Network security policy verification system and method based on formal method

Abstract

The invention provides a safety strategy verification system and method on the basis of a formalizing method. The system comprises a strategy verification and release center, a terminal device and a database server. The method includes the steps that information is extracted from the terminal device through an information collecting module of the strategy verification and release center, a leak detection and repair module carries out leak detection and repair, a safety strategy is generated through a strategy formalizing module, a strategy consistence verification module carries out conflict detection and elimination on the safety strategy, a strategy completeness verification module carries out completeness verification and repair on the safety strategy, a strategy comparison module compares the safety strategy operating on the current terminal device with configurations expected by an administrator, and the safety strategy is converted into a command capable of being identified by the terminal device through a strategy configuration module and is sent to the terminal device to be carried out. In terms of network safety strategy verification, the system and method have the advantages of universality, completeness, usability and automation.

Description

technical field [0001] The invention belongs to the field of information technology, and further relates to a formal method-based network security policy verification system and method in the field of information technology. The invention can be used to verify the consistency and completeness of the security policy adopted on the terminal equipment under different network environments, and perform specific configuration on the corresponding equipment according to the requirement of the network administrator. Background technique [0002] Network security policy is the basis of network security management and normal network operation, and is the description of behavior rules related to network security. In practical applications, network security policies are usually expressed as a series of constraint rule sets. In order to ensure the effective implementation of security policies, the security rule sets themselves need to meet the requirements of consistency and completeness...

AI Technical Summary

Problems solved by technology

The security policies that can be verified by the existing security policy verification methods can only be applied to policies with clear subjects, objects, and actions. Other security policies such as whether to allow remote login, whether the installed anti-virus software virus database is expired, etc. are not checked. Describe and verify

[0006] (3) High professional requirements for users

Images