Automatic Management of Network Security Policy

The ultimate long term goal of this project is to create a practical infrastructure that enables the network to become self-configuring so that necessary network-wide reconfiguration is initiated by the change within the system itself, and not by the coordinated actions of teams of human operators. To allow us to achieve tangible results in reasonable time, the present project focuses on some specific issues that we feel are key to success in the larger plan and for which there is a clear path to generalization. The particular problem we consider is the one that systems administrators face on a daily basis: how do we rapidly determine that a given network configuration is compliant with...