Multidimensional Security Policy Management for Dynamic Coalitions

Security policy management for a dynamic coalition with multiple members, each with its own policy requirements and mechanisms, and with limited mutual trust, is a complex task. In this paper, we present the architecture of MSME, a system that addresses this problem by providing mechanisms to express security requirements for large groups abstractly; exchange and reconcile these communication requirements among members of a group; and automatically bind these abstract requirements to mechanisms that can enforce them at different levels of the TCP/IP