Network Security Policy Based on XML

王伟,曹元大

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.08.047

2004-01-01

Abstract:The security facilities from different manufactures cannot communicate and cooperate because they use the respective language to describe information. This paper presents a set of network security information description ways based on XML to resolve this problem.

What problem does this paper attempt to address?

Unified Policy Management System and General Rule of Security Product

GAO Min,QIU Weidong

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.04.042

2007-01-01

Abstract:Nowadays different kinds of security devices are deployed in the enterprise network, which has become a heavier burden to the security administrator. In this paper, the concept of unified policy management is proposed and the architecture is designed to solve the problem. The necessary elements involved and its XML semantic rules are presented so that the administrator can configure the complicated devices on different platforms without knowing the details. The visual interface to define security polices and manage the network is also available now. In the end, the paper puts forward the further research direction for the unified policy system.
XBSIA:A Kind of XML-Based Security Integrated Architecture

饶元,陆淑敏,李尊朝,冯博琴

DOI: https://doi.org/10.3969/j.issn.1000-7180.2004.12.023

2004-01-01

Abstract:After formulated the definition of information security, an XML-based logistic security hierarchical structure and a protocols stack were presented in the paper. Moreover, a XKMS Trust Architecture Model, XKMS-TA, was built on some XML-based security technology, such as XML-Encryption, XML-Signature, XML-Access Control and XKML. This model decreased effectually the degree of complexity about the client collocated, PKI deployed and the cost of operating maintained, as well as increased the interoperation between the PKI sites. Furthermore, mixed the XKMS-TA model and XML-Access Control technology, XBSIA (XML-Based Security Integrated Architecture), a new XML-based Security integrated solution, was designed and applied in the programming of OPEN-CLASS system. The results of practice proved that XBSIA solution has great security and dynamic maintenance.
Towards Distributed Information Exchange: An Application From Xml To Owl

Qw Yin,Sp Li,Yj Hu,M Guo,Xj Fu

2002-01-01

Abstract:Information exchange is crucial not only among computers of the same workgroup, but also among the computers distributed in all over the world on Internet.It is difficult for computers to process large amounts of HTML-coded information resource to facilitate information exchange effectively. XML differs from HTML in that it separates data and formatting instructions. As a result, it is being adopted universally as a means of automatically exchanging data on the Internet. However, XML's lack of semantics prevents distributed computers from reliably performing information exchange on a semantic level.Recently, ontology has become an interesting area in knowledge study. In computer science, ontology is a formal specification. of a shared conceptualization. Web Ontology Language (OWL) such as DAML+OIL can be regarded as the languages based on Web standards for describing ontologies. DAML+OIL provides a specification framework for independently creating, maintaining, and interoperating ontologies while preserving their semantics.This article focuses on product information representation and exchange using from XML to OWL, and shows the value and significance of OWL for distributed information exchange. Lastly, a framework for OWL-based product information exchange is presented, and the peer-to-peer computing used in the framework's ontology layer is introduced.
Research on Information Security Model and Security System Design

黄益民,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2001.06.005

2001-01-01

Abstract:After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.
Implementation of a Novel Network Management System in WAN

韩淑玲,谭庆平,张金祥,王继龙

DOI: https://doi.org/10.3969/j.issn.1000-3428.2004.07.036

2004-01-01

Abstract:It is a difficult task to manage Internet efficiently. XML can allow for the interchange of data between management applications using different information models. This paper puts forward a novel network management integration framework based on XML in the management of CERNET (China Education and Research Network), which classifies the whole management system into independent management entities, and the schemes for integration of management entities and definition of managed objects using XML are also given in this paper.
Research of XML Engine Security Model on Web Services

张艳,周明天,佘堃

DOI: https://doi.org/10.3969/j.issn.1001-3695.2008.07.074

2008-01-01

Abstract:Web services provide interface access to the software.And the interface realizes the calls of services on the Internet.Web services are based on XML.They make use of XML-based protocols to describe operations to be performed and data to exchange with one another regardless of location and operating systems.SOAP is a transfer protocol of Web services whose messages have universally adopted XML as the mechanism for encoding data.XML is located at message layer in the whole Web services application.XML engine deals with XML data in the Web services,therefore it is named the message layer gateway.On the XML Engine platform,with the help of DSO mechanism,it can dynamically load the encryption,decryption,digital signature,validation,and filtrtion modules into the Apache server.XML Engine can filter the XML data to make sure the safety of Web services.Meanwhile,it is not only applied to SOAP package,but also to any situation relating to XML filtration.
New Study and Implementation of Policy Based Network Management System

