Towards Automation for Pervasive Network Security Management Using an Integration of Ontology-Based and Policy-Based Approaches

With the popularity of heterogeneous network devices and security products, pervasive network security management has been a fashion. However, a chief problem lies in how to characterize various attack scenarios from the viewpoint of both security information and security policies for automation. This paper discusses the potential of applying an integration of ontology-based and policy-based approaches to automate pervasive network security management, and then proposes a model in order to validate the feasibility of this integrated approach.