%0 Conference Proceedings %T An Approach to Information Security Policy Modeling for Enterprise Networks %+ The National Research Nuclear University MEPhI (Moscow Engineering Physics Institute) [Moscow, Russia] %A Chernyavskiy, Dmitry %A Miloslavskaya, Natalia %Z Part 2: Work in Progress %< avec comité de lecture %( Lecture Notes in Computer Science %B 15th IFIP International Conference on Communications and Multimedia Security (CMS) %C Aveiro, Portugal %Y Bart Decker %Y André Zúquete %I Springer %3 Communications and Multimedia Security %V LNCS-8735 %P 118-127 %8 2014-09-25 %D 2014 %R 10.1007/978-3-662-44885-4_10 %K Information Security Policy %K Policy Management Process %K Network Security System %K Finite Automaton %K Algebra %Z Computer Science [cs] %Z Computer Science [cs]/Networking and Internet Architecture [cs.NI]Conference papers %X Network security management is one of the most topical concerns of information security (IS) in modern enterprises. Due to great variety and increasing complexity of network security systems (NSSs) there is a challenge to manage them in accordance with IS policies. Incorrect configurations of NSSs lead to outages and appearance of vulnerabilities in networks. Moreover, policy management is a time and resource consuming process, which takes significant amount of manual work. The paper discusses issues of policy management process in its application for NSSs and describes a policy model aimed to facilitate the process by means of specification of IS policies independently on platforms of NSSs, selection of the most effective NSSs aligned with the policies, and implementation of the policies in configurations of the NSSs. %G English %Z TC 6 %Z TC 11 %2 https://inria.hal.science/hal-01404201/document %2 https://inria.hal.science/hal-01404201/file/978-3-662-44885-4_10_Chapter.pdf %L hal-01404201 %U https://inria.hal.science/hal-01404201 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-TC11 %~ IFIP-TC6 %~ IFIP-LNCS-8735 %~ IFIP-CMS