The Virtuous Circle of Expressing Authorisation Policies

Chadwick, David W. and Sasse, Angela (2006) The Virtuous Circle of Expressing Authorisation Policies. In: Proceedings of the ISWC'06 Workshop on Semantic Web Policy (SWPW'06). (Full text available)

PDF
Download (157kB)
[img]
Preview

Abstract

This short paper reports on a current project to conduct a detailed investigation into non-security professionals vocabulary and understanding of e-infrastructure and assets, with the longer term aim of building an ontology and controlled natural language interface that will allow them to build security policies, incorporating complex concepts such as delegation of authority, separation of duties (SoD), obligations and conditions. The interface is designed around the principle of the virtuous circle, whereby the users controlled natural language input is converted into machine processable XML, and then converted back again into natural language, so that the user can compare the computers understanding of his policy with his own. The user can then iteratively alter his policy until the input and output are semantically the same. To date, two GUI interfaces have been constructed that aid users in the construction of authorization policies, and produce natural language output. This will serve as a benchmark for measuring the ease of use and effectiveness of the controlled natural language interface. Work has started on the controlled natural language interface, and the first results are reported.

Item Type: Conference or workshop item (Paper)
Additional information: Available from: http://sunsite.informatik.rwth-aachen.de/Publications/CEUR-WS//Vol-207/
Uncontrolled keywords: authorization, security, policy
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Faculties > Science Technology and Medical Studies > School of Computing > Security Group
Depositing User: Mark Wheadon
Date Deposited: 24 Nov 2008 18:03
Last Modified: 06 Sep 2011 01:31
Resource URI: http://kar.kent.ac.uk/id/eprint/14396 (The current URI for this page, for reference purposes)
  • Depositors only (login required):

Downloads

Downloads per month over past year