SoK: Access Control Policy Generation from High-level Natural Language Requirements
Abstract
Administrator-centered access control failures can cause data breaches, putting organizations at risk of financial loss and reputation damage. Existing graphical policy configuration tools and automated policy generation frameworks attempt to help administrators configure and generate access control policies by avoiding such failures. However, graphical policy configuration tools are prone to human errors, making them unusable. On the other hand, automated policy generation frameworks are prone to erroneous predictions, making them unreliable. Therefore, to find ways to improve their usability and reliability, we conducted a Systematic Literature Review analyzing 49 publications, to identify those tools, frameworks, and their limitations. Identifying those limitations will help develop effective access control policy generation solutions while avoiding access control failures.
Keywords
Cite
@article{arxiv.2310.03292,
title = {SoK: Access Control Policy Generation from High-level Natural Language Requirements},
author = {Sakuna Harinda Jayasundara and Nalin Asanka Gamagedara Arachchilage and Giovanni Russello},
journal= {arXiv preprint arXiv:2310.03292},
year = {2023}
}
Comments
35 pages