摘要： 分析常用策略描述语言的缺点，总结策略的主要配置方式，分析策略的组成成员，提出策略主要元素ECA三元组并给出其关系，设计一种基于ECA的策略描述语言，阐述其相关的词法和语法并进行适应性验证。该语言简单实用，克服了当前常用策略描述语言在策略管理中的缺陷，统一了大规模网络环境下各种网络安全设备策略的描述。

关键词: 策略描述, 策略语言, 策略元素, 策略元语

Abstract: This paper analyzes disadvantages of the current policy languages and the policy components. The ECA triple are extracted. Their relationships are analyzed, and a policy description language based on ECA is designed. The language is simple and practical, which overcomes all of the shortcomings of the existent policy languages, and unifies the policy specification of all kinds of network security devices in the large-scale distributed environment.

Key words: policy description, policy language, policy element, policy primitive

中图分类号: 

• TP311