Design issues of a Policy Enforcer to secure multi-domain environment

Abstract

Policy Enforcer is an online monitoring tool for detecting security violations in a multi domain environment where the network, system and service are the multiple domains. One can ensure security for a network service by protecting the sensitive resources at these three domains. This paper presents the various design issues of policy enforcer, which have the performance impact in terms of detection-rate, response-time and protection-rate against resource security violations. © 2008 IEEE.