Abstract The eXtensible Access Control Markup Language (XACML) is an extensible and
flexible XML language for the specification of access control policies. However, the richness …

Abstract The eXtensible Access Control Markup Language (XACML) has attracted
significant attention from both industry and academia, and has become the de facto standard …

Access control systems are widely used means for the protection of computing systems.
They are defined in terms of access control policies regulating the access to system …

We study the international standard XACML 3.0 for describing security access control
policies in a compositional way. Our main contributions are (i) to derive a logic that precisely …

When monitoring system behavior to check compliance against a given policy, one is
sometimes confronted with incomplete knowledge about system events. In IT systems, such …

Security engineering, from security requirements engineering to the implementation of
cryptographic protocols, is often supported by domain-specific languages (DSLs) …

Along with the rapid development of ICT technologies, new areas like Industry 4.0, IoT and
5G have emerged and brought out the need for protecting shared resources and services …

With the tremendous growth of Web applications and services, eXtensible Access Control
Markup Language (XACML) has been broadly adopted to specify Web access control …

We introduce a new methodology for formulating, analyzing, and applying access-control
policies. Policies are expressed as formal theories in the SMT (satisfiability-modulo-theories) …

Using access control policy rules with deny effects (ie, negative authorization) can be
preferred to using complemented conditions in the rules as they are often easier to …