ZENG Kuang-yi,YANG Jia-hai

DOI: https://doi.org/10.3969/j.issn.1000-1220.2007.02.006

2007-01-01

Abstract:Policy refinement and policy conflict resolution are two of the toughest issues in implementing a policy-based network management (PBNM) system. Based on a brief review of general PBNM theories and specific access control technologies, the paper proposed a novel policy-based network management model, which adopts XML as the high level policy description language, and uses the generalized access control list(ACL) as an intermediate refining mechanism, focusing on network security and QoS management. Some critical issues and their solutions, including policy representation, policy refinement, and policy conflict policy detection, are discussed. A formula representation of the policy conflict issue is given with several important inferences. The effectiveness and efficiency of the model is verified by the implemented prototype.
A Implement of Access Control Based Multi-Polices Using XML

Tao Peng,Minghua Jiang,Ming Hu

DOI: https://doi.org/10.4028/www.scientific.net/amr.121-122.558

2010-01-01

Advanced Materials Research

Abstract:A multi-polices access control model is proposed, with the model, access control based on policy regulation and XML based policy description is given. At the same time, We use the XSD(XML Schema Definition) to describe the content and the structure of the xml documents, and check the validity of the xml documents. Based on the description of the access control, an application system is realized we construct the runtime platform and choose some access control polices to test our system. The result is well.
Informational Network Security Policy Configuration for Chemical Enterprise

Li Li,He Daxing

DOI: https://doi.org/10.3969/j.issn.1007-1865.2011.11.032

2011-01-01

Abstract:A computer network faces two kinds of threat: threat to the information and threat to the equipment of the network.The network security strategy is to prevent the information and the equipment of the network from being destroyed.And the method presented in the paper can ensure the security of the network from the point of the server,PC,router,switch,etc.
Policy-based Secure Application Framework for Mobile Devices

Chen Zhong

2005-01-01

Abstract:In this paper,a policy-based secure application framework for mobile devices is proposed.This framework uses XML to describe access control policy,integrates authentication,trusted channel and other security mechanisms to control the user’s secure access to the device’s resources and network services through devices.
Research and Application of XML Technology in Distributed Network Management System

ZHANG De-wen,XU Meng-chun,DU Xiao-ning

2007-01-01

Abstract:With the rapid development of network technology and the Internet,the typical SNMP-based concentrated network management system cannot meet the requirement of large scale and distributed network management at present.In order to improve the efficiency of network management,considering XML technology and the architecture of distributed network management,this paper focuses on the application of XML technology in distributed network management system including XNM,XML/SNMP gateway,description of network management data,configuration files,log management,etc.
Development of SNMP/XML Gateway for XML-Based Network Management

QIAN Zhu-Zhong,XIE Li

DOI: https://doi.org/10.3969/j.issn.1002-137X.2005.09.011

2005-01-01

Computer Science

Abstract:Recently XML-based network management has been proposed as an alternative to complement the shortcom- ings of SNMP-based network management. However, most existing network devices are already embedded with SNMP agents and managed by SNMP managers. In order to integrate network management with XML and SNMP, an XML/ SNMP gateway is proposed to translate SNMP to XML. This paper firstly presents the advantages of using XML for the management of network. Then, specification translation and interaction translation are both discussed, the architec- ture of the gateway is also presented in this paper.
XML Based Exchange and Integration Techniques of Heterogeneous Data with Implementation

谢芳华,任午令,唐任仲

DOI: https://doi.org/10.3969/j.issn.1009-0134.2004.04.001

2004-01-01

Abstract:An XML technique based data exchange model was proposed, with using XML documentsas the base of data communication carrier, the information communication platform underInternet/Intranet environment was established and the software component was developed,which provides an effective low-cost method and tool to integrate and share different formatdata between heterogeneous databases. The method and tool has been applied to thedata integration and exchange of a supply chain management system.
Simulation System on Equipments and Network Environment

王若闻,张月国,李建华

DOI: https://doi.org/10.3969/j.issn.1000-3428.2008.22.036

2008-01-01

Abstract:Network simulation is one of the most important means for the research of network equipments.This paper applies XML to the simulation of network equipments which are based on the MIB information.As a result,the network topology can be constructed on a certain scale, and the implementation of the simulation system which is capable of visualization and manipulation is in sight.Therefore this paper puts forward a new technique for the principles of network simulation and an economical solution to the teaching and research of computer network.Also it can provide an elaborate environment for the research of information security.
The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

