A key part of the policy authoring process is analysis of the potential for newly created or
modified policies to conflict with already deployed policies. We propose an approach for …

We present an analysis process targeting identification of potential policy conflicts within
sets of policies relating to multiple network devices and the security services deployed on …

This paper describes an approach for application specific conflict prevention based on
model-driven refinement of policies prior to deployment. Central to the approach is an …

Firewalls and Security Gateways are core elements in network security infrastructure. As
networks and services become more complex, managing access-list rules becomes an error …

Declarative policies are a common means to manage the security of complex IT
environments and they belong to different, heterogeneous classes (access control, filtering …

We outline a policy conflict analysis process for the analysis of newly specified federation-
level policies against previously deployed local/federation policies. The process is generic …

Firewalls are core elements in network security. However, managing firewall rules,
particularly, in multifirewall enterprise networks, has become a complex and error-prone …

Recent collaborative applications and enterprises very often need to efficiently integrate
their access control policies. An important step in policy integration is to analyze the …

Access-control lists are an essential part in the security framework of any system.
Researchers are always in need to have a repository of ready made policies for conducting …

Network and host-based access controls, for example, firewall systems, are important points
of security-demarcation, operating as a front-line defence for networks and networked …