In this article, we introduce a comprehensive framework supporting a privacy-aware access
control mechanism, that is, a mechanism tailored to enforce access control to data …

Despite several research studies, the effective analysis of policy based systems remains a
significant challenge. Policy analysis should at least (i) be expressive (ii) take account of …

Many languages and algebras have been proposed in recent years for the specification of
authorization policies. For some proposals, such as XACML, the main motivation is to …

Access control operates under the assumption that it is possible to correctly encode and
predict all subjects' needs and rights. However, in human-centric pervasive domains, such …

We study the international standard XACML 3.0 for describing security access control
policies in a compositional way. Our main contributions are (i) to derive a logic that precisely …

Access control to IT systems increasingly relies on the ability to compose policies. Hence
there is benefit in any framework for policy composition that is intuitive, formal (and so …

This paper proposes a D-algebra to compose decisions from multiple access control
policies. Compared to other algebra-based approaches aimed at policy composition, D …

As insider threats pose very significant security risks to IT systems, we ask what policy-based
approaches to access control can do for the detection, mitigation or countering of insider …

ABSTRACT Online Social Networks (OSNs) offer access control mechanisms to protect
users' sensitive information from undesired accesses. Yet, their information is still vulnerable …

We study the international standard XACML 3.0 for describing security access control policy
in a compositional way. Our main contribution is to derive a logic that precisely captures the …