PENG Jie,GUO Shan-Qing,MAO Bing,XIE Li

DOI: https://doi.org/10.3969/j.issn.1002-137X.2005.05.013

2005-01-01

Computer Science

Abstract:In this paper, we analyze the problems exposed by the current security management systems, and intro- duce the trust mechanism to XML-based security management platform. In the traditional trust model, the trust sub- kect is unitary, which can not meet the requirements raised by the XML-based security management to trust. In order to solve this problem, some necessary improvements are made to the traditional trust model. First, the bidirectional trust is proposed, resolving the mutual trust problem of the server and client. Second, a local trust library is added to enhance both the administrator's global analysis and the assessment of reputation-based trust degree.
CIT/XML Security Platform Syntax and Processing

安南,张申生

DOI: https://doi.org/10.3969/j.issn.1003-7985.2002.02.002

2002-01-01

Abstract:Today companies and organizations are using the Web as the main information dissemination means both at internal and external level. Information dissemination often takes the form of XML documents that are made available at Web servers, or that are actively broadcasted by Web servers to interested clients. These documents often contain information at different degrees of sensitivity, therefore a strong XML security platform and mechanism is needed. In this paper we developed CIT/XML security platform and take a close look to syntax and processing of CIT/digital signature model, CIT/encryption model, CIT/ smart card crypto and SPKI interface security models. Security services such as authentication, integrity and confidentiality to XML documents and non-XML documents, which exchanged among various servers, are provided.
Policy Based Network Security System

Wei Yang

2003-01-01

Abstract:With the widening of network,more serious problems have appeared,such as virus,IDS.All of these impact the network security.According to P2DR model,this paper shows a plan of security system,binding the functions of firewall and IDS.All the distributed applications are built on COPS.
Application of XML Technique to Data Exchange in Power System Automation

何志苠,涂光瑜,罗毅,盛戈皞

DOI: https://doi.org/10.3969/j.issn.1674-3415.2004.06.004

2004-01-01

Abstract:With the increasing needs of data sharing in power system among many different automation systems, it is imperative to find a tool that can facilitate effective data sharing and exchanging. XML is becoming a standard for data communication through the Internet because of its good data-storing form, expandability, hyper-structuralization and web-transforming, etc. In this paper, the application of XML to data exchange in power system automation is discussed in detail. Taking video monitoring system as an example, the implementation methods and application characteristics are elaborated and analyzed.
An XML Firewall on Embedded Network Processor

Wei Wang,Jun Li

DOI: https://doi.org/10.1109/icns.2008.15

2008-01-01

Abstract:XML-based services with flexible and intelligent structures for data expression and exchange are quickly gaining popularity. Enterprises are deploying XML-based services as a central component of the application integration. As the application data are crucial to the enterprises, the XML messages must be secured to ensure the reliability of these services. This paper presents the design of an embedded XML firewall with XML identification, XML validation, XML encryption and decryption, XML signature and signature verification, which is implemented on Intel IXP425, an embedded network processor for small and medium enterprise solutions. Suitable for enterprises to deploy XML security for their IT infrastructure, the XML firewall provides confidentiality, integrity and authenticity for XML-based services. Improvements are introduced and evaluated, including schema preprocessing and hardware acceleration for security processing. Ideas about future work of XML firewall based on this platform are also proposed.
Fine-grained Security Model of Multi-agent Communication with XML Specifications

Guo Yi

Abstract:The communication security of MAS is an important issue in practice.In order to ensure information integrity,authentication,and confidentiality,this paper presents a fine-grained security model for MAS communication with XML security specifications.In this model,entity identity is authenticated by digital certificate management based on XKMS.Meanwhile,through adopting XML encryption and XML signature mechanism,the model only encrypts or signs portions of information to improve the system efficiency and decreases bandwidth in communication.

Computer Science

Network Security Policy Based on XML

Unified Policy Management System and General Rule of Security Product

XBSIA:A Kind of XML-Based Security Integrated Architecture

Towards Distributed Information Exchange: An Application From Xml To Owl

Research on Information Security Model and Security System Design

Implementation of a Novel Network Management System in WAN

Research of XML Engine Security Model on Web Services

New Study and Implementation of Policy Based Network Management System

A Implement of Access Control Based Multi-Polices Using XML

Informational Network Security Policy Configuration for Chemical Enterprise

Policy-based Secure Application Framework for Mobile Devices

Research and Application of XML Technology in Distributed Network Management System

Development of SNMP/XML Gateway for XML-Based Network Management

XML Based Exchange and Integration Techniques of Heterogeneous Data with Implementation

Simulation System on Equipments and Network Environment

The Research and Implementation of Trust Management Mechanism in the XML-Based Security Management Platform

CIT/XML Security Platform Syntax and Processing

Policy Based Network Security System

Application of XML Technique to Data Exchange in Power System Automation

An XML Firewall on Embedded Network Processor

Fine-grained Security Model of Multi-agent Communication with XML Specifications