Policy-driven Model for Security Management

Abstract

In improving security for the networks of today and tomorrow there are two important features that must be considered. The first is the open and distributed nature of today’s enterprise networks. And the second is their dynamic nature, not just in terms of size, but in terms of changing services offered, and the mobility of users. Of particular importance, then is the ability to rapidly apply new security policies in a system. Equally, a system should incorporate as much “intelligence” and reactivity in the system as possible. Many existing security solutions are designed for a static, known network, and are therefore unsuited to the requirements of today’s enterprise networks. In order to provide a system that can readily handle these requirements, recent works have shown that multi-agents systems offer a promising platform. The focus of our work concerns one critical security management issue that is intrusion detection. In this paper, we propose a model of managing security policies in a multi-agents system for intrusion detection.

The original version of this chapter was revised: The copyright line was incorrect. This has been corrected. The Erratum to this chapter is available at DOI: 10.1007/978-0-387-35620-4_43