A controlled natural language interface for authoring access control policies

Authors:
Leilei Shi;David W. Chadwick
Affiliations:
University of Kent, Canterbury, U. K.;University of Kent, Canterbury, U. K.
Venue:
Proceedings of the 2011 ACM Symposium on Applied Computing
Year:
2011

Citing 7
Cited 1

Computer security

Computer security
RBAC Policies in XML for X.509 Based Privilege Management

SEC '02 Proceedings of the IFIP TC11 17th International Conference on Information Security: Visions and Perspectives
Specifying Logic Programs in Controlled Natural Language

Specifying Logic Programs in Controlled Natural Language
An empirical study of natural language parsing of privacy policy rules using the SPARCLE policy workbench

SOUPS '06 Proceedings of the second symposium on Usable privacy and security
ROWLBAC: representing role based access control in OWL

Proceedings of the 13th ACM symposium on Access control models and technologies
Expressions of expertness: the virtuous circle of natural language for access control policy specification

Proceedings of the 4th symposium on Usable privacy and security
Supporting RBAC with XACML+OWL

Proceedings of the 14th ACM symposium on Access control models and technologies

Implementing database access control policy from unconstrained natural language text

Proceedings of the 2013 International Conference on Software Engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

With increasingly distributed computing systems, the management task of controlling access to shared resources becomes more and more complicated. Policy based access control systems may provide a solution to this problem, but the issue then becomes one of how to easily specify access control policies. We have designed and implemented a user interface that enables novice users to author their own access control policies using a controlled natural language (CNL) interface. With this interface, users are able to author their policies by typing sentences in a sub set of the English language. The sentences are then parsed and output as a machine readable policy, ready for automatic enforcement by a policy decision point (PDP). In this paper we describe the details of the design and implementation of this CNL interface, along with a summary of the user evaluation.