A multi-layered policy generation and management engine for semantic policy mapping in clouds

• 作者: Faraz Fatemi Moghaddam Philipp Wieder Ramin Yahyapour
• 来源期刊: 数字通信与网络:英文版
• 学科: 工学
• 关键词: Cloud computing SECURITY SECURITY MANAGEMENT POLICY MANAGEMENT Access control POLICY MAPPING
• 年，卷（期）: 2020,（1）
• 页码范围: 38-50
• 页数: 13页
• 分类号: TP3

摘要

The long awaited cloud computing concept is a reality now due to the transformation of computer generations.However,security challenges have become the biggest obstacles for the advancement of this emerging technology.A well-established policy framework is defined in this paper to generate security policies which are compliant to requirements and capabilities.Moreover,a federated policy management schema is introduced based on the policy definition framework and a multi-level policy application to create and manage virtual clusters with identical or common security levels.The proposed model consists in the design of a well-established ontology according to security mechanisms,a procedure which classifies nodes with common policies into virtual clusters,a policy engine to enhance the process of mapping requests to a specific node as well as an associated cluster and matchmaker engine to eliminate inessential mapping processes.The suggested model has been evaluated according to performance and security parameters to prove the efficiency and reliability of this multilayered engine in cloud computing environments during policy definition,application and mapping procedures.