Policy overlap analysis to avoid policy conflict in policy-based management systems

Abstract

PobMC is an adaptive scalable approach which uses policies to control and adapt the system behaviour.Moreover, PobMC has the capability to decouple the adaptation concerns from the application code. Since policies are used to govern the system behavior, conflicts may arise in the set of policies and also may arise during the refinement process,between the high-level goals and the implementable policies.Furthermore, policy conflict may result from propagation, action composition and other constraint policies, which can not be detected by simply comparing authorization policies. In this paper we classify our system policy conflicts to verify that policies enforced correctly. Then, we present a static analysis to address the overlap of domains when there are two or more policies are enforced simultaneously. In addition, the paper provides temporal specification patterns to detect each type of conflicts. The evaluation result shows that the performance of PobMC is better than the previous works. Less than a second is enough to perform every task as individual.