# FMNSCF: Fine-Grained Multi-Domain Network Interconnection Security Control Framework
## 1 Introduction
These characteristics bring many new requirements for access control technology in a complex network environment. The fine-grained interconnection security control framework is a key technique for multi-domain interconnection and access control in multi-domain networks. The impacts of it are the following aspects:  
First, for the complexity of rules working at the bottom, a policy needs to be designed to simplify the description of logical relationships in complex networks. With this abstract level of policy language, when designing business-oriented access control logic, network configuration scripts based on the policy language can look more concise and understandable. In engineering practice, the domain of the network can be easily configured, and the packet filter program can be executed efficiently in the gateway. The policy language designed for users in the network can be used to configure network security constraints flexibly and improve the readability and maintenance of programs. This requires normalization of policy semantics and data information flows across different networks. In addition, inconsistencies in policy languages between networks may cause errors in policy transformation between networks. Second, in complex business application scenarios, inter-domain isolation needs to be supported. The traditional coarse-grained access control model can no longer fully meet the requirements of access control under complex networks in many scenarios. In recent years, fine-grained interconnection security control [13; 14; 15] has developed rapidly and has important applications in the internet of things security and cloud security. Many of the current attacks are more and more application-oriented, such as cross-network scripting attacks, SQL injection attacks, and lunch attacks. This puts forward higher requirements on the dimension of data filtering. This requires the system to be able to filter packets at a fine-grained level. They include time and characteristics. The complex network environment has a huge amount of information, and different users have different permissions to use the information, so that the coarse-grained control will bring about lots of security problems. Data information flows frequently between networks. If the corresponding control policy does not follow the data information ontology to the new network, users will lose control of the data. In addition, to turn access control policies for complex application scenarios into rules, a mapping needs to be designed. By designing a map, the polices are translated into the rules automatically. In the security policies, the description of multi-domain interconnection is supported. Users can flexibly set the network functions according to the network security requirements. Finally, to meet the needs of high-speed network communication, it is necessary to design rules that can adapt to the high-speed filtering packet of security gateway and the fast filtering of gateway. According to our proposed rules, gateways can filter packets efficiently. By summarizing the above requirements, it can be concluded that the fine-grained interconnected security access control framework needs to design an abstract language (policy) that can directly describe complex application scenarios, with fine-grained attributes that resist more attacks. The gateway can load and execute rules efficiently. Mapping mechanisms can translate policies into rules. The research progress in these aspects will be introduced below.