Automatic Generation of Conflict-Free IPsec Policies

IPsec will function correctly only if its security policies satisfy all the requirements. If the security policies cannot satisfy our requirements, we said there might be policy conflicts. In this paper, we analyze all situations which could possibly lead to a policy conflict and try to resolve all of them. We induced only two situations which could cause conflicts and also proposed a method to automatically generate conflict-free policies which satisfy all requirements. We also implement our algorithm and compare the result of simulation with the other approaches and show that it outperforms existing approaches in the literature.