Policies for Distributed Systems and Networks, IEEE International Workshop on (2009)
July 20, 2009 to July 22, 2009
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/POLICY.2009.7
Zodiac (Zero Outage Dynamic Intrinsically Assurable Communities) is an implementation of a high-security MANET, resistant to multiple types of attacks, including Byzantine faults. The Zodiac architecture poses a set of unique system security, performance, and usability requirements to its policy-based management system (PBMS). In this paper, we identify theses requirements, and present the design and implementation of the Zodiac Policy Subsystem (ZPS), which allows administrators to securely specify, distribute and evaluate network control and system security policies to customize Zodiac behaviors. ZPS uses the Keynote language for specifying all authorization policies with simple extension to support obligation policies.
policy-based management; MANET; computer network security
Alex Poylisher, Martin Eiger, Steve M. Bellovin, Mariana Raykova, Scott Alexander, Yuu-Heng Cheng, "The Zodiac Policy Subsystem: A Policy-Based Management System for a High-Security MANET", Policies for Distributed Systems and Networks, IEEE International Workshop on, vol. 00, no. , pp. 174-177, 2009, doi:10.1109/POLICY.2009.7