Patent ID: 9565191
Date: 2017-02-07
CPC Classifications: G06Q,H04L

Claim:
1. A method of implementing a global security policy of an enterprise, the method comprising: modeling a plurality of security policy rules, each providing a respective set of policy components applicable to a plurality of target domains of the enterprise; integrating the set of policy components into a single policy model representing the plurality of target domains, and wherein the single policy model represents a respective set of domain-specific requirements for each of the plurality of target domains; analyzing the single policy model to detect one or more problems amongst the plurality of security policy rules, further comprising: detecting syntax errors in the plurality of security policy rules; converting each of the plurality of rules into a respective Disjunctive Normal Form (DNF) representation; generating a truth-table from each of the DNF representations, wherein the truth-table includes one or more result values for each permutation of inputs for the respective DNF representation of the respective security policy rule; and comparing the generated truth-tables to identify one or more redundant rules within the plurality of rules; modifying the single policy model in real time, based on a result of an analysis of the single policy model; deploying the modified single policy model to a plurality of target computing systems within the target domains of the enterprise; and enforcing the domain-specific requirements represented by the modified single policy model on each of the plurality of target computing systems.