Skip to main content

The Virtuous Circle of Expressing Authorisation Policies

Chadwick, David W., Sasse, Angela (2006) The Virtuous Circle of Expressing Authorisation Policies. In: Proceedings of the ISWC'06 Workshop on Semantic Web Policy (SWPW'06). 207. , Georgia, USA (KAR id:14396)

Language: English
Click to download this file (172kB)
[thumbnail of The_Virtuous_Circle_of_Expressing_Authorization.pdf]
This file may not be suitable for users of assistive technology.
Request an accessible format


This short paper reports on a current project to conduct a detailed investigation into non-security professionals vocabulary and understanding of e-infrastructure and assets, with the longer term aim of building an ontology and controlled natural language interface that will allow them to build security policies, incorporating complex concepts such as delegation of authority, separation of duties (SoD), obligations and conditions. The interface is designed around the principle of the virtuous circle, whereby the users controlled natural language input is converted into machine processable XML, and then converted back again into natural language, so that the user can compare the computers understanding of his policy with his own. The user can then iteratively alter his policy until the input and output are semantically the same. To date, two GUI interfaces have been constructed that aid users in the construction of authorization policies, and produce natural language output. This will serve as a benchmark for measuring the ease of use and effectiveness of the controlled natural language interface. Work has started on the controlled natural language interface, and the first results are reported.

Item Type: Conference or workshop item (Paper)
Additional information: Available from:
Uncontrolled keywords: authorization, security, policy
Subjects: Q Science > QA Mathematics (inc Computing science) > QA 76 Software, computer programming,
Divisions: Divisions > Division of Computing, Engineering and Mathematical Sciences > School of Computing
Depositing User: Mark Wheadon
Date Deposited: 24 Nov 2008 18:03 UTC
Last Modified: 16 Nov 2021 09:52 UTC
Resource URI: (The current URI for this page, for reference purposes)
Chadwick, David W.:
  • Depositors only (login required):

Total unique views for this document in KAR since July 2020. For more details click on the image.