Hierarchical Policy Model For Managing Heterogeneous Security Systems

As the number of security system to be managed grows, the task of managing these security systems depend on numerous system and vendor specific issue. To prevent the managers from drowning in complicated detail, the manager's policy of conceptual level needs to be translated to low-level policy which systems understand. Policies which are derived from the goal of management define the desired behavior of various heterogeneous systems and networks, and specify means to enforce this behavior. In this paper, we present a hierarchial policy model consist of five levels which are conceptual policy level, goal-oriented policy level, target policy level, process policy level and low-level policy and is introduced to show how a policy system can be realized.