Administration in a multiple policy/domain environment: the administration and melding of disparate policies

New standards for trusted systems propose multiple security policies and multiple policy domains. My experience with building a multi-policy machine prototype illustrated that multiple policy domains and complex policies push current policy administration techniques, tools and user interfaces beyond their limits. This paper proposes a holistic approach to policy administration, consisting of human-intuitive user interfaces for defining policies, a policy base (a knowledge base focused on the rules and data required to describe the policies to be administered and acted on) for storing them, and intelligent tool programs that allow the administrator to anticipate the impact of policy changes and interactions.