An XML-based description method of security policy

Policy-based security technology is getting more and more attention. But the description method about policy is not very well because most of its description methods are defined for particular application, and can not be used widely. Point to this, a formal definition for general policy is proposed. Furthermore, an XML-based description rule for the general security policy is defined. Some description samples about the method are provided by depicting RBAC and BLP´s security rules. By regulating the system´s subject, target, action, constraint condition and their logic relationship in policy, the description rule is very accurate and easy to be used. This description method is of benefit for policy´s logic reasoning and conflict detection.