Conflict Detection and Resolution in Security Policies of Computer Networks

We consider an approach for constructing the security policy verification system intended for detection and resolution of conflicts in computer network security policy specifications. The architecture of the security policy verification system suggested is considered. The models of two verification modules are proposed. The first one is based on proof theory, namely Event Calculus, and uses abductive reasoning. The second module uses model checking technique. The current implementation of the security policy verification system is described.